Red Hat Product Errata RHSA-2026:38496 - Security Advisory Issued: 2026-07-13 Updated: 2026-07-13 RHSA-2026:38496 - Security Advisory Overview Updated Packages Synopsis Important: gimp security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gimp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fix(es): gimp: gimp: Heap buffer overflow in read_channel_data() (CVE-2026-58379) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Fixes BZ - 2495997 - CVE-2026-58379 gimp: gimp: Heap buffer overflow in read_channel_data() CVEs CVE-2026-58379 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95 x86_64 gimp-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8e408e8c60bd637071c344768d5f705f3f43c8f320a1e6bb605be8064b25c9b0 gimp-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 826730240a5a5d7fafefcb16bb4dd606d54f632282c95f83bf9ac900a3baefab gimp-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8a35f4cc3a22b2e8b03d74aeda363c2d88034406a2a7477bd5dbb489127d2e00 gimp-debugsource-3.0.4-4.el9_8.5.i686.rpm SHA-256: 1485c84d0bccba61e3e3a4f78d8c9c99ba49e207072547cff5b976be3112fa57 gimp-debugsource-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 7a80d32c1a203b1f2ca0c2890e5f5317a711ab004269597eb9fa014ac542891a gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 0e3d514a0f2cbcc172a908eb042cc382a1256cc8269fe30481109e43ba403cbc gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 3ab107347e66a7c690ad953d29800efd131bcf6f6738583aadd6c35c778b04bc gimp-libs-3.0.4-4.el9_8.5.i686.rpm SHA-256: ba06a04e4f8a99fb3ff0eda80fc809a33c979cd2e7ef4db74d771b520f1ac520 gimp-libs-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 36afde427b0db2edfd6efd1390ca10e0ebcfb187c7d51f7c0419a799328f6d3d gimp-libs-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: aa772c6ba15e6b6fa1c913b005e9ad2f2c5fa237fccbeea81d201904278e5e73 gimp-libs-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 6c2af26c7718f324a425bb75439a66b6a2280ce9955b5568b942ee146dc29f46 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95 x86_64 gimp-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8e408e8c60bd637071c344768d5f705f3f43c8f320a1e6bb605be8064b25c9b0 gimp-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 826730240a5a5d7fafefcb16bb4dd606d54f632282c95f83bf9ac900a3baefab gimp-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 8a35f4cc3a22b2e8b03d74aeda363c2d88034406a2a7477bd5dbb489127d2e00 gimp-debugsource-3.0.4-4.el9_8.5.i686.rpm SHA-256: 1485c84d0bccba61e3e3a4f78d8c9c99ba49e207072547cff5b976be3112fa57 gimp-debugsource-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 7a80d32c1a203b1f2ca0c2890e5f5317a711ab004269597eb9fa014ac542891a gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: 0e3d514a0f2cbcc172a908eb042cc382a1256cc8269fe30481109e43ba403cbc gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 3ab107347e66a7c690ad953d29800efd131bcf6f6738583aadd6c35c778b04bc gimp-libs-3.0.4-4.el9_8.5.i686.rpm SHA-256: ba06a04e4f8a99fb3ff0eda80fc809a33c979cd2e7ef4db74d771b520f1ac520 gimp-libs-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 36afde427b0db2edfd6efd1390ca10e0ebcfb187c7d51f7c0419a799328f6d3d gimp-libs-debuginfo-3.0.4-4.el9_8.5.i686.rpm SHA-256: aa772c6ba15e6b6fa1c913b005e9ad2f2c5fa237fccbeea81d201904278e5e73 gimp-libs-debuginfo-3.0.4-4.el9_8.5.x86_64.rpm SHA-256: 6c2af26c7718f324a425bb75439a66b6a2280ce9955b5568b942ee146dc29f46 Red Hat Enterprise Linux for Power, little endian 9 SRPM gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95 ppc64le gimp-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: cdf3fdd3a15b18433c7446547ccd0f9dacd237c9b39c36d8e0a974dce6937a87 gimp-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 30e7dc5d14540f41f9ba503c0dc082641cab3134d8d0bf7daf27d8cf00fc790a gimp-debugsource-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 71f6a2d9f8177dd34c9bc4cdd17f3cdd23741ba17e03a18f6902f03770e80f2c gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: a10e1156ce6cc2e78f67f530a875de6c5fd265deaacc6fa37be5c247a33b4f8b gimp-libs-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: ebb6709d7ba9c470a7465c155d7bed0f447f038da345f062438fb452e2e4bc8c gimp-libs-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 77a70bc0ea5dfeaeba2bf74213f856f8203fcc6a422e883acbca31e8c4eaace1 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95 ppc64le gimp-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: cdf3fdd3a15b18433c7446547ccd0f9dacd237c9b39c36d8e0a974dce6937a87 gimp-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 30e7dc5d14540f41f9ba503c0dc082641cab3134d8d0bf7daf27d8cf00fc790a gimp-debugsource-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 71f6a2d9f8177dd34c9bc4cdd17f3cdd23741ba17e03a18f6902f03770e80f2c gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: a10e1156ce6cc2e78f67f530a875de6c5fd265deaacc6fa37be5c247a33b4f8b gimp-libs-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: ebb6709d7ba9c470a7465c155d7bed0f447f038da345f062438fb452e2e4bc8c gimp-libs-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 77a70bc0ea5dfeaeba2bf74213f856f8203fcc6a422e883acbca31e8c4eaace1 Red Hat Enterprise Linux for ARM 64 9 SRPM gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95 aarch64 gimp-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: bb14427f7e4a0e864bab6ddcd202693b9b277c30a38e43eaefca502495c9fbb6 gimp-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 5a22b87fb4717f91e19815571389ca71e472ba699df4b083e3a756b41922e8ce gimp-debugsource-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 708419d980ac665497663dbcfd5588eb7f4c2fb6b6d5a198d832644cb198979e gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 6b17d65cc7d3da67c10bde30dff98327117fbc4101fd2147c045e574c8da6b4b gimp-libs-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 587b6665894974751967145e11c78cb2cde379091291a5e6d623ae2d4066f3bc gimp-libs-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 734507d7a0c513b2bc27437859776c89822593b216281049deee9f3cd2f84875 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95 aarch64 gimp-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: bb14427f7e4a0e864bab6ddcd202693b9b277c30a38e43eaefca502495c9fbb6 gimp-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 5a22b87fb4717f91e19815571389ca71e472ba699df4b083e3a756b41922e8ce gimp-debugsource-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 708419d980ac665497663dbcfd5588eb7f4c2fb6b6d5a198d832644cb198979e gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 6b17d65cc7d3da67c10bde30dff98327117fbc4101fd2147c045e574c8da6b4b gimp-libs-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 587b6665894974751967145e11c78cb2cde379091291a5e6d623ae2d4066f3bc gimp-libs-debuginfo-3.0.4-4.el9_8.5.aarch64.rpm SHA-256: 734507d7a0c513b2bc27437859776c89822593b216281049deee9f3cd2f84875 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM gimp-3.0.4-4.el9_8.5.src.rpm SHA-256: ef5ebb15094d1485c8450c5000581c329850138bdd450cbfdb8c0bc92e437b95 ppc64le gimp-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: cdf3fdd3a15b18433c7446547ccd0f9dacd237c9b39c36d8e0a974dce6937a87 gimp-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 30e7dc5d14540f41f9ba503c0dc082641cab3134d8d0bf7daf27d8cf00fc790a gimp-debugsource-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 71f6a2d9f8177dd34c9bc4cdd17f3cdd23741ba17e03a18f6902f03770e80f2c gimp-devel-tools-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: a10e1156ce6cc2e78f67f530a875de6c5fd265deaacc6fa37be5c247a33b4f8b gimp-libs-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: ebb6709d7ba9c470a7465c155d7bed0f447f038da345f062438fb452e2e4bc8c gimp-libs-debuginfo-3.0.4-4.el9_8.5.ppc64le.rpm SHA-256: 77a70bc0ea5dfeaeba2bf74213f856f8203fcc6a422e883acbca31e8c4eaace1 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM gi