Red Hat Product Errata RHSA-2026:40751 - Security Advisory
Issued:
2026-07-16
Updated:
2026-07-16

RHSA-2026:40751 - Security Advisory

Synopsis

Important: gimp security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for gimp is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

  • gimp: gimp: Stack buffer overflow in pnmscanner_gettoken() (CVE-2026-58380)
  • gimp: gimp: Integer overflow in read_RLE_channel() (CVE-2026-58384)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 9 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64
  • Red Hat Enterprise Linux for Power, little endian 9 ppc64le
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 9 aarch64
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le

Fixes

  • BZ - 2496135 - CVE-2026-58380 gimp: gimp: Stack buffer overflow in pnmscanner_gettoken()
  • BZ - 2497431 - CVE-2026-58384 gimp: gimp: Integer overflow in read_RLE_channel()

Red Hat Enterprise Linux for x86_64 9

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
x86_64
gimp-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 768a6d6499e0f43e28b8a302af4a4e52b37e2a32683ec3149ab58357b0e81608
gimp-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: c82e8adcf577621d935ab6c1e6d59e7dbc0ca636c30f19266bb34f00cf40ab2f
gimp-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 16e85a33c88aef9b4c592290a5def45b1a02d906e8d2cc45dc3c866d36b47c89
gimp-debugsource-3.0.4-4.el9_8.7.i686.rpm SHA-256: 086f5fd211e85d5e4c66b55a963ad3cca2183829ff37ae9d25bd59b96790740d
gimp-debugsource-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: a8e0e154edd375dafa7c4864ef146ebf60e91b6cd632f78bd5e788ece8a6940f
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: 8b01b857426da608fbbdba3e6ca1220f82d908538dc51657c9dcc64102681033
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 32a5638b118a72394e3cab76da8c0c28ee44ea8cf701db5284000532628c89e5
gimp-libs-3.0.4-4.el9_8.7.i686.rpm SHA-256: 59ae63f40e4f6ca54a5e6c0e8c65a9d2ff53303787ddfd93b6b99f50c938ce88
gimp-libs-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: b52584ad0a1b6fbf72bcff3e2c72a49f761d10114e69d3c787144925bea849fb
gimp-libs-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: d0b871a08e563e8b3f93bfd0a898f93e96db327aa8b653780ce7eed9724318b1
gimp-libs-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: b0ef09c4085cf7f31ee6c942fb6845f515f5cc95f303866ce0590217e85596a4

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
x86_64
gimp-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 768a6d6499e0f43e28b8a302af4a4e52b37e2a32683ec3149ab58357b0e81608
gimp-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: c82e8adcf577621d935ab6c1e6d59e7dbc0ca636c30f19266bb34f00cf40ab2f
gimp-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 16e85a33c88aef9b4c592290a5def45b1a02d906e8d2cc45dc3c866d36b47c89
gimp-debugsource-3.0.4-4.el9_8.7.i686.rpm SHA-256: 086f5fd211e85d5e4c66b55a963ad3cca2183829ff37ae9d25bd59b96790740d
gimp-debugsource-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: a8e0e154edd375dafa7c4864ef146ebf60e91b6cd632f78bd5e788ece8a6940f
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: 8b01b857426da608fbbdba3e6ca1220f82d908538dc51657c9dcc64102681033
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 32a5638b118a72394e3cab76da8c0c28ee44ea8cf701db5284000532628c89e5
gimp-libs-3.0.4-4.el9_8.7.i686.rpm SHA-256: 59ae63f40e4f6ca54a5e6c0e8c65a9d2ff53303787ddfd93b6b99f50c938ce88
gimp-libs-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: b52584ad0a1b6fbf72bcff3e2c72a49f761d10114e69d3c787144925bea849fb
gimp-libs-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: d0b871a08e563e8b3f93bfd0a898f93e96db327aa8b653780ce7eed9724318b1
gimp-libs-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: b0ef09c4085cf7f31ee6c942fb6845f515f5cc95f303866ce0590217e85596a4

