ELSA-2026-26168

ELSA-2026-26168 - gimp security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-07-30

Description

[2:2.8.22-1.0.9]
- Fixes CVE-2026-4150, CVE-2026-4153, CVE-2026-4154, and CVE-2026-4887 [Orabug: 39564202]

[2:2.8.22-1.0.7]
- Fixes CVE-2025-14422 [Orabug: 38904303]

[2:2.22-1.0.5]
- Fixes CVE-2025-10922 and CVE-2025-10934 [Orabug: 38739185]

[2:2.8.22-1.0.3]
- Fixes CVE-2025-5473 (GIMP ICO File Parsing Integer Overflow) [Orabug: 38110877]
- Fixes CVE-2025-48797 (Multiple heap buffer overflows in TGA parser)
- Fixes CVE-2025-48798 (Multiple use after free in XCF parser)

Related CVEs

CVE-2026-4150

CVE-2026-4153

CVE-2026-4154

CVE-2026-4887

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	gimp-2.8.22-1.0.9.el7.src.rpm	1798ecd393e269e947c959e9a776e4599b999e34adaa143e9240ab62b6191eee	-	ol7_x86_64_latest_ELS
	gimp-2.8.22-1.0.9.el7.x86_64.rpm	dcd4a30b38933cbc4dd051359816c551285a7765b78e777817096b012e5ad752	-	ol7_x86_64_latest_ELS
	gimp-devel-2.8.22-1.0.9.el7.i686.rpm	9101933292fedef61a8b2686451679e2a6707e7d892db67d3862dc373a0e703e	-	ol7_x86_64_latest_ELS
	gimp-devel-2.8.22-1.0.9.el7.x86_64.rpm	06242859a3f30a54141dea4e9da8fb03e405af85e69e574f490bb7e4adf99467	-	ol7_x86_64_latest_ELS
	gimp-devel-tools-2.8.22-1.0.9.el7.x86_64.rpm	365255690a14786114f4e7f1e8fa8a71bf1c53635a19537ac6ab2cdfe08aa460	-	ol7_x86_64_latest_ELS
	gimp-libs-2.8.22-1.0.9.el7.i686.rpm	dae567795df584bc9b948e1d1bae3dbcd63071f291421cbf6eb76d2d35f68684	-	ol7_x86_64_latest_ELS
	gimp-libs-2.8.22-1.0.9.el7.x86_64.rpm	3a56cfd0da64ff43acff6890e4f6326802630168026833950afd10302b269b2f	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team