gimp security update

2:2.99.8-4 - Applying fixes for vulnerabilities that led to possible RCE conditions. - Fixes: CVE-2023-44441 CVE-2023-44442 CVE-2023-44443 CVE-2023-44444 - Resolves: RHEL-86048 RHEL-86045 RHEL-86042 RHEL-86039...

CVE-2025-21897

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix picktaskscx picking non-queued tasks when it's called without balance a6250aa251ea "schedext: Handle cases where picktaskscx is called without preceding balancescx" added a workaround to handle the cases where...

CVE-2025-21895

In the Linux kernel, the following vulnerability has been resolved: perf/core: Order the PMU list to fix warning about unordered pmuctxlist Syskaller triggers a warning due to prevepc-pmu != nextepc-pmu in perfeventswaptaskctxdata. vmcore shows that two lists have the same perfeventpmucontext, bu...

CVE-2024-26812 affecting package kernel for versions less than 5.15.176.3-3

CVE-2024-26812 affecting package kernel for versions less than 5.15.176.3-3. A patched version of the package is available...

CVE-2025-27832

An issue was discovered in Artifex Ghostscript before 10.05.0. The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c...

CVE-2024-9602 vulnerabilities

Vulnerabilities for packages: chromium...

GHSA-92M3-M5PW-P2X9 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2024-53427 affecting package jq for versions less than 1.7.1-2

CVE-2024-53427 affecting package jq for versions less than 1.7.1-2. A patched version of the package is available...

CVE-2024-44955 affecting package kernel for versions less than 6.6.64.2-9

CVE-2024-44955 affecting package kernel for versions less than 6.6.64.2-9. A patched version of the package is available...

CVE-2024-43904 affecting package kernel for versions less than 6.6.64.2-9

CVE-2024-43904 affecting package kernel for versions less than 6.6.64.2-9. A patched version of the package is available...

CVE-2024-41080 affecting package kernel for versions less than 6.6.64.2-9

CVE-2024-41080 affecting package kernel for versions less than 6.6.64.2-9. A patched version of the package is available...

CVE-2024-53121 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-53121 affecting package kernel for versions less than 5.15.176.3-1. A patched version of the package is available...

CVE-2024-58010 affecting package kernel for versions less than 6.6.78.1-3

CVE-2024-58010 affecting package kernel for versions less than 6.6.78.1-3. An upgraded version of the package is available that resolves this issue...

CVE-2025-21697 affecting package kernel for versions less than 6.6.76.1-1

CVE-2025-21697 affecting package kernel for versions less than 6.6.76.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-29768

Vim, a text editor, is vulnerable to potential data loss with zip.vim and special crafted zip files in versions prior to 9.1.1198. The impact is medium because a user must be made to view such an archive with Vim and then press 'x' on such a strange filename. The issue has been fixed as of Vim...

CVE-2025-24928 affecting package libxml2 for versions less than 2.11.5-4

CVE-2025-24928 affecting package libxml2 for versions less than 2.11.5-4. A patched version of the package is available...

[SECURITY] Fedora 42 Update: neovim-0.10.4-3.fc42

Neovim is a refactor - and sometimes redactor - in the tradition of Vim, which itself derives from Stevie. It is not a rewrite, but a continuation and extension of Vim. Many rewrites, clones, emulators and imitators exist; some are very clever, but none are Vim. Neovim strives to be a superset of...

CVE-2024-56615 affecting package kernel for versions less than 5.15.176.3-1

CVE-2024-56615 affecting package kernel for versions less than 5.15.176.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-21835

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set...

CVE-2024-58053

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix handling of received connection abort Fix the handling of a connection abort that we've received. Though the abort is at the connection level, it needs propagating to the calls on that connection. Whilst the propagatio...