[CLSA-2026:1791292627] gimp: Fix of 10 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-06 13:17:24 UTC
Description:
- Harden the PCX loader against a 16-bit truncation of the expected bytes per line (width 65536, 8 bpp) that bypasses the check added for CVE-2026-4887
CVEs fixed:
Updated packages:
  • gimp-3.0.4-4.el9_8.10.tuxcare.els3.aarch64.rpm
    sha:f3dbea6e59460e9be58e15454d8ef6a77ce98871eb1ab558bd7744d22a183d13
  • gimp-3.0.4-4.el9_8.10.tuxcare.els3.i686.rpm
    sha:163991465511ede264c3730fb2400b09b230d57e45753e0a4a900808013f6550
  • gimp-3.0.4-4.el9_8.10.tuxcare.els3.x86_64.rpm
    sha:e51d3723d4941323ba1968f203942ab3771af2f1a52f4806d141692bf5b63a9c
  • gimp-devel-3.0.4-4.el9_8.10.tuxcare.els3.aarch64.rpm
    sha:9af23697bc6ed031ebf6651b5595b2a17ad174aa8c7e6027f4ea968e30128bd0
  • gimp-devel-3.0.4-4.el9_8.10.tuxcare.els3.i686.rpm
    sha:581216dc3bf8afa1311fe1ef954a1678e9050f7d231b73cfb8d891057fb8f672
  • gimp-devel-3.0.4-4.el9_8.10.tuxcare.els3.x86_64.rpm
    sha:dd6c17131456188adf44adb27d9ec5512390059711cc04809b5820a7f9a02a90
  • gimp-devel-tools-3.0.4-4.el9_8.10.tuxcare.els3.aarch64.rpm
    sha:b5283fece17d5288e68b8152a8d015e72d58b959b54b686d7abc3ac337584583
  • gimp-devel-tools-3.0.4-4.el9_8.10.tuxcare.els3.i686.rpm
    sha:7a56d1d8b6997a1a4a974afdee52488a3aab97674048db1c234a9534fdb9d5f7
  • gimp-devel-tools-3.0.4-4.el9_8.10.tuxcare.els3.x86_64.rpm
    sha:8f9917e86a9b91028bd4a9af97f5520e6544d688eeec768a07027dde7a1e4fd9
  • gimp-libs-3.0.4-4.el9_8.10.tuxcare.els3.aarch64.rpm
    sha:585c86c016c9bf47a428f7f4e00b5a9aef93b7c7b41f4db8e8c8ee57052869f3
  • gimp-libs-3.0.4-4.el9_8.10.tuxcare.els3.i686.rpm
    sha:a35709b43fbfbb6429cb976b96cc8b7e99448d6b5a2b319856741b7ee495a5bb
  • gimp-libs-3.0.4-4.el9_8.10.tuxcare.els3.x86_64.rpm
    sha:a6de1c5bf50609bfbd0b75d18024f1d1780050e1ebd603d5a480b506e5cf5849
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.