ELSA-2025-22866

ELSA-2025-22866 - gimp security update

Type:SECURITY
Impact:IMPORTANT
Release Date:2025-12-18

Description


[2:2.22-1.0.5]
- Fixes CVE-2025-10922 and CVE-2025-10934 [Orabug: 38739185]

[2:2.8.22-1.0.3]
- Fixes CVE-2025-5473 (GIMP ICO File Parsing Integer Overflow) [Orabug: 38110877]
- Fixes CVE-2025-48797 (Multiple heap buffer overflows in TGA parser)
- Fixes CVE-2025-48798 (Multiple use after free in XCF parser)


Related CVEs


CVE-2025-10922
CVE-2025-10934

Updated Packages


Release/ArchitectureFilenamesha256Superseded By AdvisoryChannel Label
Oracle Linux 7 (x86_64) gimp-2.8.22-1.0.5.el7.src.rpmdb31275c66b969ac5b63ce63dbf1f877c864b3ceff0c38c36a6c9deee596279b-ol7_x86_64_latest_ELS
gimp-2.8.22-1.0.5.el7.x86_64.rpm8ea73a20c83ad1241788f85428d06ab538d341f593f804b3ff673b2f9e6369e3-ol7_x86_64_latest_ELS
gimp-devel-2.8.22-1.0.5.el7.i686.rpm087f8bc2e98a77dc7bf374aeec08535167fb0aaa56c2b9656dcd368396229b79-ol7_x86_64_latest_ELS
gimp-devel-2.8.22-1.0.5.el7.x86_64.rpmbeaec0c2613c0f86005cfb35596f7f99a61edff365e056c56c74f20e24138609-ol7_x86_64_latest_ELS
gimp-devel-tools-2.8.22-1.0.5.el7.x86_64.rpm67c03fe7e7a44b5b9f5cfc6386f7213d582b11505c8151681b7140de63594bc2-ol7_x86_64_latest_ELS
gimp-libs-2.8.22-1.0.5.el7.i686.rpm64408c703c6c374b795b333de1537742384bf48e92f9eabe7ece515e89228919-ol7_x86_64_latest_ELS
gimp-libs-2.8.22-1.0.5.el7.x86_64.rpm3f5d50474df88e267e4e63e1ef711b44302c9e92741706e9127074287b8270b0-ol7_x86_64_latest_ELS



This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team

software.hardware.complete