# ALSA-2026:61587: Security update for 2 packages

ALSA-2026:61587, released August 31, 2026, fixes 9 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

- Web page: https://patchblox.com/security/fix/linux/alsa-2026-61587
- Platform: Linux
- Released: Aug 31, 2026
- Priority: Urgent (Closes CVE-2026-59090, rated Critical)
- CVEs: 9, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2026:61587

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [gimp](https://patchblox.com/security/data/product/linux/gimp.md) | almalinux 9 | 2:3.0.4-4.el9_8.10 |
| [gimp-libs](https://patchblox.com/security/data/product/linux/gimp-libs.md) | almalinux 9 | 2:3.0.4-4.el9_8.10 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-59090](https://patchblox.com/security/data/cve/CVE-2026-59090.md) | Urgent | gimp: A flaw was found in GIMP's PSD file format plugin | 9.9 | 0.0065 |  |
| [CVE-2026-18307](https://patchblox.com/security/data/cve/CVE-2026-18307.md) | High | gimp: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0042 |  |
| [CVE-2026-18302](https://patchblox.com/security/data/cve/CVE-2026-18302.md) | High | gimp: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0039 |  |
| [CVE-2026-18303](https://patchblox.com/security/data/cve/CVE-2026-18303.md) | High | gimp: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0039 |  |
| [CVE-2026-18304](https://patchblox.com/security/data/cve/CVE-2026-18304.md) | High | gimp: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0036 |  |
| [CVE-2026-18305](https://patchblox.com/security/data/cve/CVE-2026-18305.md) | High | gimp: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0036 |  |
| [CVE-2026-18301](https://patchblox.com/security/data/cve/CVE-2026-18301.md) | High | gimp: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0034 |  |
| [CVE-2026-18306](https://patchblox.com/security/data/cve/CVE-2026-18306.md) | High | gimp: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0034 |  |
| [CVE-2026-18308](https://patchblox.com/security/data/cve/CVE-2026-18308.md) | High | gimp: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability | 7.8 | 0.0034 |  |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo