{"id":"CVE-2025-10922","aliases":["ALSA-2025:21968","ALSA-2025:22417","CLSA-2025-1765012494","DEBIAN-CVE-2025-10922","DLA-4342-1","DSA-6014-1","DSA-6043-1","EUVD-2025-36716","GHSA-9p8c-493c-qp6m","OESA-2025-2362","OESA-2025-2363","OESA-2025-2364","RHSA-2025:21968","RHSA-2025:22417","RHSA-2025:22445","RHSA-2025:22496","RHSA-2025:22497","RHSA-2025:22498","RHSA-2025:22866","RHSA-2025:23857","RHSA-2026:0027","RHSA-2026:0250","RHSA-2026:0356","RLSA-2025:21968","RLSA-2025:22417","SUSE-SU-2025:4324-1","UBUNTU-CVE-2025-10922","openSUSE-SU-2025:15602-1","openSUSE-SU-2026:20055-1"],"status":"published","title":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0083,"percentile":0.5786,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2025-09-28T00:00:00Z","modified":"2026-10-29T11:32:29Z","fixes":[{"ecosystem":"Debian:12","package":"gimp","fixed_in":["2.10.34-1+deb12u4"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gimp","fixed_in":["3.0.4-3+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gimp","fixed_in":["3.0.4-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"gimp","fixed_in":["2.10.30-150400.3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"gimp","fixed_in":["2.10.30-150400.3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"gimp","fixed_in":["2.10.30-150400.3.32.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"gimp","fixed_in":["2.10.30-150400.3.32.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"gimp","fixed_in":["2.10.30-150400.3.32.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","fixed_in":["2.8.16-1ubuntu1.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gimp","fixed_in":["2.8.22-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gimp","fixed_in":["2.10.18-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gimp","fixed_in":["2.10.30-1ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gimp","fixed_in":["2.10.36-3ubuntu0.24.04.1+esm1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4070+64105a56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4070+64105a56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4070+64105a56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4070+64105a56.3"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+3952+571e801c"}]}],"bundled":7},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9.tuxcare.els8"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.34-1+deb12u4"}]}],"versions":["2.10.34-1","2.10.34-1+deb12u1","2.10.34-1+deb12u2","2.10.34-1+deb12u3"]},{"source":"osv","ecosystem":"Debian:13","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-3+deb13u1"}]}],"versions":["3.0.4-3"]},{"source":"osv","ecosystem":"Debian:14","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-6.1"}]}],"versions":["3.0.4-3","3.0.4-4","3.0.4-5","3.0.4-6"]},{"source":"osv","ecosystem":"Debian:11","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.22-4+deb11u3"}]}],"versions":["2.10.22-4","2.10.22-4+deb11u1","2.10.22-4+deb11u2"],"bundled":7},{"source":"osv","ecosystem":"Debian:13","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-3+deb13u1"}]}],"versions":["3.0.4-3"],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.34-1+deb12u4"}]}],"versions":["2.10.34-1","2.10.34-1+deb12u1","2.10.34-1+deb12u2","2.10.34-1+deb12u3"],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-4.oe2403"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-4.oe2403sp1"}]}],"bundled":5},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-4.oe2403sp2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+23719+f0b80de8.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+23749+fbc78163.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+23742+afc45a52.4"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.2.0+23816+447169fa.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.2.0+23816+447169fa.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.2.0+23816+447169fa.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.2.0+23816+447169fa.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.2.0+23816+447169fa.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.2.0+23816+447169fa.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.2.0+23816+447169fa.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.2.0+23816+447169fa.5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-24.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-24.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-24.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-24.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-24.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-24.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+23748+f275078b.3"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.1"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40033+6fd27379.3"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+1927+52edb5a0"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+1927+52edb5a0"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+1723+9bc93544"}]}],"bundled":7},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+1927+52edb5a0"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.32.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.32.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.32.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.16-1ubuntu1.1+esm1"}]}],"versions":["2.8.14-1ubuntu2","2.8.14-1.2ubuntu1","2.8.16-1ubuntu1","2.8.16-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.22-1ubuntu0.1~esm1"}]}],"versions":["2.8.20-1","2.8.20-1.1","2.8.20-2","2.8.22-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.18-1ubuntu0.1+esm1"}]}],"versions":["2.10.8-2","2.10.14-2","2.10.14-2build1","2.10.14-2ubuntu1","2.10.14-3","2.10.18-1","2.10.18-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-1ubuntu0.1+esm1"}]}],"versions":["2.10.24-2","2.10.28-1","2.10.30-1","2.10.30-1build1","2.10.30-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.36-3ubuntu0.24.04.1+esm1"}]}],"versions":["2.10.34-1","2.10.36-1","2.10.36-2","2.10.36-3build2","2.10.36-3build3","2.10.36-3ubuntu0.24.04.1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-4.