Red Hat Product Errata RHSA-2026:25901 - Security Advisory Issued: 2026-06-15 Updated: 2026-06-15 RHSA-2026:25901 - Security Advisory Overview Updated Packages Synopsis Important: gimp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gimp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887) gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154) gimp: GIMP: Remote Code Execution via malicious JP2 file parsing (CVE-2026-4152) GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150) gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2451669 - CVE-2026-4887 gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image BZ - 2457530 - CVE-2026-4154 gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow BZ - 2457533 - CVE-2026-4152 gimp: GIMP: Remote Code Execution via malicious JP2 file parsing BZ - 2457535 - CVE-2026-4150 GIMP: GIMP: Arbitrary code execution via specially crafted PSD file BZ - 2457536 - CVE-2026-4153 gimp: GIMP: Remote Code Execution via PSP file parsing CVEs CVE-2026-4150 CVE-2026-4152 CVE-2026-4153 CVE-2026-4154 CVE-2026-4887 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM gimp-2.99.8-4.el9_6.7.src.rpm SHA-256: 00bf0067ec30bcd38a22fa9bf16c56e7c2829d126999efae1b303f28e5f5efe7 x86_64 gimp-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: dfad2e3d0d628ece145002436300d7679b8db8f843eb7836260f94ae6785734d gimp-debuginfo-2.99.8-4.el9_6.7.i686.rpm SHA-256: 6500f9425f17e82c1d8865fb4f13551953d7ba4462b17791c64635f3e6bd34e4 gimp-debuginfo-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: 59c1f64c3b3b20659b199cb2f2f0268abf96fa9716bd0a1d4a52d0aee4402d47 gimp-debugsource-2.99.8-4.el9_6.7.i686.rpm SHA-256: 396649f3c9bedd9233fda07cff192fb9fec08cfc1b943677f0e90ae7796e977c gimp-debugsource-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: 0ad242537a172575fd7713edbee00d10774252526512622baef328b982fe3c61 gimp-devel-tools-debuginfo-2.99.8-4.el9_6.7.i686.rpm SHA-256: 1208319cbad7ce0ee11422d702954719483fc003003b047d124e850f86d1a643 gimp-devel-tools-debuginfo-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: e509314c6adba38f825a8c00b01dcfcb33e16df76f935ee3b396e836876a3f54 gimp-libs-2.99.8-4.el9_6.7.i686.rpm SHA-256: f69410d792ef95130119b4d824f4ba90a49f0650afc95ccefeb9ed3546e62069 gimp-libs-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: 28b223c352e85c34202fcd453afa7d2c1ccbe7df8f529d54335f361570f745de gimp-libs-debuginfo-2.99.8-4.el9_6.7.i686.rpm SHA-256: 7c81e4f4411088d55f7295ffe4bf656e91a74b998cedff327362fa7225a739e9 gimp-libs-debuginfo-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: 666b8f74aa4e699c9c9fe8bbb402373be5c1c4d7020561d1b8827a5bba4b8aea Red Hat Enterprise Linux Server - AUS 9.6 SRPM gimp-2.99.8-4.el9_6.7.src.rpm SHA-256: 00bf0067ec30bcd38a22fa9bf16c56e7c2829d126999efae1b303f28e5f5efe7 x86_64 gimp-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: dfad2e3d0d628ece145002436300d7679b8db8f843eb7836260f94ae6785734d gimp-debuginfo-2.99.8-4.el9_6.7.i686.rpm SHA-256: 6500f9425f17e82c1d8865fb4f13551953d7ba4462b17791c64635f3e6bd34e4 gimp-debuginfo-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: 59c1f64c3b3b20659b199cb2f2f0268abf96fa9716bd0a1d4a52d0aee4402d47 gimp-debugsource-2.99.8-4.el9_6.7.i686.rpm SHA-256: 396649f3c9bedd9233fda07cff192fb9fec08cfc1b943677f0e90ae7796e977c gimp-debugsource-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: 0ad242537a172575fd7713edbee00d10774252526512622baef328b982fe3c61 gimp-devel-tools-debuginfo-2.99.8-4.el9_6.7.i686.rpm SHA-256: 1208319cbad7ce0ee11422d702954719483fc003003b047d124e850f86d1a643 gimp-devel-tools-debuginfo-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: e509314c6adba38f825a8c00b01dcfcb33e16df76f935ee3b396e836876a3f54 gimp-libs-2.99.8-4.el9_6.7.i686.rpm SHA-256: f69410d792ef95130119b4d824f4ba90a49f0650afc95ccefeb9ed3546e62069 gimp-libs-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: 