Red Hat Enterprise Linux for Power, little endian 9

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
ppc64le
gimp-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: bbe083804ff72897973a58406bd43b8b52a470913db6e798021abd15c4a5eb19
gimp-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 4dfe42dbeea52e48206d6dc4d187c2ddbc6dabd52985b5fa821a4bddc5352b87
gimp-debugsource-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: fd6fa6cf52ea79e489d23a131774110ae92cbfc8d780ce38563971137de7a0f0
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 33babed3b1c99e67049afbee91cc5b7b4e1ed62f11d3b46e2a9d72be3fa13e6e
gimp-libs-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 3c2dc3f5014d816319250dc2b25949459011cbccb8838d4139eaefcd0393e17f
gimp-libs-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: faa2a090fb313b9a5a1e01b1944f82935e9c558fd7b68ca3769d5d68b847051b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
ppc64le
gimp-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: bbe083804ff72897973a58406bd43b8b52a470913db6e798021abd15c4a5eb19
gimp-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 4dfe42dbeea52e48206d6dc4d187c2ddbc6dabd52985b5fa821a4bddc5352b87
gimp-debugsource-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: fd6fa6cf52ea79e489d23a131774110ae92cbfc8d780ce38563971137de7a0f0
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 33babed3b1c99e67049afbee91cc5b7b4e1ed62f11d3b46e2a9d72be3fa13e6e
gimp-libs-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 3c2dc3f5014d816319250dc2b25949459011cbccb8838d4139eaefcd0393e17f
gimp-libs-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: faa2a090fb313b9a5a1e01b1944f82935e9c558fd7b68ca3769d5d68b847051b

Red Hat Enterprise Linux for ARM 64 9

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
aarch64
gimp-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: c00ee1b2081c1891c68065fc8ef1dc5bf847dc0745cc032f44554efe1369c3c6
gimp-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 21128712d5a95cde8899350636f8c332b7e15648d500c60582ba367fb2e86754
gimp-debugsource-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 06f26ad782bdb68d56ccc17881ee218acc49b65f47008340d8d5d509957fdb78
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 7dd96a868414a2d7ef0c287d0b1434f207fd19656879d639e4246fdbdbf69fac
gimp-libs-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 5919d4b9d937940976155f34a25a08c1cea3bf1549e4d1064a6fc892d4132e76
gimp-libs-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 8b703ac77612800dea19fbdb1536b1fc478eb5170f3782f9b43cfef114c43093

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
aarch64
gimp-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: c00ee1b2081c1891c68065fc8ef1dc5bf847dc0745cc032f44554efe1369c3c6
gimp-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 21128712d5a95cde8899350636f8c332b7e15648d500c60582ba367fb2e86754
gimp-debugsource-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 06f26ad782bdb68d56ccc17881ee218acc49b65f47008340d8d5d509957fdb78
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 7dd96a868414a2d7ef0c287d0b1434f207fd19656879d639e4246fdbdbf69fac
gimp-libs-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 5919d4b9d937940976155f34a25a08c1cea3bf1549e4d1064a6fc892d4132e76
gimp-libs-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 8b703ac77612800dea19fbdb1536b1fc478eb5170f3782f9b43cfef114c43093

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
ppc64le
gimp-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: bbe083804ff72897973a58406bd43b8b52a470913db6e798021abd15c4a5eb19
gimp-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 4dfe42dbeea52e48206d6dc4d187c2ddbc6dabd52985b5fa821a4bddc5352b87
gimp-debugsource-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: fd6fa6cf52ea79e489d23a131774110ae92cbfc8d780ce38563971137de7a0f0
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 33babed3b1c99e67049afbee91cc5b7b4e1ed62f11d3b46e2a9d72be3fa13e6e
gimp-libs-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 3c2dc3f5014d816319250dc2b25949459011cbccb8838d4139eaefcd0393e17f
gimp-libs-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: faa2a090fb313b9a5a1e01b1944f82935e9c558fd7b68ca3769d5d68b847051b

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
x86_64
gimp-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 768a6d6499e0f43e28b8a302af4a4e52b37e2a32683ec3149ab58357b0e81608
gimp-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: c82e8adcf577621d935ab6c1e6d59e7dbc0ca636c30f19266bb34f00cf40ab2f
gimp-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 16e85a33c88aef9b4c592290a5def45b1a02d906e8d2cc45dc3c866d36b47c89
gimp-debugsource-3.0.4-4.el9_8.7.i686.rpm SHA-256: 086f5fd211e85d5e4c66b55a963ad3cca2183829ff37ae9d25bd59b96790740d
gimp-debugsource-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: a8e0e154edd375dafa7c4864ef146ebf60e91b6cd632f78bd5e788ece8a6940f
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: 8b01b857426da608fbbdba3e6ca1220f82d908538dc51657c9dcc64102681033
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 32a5638b118a72394e3cab76da8c0c28ee44ea8cf701db5284000532628c89e5
gimp-libs-3.0.4-4.el9_8.7.i686.rpm SHA-256: 59ae63f40e4f6ca54a5e6c0e8c65a9d2ff53303787ddfd93b6b99f50c938ce88
gimp-libs-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: b52584ad0a1b6fbf72bcff3e2c72a49f761d10114e69d3c787144925bea849fb
gimp-libs-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: d0b871a08e563e8b3f93bfd0a898f93e96db327aa8b653780ce7eed9724318b1
gimp-libs-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: b0ef09c4085cf7f31ee6c942fb6845f515f5cc95f303866ce0590217e85596a4

