{"id":"CVE-2026-4153","aliases":["ALSA-2026:16484","ALSA-2026:17533","ALSA-2026:19362","CLSA-2026-1778860714","CLSA-2026-1778861508","DEBIAN-CVE-2026-4153","EUVD-2026-21635","GHSA-rr9p-8245-3f99","OESA-2026-1955","OESA-2026-1956","OESA-2026-1957","OESA-2026-1958","OESA-2026-2881","RHSA-2026:16484","RHSA-2026:17533","RHSA-2026:19362","RHSA-2026:20552","RHSA-2026:20553","RHSA-2026:20554","RHSA-2026:20691","RHSA-2026:25899","RHSA-2026:25901","RHSA-2026:25907","RHSA-2026:26168","RLSA-2026:16484","RLSA-2026:17533","SUSE-SU-2026:1193-1","UBUNTU-CVE-2026-4153","openSUSE-SU-2026:20428-1"],"status":"published","title":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00663,"percentile":0.51982,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120","CWE-122","CWE-787"],"published":"2026-03-25T14:24:42Z","modified":"2026-10-29T11:32:32Z","fixes":[{"ecosystem":"Debian:12","package":"gimp","fixed_in":["2.10.34-1+deb12u10"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"gimp","fixed_in":["3.0.4-3+deb13u8"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"gimp","fixed_in":["3.2.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4175+c208a0bf.6"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4175+c208a0bf.6"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4175+c208a0bf.6"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module_el8.10.0+4175+c208a0bf.6"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4175+c208a0bf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4137+2d0d25cf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4175+c208a0bf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4175+c208a0bf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4137+2d0d25cf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+3952+571e801c"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4137+2d0d25cf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.28.7-5.module_el8.10.0+4175+c208a0bf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-25.module_el8.9.0+3725+d1441900"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+3952+571e801c"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+4175+c208a0bf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+4175+c208a0bf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+3952+571e801c"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.16.3-7.module_el8.10.0+4137+2d0d25cf"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"AlmaLinux:9","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.2.tuxcare.els11"}]}],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.34-1+deb12u10"}]}],"versions":["2.10.34-1","2.10.34-1+deb12u1","2.10.34-1+deb12u2","2.10.34-1+deb12u3","2.10.34-1+deb12u4","2.10.34-1+deb12u5","2.10.34-1+deb12u6","2.10.34-1+deb12u7","2.10.34-1+deb12u8","2.10.34-1+deb12u9"]},{"source":"osv","ecosystem":"Debian:13","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-3+deb13u8"}]}],"versions":["3.0.4-3","3.0.4-3+deb13u1","3.0.4-3+deb13u2","3.0.4-3+deb13u3","3.0.4-3+deb13u4","3.0.4-3+deb13u5","3.0.4-3+deb13u6","3.0.4-3+deb13u7"]},{"source":"osv","ecosystem":"Debian:14","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.0-1"}]}],"versions":["3.0.4-3","3.0.4-4","3.0.4-5","3.0.4-6","3.0.4-6.1","3.0.4-6.2","3.0.6-1","3.2.0~RC2-1","3.2.0~RC2-2","3.2.0~RC2-3","3.2.0~RC2-3.1","3.2.0~RC2-3.2","3.2.0~RC2-3.3","3.2.0~RC3-1"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-13.oe2403"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-13.oe2403sp1"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-13.oe2403sp2"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-13.oe2403sp3"}]}],"bundled":4},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.6-23.oe2003sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+21228+8e80d31d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+22676+becd68d6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-4.el9_8.4"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-16.module+el8.4.0+24320+2aeffe15.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-18.module+el8.6.0+24319+86704323.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.8.0+24316+5c5e4d76.7"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygobject2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-4.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-codegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"pygtk2-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.4.0+9382+ff08b506"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-cairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-cairo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-cairo-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"python2-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-6.module+el8+2760+3d7d61b2"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-3.el9_0.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_2.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_6.7"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gimp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gimp-devel-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"gimp-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.99.8-4.el9_4.6"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"gimp-devel-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-1.el7_9.6"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:9","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.0.4-1.el9_7.5"}]}],"bundled":6},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40075+a21479b4.4"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40134+eab491b1.5"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+1927+52edb5a0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+1998+a08ccc48.2"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:2.8.22-26.module+el8.10.0+40033+6fd27379.3"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pygobject2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.7-5.module+el8.10.0+1927+52edb5a0"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"pygtk2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.24.0-25.module+el8.9.0+1723+9bc93544"}]}],"bundled":4},{"source":"osv","ecosystem":"Rocky Linux:8","package":"python2-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.16.3-7.module+el8.10.0+1927+52edb5a0"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.50.