RHSA-2025:7417: Important: gimp security update
Important: gimp security update
Other sources
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.<br>Security Fix(es):<br><li> gimp: dds buffer overflow RCE (CVE-2023-44441)</li> <li> gimp: PSD buffer overflow RCE (CVE-2023-44442)</li> <li> gimp: psp integer overflow RCE (CVE-2023-44443)</li> <li> gimp: psp off-by-one RCE (CVE-2023-44444)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:7417?
The severity of RHSA-2025:7417 is classified as important.
How do I fix RHSA-2025:7417?
To fix RHSA-2025:7417, update to the package version 2.99.8-4.el9_6.
What products are affected by RHSA-2025:7417?
RHSA-2025:7417 affects various versions of Red Hat Enterprise Linux across x86_64, IBM z Systems, ARM 64, and Power architectures.
What components of GIMP are included in the RHSA-2025:7417 update?
The RHSA-2025:7417 update includes GIMP, GIMP debuginfo, GIMP debug source, GIMP devel tools, and GIMP libraries.
When was the RHSA-2025:7417 advisory released?
The RHSA-2025:7417 advisory was released on February 5, 2025.