[CLSA-2025:1758825546] gimp: Fix of CVE-2025-48798
Type:
security
Severity:
Important
Release date:
2025-09-25 18:39:12 UTC
Description:
- CVE-2025-48798: fix XCF loader use-after-free issues by properly managing layer/channel resources and ensuring safe cleanup during parsing
Updated packages:
  • gimp-2.99.8-3.el9.tuxcare.els7.x86_64.rpm
    sha:0aacd6d0f451fa47b24b5998800768359525dfd3a650da14298eeb4675aaa6da
  • gimp-devel-2.99.8-3.el9.tuxcare.els7.x86_64.rpm
    sha:b582c469a455cf2f8868b957b2aec3237bf8c18704a732b67cd43c909216c57c
  • gimp-devel-tools-2.99.8-3.el9.tuxcare.els7.x86_64.rpm
    sha:b0e963eef5f37dedf6836eacbc6da045bea190545142b2bb8b8d9ee80dc5f570
  • gimp-libs-2.99.8-3.el9.tuxcare.els7.i686.rpm
    sha:d76c548ef39c81818bd61857d82ec8285d33df0ccf2a2745ef2298f232c1f079
  • gimp-libs-2.99.8-3.el9.tuxcare.els7.x86_64.rpm
    sha:4a0af54e2e5b7cf00cde2e80d00bf34c8f0d2b953c12486bdf7919162071800f
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.