Red Hat Product Errata RHSA-2026:38496 - Security Advisory
Issued:
2026-07-13
Updated:
2026-07-13

RHSA-2026:38496 - Security Advisory

Synopsis

Important: gimp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for gimp is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

  • gimp: gimp: Heap buffer overflow in read_channel_data() (CVE-2026-58379)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le

Fixes

  • BZ - 2495997 - CVE-2026-58379 gimp: gimp: Heap buffer overflow in read_channel_data()

Red Hat Enterprise Linux for x86_64 9

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
x86_64
gimp-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8e408e8c60bd637071c344768d5f705f3f43c8f320a1e6bb605be8064b25c9b0
gimp-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 826730240a5a5d7fafefcb16bb4dd606d54f632282c95f83bf9ac900a3baefab
gimp-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8a35f4cc3a22b2e8b03d74aeda363c2d88034406a2a7477bd5dbb489127d2e00
gimp-debugsource-3.0.4-4.el9_8.5.i686.rpm SHA-256: 1485c84d0bccba61e3e3a4f78d8c9c99ba49e207072547cff5b976be3112fa57
gimp-debugsource-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 7a80d32c1a203b1f2ca0c2890e5f5317a711ab004269597eb9fa014ac542891a
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 0e3d514a0f2cbcc172a908eb042cc382a1256cc8269fe30481109e43ba403cbc
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 3ab107347e66a7c690ad953d29800efd131bcf6f6738583aadd6c35c778b04bc
gimp-libs-3.0.4-4.el9_8.5.i686.rpm SHA-256: ba06a04e4f8a99fb3ff0eda80fc809a33c979cd2e7ef4db74d771b520f1ac520
gimp-libs-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 36afde427b0db2edfd6efd1390ca10e0ebcfb187c7d51f7c0419a799328f6d3d
gimp-libs-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: aa772c6ba15e6b6fa1c913b005e9ad2f2c5fa237fccbeea81d201904278e5e73
gimp-libs-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 6c2af26c7718f324a425bb75439a66b6a2280ce9955b5568b942ee146dc29f46

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
x86_64
gimp-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8e408e8c60bd637071c344768d5f705f3f43c8f320a1e6bb605be8064b25c9b0
gimp-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 826730240a5a5d7fafefcb16bb4dd606d54f632282c95f83bf9ac900a3baefab
gimp-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8a35f4cc3a22b2e8b03d74aeda363c2d88034406a2a7477bd5dbb489127d2e00
gimp-debugsource-3.0.4-4.el9_8.5.i686.rpm SHA-256: 1485c84d0bccba61e3e3a4f78d8c9c99ba49e207072547cff5b976be3112fa57
gimp-debugsource-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 7a80d32c1a203b1f2ca0c2890e5f5317a711ab004269597eb9fa014ac542891a
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 0e3d514a0f2cbcc172a908eb042cc382a1256cc8269fe30481109e43ba403cbc
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 3ab107347e66a7c690ad953d29800efd131bcf6f6738583aadd6c35c778b04bc
gimp-libs-3.0.4-4.el9_8.5.i686.rpm SHA-256: ba06a04e4f8a99fb3ff0eda80fc809a33c979cd2e7ef4db74d771b520f1ac520
gimp-libs-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 36afde427b0db2edfd6efd1390ca10e0ebcfb187c7d51f7c0419a799328f6d3d
gimp-libs-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: aa772c6ba15e6b6fa1c913b005e9ad2f2c5fa237fccbeea81d201904278e5e73
gimp-libs-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 6c2af26c7718f324a425bb75439a66b6a2280ce9955b5568b942ee146dc29f46

Red Hat Enterprise Linux for Power, little endian 9

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
ppc64le
gimp-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: cdf3fdd3a15b18433c7446547ccd0f9dacd237c9b39c36d8e0a974dce6937a87
gimp-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 30e7dc5d14540f41f9ba503c0dc082641cab3134d8d0bf7daf27d8cf00fc790a
gimp-debugsource-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 71f6a2d9f8177dd34c9bc4cdd17f3cdd23741ba17e03a18f6902f03770e80f2c
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: a10e1156ce6cc2e78f67f530a875de6c5fd265deaacc6fa37be5c247a33b4f8b
gimp-libs-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: ebb6709d7ba9c470a7465c155d7bed0f447f038da345f062438fb452e2e4bc8c
gimp-libs-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 77a70bc0ea5dfeaeba2bf74213f856f8203fcc6a422e883acbca31e8c4eaace1

