# gimp security updates

Patch Radar has 334 security fixes for gimp, closing 102 CVEs. The newest security fix is ELSA-2026-93975 (2:3.0.4-4.el9_8.15), released November 7, 2026.

- Web page: https://patchblox.com/security/product/linux/gimp
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [ELSA-2026-93975](https://patchblox.com/security/data/fix/linux/elsa-2026-93975.md) | Nov 7, 2026 | ol 9 2:3.0.4-4.el9_8.15 | High | 5 | 0 |
| [ELSA-2026-84744](https://patchblox.com/security/data/fix/linux/elsa-2026-84744.md) | Nov 7, 2026 | ol 8 2:2.8.22-26.module+el8.10.0+91068+3ab14c94.9 | High | 4 | 0 |
| [ELSA-2026-95482](https://patchblox.com/security/data/fix/linux/elsa-2026-95482.md) | Nov 7, 2026 | ol 8 2:2.8.22-26.module+el8.10.0+91106+8f0be1f3.10 | High | 1 | 0 |
| [OPENSUSE-SU-2026:22123-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22123-1.md) | Nov 7, 2026 | opensuse-leap 16.0 3.0.8-bp160.13.1 | High | 6 | 0 |
| [SUSE-SU-2026:4653-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4653-1.md) | Nov 7, 2026 | sles 15.7 2.10.30-150400.3.82.1 | High | 1 | 0 |
| [SUSE-SU-2026:4895-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4895-1.md) | Nov 7, 2026 | sles 15.7 2.10.30-150400.3.85.1 | High | 5 | 0 |
| [ALSA-2026:93975](https://patchblox.com/security/data/fix/linux/alsa-2026-93975.md) | Nov 7, 2026 | almalinux 9 2:3.0.4-4.el9_8.15 | High | 5 | 0 |
| [ALSA-2026:95482](https://patchblox.com/security/data/fix/linux/alsa-2026-95482.md) | Nov 7, 2026 | almalinux 8 2:2.8.22-26.module_el8.10.0+4352+8516153e.10 | High | 2 | 0 |
| [ALSA-2026:84744](https://patchblox.com/security/data/fix/linux/alsa-2026-84744.md) | Nov 7, 2026 | almalinux 8 2:2.8.22-26.module_el8.10.0+4306+69430cd5.9 | High | 4 | 0 |
| [RLSA-2026:84744](https://patchblox.com/security/data/fix/linux/rlsa-2026-84744.md) | Nov 7, 2026 | rocky 8 2:2.8.22-26.module+el8.10.0+40075+a21479b4.4 | High | 4 | 0 |
| [RLSA-2026:95482](https://patchblox.com/security/data/fix/linux/rlsa-2026-95482.md) | Nov 7, 2026 | rocky 8 2:2.8.22-26.module+el8.10.0+1927+52edb5a0 | High | 1 | 0 |
| [RHSA-2026:93975](https://patchblox.com/security/data/fix/linux/rhsa-2026-93975.md) | Nov 3, 2026 | RHEL 9 2:3.0.4-4.el9_8.15 | High | 5 | 0 |
| [DEBIAN-CVE-2026-92183](https://patchblox.com/security/data/fix/linux/debian-cve-2026-92183.md) | Oct 24, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [RHSA-2026:84744](https://patchblox.com/security/data/fix/linux/rhsa-2026-84744.md) | Oct 20, 2026 | RHEL 8 2:2.8.22-26.module+el8.10.0+25091+9b86bd7c.9 | High | 4 | 0 |
| [DEBIAN-CVE-2026-62438](https://patchblox.com/security/data/fix/linux/debian-cve-2026-62438.md) | Oct 17, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [OPENSUSE-SU-2026:22025-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22025-1.md) | Oct 6, 2026 | opensuse-leap 16.0 3.0.8-bp160.12.1 | High | 2 | 0 |
| [RHSA-2026:75575](https://patchblox.com/security/data/fix/linux/rhsa-2026-75575.md) | Oct 5, 2026 | RHEL 9 2:3.0.4-4.el9_8.14 | High | 4 | 0 |
| [ALSA-2026:75575](https://patchblox.com/security/data/fix/linux/alsa-2026-75575.md) | Oct 5, 2026 | almalinux 9 2:3.0.4-4.el9_8.14 | High | 4 | 0 |
| [ELSA-2026-75575](https://patchblox.com/security/data/fix/linux/elsa-2026-75575.md) | Oct 5, 2026 | ol 9 2:3.0.4-4.el9_8.14 | High | 4 | 0 |
| [SUSE-SU-2026:4409-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4409-1.md) | Oct 1, 2026 | sles 15.7 2.10.30-150400.3.79.1 | High | 10 | 0 |
| [DEBIAN-CVE-2026-62439](https://patchblox.com/security/data/fix/linux/debian-cve-2026-62439.md) | Sep 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-96543](https://patchblox.com/security/data/fix/linux/debian-cve-2026-96543.md) | Sep 28, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [OPENSUSE-SU-2026:21959-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21959-1.md) | Sep 24, 2026 | opensuse-leap 16.0 3.0.8-bp160.10.1 | High | 11 | 0 |
| [SUSE-SU-2026:4309-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-4309-1.md) | Sep 23, 2026 | sles 15.7 2.10.30-150400.3.74.1 | Urgent | 5 | 0 |
| [DEBIAN-CVE-2026-92248](https://patchblox.com/security/data/fix/linux/debian-cve-2026-92248.md) | Sep 21, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u11 | High | 1 | 0 |