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP7","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.50.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.30-150400.3.50.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.14-1ubuntu2","2.8.14-1.2ubuntu1","2.8.16-1ubuntu1","2.8.16-1ubuntu1.1","2.8.16-1ubuntu1.1+esm1","2.8.16-1ubuntu1.1+esm2","2.8.16-1ubuntu1.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.20-1","2.8.20-1.1","2.8.20-2","2.8.22-1","2.8.22-1ubuntu0.1~esm1","2.8.22-1ubuntu0.1~esm2","2.8.22-1ubuntu0.1~esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.8-2","2.10.14-2","2.10.14-2build1","2.10.14-2ubuntu1","2.10.14-3","2.10.18-1","2.10.18-1ubuntu0.1","2.10.18-1ubuntu0.1+esm1","2.10.18-1ubuntu0.1+esm2","2.10.18-1ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.24-2","2.10.28-1","2.10.30-1","2.10.30-1build1","2.10.30-1ubuntu0.1","2.10.30-1ubuntu0.1+esm1","2.10.30-1ubuntu0.1+esm2","2.10.30-1ubuntu0.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.34-1","2.10.36-1","2.10.36-2","2.10.36-3build2","2.10.36-3build3","2.10.36-3ubuntu0.24.04.1","2.10.36-3ubuntu0.24.04.1+esm1","2.10.36-3ubuntu0.24.04.1+esm2","2.10.36-3ubuntu0.24.04.1+esm3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.2-1","3.0.2-2","3.0.2-3","3.0.2-3.1","3.0.4-1","3.0.4-2","3.0.4-3","3.0.4-5","3.0.4-6","3.0.4-6.1"]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"gimp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.8-bp160.3.1"}]}],"bundled":4}],"products":[{"vendor":"gimp","product":"gimp"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-220/","tags":["x_research-advisory","Third Party Advisory","advisory","article","report"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/98cb1371fd4e22cca75017ea3252dc32fc218712","tags":["vendor-advisory","Patch","advisory","article","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4153","tags":["vdb-entry","x_refsource_REDHAT","report","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457536","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4153.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:26168","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:17533","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20552","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20553","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20554","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:20691","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25899","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25907","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25901","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16484","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19362","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4153","tags":["advisory"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-220"},{"url":"https://github.com/advisories/GHSA-rr9p-8245-3f99"},{"url":"https://access.redhat.com/security/cve/CVE-2026-4150","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4151","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4152","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4154","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-4887","tags":["report"]},{"url":"https://bugzilla.redhat.com/2451669","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457530","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457532","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457533","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457535","tags":["report"]},{"url":"https://bugzilla.redhat.com/2457536","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-16484.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-17533.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19362.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778860714.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778861508.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4153.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-4153","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4151","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4154","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1956","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1957","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1958","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2881","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32990","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2451669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2457535","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16484.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4150","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/00afdabdadeb5457fd897878b1e5aebc3780af10","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-217/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4151","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/09e5459de913172fc51da3bd6b6adc533acd368e","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-218/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4152","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/f64c9c23ba3c37dc7b875a9fb477c23953b4666e","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-219/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4153","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4154","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/commit/2e7ed91793792d9e980b2df4c829e9aa60459253","tags":["article"]},{"url":"https://www.zerodayinitiative.com/advisories/ZDI-26-221/","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-4887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4887","tags":["advisory"]},{"url":"https://gitlab.gnome.org/GNOME/gimp/-/issues/15960","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17533.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19362.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20552.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20553.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20554.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20691.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25899.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25901.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25907.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_26168.