ALSA-2026:93975

Dashboard / Vulnerabilities / ALSA-2026:93975

ALSA-2026:93975

Summary: Important: gimp security update

Details: The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): * gimp: GIMP: heap buffer overflow in DDS loader on crafted DirectDraw Surface file (CVE-2026-106062) * gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033) (CVE-2026-112257) * gimp: gimp: use-after-free in XCF loader via PROP_LINKED and PROP_SELECTION on channels (CVE-2026-112258) * gimp: gimp: heap out-of-bounds read in XCF text-layer parasite parsing (CVE-2026-112260) * gimp: gimp: use-after-free in XCF loader via PROP_SELECTED_PATH (CVE-2026-112261) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References: https://access.redhat.com/errata/RHSA-2026:93975, https://access.redhat.com/security/cve/CVE-2026-106062, https://access.redhat.com/security/cve/CVE-2026-112257, https://access.redhat.com/security/cve/CVE-2026-112258, https://access.redhat.com/security/cve/CVE-2026-112260, https://access.redhat.com/security/cve/CVE-2026-112261, https://bugzilla.redhat.com/2546654, https://bugzilla.redhat.com/2555574, https://bugzilla.redhat.com/2555588, https://bugzilla.redhat.com/2555730, https://bugzilla.redhat.com/2555748, https://errata.almalinux.org/9/ALSA-2026-93975.html