| [DEBIAN-CVE-2026-90949](https://patchblox.com/security/data/fix/linux/debian-cve-2026-90949.md) | Sep 20, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-90948](https://patchblox.com/security/data/fix/linux/debian-cve-2026-90948.md) | Sep 20, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-90948](https://patchblox.com/security/data/fix/linux/debian-cve-2026-90948.md) | Sep 20, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u11 | High | 1 | 0 |
| [DEBIAN-CVE-2026-90947](https://patchblox.com/security/data/fix/linux/debian-cve-2026-90947.md) | Sep 20, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-90947](https://patchblox.com/security/data/fix/linux/debian-cve-2026-90947.md) | Sep 20, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u11 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18309](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18309.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-78465](https://patchblox.com/security/data/fix/linux/debian-cve-2026-78465.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-78465](https://patchblox.com/security/data/fix/linux/debian-cve-2026-78465.md) | Sep 18, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u11 | High | 1 | 0 |
| [DEBIAN-CVE-2026-79902](https://patchblox.com/security/data/fix/linux/debian-cve-2026-79902.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-78475](https://patchblox.com/security/data/fix/linux/debian-cve-2026-78475.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-78475](https://patchblox.com/security/data/fix/linux/debian-cve-2026-78475.md) | Sep 18, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u11 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-82330](https://patchblox.com/security/data/fix/linux/debian-cve-2026-82330.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-80101](https://patchblox.com/security/data/fix/linux/debian-cve-2026-80101.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-82324](https://patchblox.com/security/data/fix/linux/debian-cve-2026-82324.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-82328](https://patchblox.com/security/data/fix/linux/debian-cve-2026-82328.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-82328](https://patchblox.com/security/data/fix/linux/debian-cve-2026-82328.md) | Sep 18, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u11 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-82343](https://patchblox.com/security/data/fix/linux/debian-cve-2026-82343.md) | Sep 18, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [OPENSUSE-SU-2026:21869-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21869-1.md) | Sep 16, 2026 | opensuse-leap 16.0 3.0.8-bp160.9.1 | High | 3 | 0 |
| [OPENSUSE-SU-2026:21839-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21839-1.md) | Sep 14, 2026 | opensuse-leap 16.0 3.0.8-bp160.8.1 | Routine | 1 | 0 |
| [RHSA-2026:61587](https://patchblox.com/security/data/fix/linux/rhsa-2026-61587.md) | Sep 13, 2026 | RHEL 9 2:3.0.4-4.el9_8.10 | Urgent | 9 | 0 |
| [RHSA-2026:62507](https://patchblox.com/security/data/fix/linux/rhsa-2026-62507.md) | Sep 13, 2026 | RHEL 8 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8 | High | 8 | 0 |
| [FEDORA-2026-572A0F4178](https://patchblox.com/security/data/fix/linux/fedora-2026-572a0f4178.md) | Sep 11, 2026 | Fedora 43 2:3.2.6-1.fc43 | High | 1 | 0 |
| [RLSA-2026:62507](https://patchblox.com/security/data/fix/linux/rlsa-2026-62507.md) | Sep 2, 2026 | rocky 8 2:2.8.22-26.module+el8.10.0+1927+52edb5a0 | High | 8 | 0 |
| [ALSA-2026:62507](https://patchblox.com/security/data/fix/linux/alsa-2026-62507.md) | Sep 2, 2026 | almalinux 8 2:2.8.22-26.module_el8.10.0+4267+35168c80.8 | High | 8 | 0 |
| [ELSA-2026-62507-0](https://patchblox.com/security/data/fix/linux/elsa-2026-62507-0.md) | Sep 2, 2026 | ol 8 2:2.8.22-26.module+el8.10.0+91014+a7f2de23.8 | High | 8 | 0 |
| [ELSA-2026-61587-0](https://patchblox.com/security/data/fix/linux/elsa-2026-61587-0.md) | Sep 1, 2026 | ol 9 2:3.0.4-4.el9_8.10 | Urgent | 9 | 0 |