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.6-bp160.1.1"}]}],"bundled":5}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"gimp","product":"gimp"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-911/","tags":["x_research-advisory","Third Party Advisory","advisory","article"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/3d909166463731e94dfe62042d76225ecfc4c1e4","tags":["vendor-advisory","Patch","advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00022.html","tags":["Mailing List","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10922","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-911"},{"url":"https://github.com/advisories/GHSA-9p8c-493c-qp6m"},{"url":"https://access.redhat.com/errata/RHSA-2025:21968","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10920","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10921","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10922","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10923","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10924","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10925","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-10934","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407188","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407191","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407192","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407194","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407199","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407200","tags":["report"]},{"url":"https://bugzilla.redhat.com/2407233","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2025-21968.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22417","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2025-22417.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1765012494.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/10xxx/CVE-2025-10922.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-10922","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2362","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10920","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10924","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10925","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2363","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2364","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407192","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2407233","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21968.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10920","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2443","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-909/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10921","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gegl/-/commit/0e68b7471dabf2800d780819c19bd5e6462f565f","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-910/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10922","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10923","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/2d2d39f3da1d0b01ca7d71ad2b7a8725ee92ed96","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-912/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10924","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2448","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-913/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10925","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2450","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-914/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-10934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10934","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/5c3e2122d53869599d77ef0f1bdece117b24fd7c","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-25-978/","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22417.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22445","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22445.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22496","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22496.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22497","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22497.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22498","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22498.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22866","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_22866.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:23857","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23857.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0027","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0027.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0250","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0250.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:0356","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0356.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:21968","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2025:22417","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20254324-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1250497","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10922","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2025-10922","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/issues/14811","tags":["report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2444","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8057-1","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10920","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10925","tags":["web"]},{"url":"https://bugzilla.suse.com/1241690","tags":["report"]},{"url":"https://bugzilla.suse.com/1250495","tags":["report"]},{"url":"https://bugzilla.suse.com/1250499","tags":["report"]},{"url":"https://bugzilla.suse.com/1250501