Gimp Security Update — AlmaLinux 9 (ALSA-2026:50817)
This is a security release for AlmaLinux 9. Update the product on every affected server to the patched release — there is no workaround, and unpatched servers remain exposed until updated.
Команды исправления
EL8+ (AlmaLinux/CloudLinux/Rocky)
sudo dnf updateЧто это значит по лицензии SharedLicense
Your SharedLicense license itself is not affected — this is a change in AlmaLinux 9 software, not in licensing. Update the product through its standard update channel. Licenses keep working through updates; nothing needs re-issuing or re-activating.
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.
Security Fix(es):
* gimp: GIMP APNG loade…
Type:
security
Severity:
important
Release date:
2026-08-06
Description:
The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.
Security Fix(es):
* gimp: GIMP APNG loader heap-buffer-overflow when fcTL width exceeds IHDR width (file-png.c) (CVE-2026-42169)
* gimp: integer overflow in file-fits plugin causes a heap-based buffer overflow on crafted FITS images (CVE-2026-66758)
* gimp: out-of-bounds read in file-icns plugin causes information disclosure or crash on crafted ICNS images (CVE-2026-66759)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
| Architecture | Package | Checksum |
| aarch64 | gimp-libs-3.0.4-4.el9_8.9.aarch64.rpm | 08cd5c9abfdc29426f2fae420c09bb3398a3195fc1f34d1e832aff387cc40c3e |
| aarch64 | gimp-3.0.4-4.el9_8.9.aarch64.rpm | 9f6cbf7cdc0c6d2c683d07ef7fb970b0b4361792e285abc5313d681106267918 |
| i686 | gimp-libs-3.0.4-4.el9_8.9.i686.rpm | 230c1bfa61326ddf228c181af29bdd6a0f369ca7d02f4f4025b7abdd45800c4c |
| ppc64le | gimp-libs-3.0.4-4.el9_8.9.ppc64le.rpm | 7ccdf72234acfb5e0f281d9f3f4698b5841a03593751e08266ad92991f2d0742 |
| ppc64le | gimp-3.0.4-4.el9_8.9.ppc64le.rpm | b97c4484db3b13f441001d6f03607feefe2e443948d5e028942bd7b87cebb4e4 |
| x86_64 | gimp-3.0.4-4.el9_8.9.x86_64.rpm | 8533d646b536c6e18fbfd56a816bcc8f56a33a1af32ef24653c185861acd07bb |
| x86_64 | gimp-libs-3.0.4-4.el9_8.9.x86_64.rpm | c0cc43b0dfe4792e0d96063816e0d24c103c43ced0b22053ee13486e25bbc766 |
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.
Источники
Предупреждения о безопасности
Похожие предупреждения
Проверьте систему на уязвимости
Выберите продукт и операционную систему, чтобы увидеть точные команды исправления.
Проверьте свою систему