- What: Security update for GEGL 0.4
- Impact: Red Hat Enterprise Linux 9 systems affected
Red Hat Product Errata RHSA-2026:62170 - Security Advisory Issued: 2026-09-01 Updated: 2026-09-01 RHSA-2026:62170 - Security Advisory Overview Updated Packages Synopsis Important: gegl04 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gegl04 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description GEGL (Generic Graphics Library) is a graph-based image processing framework. Security Fix(es): gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing (CVE-2026-18300) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2520587 - CVE-2026-18300 gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVEs CVE-2026-18300 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM gegl04-0.4.62-1.el9_8.2.src.rpm SHA-256: 824c52ae6f09a5f3b5fcbf089d3d63d3f5b490d4b0aa9eac68b480305a32e1de x86_64 gegl04-0.4.62-1.el9_8.2.i686.rpm SHA-256: c21d5e6c3de04c43d5e20263ea40670e8142fd2e8407b581b22ce21fa00b9643 gegl04-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: 70c3e26261f7872a7326a16c2b9082914c17ef74a77ad9bcbd56442ae02ad344 gegl04-debuginfo-0.4.62-1.el9_8.2.i686.rpm SHA-256: 7e3e25fdca3c4174024865542e6264c8ebc5625cb6bae5ae16129967a9f0e416 gegl04-debuginfo-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: 69b6a882cc6a1de5ded11165ac9cfdbe1f5ceb536d01f0a0e6780961a8bdae78 gegl04-debugsource-0.4.62-1.el9_8.2.i686.rpm SHA-256: 1933bae10c6edeb82491b2fc191d1a67e5b42ca77ee14d27fed78e8c0fc47c20 gegl04-debugsource-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: 96cb0fa9c94ad5afeef8ef97ef28ecd99062a52bd85183e66d4bcac4d9f41d2d gegl04-devel-docs-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: ea56b33a2dd3db70f317448a04cfc441034a3c1db51bcc64cf3f4ed8df9a42ae gegl04-tools-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: e74becc209d176b84ccc2aa305591e403a54474866f3cea3304417f26b78efa6 gegl04-tools-debuginfo-0.4.62-1.el9_8.2.i686.rpm SHA-256: 6cb9c95de6f969c029538b2cbd1445de3c8ffe24bc7a4f6c9c3d33300c706e5c gegl04-tools-debuginfo-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: bf52c5085b7979db4e898340c3ea62e6d1b16e8b71c1ea5d74fac6f6c615c231 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM gegl04-0.4.62-1.el9_8.2.src.rpm SHA-256: 824c52ae6f09a5f3b5fcbf089d3d63d3f5b490d4b0aa9eac68b480305a32e1de x86_64 gegl04-0.4.62-1.el9_8.2.i686.rpm SHA-256: c21d5e6c3de04c43d5e20263ea40670e8142fd2e8407b581b22ce21fa00b9643 gegl04-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: 70c3e26261f7872a7326a16c2b9082914c17ef74a77ad9bcbd56442ae02ad344 gegl04-debuginfo-0.4.62-1.el9_8.2.i686.rpm SHA-256: 7e3e25fdca3c4174024865542e6264c8ebc5625cb6bae5ae16129967a9f0e416 gegl04-debuginfo-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: 69b6a882cc6a1de5ded11165ac9cfdbe1f5ceb536d01f0a0e6780961a8bdae78 gegl04-debugsource-0.4.62-1.el9_8.2.i686.rpm SHA-256: 1933bae10c6edeb82491b2fc191d1a67e5b42ca77ee14d27fed78e8c0fc47c20 gegl04-debugsource-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: 96cb0fa9c94ad5afeef8ef97ef28ecd99062a52bd85183e66d4bcac4d9f41d2d gegl04-devel-docs-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: ea56b33a2dd3db70f317448a04cfc441034a3c1db51bcc64cf3f4ed8df9a42ae gegl04-tools-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: e74becc209d176b84ccc2aa305591e403a54474866f3cea3304417f26b78efa6 gegl04-tools-debuginfo-0.4.62-1.el9_8.2.i686.rpm SHA-256: 6cb9c95de6f969c029538b2cbd1445de3c8ffe24bc7a4f6c9c3d33300c706e5c gegl04-tools-debuginfo-0.4.62-1.el9_8.2.x86_64.rpm SHA-256: bf52c5085b7979db4e898340c3ea62e6d1b16e8b71c1ea5d74fac6f6c615c231 Red Hat Enterprise Linux for IBM z Systems 9 SRPM gegl04-0.4.62-1.el9_8.2.src.rpm SHA-256: 824c52ae6f09a5f3b5fcbf089d3d63d3f5b490d4b0aa9eac68b480305a32e1de s390x gegl04-0.4.62-1.el9_8.2.s390x.rpm SHA-256: a02c035e556918e4474af84fc8cf52d55df3ec73ac2712352f7c9cc1022fe639 gegl04-debuginfo-0.4.62-1.el9_8.2.s390x.rpm SHA-256: e021f14ac7d99263fa0fc52bf9a39ee580c4c4d821444a9378d204c24286566b