[SECURITY] Fedora 40 Update: gimp-2.10.38-12.fc40

GIMP GNU Image Manipulation Program is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for web pages. GIMP has many of the tools and filters you would expe ct to find in similar commercial offerings, and some interesting extras...

Fedora: Security Advisory (FEDORA-2024-ccdbd92d7b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 40 : gimp (2024-ccdbd92d7b)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ccdbd92d7b advisory. This update fixes issues with loading TGA and XCF files. Tenable has extracted the preceding description block directly from the Fedora security advisory. No...

PT-2025-39341

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description The GIMP software contains a flaw in its ICNS file parsing functionality. This issue can lead to an out-of-bounds write, potentially allowing for remote code execution. Recommendations At the...

PT-2025-25422

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw was found in GIMP, specifically an integer overflow vulnerability in the "Despeckle" plug-in. The issue occurs due to unchecked multiplication of image dimensions, such as width, height,...

PT-2025-23001

Name of the Vulnerable Software and Affected Versions GIMP versions prior to the fixed version Description A flaw was found in GIMP when processing XCF image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious...

PT-2025-39345

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description An integer overflow exists in the FF file parsing functionality of GIMP. This issue could allow for remote code execution. Recommendations At the moment, there is no information about a newer...

PT-2025-22999

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw was found in GIMP. The GIMP ani load image function is vulnerable to a stack-based overflow. If a user opens .ANI files, GIMP may be used to store more information than the capacity allow...

PT-2025-39342

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified gegl affected versions not specified Description A heap-based buffer overflow exists in the handling of HDR files within GIMP, potentially allowing for remote code execution. The issue resides in the gegl...

PT-2025-15288

Name of the Vulnerable Software and Affected Versions: GIMP affected versions not specified Description: The issue is related to an integer overflow in GIMP's XWD file parsing, which can lead to remote code execution. Recommendations: At the moment, there is no information about a newer version...

PT-2025-23000

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description A flaw was found in GIMP when processing certain TGA image files. If a user opens one of these image files that has been specially crafted by an attacker, GIMP can be tricked into making serious...

PT-2025-39346

Name of the Vulnerable Software and Affected Versions GIMP affected versions not specified Description The GIMP software contains a stack-based buffer overflow in the ILBM file parsing functionality. This issue could allow for remote code execution. Recommendations At the moment, there is no...

PT-2025-15289

Name of the Vulnerable Software and Affected Versions: GIMP affected versions not specified Description: The issue is related to out-of-bounds write remote code execution in GIMP's FLI file parsing. This could potentially allow for remote code execution. Recommendations: At the moment, there is n...

gimp:2.8.22 security update

2:2.8.22-1.0.1 - Fix CVE-2023-44442 Orabug: 37344570 - Fix CVE-2023-44444...

Oracle Linux 7 : gimp:2.8.22 (ELSA-2024-10666)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-10666 advisory. - Fix CVE-2023-44442 Orabug: 37344570 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...

RHSA-2024:10666 Red Hat Security Advisory: gimp:2.8.22 security update

Bulletin has no description...

gimp: psp off-by-one RCE

A parsing vulnerability was found in the GNU Image Manipulation Program GIMP. This flaw allows an unauthenticated, remote attacker to trick a GIMP user into opening a malicious PSP file, possibly enabling the execution of unauthorized code within the GIMP process...

Important: Red Hat Security Advisory: gimp:2.8.22 security update

An update for the gimp:2.8.22 module is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

RHEL 7 : gimp:2.8.22 (RHSA-2024:10666)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10666 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

gimp-2.10.38-4.1 on GA media (moderate)

gimp-2.10.38-4.1 on GA media Announcement ID: openSUSE-SU-2024:14534-1 Rating: moderate Cross-References: CVE-2022-32990 CVE-2023-44443 CVSS scores: CVE-2022-32990 SUSE : 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVE-2023-44443 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affect...