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
ppc64le
gimp-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: cdf3fdd3a15b18433c7446547ccd0f9dacd237c9b39c36d8e0a974dce6937a87
gimp-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 30e7dc5d14540f41f9ba503c0dc082641cab3134d8d0bf7daf27d8cf00fc790a
gimp-debugsource-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 71f6a2d9f8177dd34c9bc4cdd17f3cdd23741ba17e03a18f6902f03770e80f2c
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: a10e1156ce6cc2e78f67f530a875de6c5fd265deaacc6fa37be5c247a33b4f8b
gimp-libs-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: ebb6709d7ba9c470a7465c155d7bed0f447f038da345f062438fb452e2e4bc8c
gimp-libs-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 77a70bc0ea5dfeaeba2bf74213f856f8203fcc6a422e883acbca31e8c4eaace1

Red Hat Enterprise Linux for ARM 64 9

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
aarch64
gimp-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: bb14427f7e4a0e864bab6ddcd202693b9b277c30a38e43eaefca502495c9fbb6
gimp-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 5a22b87fb4717f91e19815571389ca71e472ba699df4b083e3a756b41922e8ce
gimp-debugsource-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 708419d980ac665497663dbcfd5588eb7f4c2fb6b6d5a198d832644cb198979e
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 6b17d65cc7d3da67c10bde30dff98327117fbc4101fd2147c045e574c8da6b4b
gimp-libs-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 587b6665894974751967145e11c78cb2cde379091291a5e6d623ae2d4066f3bc
gimp-libs-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 734507d7a0c513b2bc27437859776c89822593b216281049deee9f3cd2f84875

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
aarch64
gimp-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: bb14427f7e4a0e864bab6ddcd202693b9b277c30a38e43eaefca502495c9fbb6
gimp-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 5a22b87fb4717f91e19815571389ca71e472ba699df4b083e3a756b41922e8ce
gimp-debugsource-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 708419d980ac665497663dbcfd5588eb7f4c2fb6b6d5a198d832644cb198979e
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 6b17d65cc7d3da67c10bde30dff98327117fbc4101fd2147c045e574c8da6b4b
gimp-libs-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 587b6665894974751967145e11c78cb2cde379091291a5e6d623ae2d4066f3bc
gimp-libs-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 734507d7a0c513b2bc27437859776c89822593b216281049deee9f3cd2f84875

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
ppc64le
gimp-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: cdf3fdd3a15b18433c7446547ccd0f9dacd237c9b39c36d8e0a974dce6937a87
gimp-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 30e7dc5d14540f41f9ba503c0dc082641cab3134d8d0bf7daf27d8cf00fc790a
gimp-debugsource-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 71f6a2d9f8177dd34c9bc4cdd17f3cdd23741ba17e03a18f6902f03770e80f2c
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: a10e1156ce6cc2e78f67f530a875de6c5fd265deaacc6fa37be5c247a33b4f8b
gimp-libs-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: ebb6709d7ba9c470a7465c155d7bed0f447f038da345f062438fb452e2e4bc8c
gimp-libs-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 77a70bc0ea5dfeaeba2bf74213f856f8203fcc6a422e883acbca31e8c4eaace1

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
x86_64
gimp-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8e408e8c60bd637071c344768d5f705f3f43c8f320a1e6bb605be8064b25c9b0
gimp-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 826730240a5a5d7fafefcb16bb4dd606d54f632282c95f83bf9ac900a3baefab
gimp-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8a35f4cc3a22b2e8b03d74aeda363c2d88034406a2a7477bd5dbb489127d2e00
gimp-debugsource-3.0.4-4.el9_8.5.i686.rpm SHA-256: 1485c84d0bccba61e3e3a4f78d8c9c99ba49e207072547cff5b976be3112fa57
gimp-debugsource-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 7a80d32c1a203b1f2ca0c2890e5f5317a711ab004269597eb9fa014ac542891a
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 0e3d514a0f2cbcc172a908eb042cc382a1256cc8269fe30481109e43ba403cbc
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 3ab107347e66a7c690ad953d29800efd131bcf6f6738583aadd6c35c778b04bc
gimp-libs-3.0.4-4.el9_8.5.i686.rpm SHA-256: ba06a04e4f8a99fb3ff0eda80fc809a33c979cd2e7ef4db74d771b520f1ac520
gimp-libs-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 36afde427b0db2edfd6efd1390ca10e0ebcfb187c7d51f7c0419a799328f6d3d
gimp-libs-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: aa772c6ba15e6b6fa1c913b005e9ad2f2c5fa237fccbeea81d201904278e5e73
gimp-libs-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 6c2af26c7718f324a425bb75439a66b6a2280ce9955b5568b942ee146dc29f46

