RHSA-2026:95482: Important: gimp:2.8 security, bug fix, and enhancement update
Important: gimp:2.8 security, bug fix, and enhancement update
Other sources
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.Security Fix(es): gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (loadresource1033) (CVE-2026-112257) Bug Fix(es) and Enhancement(s): gimp: xpm poc file for CVE-2026-4154 should error differently (JIRA:RHEL-178367) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/gimpto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10 - Upgrade
Upgrade
redhat/pygobject2to a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/pygtk2to a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d - Upgrade
Upgrade
redhat/python2-pycairoto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/gimp-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10 - Upgrade
Upgrade
redhat/gimp-debugsourceto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10 - Upgrade
Upgrade
redhat/gimp-develto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10 - Upgrade
Upgrade
redhat/gimp-devel-toolsto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10 - Upgrade
Upgrade
redhat/gimp-devel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10 - Upgrade
Upgrade
redhat/gimp-libsto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10 - Upgrade
Upgrade
redhat/gimp-libs-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10 - Upgrade
Upgrade
redhat/pygobject2-codegento a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/pygobject2-debuginfoto a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/pygobject2-debugsourceto a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/pygobject2-develto a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/pygobject2-docto a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/pygtk2-codegento a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d - Upgrade
Upgrade
redhat/pygtk2-debuginfoto a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d - Upgrade
Upgrade
redhat/pygtk2-debugsourceto a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d - Upgrade
Upgrade
redhat/pygtk2-develto a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d - Upgrade
Upgrade
redhat/pygtk2-docto a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d - Upgrade
Upgrade
redhat/python2-cairoto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/python2-cairo-debuginfoto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/python2-cairo-develto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/python2-pycairo-debugsourceto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6 - Upgrade
Upgrade
redhat/gimpto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aa - Upgrade
Upgrade
redhat/gimp-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aa - Upgrade
Upgrade
redhat/gimp-debugsourceto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aa - Upgrade
Upgrade
redhat/gimp-develto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aa - Upgrade
Upgrade
redhat/gimp-devel-toolsto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aa - Upgrade
Upgrade
redhat/gimp-devel-tools-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aa - Upgrade
Upgrade
redhat/gimp-libsto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aa - Upgrade
Upgrade
redhat/gimp-libs-debuginfoto a version that resolves this vulnerability.Fixed in 2.8.22-26.module+el8.10.0+25170+1f1aa845.10.aa - Upgrade
Upgrade
redhat/pygobject2to a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/pygobject2-codegento a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/pygobject2-debuginfoto a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/pygobject2-debugsourceto a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/pygobject2-develto a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/pygobject2-docto a version that resolves this vulnerability.Fixed in 2.28.7-5.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/pygtk2to a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d.aa - Upgrade
Upgrade
redhat/pygtk2-codegento a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d.aa - Upgrade
Upgrade
redhat/pygtk2-debuginfoto a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d.aa - Upgrade
Upgrade
redhat/pygtk2-debugsourceto a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d.aa - Upgrade
Upgrade
redhat/pygtk2-develto a version that resolves this vulnerability.Fixed in 2.24.0-25.module+el8.9.0+21228+8e80d31d.aa - Upgrade
Upgrade
redhat/python2-cairoto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/python2-cairo-debuginfoto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/python2-cairo-develto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6.aa - Upgrade
Upgrade
redhat/python2-pycairo-debugsourceto a version that resolves this vulnerability.Fixed in 1.16.3-7.module+el8.10.0+22676+becd68d6.aa