Oracle alert ELSA-2026-26168 (gimp)
| From: | Errata Announcements for Oracle Linux via El-errata <el-errata@oss.oracle.com> | |
| To: | el-errata@oss.oracle.com | |
| Subject: | [El-errata] ELSA-2026-26168 Important: Oracle Linux 7 gimp security update | |
| Date: | Fri, 31 Jul 2026 15:20:54 -0700 | |
| Message-ID: | <mailman.270.1785536468.18.el-errata@oss.oracle.com> |
Oracle Linux Security Advisory ELSA-2026-26168 http://linux.oracle.com/errata/ELSA-2026-26168.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: gimp-2.8.22-1.0.9.el7.x86_64.rpm gimp-devel-2.8.22-1.0.9.el7.i686.rpm gimp-devel-2.8.22-1.0.9.el7.x86_64.rpm gimp-devel-tools-2.8.22-1.0.9.el7.x86_64.rpm gimp-libs-2.8.22-1.0.9.el7.i686.rpm gimp-libs-2.8.22-1.0.9.el7.x86_64.rpm SRPMS: http://oss.oracle.com/ol7/SRPMS-updates/gimp-2.8.22-1.0.9... Related CVEs: CVE-2026-4150 CVE-2026-4153 CVE-2026-4154 CVE-2026-4887 Description of changes: [2:2.8.22-1.0.9] - Fixes CVE-2026-4150, CVE-2026-4153, CVE-2026-4154, and CVE-2026-4887 [Orabug: 39564202] [2:2.8.22-1.0.7] - Fixes CVE-2025-14422 [Orabug: 38904303] [2:2.22-1.0.5] - Fixes CVE-2025-10922 and CVE-2025-10934 [Orabug: 38739185] [2:2.8.22-1.0.3] - Fixes CVE-2025-5473 (GIMP ICO File Parsing Integer Overflow) [Orabug: 38110877] - Fixes CVE-2025-48797 (Multiple heap buffer overflows in TGA parser) - Fixes CVE-2025-48798 (Multiple use after free in XCF parser) _______________________________________________ El-errata mailing list El-errata@oss.oracle.com https://oss.oracle.com/mailman/listinfo/el-errata