CLSA-2026-1791479721
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1791479721.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1791479721
- Upstream
CVE (4)
- CVE-2026-90947
- CVE-2026-90948
- CVE-2026-92248
- CVE-2026-97185
- Published
- 2026-10-20T16:38:50Z
- Modified
- 2026-10-26T09:43:36Z
- Summary
- gimp: Fix of 10 CVEs
- Details
-
- CVE-2026-90948: compute the ICO PNG frame size and the image buffer size with g_size_checked_mul () in ico_read_png () and ico_load_image ()
- CVE-2026-90947: clamp the preset "Number of lights" to NUM_LIGHTS in the Lighting Effects load_preset_response ()
- CVE-2026-92248: bound the PSD JPEG thumbnail dimensions and compute its buffer size with g_size_checked_mul () in load_resource_1033 ()
- CVE-2026-97185: reject out-of-range vector indices in the GIMPressionist preset loader set_orient_vector () and set_size_vector ()
- References
-
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1791479721.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-44441
- https://nvd.nist.gov/vuln/detail/CVE-2023-44442
- https://nvd.nist.gov/vuln/detail/CVE-2023-44443
- https://nvd.nist.gov/vuln/detail/CVE-2023-44444
- https://nvd.nist.gov/vuln/detail/CVE-2025-48797
- https://nvd.nist.gov/vuln/detail/CVE-2025-48798
- https://nvd.nist.gov/vuln/detail/CVE-2026-90947
- https://nvd.nist.gov/vuln/detail/CVE-2026-90948
- https://nvd.nist.gov/vuln/detail/CVE-2026-92248
- https://nvd.nist.gov/vuln/detail/CVE-2026-97185
Affected packages
TuxCare:AlmaLinux:9.6 / gimp
Package
- Name
- gimp
- Purl
- pkg:rpm/tuxcare/gimp?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / gimp-devel
Package
- Name
- gimp-devel
- Purl
- pkg:rpm/tuxcare/gimp-devel?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / gimp-devel-tools
Package
- Name
- gimp-devel-tools
- Purl
- pkg:rpm/tuxcare/gimp-devel-tools?distro=almalinux-9.6