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
aarch64
gimp-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: bb14427f7e4a0e864bab6ddcd202693b9b277c30a38e43eaefca502495c9fbb6
gimp-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 5a22b87fb4717f91e19815571389ca71e472ba699df4b083e3a756b41922e8ce
gimp-debugsource-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 708419d980ac665497663dbcfd5588eb7f4c2fb6b6d5a198d832644cb198979e
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 6b17d65cc7d3da67c10bde30dff98327117fbc4101fd2147c045e574c8da6b4b
gimp-libs-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 587b6665894974751967145e11c78cb2cde379091291a5e6d623ae2d4066f3bc
gimp-libs-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 734507d7a0c513b2bc27437859776c89822593b216281049deee9f3cd2f84875

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
x86_64
gimp-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8e408e8c60bd637071c344768d5f705f3f43c8f320a1e6bb605be8064b25c9b0
gimp-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 826730240a5a5d7fafefcb16bb4dd606d54f632282c95f83bf9ac900a3baefab
gimp-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8a35f4cc3a22b2e8b03d74aeda363c2d88034406a2a7477bd5dbb489127d2e00
gimp-debugsource-3.0.4-4.el9_8.5.i686.rpm SHA-256: 1485c84d0bccba61e3e3a4f78d8c9c99ba49e207072547cff5b976be3112fa57
gimp-debugsource-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 7a80d32c1a203b1f2ca0c2890e5f5317a711ab004269597eb9fa014ac542891a
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 0e3d514a0f2cbcc172a908eb042cc382a1256cc8269fe30481109e43ba403cbc
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 3ab107347e66a7c690ad953d29800efd131bcf6f6738583aadd6c35c778b04bc
gimp-libs-3.0.4-4.el9_8.5.i686.rpm SHA-256: ba06a04e4f8a99fb3ff0eda80fc809a33c979cd2e7ef4db74d771b520f1ac520
gimp-libs-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 36afde427b0db2edfd6efd1390ca10e0ebcfb187c7d51f7c0419a799328f6d3d
gimp-libs-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: aa772c6ba15e6b6fa1c913b005e9ad2f2c5fa237fccbeea81d201904278e5e73
gimp-libs-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 6c2af26c7718f324a425bb75439a66b6a2280ce9955b5568b942ee146dc29f46

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
aarch64
gimp-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: bb14427f7e4a0e864bab6ddcd202693b9b277c30a38e43eaefca502495c9fbb6
gimp-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 5a22b87fb4717f91e19815571389ca71e472ba699df4b083e3a756b41922e8ce
gimp-debugsource-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 708419d980ac665497663dbcfd5588eb7f4c2fb6b6d5a198d832644cb198979e
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 6b17d65cc7d3da67c10bde30dff98327117fbc4101fd2147c045e574c8da6b4b
gimp-libs-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 587b6665894974751967145e11c78cb2cde379091291a5e6d623ae2d4066f3bc
gimp-libs-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 734507d7a0c513b2bc27437859776c89822593b216281049deee9f3cd2f84875

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95
ppc64le
gimp-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: cdf3fdd3a15b18433c7446547ccd0f9dacd237c9b39c36d8e0a974dce6937a87
gimp-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 30e7dc5d14540f41f9ba503c0dc082641cab3134d8d0bf7daf27d8cf00fc790a
gimp-debugsource-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 71f6a2d9f8177dd34c9bc4cdd17f3cdd23741ba17e03a18f6902f03770e80f2c
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: a10e1156ce6cc2e78f67f530a875de6c5fd265deaacc6fa37be5c247a33b4f8b
gimp-libs-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: ebb6709d7ba9c470a7465c155d7bed0f447f038da345f062438fb452e2e4bc8c
gimp-libs-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 77a70bc0ea5dfeaeba2bf74213f856f8203fcc6a422e883acbca31e8c4eaace1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.