28b223c352e85c34202fcd453afa7d2c1ccbe7df8f529d54335f361570f745de gimp-libs-debuginfo-2.99.8-4.el9_6.7.i686.rpm SHA-256: 7c81e4f4411088d55f7295ffe4bf656e91a74b998cedff327362fa7225a739e9 gimp-libs-debuginfo-2.99.8-4.el9_6.7.x86_64.rpm SHA-256: 666b8f74aa4e699c9c9fe8bbb402373be5c1c4d7020561d1b8827a5bba4b8aea Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM gimp-2.99.8-4.el9_6.7.src.rpm SHA-256: 00bf0067ec30bcd38a22fa9bf16c56e7c2829d126999efae1b303f28e5f5efe7 s390x gimp-2.99.8-4.el9_6.7.s390x.rpm SHA-256: 5b2091a0f19ebfbf9105eece626cd309cf4cb6360bcc2029520fa3a5635728d7 gimp-debuginfo-2.99.8-4.el9_6.7.s390x.rpm SHA-256: c96eb1d12bda0925fbc4718f8816f16ead8917fb7b037706757873fcd125d35c gimp-debugsource-2.99.8-4.el9_6.7.s390x.rpm SHA-256: ae520bec48a9105a31b63c3a176b222bdac936aacc2036b6fc3bcd957c72583e gimp-devel-tools-debuginfo-2.99.8-4.el9_6.7.s390x.rpm SHA-256: b132aa34d580a49b34cc6399281d6cca1da05655a177ee4310435b413da5fdd8 gimp-libs-2.99.8-4.el9_6.7.s390x.rpm SHA-256: be41b11ec635540a8b03d7371731e96c65810062f6d07c268c26d5f759827e18 gimp-libs-debuginfo-2.99.8-4.el9_6.7.s390x.rpm SHA-256: 57f32ff89ef5925f8b8947df9a1e5250a41eb4b6f02f04b979e7f3222c56697e Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM gimp-2.99.8-4.el9_6.7.src.rpm SHA-256: 00bf0067ec30bcd38a22fa9bf16c56e7c2829d126999efae1b303f28e5f5efe7 ppc64le gimp-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: ccdf0ec7e3020dc8f1ce7cd63ac8837339fe6dbd86eb5a1976e55c52d758092e gimp-debuginfo-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: 0da4b17fb2a202ac6f63173186556068bf079557fb2313e4c779b1c161df1424 gimp-debugsource-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: e694b03e1beab02edf5c102bd2d15b6a5cade62bb02e6710e1fcf0de28d0987e gimp-devel-tools-debuginfo-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: 867b072f8b0ce27f6448c649ba7386686092e7eb7ae056c18a6fc5d4e3ca4868 gimp-libs-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: 73bf904e14f0048cb909cb33a697130e305bd9c11064dac544f59a8db9baed43 gimp-libs-debuginfo-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: cb33619e91de42f93121a3a275450e852a64a807b5c04eca1522dc40a810d746 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM gimp-2.99.8-4.el9_6.7.src.rpm SHA-256: 00bf0067ec30bcd38a22fa9bf16c56e7c2829d126999efae1b303f28e5f5efe7 aarch64 gimp-2.99.8-4.el9_6.7.aarch64.rpm SHA-256: e8dbf797e28b7215d8f8f30219ae5058b156e33e8bfca4c4f7f0c8e2da4807fe gimp-debuginfo-2.99.8-4.el9_6.7.aarch64.rpm SHA-256: 7e9fe6d1e5e237c2eb10b117b180cc4f96b2922bc753b8ca46ec975f8d4432f6 gimp-debugsource-2.99.8-4.el9_6.7.aarch64.rpm SHA-256: 137b39d219af20c3ecfa7eb8f7cfa6818f1dcad40ccd5adcaef572bcad3d1e08 gimp-devel-tools-debuginfo-2.99.8-4.el9_6.7.aarch64.rpm SHA-256: 0f22e8df03b3a3a71f7713c37eae33022d37e079103c7918bf1df8d000c97e8b gimp-libs-2.99.8-4.el9_6.7.aarch64.rpm SHA-256: f4ab60a23847a1be9d7a8291772e44a1eafc728c2915f62c547e8530faac46b2 gimp-libs-debuginfo-2.99.8-4.el9_6.7.aarch64.rpm SHA-256: 688afad00d42247be6e93aa7675572482bc47c9a153ce5b4f705e5ef1dab1d68 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM gimp-2.99.8-4.el9_6.7.src.rpm SHA-256: 00bf0067ec30bcd38a22fa9bf16c56e7c2829d126999efae1b303f28e5f5efe7 ppc64le gimp-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: ccdf0ec7e3020dc8f1ce7cd63ac8837339fe6dbd86eb5a1976e55c52d758092e gimp-debuginfo-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: 0da4b17fb2a202ac6f63173186556068bf079557fb2313e4c779b1c161df1424 gimp-debugsource-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: e694b03e1beab02edf5c102bd2d15b6a5cade62bb02e6710e1fcf0de28d0987e gimp-devel-tools-debuginfo-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: 867b072f8b0ce27f6448c649ba7386686092e7eb7ae056c18a6fc5d4e3ca4868 gimp-libs-2.99.8-4.el9_6.7.ppc64le.rpm SHA-256: 73bf904e14f0048cb909cb33a697130e305bd9c11064dac544f59a8db9baed43 gimp-libs-debuginfo-2.99.8-4.el9_6.7.ppc64le