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:16484","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:17533","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261193-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259979","tags":["report"]},{"url":"https://bugzilla.suse.com/1259984","tags":["report"]},{"url":"https://bugzilla.suse.com/1259986","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4150","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4153","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4154","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2026-4153","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259983","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-4151","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2026-4153","title":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.","status":"published","published":"2026-04-11T00:16:01.848Z","modified":"2026-07-15T00:59:16.354Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-122","CWE-120"],"updated_at":"2026-11-02T14:19:59.369956Z"}],"euvd":[{"id":"EUVD-2026-21635","description":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.","status":"published","published":"2026-04-11T00:16:01Z","modified":"2026-07-15T00:59:16Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:56.918546Z"}],"ghsa":[{"id":"GHSA-rr9p-8245-3f99","title":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This...","description":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.","status":"published","published":"2026-04-11T03:30:30Z","modified":"2026-06-30T03:37:20Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-120","CWE-122","CWE-787"],"updated_at":"2026-11-02T15:09:05.34707Z"}],"nvd":[{"id":"CVE-2026-4153","description":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.","status":"published","published":"2026-04-11T01:16:16.963Z","modified":"2026-07-15T02:22:38.77Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-122","CWE-787","CWE-120"],"updated_at":"2026-11-02T14:12:14.37744Z"}],"osv":[{"id":"CVE-2026-4153","title":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","description":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.","status":"published","published":"2026-04-11T00:16:01.848Z","modified":"2026-10-28T10:55:14.661371457Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:45:03.764807Z"},{"id":"DEBIAN-CVE-2026-4153","description":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.","status":"published","published":"2026-04-11T01:16:16.963Z","modified":"2026-10-01T03:03:04.715806072Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:54.892385Z"},{"id":"OESA-2026-1955","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nGIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.(CVE-2026-4150)\n\nGIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ANI files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28813.(CVE-2026-4151)\n\nGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.(CVE-2026-4153)\n\nGIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.(CVE-2026-4154)","status":"published","published":"2026-04-17T11:10:57Z","modified":"2026-08-18T01:19:39.302013988Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1956","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nGIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.(CVE-2026-4150)\n\nGIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ANI files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28813.(CVE-2026-4151)\n\nGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.(CVE-2026-4153)\n\nGIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.(CVE-2026-4154)","status":"published","published":"2026-04-17T11:10:57Z","modified":"2026-08-18T01:19:39.253618747Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1957","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nGIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.(CVE-2026-4150)\n\nGIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ANI files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28813.(CVE-2026-4151)\n\nGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.(CVE-2026-4153)\n\nGIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.(CVE-2026-4154)","status":"published","published":"2026-04-17T11:10:57Z","modified":"2026-08-18T01:19:48.226606102Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1958","title":"gimp security update","description":"The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing, and conversions, together with multilevel undo. The GIMP offers a scripting facility, but many of the included scripts rely on fonts that we cannot distribute.\r\n\r\nSecurity Fix(es):\n\nGIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.(CVE-2026-4150)\n\nGIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of ANI files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28813.(CVE-2026-4151)\n\nGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.(CVE-2026-4153)\n\nGIMP XPM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of XPM files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28901.(CVE-2026-4154)","status":"published","published":"2026-04-17T11:10:58Z","modified":"2026-08-18T01:19:39.272741781Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2881","title":"gimp security update","description":"Security Fix(es):\n\nAn issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS).(CVE-2022-32990)\n\nGIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSD files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28807.(CVE-2026-4150)\n\nGIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.