Red Hat Product Errata RHSA-2026:25907 - Security Advisory Issued: 2026-06-15 Updated: 2026-06-15 RHSA-2026:25907 - Security Advisory Overview Updated Packages Synopsis Important: gimp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gimp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887) gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154) gimp: GIMP: Remote Code Execution via malicious JP2 file parsing (CVE-2026-4152) GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150) gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2451669 - CVE-2026-4887 gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image BZ - 2457530 - CVE-2026-4154 gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow BZ - 2457533 - CVE-2026-4152 gimp: GIMP: Remote Code Execution via malicious JP2 file parsing BZ - 2457535 - CVE-2026-4150 GIMP: GIMP: Arbitrary code execution via specially crafted PSD file BZ - 2457536 - CVE-2026-4153 gimp: GIMP: Remote Code Execution via PSP file parsing CVEs CVE-2026-4150 CVE-2026-4152 CVE-2026-4153 CVE-2026-4154 CVE-2026-4887 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM gimp-2.99.8-4.el9_4.6.src.rpm SHA-256: 660070e656017ee9c03729809ce0c5f809fcd5ce5d81ca566eeb9e71c6739637 x86_64 gimp-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: 0c47d09263227496f38c4879f57c00822c2569b28a76ded8fffc9bc4ea7be4f4 gimp-debuginfo-2.99.8-4.el9_4.6.i686.rpm SHA-256: b83d70464e5a522a49d5f5781ddcd5dacd5eb34307719b0456d6e1ad032ddd14 gimp-debuginfo-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: de98ecc3af4b4bdbe03cd1abd5a2526776200d7d3e38d870ff477a5bd94825aa gimp-debugsource-2.99.8-4.el9_4.6.i686.rpm SHA-256: 0fb6d719d9490871d1726308d56d0f6314109beeb81d353012cf55cd488e1d09 gimp-debugsource-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: fc5cd1dc98bd80db356b3bcd6d80aef5e19debd56619d0e94c471e6473ce0cf6 gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.i686.rpm SHA-256: def02fa0071c05942f0808d749f0a16f3007f8a1ccf0acb2c5ee8ffefe5cb87f gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: 71e12337f1e01e17857034cdd604872fa4d67e999344c876ddbe97608ac0d621 gimp-libs-2.99.8-4.el9_4.6.i686.rpm SHA-256: cc29a13df108a5a9590f5a5d2992d8b68dc72021561578236bf3db12279a3a91 gimp-libs-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: 59998ce7e204ba6524ad87fa5a03f6dfc4adddc71ea891d5e9d3e5ff5d0c8a51 gimp-libs-debuginfo-2.99.8-4.el9_4.6.i686.rpm SHA-256: 97baaf67266ef99e4f133db22b0d87518f230ca1dc359176642d95dc661d4582 gimp-libs-debuginfo-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: d0975fd66ff166ed415a1b3648700600e94ab88674929a67233fb126546935ea Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM gimp-2.99.8-4.el9_4.6.src.rpm SHA-256: 660070e656017ee9c03729809ce0c5f809fcd5ce5d81ca566eeb9e71c6739637 ppc64le gimp-2.99.8-4.el9_4.6.ppc64le.rpm SHA-256: fe4951d0a52a6937177428e9547e067aac53c1b6c7f182b3631c40c9479810ad gimp-debuginfo-2.99.8-4.el9_4.6.ppc64le.rpm SHA-256: bf51bd234570d496107df3ceb517c8a4e1c6fb8900ab106b82c8aaf17b0664a3 gimp-debugsource-2.99.8-4.el9_4.6.ppc64le.rpm SHA-256: 87a5036f5700f004bc5de3442c7ed398b5bd99f2c3eb41b169e8eb2e04d8772c gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.ppc64le.rpm SHA-256: 4b8178928e650eddc49ccd56be5a7ae42e4701d5b912badc34031666a999d816 gimp-libs-2.99.8-4.el9_4.6.ppc64le.rpm SHA-256: e5a4350b43f7ff35ed8be1b21d24bf1cfa25c302e8b0a00d6011313a4089ad66 gimp-libs-debuginfo-2.99.8-4.el9_4.6.ppc64le.rpm SHA-256: 400f63402b516eaa5d1c94e3369c6c3e55d59aac66d866b565b270714aa35eb1 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM gimp-2.99.8-4.el9_4.6.src.rpm SHA-256: 660070e656017ee9c03729809ce0c5f809fcd5ce5d81ca566eeb9e71c6739637 x86_64 gimp-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: 0c47d09263227496f38c4879f57c00822c2569b28a76ded8fffc9bc4ea7be4f4 gimp-debuginfo-2.99.8-4.el9_4.6.i686.rpm SHA-256: b83d70464e5a522a49d5f5781ddcd5dacd5eb34307719b0456d6e1ad032ddd14 gimp-debuginfo-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: