RHSA-2026:93975: Important: gimp security update

Q: Which GIMP components and file types are implicated by these fixes?

The update addresses issues in the DDS loader, the PSD thumbnail loader, and the XCF loader and text-layer parasite parsing. The affected package set includes gimp, gimp-libs, development/debug packages, and related debuginfo packages.

Q: What malformed input conditions are identified for the vulnerabilities?

One issue is triggered by a crafted DirectDraw Surface (DDS) file. The others involve PSD thumbnail loading and XCF files using channel properties such as PROP_LINKED and PROP_SELECTION, PROP_SELECTED_PATH, or text-layer parasite parsing.

Q: What classes of memory-safety flaws are fixed?

The advisory identifies heap buffer overflow, heap out-of-bounds read/write, heap out-of-bounds read, and use-after-free issues. The listed CWEs are Buffer Overflow and Use After Free.

Published Nov 2, 2026

Updated

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.Security Fix(es): gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file (CVE-2026-106062) gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (loadresource1033) (CVE-2026-112257) gimp: gimp: use-after-free in XCF loader via PROPLINKED and PROPSELECTION on channels (CVE-2026-112258) gimp: gimp: heap out-of-bounds read in XCF text-layer parasite parsing (CVE-2026-112260) gimp: gimp: use-after-free in XCF loader via PROPSELECTEDPATH (CVE-2026-112261) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

24 affected componentsFixes available

redhat/gimp<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-debugsource<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-debugsource<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-devel-tools-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-devel-tools-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-libs<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-libs<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-libs-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-libs-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-debugsource<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-devel-tools-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-libs<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp-libs-debuginfo<3.0.4-4.el9_8.15

3.0.4-4.el9_8.15

redhat/gimp<3.0.4-4.el9_8.15.aa

3.0.4-4.el9_8.15.aa

redhat/gimp-debuginfo<3.0.4-4.el9_8.15.aa

3.0.4-4.el9_8.15.aa

redhat/gimp-debugsource<3.0.4-4.el9_8.15.aa

3.0.4-4.el9_8.15.aa

redhat/gimp-devel-tools-debuginfo<3.0.4-4.el9_8.15.aa

3.0.4-4.el9_8.15.aa

redhat/gimp-libs<3.0.4-4.el9_8.15.aa

3.0.4-4.el9_8.15.aa

redhat/gimp-libs-debuginfo<3.0.4-4.el9_8.15.aa

3.0.4-4.el9_8.15.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/gimp to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15
Upgrade
Upgrade redhat/gimp-debuginfo to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15
Upgrade
Upgrade redhat/gimp-debugsource to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15
Upgrade
Upgrade redhat/gimp-devel-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15
Upgrade
Upgrade redhat/gimp-libs to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15
Upgrade
Upgrade redhat/gimp-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15
Upgrade
Upgrade redhat/gimp to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15.aa
Upgrade
Upgrade redhat/gimp-debuginfo to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15.aa
Upgrade
Upgrade redhat/gimp-debugsource to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15.aa
Upgrade
Upgrade redhat/gimp-devel-tools-debuginfo to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15.aa
Upgrade
Upgrade redhat/gimp-libs to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15.aa
Upgrade
Upgrade redhat/gimp-libs-debuginfo to a version that resolves this vulnerability.
Fixed in 3.0.4-4.el9_8.15.aa

Event History

Nov 2, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

Which GIMP components and file types are implicated by these fixes?

The update addresses issues in the DDS loader, the PSD thumbnail loader, and the XCF loader and text-layer parasite parsing. The affected package set includes gimp, gimp-libs, development/debug packages, and related debuginfo packages.

What malformed input conditions are identified for the vulnerabilities?

One issue is triggered by a crafted DirectDraw Surface (DDS) file. The others involve PSD thumbnail loading and XCF files using channel properties such as PROP_LINKED and PROP_SELECTION, PROP_SELECTED_PATH, or text-layer parasite parsing.

What classes of memory-safety flaws are fixed?

The advisory identifies heap buffer overflow, heap out-of-bounds read/write, heap out-of-bounds read, and use-after-free issues. The listed CWEs are Buffer Overflow and Use After Free.

RHSA-2026:93975: Important: gimp security update

Affected Software

Remediation

Event History

Frequently Asked Questions

Which GIMP components and file types are implicated by these fixes?

What malformed input conditions are identified for the vulnerabilities?

What classes of memory-safety flaws are fixed?

Company

Resources

Contact

Frequently Asked Questions

Which GIMP components and file types are implicated by these fixes?

What malformed input conditions are identified for the vulnerabilities?

What classes of memory-safety flaws are fixed?