","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-10924","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2760","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-10922","title":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.","status":"published","published":"2025-10-29T19:29:42.905Z","modified":"2026-02-26T16:56:59.083Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:32:30.9782Z"}],"euvd":[{"id":"EUVD-2025-36716","description":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.","status":"published","published":"2025-10-29T19:29:42Z","modified":"2026-02-26T16:56:59Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:25.204929Z"}],"ghsa":[{"id":"GHSA-9p8c-493c-qp6m","title":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...","description":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.","status":"published","published":"2025-10-29T21:30:33Z","modified":"2025-11-04T15:31:31Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T15:04:32.843339Z"}],"nvd":[{"id":"CVE-2025-10922","description":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.","status":"published","published":"2025-10-29T20:15:34.923Z","modified":"2026-10-19T13:10:00.11Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:11:41.607433Z"}],"osv":[{"id":"CVE-2025-10922","title":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.","status":"published","published":"2025-10-29T19:29:42.905Z","modified":"2026-10-28T10:36:38.677946064Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:44:45.712478Z"},{"id":"DEBIAN-CVE-2025-10922","description":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.","status":"published","published":"2025-10-29T20:15:34.923Z","modified":"2026-10-23T17:47:24.711436909Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:45.102284Z"},{"id":"OESA-2025-2362","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in GIMP (Image Processing Software) that has been declared as critical. The CWE definition for the vulnerability is CWE-787 (Out-of-bounds Write). The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10920)\n\nA critical vulnerability was found in GIMP (Image Processing Software) involving CWE-122 heap-based buffer overflow. Attackers can trigger buffer overflow in heap memory through specially crafted DCM files, impacting confidentiality, integrity, and availability.(CVE-2025-10922)\n\nA critical vulnerability was found in GIMP (Image Processing Software). The vulnerability involves CWE-190 integer overflow issue, where the product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Impact includes confidentiality, integrity, and availability.(CVE-2025-10923)\n\nA vulnerability was found in GIMP (Image Processing Software) (unknown version). It has been classified as critical. CWE is classifying the issue as CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. This is going to have an impact on confidentiality, integrity, and availability. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10924)\n\nA critical vulnerability was found in GIMP (Image Processing Software) (affected version not known). The issue is classified as CWE-121 (Stack-based Buffer Overflow). A stack-based buffer overflow condition occurs when the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This impacts confidentiality, integrity, and availability. Applying a patch can eliminate this problem, and the bugfix is available for download at gitlab.gnome.org.(CVE-2025-10925)","status":"published","published":"2025-10-11T11:09:26Z","modified":"2026-08-18T01:19:12.273052261Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2363","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in GIMP (Image Processing Software) that has been declared as critical. The CWE definition for the vulnerability is CWE-787 (Out-of-bounds Write). The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10920)\n\nA critical vulnerability was found in GIMP (Image Processing Software) involving CWE-122 heap-based buffer overflow. Attackers can trigger buffer overflow in heap memory through specially crafted DCM files, impacting confidentiality, integrity, and availability.(CVE-2025-10922)\n\nA critical vulnerability was found in GIMP (Image Processing Software). The vulnerability involves CWE-190 integer overflow issue, where the product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Impact includes confidentiality, integrity, and availability.(CVE-2025-10923)\n\nA vulnerability was found in GIMP (Image Processing Software) (unknown version). It has been classified as critical. CWE is classifying the issue as CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. This is going to have an impact on confidentiality, integrity, and availability. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10924)\n\nA critical vulnerability was found in GIMP (Image Processing Software) (affected version not known). The issue is classified as CWE-121 (Stack-based Buffer Overflow). A stack-based buffer overflow condition occurs when the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This impacts confidentiality, integrity, and availability. Applying a patch can eliminate this problem, and the bugfix is available for download at gitlab.gnome.org.(CVE-2025-10925)","status":"published","published":"2025-10-11T11:09:26Z","modified":"2026-08-18T01:19:11.885606467Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"OESA-2025-2364","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nA vulnerability was found in GIMP (Image Processing Software) that has been declared as critical. The CWE definition for the vulnerability is CWE-787 (Out-of-bounds Write). The product writes data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality, integrity, and availability. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10920)\n\nA critical vulnerability was found in GIMP (Image Processing Software) involving CWE-122 heap-based buffer overflow. Attackers can trigger buffer overflow in heap memory through specially crafted DCM files, impacting confidentiality, integrity, and availability.