de98ecc3af4b4bdbe03cd1abd5a2526776200d7d3e38d870ff477a5bd94825aa gimp-debugsource-2.99.8-4.el9_4.6.i686.rpm SHA-256: 0fb6d719d9490871d1726308d56d0f6314109beeb81d353012cf55cd488e1d09 gimp-debugsource-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: fc5cd1dc98bd80db356b3bcd6d80aef5e19debd56619d0e94c471e6473ce0cf6 gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.i686.rpm SHA-256: def02fa0071c05942f0808d749f0a16f3007f8a1ccf0acb2c5ee8ffefe5cb87f gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: 71e12337f1e01e17857034cdd604872fa4d67e999344c876ddbe97608ac0d621 gimp-libs-2.99.8-4.el9_4.6.i686.rpm SHA-256: cc29a13df108a5a9590f5a5d2992d8b68dc72021561578236bf3db12279a3a91 gimp-libs-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: 59998ce7e204ba6524ad87fa5a03f6dfc4adddc71ea891d5e9d3e5ff5d0c8a51 gimp-libs-debuginfo-2.99.8-4.el9_4.6.i686.rpm SHA-256: 97baaf67266ef99e4f133db22b0d87518f230ca1dc359176642d95dc661d4582 gimp-libs-debuginfo-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: d0975fd66ff166ed415a1b3648700600e94ab88674929a67233fb126546935ea Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM gimp-2.99.8-4.el9_4.6.src.rpm SHA-256: 660070e656017ee9c03729809ce0c5f809fcd5ce5d81ca566eeb9e71c6739637 aarch64 gimp-2.99.8-4.el9_4.6.aarch64.rpm SHA-256: 0cad26876f2b6090fa74776786f8b100b271662ac33a883f9aa2fe3dc5854bf7 gimp-debuginfo-2.99.8-4.el9_4.6.aarch64.rpm SHA-256: b2a44e0f5b88cf112c1a41b66cd14f8d6bddb5900c7114f95c09057f44888f4d gimp-debugsource-2.99.8-4.el9_4.6.aarch64.rpm SHA-256: e39acd98a08dc52ae3c874bbe759afeb1b7db38cdeca52dfe5e5fdf844c5cf85 gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.aarch64.rpm SHA-256: 7a8bd43d5c451f6d8cac272ecc0c00e53e7cd4133953eab0b48fc937b1672acf gimp-libs-2.99.8-4.el9_4.6.aarch64.rpm SHA-256: ecefceddfc193e0b1539a1d67a8e62979e94541eb028b8fe596d049f9040a00f gimp-libs-debuginfo-2.99.8-4.el9_4.6.aarch64.rpm SHA-256: 17253f7d8238b94239e8310a8a28472c586e8e44326194e0fa72f9ab4388ea5c Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM gimp-2.99.8-4.el9_4.6.src.rpm SHA-256: 660070e656017ee9c03729809ce0c5f809fcd5ce5d81ca566eeb9e71c6739637 s390x gimp-2.99.8-4.el9_4.6.s390x.rpm SHA-256: 3445e021e65c1018feb840713557c2f36bd680cf2a0109fd6598ff6615b76555 gimp-debuginfo-2.99.8-4.el9_4.6.s390x.rpm SHA-256: 3eed565a7cc136a90608dc8f6c4b2dc0bcf1ed907a721c344cf685412a9163fe gimp-debugsource-2.99.8-4.el9_4.6.s390x.rpm SHA-256: 7b2027c6fa6221dd7719c5a044a3da65ca29f3356510492cc7271edd1d691fe9 gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.s390x.rpm SHA-256: 7b4f248a936b11051f18a4121af89b995f9cd1d21ebd95b00528a6bdc42e5683 gimp-libs-2.99.8-4.el9_4.6.s390x.rpm SHA-256: 00e579a5d9a966d28053dc6426d0269d4776d3a235df9faad6fc716787782e04 gimp-libs-debuginfo-2.99.8-4.el9_4.6.s390x.rpm SHA-256: 5b65190954656bf4f7f407c8567920266bfa537f6718a49417070e7cd627743c Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM gimp-2.99.8-4.el9_4.6.src.rpm SHA-256: 660070e656017ee9c03729809ce0c5f809fcd5ce5d81ca566eeb9e71c6739637 x86_64 gimp-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: 0c47d09263227496f38c4879f57c00822c2569b28a76ded8fffc9bc4ea7be4f4 gimp-debuginfo-2.99.8-4.el9_4.6.i686.rpm SHA-256: b83d70464e5a522a49d5f5781ddcd5dacd5eb34307719b0456d6e1ad032ddd14 gimp-debuginfo-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: de98ecc3af4b4bdbe03cd1abd5a2526776200d7d3e38d870ff477a5bd94825aa gimp-debugsource-2.99.8-4.el9_4.6.i686.rpm SHA-256: 0fb6d719d9490871d1726308d56d0f6314109beeb81d353012cf55cd488e1d09 gimp-debugsource-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: fc5cd1dc98bd80db356b3bcd6d80aef5e19debd56619d0e94c471e6473ce0cf6 gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.i686.rpm SHA-256: def02fa0071c05942f0808d749f0a16f3007f8a1ccf0acb2c5ee8ffefe5cb87f gimp-devel-tools-debuginfo-2.99.8-4.el9_4.6.x86_64.rpm SHA-256: 71e12337f1e01e17857034cdd604872fa4d67e999344c876ddbe97608ac0d621 gimp-libs-2.99.8-4.el9_4.6.i686.rpm SHA-256: cc29a13df108a5a9590f5a5d2992d8b68dc72021561578236bf3db12279a3a91 gimp-libs-2.99.