RLSA-2026:95482

Security

Mirrored from RHSA-2026:95482

Issued at: 2026-11-06

Updated at: 2026-11-06

Advisory content derived from Red Hat RHSA-2026:95482, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: gimp:2.8 security, bug fix, and enhancement update

Description

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

* gimp: gimp: heap out-of-bounds read/write in PSD thumbnail loader (load_resource_1033) (CVE-2026-112257)

Bug Fix(es) and Enhancement(s):

* gimp: xpm poc file for CVE-2026-4154 should error differently (JIRA:Rocky Linux-178367)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 8 aarch64

Rocky Linux 8 x86_64

Fixes

2555574

CVEs

CVE-2026-112257

Affected packages

Rocky Linux 8 aarch64 - AppStream

gimp-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.aarch64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.src.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.aarch64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.aarch64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.aarch64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.aarch64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.aarch64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.aarch64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.aarch64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.aarch64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.aarch64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.aarch64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.aarch64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.aarch64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.aarch64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.aarch64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.aarch64.rpm

pygobject2-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.aarch64.rpm

pygobject2-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.src.rpm

pygobject2-codegen-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.aarch64.rpm

pygobject2-debuginfo-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.aarch64.rpm

pygobject2-debugsource-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.aarch64.rpm

pygobject2-devel-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.aarch64.rpm

pygobject2-doc-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.aarch64.rpm

pygtk2-0:2.24.0-25.module+el8.9.0+1723+9bc93544.aarch64.rpm

pygtk2-0:2.24.0-25.module+el8.9.0+1723+9bc93544.src.rpm

pygtk2-codegen-0:2.24.0-25.module+el8.9.0+1723+9bc93544.aarch64.rpm

pygtk2-debuginfo-0:2.24.0-25.module+el8.9.0+1723+9bc93544.aarch64.rpm

pygtk2-debugsource-0:2.24.0-25.module+el8.9.0+1723+9bc93544.aarch64.rpm

pygtk2-devel-0:2.24.0-25.module+el8.9.0+1723+9bc93544.aarch64.rpm

pygtk2-doc-0:2.24.0-25.module+el8.9.0+1723+9bc93544.noarch.rpm

python2-cairo-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.aarch64.rpm

python2-cairo-debuginfo-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.aarch64.rpm

python2-cairo-devel-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.aarch64.rpm

python2-pycairo-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.src.rpm

python2-pycairo-debugsource-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.aarch64.rpm

Rocky Linux 8 x86_64 - AppStream

gimp-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.src.rpm

gimp-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.x86_64.rpm

gimp-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.x86_64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.x86_64.rpm

gimp-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.x86_64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.x86_64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.x86_64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.x86_64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.x86_64.rpm

gimp-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.x86_64.rpm

gimp-debuginfo-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.x86_64.rpm

gimp-debugsource-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.x86_64.rpm

gimp-devel-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.x86_64.rpm

gimp-devel-tools-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.x86_64.rpm

gimp-devel-tools-debuginfo-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.x86_64.rpm

gimp-libs-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40308+ebf9d253.8.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+1927+52edb5a0.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40380+6ffe857b.9.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40407+12f45184.10.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40033+6fd27379.3.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40075+a21479b4.4.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40134+eab491b1.5.x86_64.rpm

gimp-libs-debuginfo-2:2.8.22-26.module+el8.10.0+40181+ad0e3a65.6.x86_64.rpm

pygobject2-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.src.rpm

pygobject2-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.x86_64.rpm

pygobject2-codegen-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.x86_64.rpm

pygobject2-debuginfo-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.x86_64.rpm

pygobject2-debugsource-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.x86_64.rpm

pygobject2-devel-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.x86_64.rpm

pygobject2-doc-0:2.28.7-5.module+el8.10.0+1927+52edb5a0.x86_64.rpm

pygtk2-0:2.24.0-25.module+el8.9.0+1723+9bc93544.src.rpm

pygtk2-0:2.24.0-25.module+el8.9.0+1723+9bc93544.x86_64.rpm

pygtk2-codegen-0:2.24.0-25.module+el8.9.0+1723+9bc93544.x86_64.rpm

pygtk2-debuginfo-0:2.24.0-25.module+el8.9.0+1723+9bc93544.x86_64.rpm

pygtk2-debugsource-0:2.24.0-25.module+el8.9.0+1723+9bc93544.x86_64.rpm

pygtk2-devel-0:2.24.0-25.module+el8.9.0+1723+9bc93544.x86_64.rpm

pygtk2-doc-0:2.24.0-25.module+el8.9.0+1723+9bc93544.noarch.rpm

python2-cairo-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.x86_64.rpm

python2-cairo-debuginfo-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.x86_64.rpm

python2-cairo-devel-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.x86_64.rpm

python2-pycairo-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.src.rpm

python2-pycairo-debugsource-0:1.16.3-7.module+el8.10.0+1927+52edb5a0.x86_64.rpm