gegl04-debugsource-0.4.62-1.el9_8.2.s390x.rpm SHA-256: d18fb5d49f205c1b53975e46e1761f1fef5b13e4a5dffeafe6464bcb42e5329b gegl04-devel-docs-0.4.62-1.el9_8.2.s390x.rpm SHA-256: b1aac2d7a553868da39383ce14c0c3fb584c0d2bd1834089bc5e5023457f2cb5 gegl04-tools-0.4.62-1.el9_8.2.s390x.rpm SHA-256: 9bc249e35569414eb5edaac9de66d258a6ba753be94117bc65eb69f39bd854c8 gegl04-tools-debuginfo-0.4.62-1.el9_8.2.s390x.rpm SHA-256: 49cf65f3d68b867317d042ee68bf71d57df8396aef78a11563d55a81fa15c98f Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM gegl04-0.4.62-1.el9_8.2.src.rpm SHA-256: 824c52ae6f09a5f3b5fcbf089d3d63d3f5b490d4b0aa9eac68b480305a32e1de s390x gegl04-0.4.62-1.el9_8.2.s390x.rpm SHA-256: a02c035e556918e4474af84fc8cf52d55df3ec73ac2712352f7c9cc1022fe639 gegl04-debuginfo-0.4.62-1.el9_8.2.s390x.rpm SHA-256: e021f14ac7d99263fa0fc52bf9a39ee580c4c4d821444a9378d204c24286566b gegl04-debugsource-0.4.62-1.el9_8.2.s390x.rpm SHA-256: d18fb5d49f205c1b53975e46e1761f1fef5b13e4a5dffeafe6464bcb42e5329b gegl04-devel-docs-0.4.62-1.el9_8.2.s390x.rpm SHA-256: b1aac2d7a553868da39383ce14c0c3fb584c0d2bd1834089bc5e5023457f2cb5 gegl04-tools-0.4.62-1.el9_8.2.s390x.rpm SHA-256: 9bc249e35569414eb5edaac9de66d258a6ba753be94117bc65eb69f39bd854c8 gegl04-tools-debuginfo-0.4.62-1.el9_8.2.s390x.rpm SHA-256: 49cf65f3d68b867317d042ee68bf71d57df8396aef78a11563d55a81fa15c98f Red Hat Enterprise Linux for Power, little endian 9 SRPM gegl04-0.4.62-1.el9_8.2.src.rpm SHA-256: 824c52ae6f09a5f3b5fcbf089d3d63d3f5b490d4b0aa9eac68b480305a32e1de ppc64le gegl04-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 69c8dc1ca96aa634db052ba641c4c452dfe1690b460a2cc4d7fe486998281558 gegl04-debuginfo-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 35921ba7bab1ee97e00feb863579f8055ee5b333d09af07de1cac94e1a68f8d1 gegl04-debugsource-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 0d6bc5ce5db863bc7f152972caba0c289494b2b1132735171bad9ef062c2e385 gegl04-devel-docs-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: e50e7110fec287d22048e1ae8a2c4c6e0277b568bac118411a501bcac1460296 gegl04-tools-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 5912f9309c531021c02881f23dc7185482fecb99f602700501605420d36981c2 gegl04-tools-debuginfo-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 9b09507d8c163aab52e1ccffa06424e2086e681763f6d4eb61ef0641ecbf9909 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM gegl04-0.4.62-1.el9_8.2.src.rpm SHA-256: 824c52ae6f09a5f3b5fcbf089d3d63d3f5b490d4b0aa9eac68b480305a32e1de ppc64le gegl04-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 69c8dc1ca96aa634db052ba641c4c452dfe1690b460a2cc4d7fe486998281558 gegl04-debuginfo-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 35921ba7bab1ee97e00feb863579f8055ee5b333d09af07de1cac94e1a68f8d1 gegl04-debugsource-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 0d6bc5ce5db863bc7f152972caba0c289494b2b1132735171bad9ef062c2e385 gegl04-devel-docs-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: e50e7110fec287d22048e1ae8a2c4c6e0277b568bac118411a501bcac1460296 gegl04-tools-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 5912f9309c531021c02881f23dc7185482fecb99f602700501605420d36981c2 gegl04-tools-debuginfo-0.4.62-1.el9_8.2.ppc64le.rpm SHA-256: 9b09507d8c163aab52e1ccffa06424e2086e681763f6d4eb61ef0641ecbf9909 Red Hat Enterprise Linux for ARM 64 9 SRPM gegl04-0.4.62-1.el9_8.2.src.rpm SHA-256: 824c52ae6f09a5f3b5fcbf089d3d63d3f5b490d4b0aa9eac68b480305a32e1de aarch64 gegl04-0.4.62-1.el9_8.2.aarch64.rpm SHA-256: e050c1683533e83e50f0a13769227cb45c5980ae501d50dc80020f70caf8e519 gegl04-debuginfo-0.4.62-1.el9_8.2.aarch64.rpm SHA-256: a7ee3646e4a5fbe929d140ec36feb21de9efb9481a17594f8e1fc600f3a50493 gegl04-debugsource-0.4.62-1.el9_8.2.aarch64.rpm SHA-256: 26d45e41b4f8ea1e1ef64e18dae333ce6b3fdab1a11f4927e59e568cb523107b gegl04-devel-docs-0.4.62-1.el9_8.2.aarch64.rpm SHA-256: c5c95f1681f0a8a0960aa6fe10afc8ca0ee9ac1104717cdc0d0e9273b5e68fe8 gegl04-tools-0.4.62-1.el9_8.2.aarch64.rpm SHA-256: 3d37e74a1ccfdbacfb4dc75a298820ed072d9eaff33e1667f33