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
aarch64
gimp-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: c00ee1b2081c1891c68065fc8ef1dc5bf847dc0745cc032f44554efe1369c3c6
gimp-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 21128712d5a95cde8899350636f8c332b7e15648d500c60582ba367fb2e86754
gimp-debugsource-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 06f26ad782bdb68d56ccc17881ee218acc49b65f47008340d8d5d509957fdb78
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 7dd96a868414a2d7ef0c287d0b1434f207fd19656879d639e4246fdbdbf69fac
gimp-libs-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 5919d4b9d937940976155f34a25a08c1cea3bf1549e4d1064a6fc892d4132e76
gimp-libs-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 8b703ac77612800dea19fbdb1536b1fc478eb5170f3782f9b43cfef114c43093

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
x86_64
gimp-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 768a6d6499e0f43e28b8a302af4a4e52b37e2a32683ec3149ab58357b0e81608
gimp-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: c82e8adcf577621d935ab6c1e6d59e7dbc0ca636c30f19266bb34f00cf40ab2f
gimp-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 16e85a33c88aef9b4c592290a5def45b1a02d906e8d2cc45dc3c866d36b47c89
gimp-debugsource-3.0.4-4.el9_8.7.i686.rpm SHA-256: 086f5fd211e85d5e4c66b55a963ad3cca2183829ff37ae9d25bd59b96790740d
gimp-debugsource-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: a8e0e154edd375dafa7c4864ef146ebf60e91b6cd632f78bd5e788ece8a6940f
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: 8b01b857426da608fbbdba3e6ca1220f82d908538dc51657c9dcc64102681033
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: 32a5638b118a72394e3cab76da8c0c28ee44ea8cf701db5284000532628c89e5
gimp-libs-3.0.4-4.el9_8.7.i686.rpm SHA-256: 59ae63f40e4f6ca54a5e6c0e8c65a9d2ff53303787ddfd93b6b99f50c938ce88
gimp-libs-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: b52584ad0a1b6fbf72bcff3e2c72a49f761d10114e69d3c787144925bea849fb
gimp-libs-debuginfo-3.0.4-4.el9_8.7.i686.rpm SHA-256: d0b871a08e563e8b3f93bfd0a898f93e96db327aa8b653780ce7eed9724318b1
gimp-libs-debuginfo-3.0.4-4.el9_8.7.x86_64.rpm SHA-256: b0ef09c4085cf7f31ee6c942fb6845f515f5cc95f303866ce0590217e85596a4

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
aarch64
gimp-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: c00ee1b2081c1891c68065fc8ef1dc5bf847dc0745cc032f44554efe1369c3c6
gimp-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 21128712d5a95cde8899350636f8c332b7e15648d500c60582ba367fb2e86754
gimp-debugsource-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 06f26ad782bdb68d56ccc17881ee218acc49b65f47008340d8d5d509957fdb78
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 7dd96a868414a2d7ef0c287d0b1434f207fd19656879d639e4246fdbdbf69fac
gimp-libs-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 5919d4b9d937940976155f34a25a08c1cea3bf1549e4d1064a6fc892d4132e76
gimp-libs-debuginfo-3.0.4-4.el9_8.7.aarch64.rpm SHA-256: 8b703ac77612800dea19fbdb1536b1fc478eb5170f3782f9b43cfef114c43093

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8

SRPM
gimp-3.0.4-4.el9_8.7.src.rpm SHA-256: 59d59ce6e01a4009cb41de28b614ca68f3816c249ed341651c88924564f102ad
ppc64le
gimp-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: bbe083804ff72897973a58406bd43b8b52a470913db6e798021abd15c4a5eb19
gimp-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 4dfe42dbeea52e48206d6dc4d187c2ddbc6dabd52985b5fa821a4bddc5352b87
gimp-debugsource-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: fd6fa6cf52ea79e489d23a131774110ae92cbfc8d780ce38563971137de7a0f0
gimp-devel-tools-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 33babed3b1c99e67049afbee91cc5b7b4e1ed62f11d3b46e2a9d72be3fa13e6e
gimp-libs-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: 3c2dc3f5014d816319250dc2b25949459011cbccb8838d4139eaefcd0393e17f
gimp-libs-debuginfo-3.0.4-4.el9_8.7.ppc64le.rpm SHA-256: faa2a090fb313b9a5a1e01b1944f82935e9c558fd7b68ca3769d5d68b847051b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.