(CVE-2025-10922)\n\nA critical vulnerability was found in GIMP (Image Processing Software). The vulnerability involves CWE-190 integer overflow issue, where the product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Impact includes confidentiality, integrity, and availability.(CVE-2025-10923)\n\nA vulnerability was found in GIMP (Image Processing Software) (unknown version). It has been classified as critical. CWE is classifying the issue as CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. This is going to have an impact on confidentiality, integrity, and availability. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-10924)\n\nA critical vulnerability was found in GIMP (Image Processing Software) (affected version not known). The issue is classified as CWE-121 (Stack-based Buffer Overflow). A stack-based buffer overflow condition occurs when the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This impacts confidentiality, integrity, and availability. Applying a patch can eliminate this problem, and the bugfix is available for download at gitlab.gnome.org.(CVE-2025-10925)","status":"published","published":"2025-10-11T11:09:26Z","modified":"2026-08-18T01:19:12.173113323Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:44.957082Z"},{"id":"RHSA-2025:21968","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2025-11-25T10:06:02Z","modified":"2026-07-12T10:05:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22417","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2025-12-02T10:06:45Z","modified":"2026-07-12T10:05:38Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22445","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2025-12-02T10:06:48Z","modified":"2026-07-12T10:05:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22496","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2025-12-02T10:06:50Z","modified":"2026-07-12T10:05:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22497","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2025-12-02T10:06:51Z","modified":"2026-07-12T10:05:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22498","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2025-12-02T10:06:51Z","modified":"2026-07-12T10:05:41Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:22866","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2025-12-09T10:06:08Z","modified":"2026-07-12T10:05:45Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2025:23857","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2025-12-23T10:06:42Z","modified":"2026-07-12T10:05:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:16.589982Z"},{"id":"RHSA-2026:0027","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2026-01-05T10:12:04Z","modified":"2026-07-12T10:07:46Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2026:0250","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2026-01-08T10:17:43Z","modified":"2026-07-12T10:07:55Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RHSA-2026:0356","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2026-01-14T10:38:57Z","modified":"2026-07-12T10:07:57Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.066978Z"},{"id":"RLSA-2025:21968","title":"Important: gimp security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)\n\n* gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)\n\n* gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)\n\n* gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)\n\n* gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)\n\n* gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)\n\n* gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-11-25T09:10:47.018336Z","modified":"2025-11-25T09:49:03.414069Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"RLSA-2025:22417","title":"Important: gimp:2.8 security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)\n\n* gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)\n\n* gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)\n\n* gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)\n\n* gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)\n\n* gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)\n\n* gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-12-02T09:02:34.427267Z","modified":"2025-12-02T10:49:13.398255Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.216873Z"},{"id":"UBUNTU-CVE-2025-10922","description":"GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-27863.","status":"published","published":"2025-10-29T20:15:00Z","modified":"2026-04-22T15:29:24.592877Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:55:20.144818Z"},{"id":"ALSA-2025:21968","title":"Important: gimp security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)\n  * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)\n  * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)\n  * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)\n  * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)\n  * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)\n  * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-11-24T00:00:00Z","modified":"2026-10-29T11:32:29.014474964Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"ALSA-2025:22417","title":"Important: gimp:2.8 security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: GIMP DCM File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10922)\n  * gimp: GIMP ICNS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVE-2025-10920)\n  * gimp: GIMP WBMP File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10923)\n  * gimp: GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10921)\n  * gimp: GIMP ILBM File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10925)\n  * gimp: GIMP FF File Parsing Integer Overflow Remote Code Execution Vulnerability (CVE-2025-10924)\n  * gimp: GIMP XWD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2025-10934)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2025-12-01T00:00:00Z","modified":"2026-10-29T11:02:22.783062686Z","updated_at":"2026-11-02T15:27:53.448565Z"},{"id":"CLSA-2025-1765012494","title":"gimp: Fix of 2 CVEs","description":"- CVE-2025-10922: fix heap-based buffer overflow in DCM file parser by adding\n  safety checks and proper GError handling to prevent potential RCE\n- CVE-2025-10934: fix heap-based buffer overflow in XWD file parser by validating\n  colormap offsets to prevent potential RCE","status":"published","published":"2025-12-06T09:14:57Z","modified":"2026-06-01T00:31:30.65817719Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"DLA-4342-1","title":"gimp - security update","status":"published","published":"2025-10-22T00:00:00Z","modified":"2025-10-22T19:17:55.728884Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-6014-1","title":"gimp - security update","status":"published","published":"2025-09-28T00:00:00Z","modified":"2025-09-28T15:31:47.719276Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"DSA-6043-1","title":"gimp - security update","status":"published","published":"2025-10-28T00:00:00Z","modified":"2025-10-28T20:17:40.337859Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"openSUSE-SU-2025:15602-1","title":"gimp-3.0.4-4.1 on GA media","description":"These are all security issues fixed in the gimp-3.0.4-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-10-06T00:00:00Z","modified":"2026-03-23T04:53:59.184414Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:20055-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\nChanges in gimp:\n\nUpdate to 3.0.6:\n\n  - Security:\n\n    - During development, we received reports from the Zero Day\n      Initiative of potential security issues with some of our file\n      import plug-ins. While these issues are very unlikely to\n      occur with real files, developers like Jacob Boerema and Alx\n      Sa proactively improved security for those imports.\n      The resolved reports are:\n      - ZDI-CAN-27793\n      - ZDI-CAN-27823\n      - ZDI-CAN-27836\n      - ZDI-CAN-27878\n      - ZDI-CAN-27863\n      - ZDI-CAN-27684\n\n  - Core:\n\n    - Many false-positive build warnings have been cleaned out (and\n      proper issues fixed).\n    - Various crashes fixed.\n    - When creating a layer mask from the layer's alpha, but the\n      layer has no alpha, simply fill the mask with complete\n      opacity instead of a completely transparent layer.\n    - Various core infrastructure code reviewed, cleaned up,\n      refactored and improved, in drawable, layer and filter\n      handling code, tree view code, and more.\n    - GIMP_ICONS_LIKE_A_BOSS environment variable is not working\n      anymore (because \"gtk-menu-images\" and \"gtk-button-images\"\n      have been deprecated in GTK3 and removed in GTK4) and was\n      therefore removed.\n    - Lock Content now shows as an undo step.\n    - Add alpha channel for certain transforms.\n    - Add alpha channel on filter merge, when necessary.\n    - Filters can now be applied non-destructively on channels.\n    - Improved Photoshop brush support.\n    - After deleting a palette entry, the next entry is\n      automatically selected. This allows easily deleting several\n      entries in a row, among other usage.\n    - Resize image to layers irrespective to selections.\n    - Improved in-GUI release notes' demo script language:\n\n      - We can now set a button value to click it: \"toolbox:text,\n        tool-options:outline=1, tool-options:outline-direction\"\n      - Color selector's module names can be used as identifiers:\n        \"color-editor,color-editor:CMYK=1,color-editor:total-ink-coverage\"\n\n    - Fixed Alpha to Selection on single layers with no\n      transparency.\n    - Various code is slowly ported to newer code, preparing for\n      GTK4 port (in an unplanned future step):\n\n      - Using g_set_str() (optionally redefining it in our core\n        code to avoid bumping the GLib minimum requirement).\n      - Start using GListModel in various pieces of code, in\n        particular getting rid of more and more usage of\n        GtkTreeView when possible (as it will be deprecated with\n        GTK4).\n      - New GimpRow class for all future row widgets.\n      - Use more of G_DECLARE_DERIVABLE_TYPE and\n        G_DECLARE_FINAL_TYPE where relevant.\n      - New GimpContainerListView using a GtkListBox.\n      - New GimpRowSeparator, GimpRowSettings, GimpRowFilter and\n        GimpRowDrawableFilter widgets.\n\n    - (Experimental) GEX Format was updated.\n    - Palette import:\n\n      - Set alpha value for image palette imports.\n      - Fix Lab \u0026 CMYK ACB palette import.\n      - Add palette format filters to import dialog, making it more\n        apparent what palette formats are supported, and giving the\n        ability to hide irrelevant files.\n\n    - Improved filter actions' sensitivity to make sure they are\n      set insensitive when relevant. In particular filters which\n      cannot be run non-destructively (e.g. filters with aux\n      inputs, non-interactive filters and GEGL Graph) must be\n      insensitive when trying to run them on group layers.\n    - Fix bad axis centering on zoom out.\n    - Export better SVG when exporting paths.\n\n  - Tools:\n\n    - Text tool: make sure the default color is only changed when\n      the user confirms the color change.\n    - Foreground Selection tool: do not create a selection when no\n      strokes has been made. In particular this removes the\n      unnecessary delay which happened when switching to another\n      tool without actually stroking anything.\n    - All Transform tools: transform boundaries for preview is now\n      multi-layers aware.\n    - (Experimental) Seamless Clone tool: made to work again,\n      though it is still too slow to get out of Playground.\n\n  - Graphical User Interface:\n\n    - Various improvements to window management:\n\n      - Keep-Above windows are set with the Utility hint.\n      - Utility windows are not made transient to a parent.