(CVE-2026-4153)","status":"published","published":"2026-07-09T11:11:47Z","modified":"2026-08-18T01:21:15.06747515Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"RHSA-2026:16484","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2026-05-13T10:14:13Z","modified":"2026-10-03T10:05:55Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:17533","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2026-05-15T10:15:02Z","modified":"2026-10-03T10:06:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19362","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2026-05-20T10:10:36Z","modified":"2026-10-03T10:06:53Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20552","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2026-05-26T10:07:25Z","modified":"2026-10-03T10:07:07Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20553","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2026-05-26T10:07:25Z","modified":"2026-10-03T10:07:07Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20554","title":"Red Hat Security Advisory: gimp:2.8 security update","status":"published","published":"2026-05-26T10:07:26Z","modified":"2026-10-03T10:07:08Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:20691","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2026-05-26T10:07:52Z","modified":"2026-10-03T10:07:24Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:25899","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2026-06-15T10:05:41Z","modified":"2026-10-03T10:08:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:25901","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2026-06-15T10:05:42Z","modified":"2026-10-03T10:08:28Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:25907","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2026-06-15T10:05:43Z","modified":"2026-10-03T10:08:29Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RHSA-2026:26168","title":"Red Hat Security Advisory: gimp security update","status":"published","published":"2026-06-17T10:08:30Z","modified":"2026-10-03T10:08:31Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:19.449341Z"},{"id":"RLSA-2026:16484","title":"Important: gimp security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887)\n\n* gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154)\n\n* gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow (CVE-2026-4151)\n\n* gimp: GIMP: Remote Code Execution via malicious JP2 file parsing (CVE-2026-4152)\n\n* GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150)\n\n* gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-14T12:03:50.040748Z","modified":"2026-05-14T12:57:23.060323Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"RLSA-2026:17533","title":"Important: gimp:2.8 security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.\n\nSecurity Fix(es):\n\n* gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887)\n\n* gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154)\n\n* GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150)\n\n* gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-14T18:01:08.105235Z","modified":"2026-05-14T18:25:09.41997Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.508922Z"},{"id":"UBUNTU-CVE-2026-4153","description":"GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-28874.","status":"published","published":"2026-04-11T01:16:00Z","modified":"2026-06-30T18:15:22.46623445Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:18.393417Z"},{"id":"ALSA-2026:16484","title":"Important: gimp security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887)\n  * gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154)\n  * gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow (CVE-2026-4151)\n  * gimp: GIMP: Remote Code Execution via malicious JP2 file parsing (CVE-2026-4152)\n  * GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150)\n  * gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-12T00:00:00Z","modified":"2026-10-29T11:32:31.147539163Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:17533","title":"Important: gimp:2.8 security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887)\n  * gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154)\n  * GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150)\n  * gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-14T00:00:00Z","modified":"2026-10-29T11:02:23.590655575Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19362","title":"Important: gimp security update","description":"The GIMP (GNU Image Manipulation Program) is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo.  \n\nSecurity Fix(es):  \n\n  * gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image (CVE-2026-4887)\n  * gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow (CVE-2026-4154)\n  * gimp: GIMP: Remote Code Execution via ANI File Parsing Integer Overflow (CVE-2026-4151)\n  * gimp: GIMP: Remote Code Execution via malicious JP2 file parsing (CVE-2026-4152)\n  * GIMP: GIMP: Arbitrary code execution via specially crafted PSD file (CVE-2026-4150)\n  * gimp: GIMP: Remote Code Execution via PSP file parsing (CVE-2026-4153)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:32.21268959Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"CLSA-2026-1778860714","title":"gimp: Fix of 2 CVEs","description":"- CVE-2026-4153: fix heap-based buffer overflow in PSP file parser by computing\n  proper line_width for bit depths 1 and 4 with small widths\n- CVE-2026-4154: fix integer overflow and buffer overflow in XPM file parser\n  by adding GIMP_MAX_IMAGE_SIZE bounds checks and using g_try_new","status":"published","published":"2026-05-22T15:39:04Z","modified":"2026-06-01T00:32:31.425037925Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778861508","title":"gimp: Fix of 2 CVEs","description":"- CVE-2026-4153: fix heap-based buffer overflow in PSP file parser by computing\n  proper line_width for bit depths 1 and 4 with small widths\n- CVE-2026-4154: fix integer overflow and buffer overflow in XPM file parser\n  by adding GIMP_MAX_IMAGE_SIZE bounds checks and using g_try_new","status":"published","published":"2026-05-22T15:45:38Z","modified":"2026-06-01T00:32:52.524914732Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"openSUSE-SU-2026:20428-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\nChanges in gimp:\n\n- CVE-2026-4150: Fixed PSD file parsing integer overflow vulnerability (bsc#1259979)\n= CVE-2026-4151: Fixed ANI file parsing integer overflow vulnerability (bsc#1259983)\n- CVE-2026-4153: Fixed PSP file parsing heap-based buffer overflow vulnerability (bsc#1259984)\n- CVE-2026-4154: Fixed XPM file parsing integer overflow vulnerability (bsc#1259986)\n","status":"published","published":"2026-03-25T14:24:42Z","modified":"2026-03-29T17:24:46.295125Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2026:1193-1","title":"Security update for gimp","description":"This update for gimp fixes the following issues:\n\n- CVE-2026-4150: PSD File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1259979).\n- CVE-2026-4153: PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (bsc#1259984).\n- CVE-2026-4154: XPM File Parsing Integer Overflow Remote Code Execution Vulnerability (bsc#1259986).\n","status":"published","published":"2026-04-07T08:40:15Z","modified":"2026-04-08T07:50:05.936392Z","updated_at":"2026-11-02T15:54:01.262144Z"}]}}