Errata des produits Red Hat RHSA-2026:5435 - Security Advisory
Publié :
2026-03-23
Mis à jour :
2026-03-23

RHSA-2026:5435 - Security Advisory

Synopsis

Important: gimp:2.8 security update

Type / Sévérité

Security Advisory: Important

Analyse des correctifs dans Red Hat Insights

Identifiez et remédiez aux systèmes concernés par cette alerte.

Voir les systèmes concernés

Sujet

An update for the gimp:2.8 module is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.

Security Fix(es):

  • gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing (CVE-2026-2044)
  • gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing (CVE-2026-2045)
  • gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability (CVE-2026-0797)
  • gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability (CVE-2026-2048)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Produits concernés

  • Red Hat Enterprise Linux Server - AUS 8.2 x86_64

Correctifs

  • BZ - 2441521 - CVE-2026-2044 gimp: GIMP: Remote Code Execution via uninitialized memory in PGM file parsing
  • BZ - 2441522 - CVE-2026-2045 gimp: GIMP: Remote Code Execution via out-of-bounds write in XWD file parsing
  • BZ - 2441524 - CVE-2026-0797 gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability
  • BZ - 2441527 - CVE-2026-2048 gimp: GIMP: Remote Code Execution via XWD file parsing vulnerability

Red Hat Enterprise Linux Server - AUS 8.2

SRPM
gimp-2.8.22-16.module+el8.2.0+24109+b4c62726.7.src.rpm SHA-256: ff5e48070fda275fb9660ed2e3afd765da9c40c1b163fb03645e84fc220b1864
pygobject2-2.28.7-4.module+el8+2760+3d7d61b2.src.rpm SHA-256: 89161d4acfb1217dcc5b4ea4e232eeb8b40d9744cf9c8785ff0183eb4ce1ccb1
pygtk2-2.24.0-24.module+el8+2760+3d7d61b2.src.rpm SHA-256: 64c448d7f24184438508a509686d6bd4027dbe0095ca64d7d0308c7fd012877c
python2-pycairo-1.16.3-6.module+el8+2760+3d7d61b2.src.rpm SHA-256: a56385f162203977deddcf0988d03e5c98855fa3b6bae176eab07ccbf04c8855
x86_64
gimp-2.8.22-16.module+el8.2.0+24109+b4c62726.7.x86_64.rpm SHA-256: 058cc737d260609b18108490dc6191da0c151e5105074124b3bd8ff953f26332
gimp-debuginfo-2.8.22-16.module+el8.2.0+24109+b4c62726.7.x86_64.rpm SHA-256: c62045d4f32b3fa0cc2ba196c5074ee1f4ec9bb9894874e3fc3b3f8b602fc31d
gimp-debugsource-2.8.22-16.module+el8.2.0+24109+b4c62726.7.x86_64.rpm SHA-256: 9915db9b173e17e048539db3cd50d388e8618a454144676442ead6dd2b1ef4e3
gimp-devel-2.8.22-16.module+el8.2.0+24109+b4c62726.7.x86_64.rpm SHA-256: 66181930bcd5393ac5bbb72cdcec9ee6dac954ccbae7582b4bde86164ae862bc
gimp-devel-tools-2.8.22-16.module+el8.2.0+24109+b4c62726.7.x86_64.rpm SHA-256: 2d629d40c2ea8c2ee8eafae1cd4dcaf7dad91f6b77176a75505cadf5a129e6b9
gimp-devel-tools-debuginfo-2.8.22-16.module+el8.2.0+24109+b4c62726.7.x86_64.rpm SHA-256: 1d8ebbc0c0f52ec2e517b410d997e449b0425f306f93c3db68cb800950ac01b3
gimp-libs-2.8.22-16.module+el8.2.0+24109+b4c62726.7.x86_64.rpm SHA-256: 56b84ec26aea800d2ba91402b686adfb8e816d60555c3d5f39e9e0737b9227ed
gimp-libs-debuginfo-2.8.22-16.module+el8.2.0+24109+b4c62726.7.x86_64.rpm SHA-256: ce84915c323c25f05f5f390daa8b8ce43a92983896104266bf0fbbc42b75b2e6
pygobject2-2.28.7-4.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 0722e0e1eace67230b3b2285cc4d12e0b801510a61a73227d9afafe3c44e4fd4
pygobject2-codegen-2.28.7-4.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 7b174815b7d3d9d63c6f06a9b9fe9a459b18b1a8fc9d80a2be41d405d9fee116
pygobject2-debuginfo-2.28.7-4.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 88ebab5bfedabdfdbe90c7bf85189475d98d2b2baf99ced111d0be75c0afa79b
pygobject2-debugsource-2.28.7-4.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 377c821e30723f72e4181bd3e1d7ec7ea6462a269ec155a9b550017910cdeb12
pygobject2-devel-2.28.7-4.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 612cbce7dfde755d5979b06e47bc9833d9031abb5eec8dbecb510b71222d623d
pygobject2-doc-2.28.7-4.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 238b8c2d865f299dcaae6eb3efa70107f95f4df96fbaaecb27a07afcb584618a
pygtk2-2.24.0-24.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 90a8290e06e40444323584b86814fe78c4920cb8c0c620a56184b7a05a1d24bf
pygtk2-codegen-2.24.0-24.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: cab5d098f3c2debebd3bec5d0703cabc6fdb6c18d93ae54bfa709d2f348725eb
pygtk2-debuginfo-2.24.0-24.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 163c6c9d8f42a162b9ed7aa70a98f4766654e6a3ea22955c018eeb43873fa5fd
pygtk2-debugsource-2.24.0-24.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: af0820b372cd77e1447431499c8bfe0fc389ff2f6765421a9d0d146fa578da87
pygtk2-devel-2.24.0-24.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: cc93b02deafb6a321aac24aaab257b5589894032e62962572536f42a603731ab
pygtk2-doc-2.24.0-24.module+el8+2760+3d7d61b2.noarch.rpm SHA-256: ed03b9f39c9bd053dfa80ddf2bac15fa8257dd4d61f18c62211689fe6c9c0ddb
python2-cairo-1.16.3-6.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: ce2b513387d5224348d45ac7cf927a8bbdb18b7999bf43a177c6d10838c95ee8
python2-cairo-debuginfo-1.16.3-6.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: f9a92ae5992e1a3af804aaa8f6bc259a982aa419c099f7d0e1913f2ec12b5642
python2-cairo-devel-1.16.3-6.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 429a1a2f6d367c4eed3ed8411427f2ab99c00f90f2d5a4de0e78d10cd48baa09
python2-pycairo-debugsource-1.16.3-6.module+el8+2760+3d7d61b2.x86_64.rpm SHA-256: 61abdc30c8d7b66346678ea20f88dd31ef426da5a3e7314aafa0cbaa892b35ba

Le contact Red Hat Security est secalert@redhat.com. Plus d'infos contact à https://access.redhat.com/security/team/contact/.