\n      - Transient factory dialogs follow the active display,\n        ensuring that new image windows would not hide your toolbox\n        and dock windows.\n\n    - Various CSS improvements for styling of the interface. Some\n      theme leaks were also fixed.\n    - New toggle button in Brushes and Fonts dockable, allowing\n      brush and font previews to optionally follow the color theme.\n      For instance, when using a dark theme, the brush and font\n      previews could be drawn on the theme background, using the\n      theme foreground colors. By default, these data previews are\n      still drawn as black on white.\n    - Palette grid is now drawn with the theme's background color.\n    - Consistent naming patterns on human-facing options (first\n      word only capitalized).\n    - About dialog:\n\n      - We will now display the date and time of the last check in\n        a \"Up to date as of \u003cdate\u003e at \u003ctime\u003e\" string, differing\n        from the \"Last checked on \u003cdate\u003e at \u003ctime\u003e\" string. The\n        former will be used to indicate that GIMP is indeed\n        up-to-date whereas the latter when a new version was\n        released and that you should update.\n      - We now respect the system time/date format on macOS and\n        Windows.\n\n    - The search popup won't pop up without an image.\n    - Better zoom step algorithm for data previews in container\n      popup (e.g. the brush popup in paint Tool Options).\n    - Disable animation in the Input Controller, Preferences and\n      Welcome dialogs for stack transition when animation are\n      disabled in system settings.\n    - Fixed crosshair hotspot on Windows (crosshair cursor for\n      brushes was offset with a non-100% display scale factor).\n    - Debug/CRITICAL dialog:\n\n      - Make sure it is non-modal.\n      - Follow the theme mode under Windows.\n\n    - While loading images, all widgets in the file dialog are made\n      insensitive, except for the Cancel button and the progress\n      bar.\n    - Both grid and list views can now zoom via scroll and zoom\n      gestures (it used to only work in list views).\n    - Pop an error message up on startup when GIO modules to read\n      HTTPS links are not found and that we therefore fail to load\n      the remote gimp_versions.json file. With the AppImage package\n      in particular, we depend on an environment daemon which\n      cannot be shipped in the package. So the next best thing is\n      to warn people and tell them what they should install to get\n      version checks.\n    - Welcome dialog:\n\n      - The \"Community Tutorials\" link is now shown after the\n        \"Documentation\" link.\n      - The \"Learn more\" link in Release Notes tab leads to the\n        actual release news for this version.\n\n  - Plug-ins:\n\n    - PDF export: do not draw disabled layer masks.\n    - Jigsaw: the plug-in can now draw on transparent layers.\n    - Various file format fixes and improvements: JPEG 2000 import,\n      TIFF import, DDS import, SVG import, PSP import, FITS export,\n      ICNS import, Dicom import, WBMP import, Farbfeld import, XWD\n      import, ILBM import.\n    - Sphere Designer: use spin scale instead of spin entries (the\n      latter is unusable with little horizontal space).\n    - Animation Play: frames are shown again in the playback\n      progress bar.\n    - Vala Goat Exercise: ignoring C warning in this Vala plug-in\n      as it is generated code and we cannot control it.\n    - file-gih: brush pipe selection modes now have nice,\n      translatable names.\n    - Metadata viewer: port from GtkTreeView to GtkListBox.\n    - File Raw Data: reduce Raw Data load dialogue height by moving\n      to a 2-column layout.\n    - SVG import: it is now possible to break aspect ratio with\n      specific width/height arguments, when calling the PDB\n      procedure non-interactively (from other plug-ins).\n    - Print: when run through a portal print dialog, the \"Image\n      Settings\" will be exposed as a secondary dialog, outputted\n      after the portal dialog, instead of a tab on the main print\n      dialog (because it is not possible to tweak the print dialog\n      when it is created by a portal). This will bring back usable\n      workflow of printing with GIMP when run in a sandbox (e.g.\n      Flatpak or Snap).\n    - Recompose: fixed for YCbCr decomposed images.\n    - Fixed vulnerabilities: ZDI-CAN-27684, ZDI-CAN-27863,\n      ZDI-CAN-27878, ZDI-CAN-27836, ZDI-CAN-27823, ZDI-CAN-27793.\n    - C Source and HTML export can now be run non-interactively too\n      (e.g. from other plug-ins).\n    - Map Object: fix missing spin boxes.\n    - Small Tiles: fix display lag.\n\n- CVE-2025-10925: Fix GIMP ILBM file parsing stack-based buffer overflow remote code\n  execution vulnerability. (ZDI-25-914, ZDI-CAN-27793, bsc#1250501)\n\n- CVE-2025-10922: Fix GIMP DCM file parsing heap-based buffer overflow remote code\n  execution vulnerability.  (ZDI-25-911, ZDI-CAN-27863, bsc#1250497)\n\n- CVE-2025-10920: Prevent overflow attack by checking if output \u003e= max, not just\n  output \u003e max. (ZDI-25-909, ZDI-CAN-27684, bsc#1250495)\n\n- CVE-2025-10924: Fix integer overflow while parsing FF files. (bsc#1250499)\n\n- CVE-2025-2760: A vulnerability allows remote attackers to execute arbitrary\n  code on affected installations of GIMP. The specific flaw exists\n  within parsing of XWD files. An integer overflow happens before\n  allocating a buffer. This fixed in GIMP 3.0.0.\n  https://www.gimp.org/news/2025/03/16/gimp-3-0-released\n  (bsc#1241690)\n","status":"published","published":"2026-01-16T16:13:02Z","modified":"2026-03-23T04:54:42.984186Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:4324-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2025-10922: Fixed GIMP DCM file parsing heap-based buffer overflow remote code execution vulnerability. (bsc#1250497)\n","status":"published","published":"2025-12-08T18:18:01Z","modified":"2026-02-04T04:06:32.0182Z","updated_at":"2026-11-02T15:54:00.344164Z"}]}}