| [ALSA-2026:61587](https://patchblox.com/security/data/fix/linux/alsa-2026-61587.md) | Aug 31, 2026 | almalinux 9 2:3.0.4-4.el9_8.10 | Urgent | 9 | 0 |
| [DEBIAN-CVE-2026-59090](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59090.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-59090](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59090.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | Urgent | 1 | 0 |
| [DEBIAN-CVE-2026-18307](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18307.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18307](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18307.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18302](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18302.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18302](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18302.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18303](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18303.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18303](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18303.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18304](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18304.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18304](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18304.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18305](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18305.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18305](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18305.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18301](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18301.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18301](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18301.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18306](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18306.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18306](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18306.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18308](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18308.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-18308](https://patchblox.com/security/data/fix/linux/debian-cve-2026-18308.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-59088](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59088.md) | Aug 28, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-59088](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59088.md) | Aug 28, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-59091](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59091.md) | Aug 10, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-59087](https://patchblox.com/security/data/fix/linux/debian-cve-2026-59087.md) | Aug 10, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [RHSA-2026:50817](https://patchblox.com/security/data/fix/linux/rhsa-2026-50817.md) | Aug 6, 2026 | RHEL 9 2:3.0.4-4.el9_8.9 | High | 3 | 0 |
| [DEBIAN-CVE-2026-42170](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42170.md) | Aug 5, 2026 | Debian 14 3.2.4-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-42170](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42170.md) | Aug 5, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [ALSA-2026:50817](https://patchblox.com/security/data/fix/linux/alsa-2026-50817.md) | Aug 5, 2026 | almalinux 9 2:3.0.4-4.el9_8.9 | High | 3 | 0 |
| [ELSA-2026-50817](https://patchblox.com/security/data/fix/linux/elsa-2026-50817.md) | Aug 5, 2026 | ol 9 2:3.0.4-4.el9_8.9 | High | 3 | 0 |
| [DEBIAN-CVE-2026-42169](https://patchblox.com/security/data/fix/linux/debian-cve-2026-42169.md) | Aug 4, 2026 | Debian 14 3.2.4-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-6695](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6695.md) | Aug 4, 2026 | Debian 14 3.2.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-6694](https://patchblox.com/security/data/fix/linux/debian-cve-2026-6694.md) | Aug 4, 2026 | Debian 14 3.2.4-1 | Routine | 1 | 0 |
| [OPENSUSE-SU-2026:21521-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21521-1.md) | Aug 3, 2026 | opensuse-leap 16.0 3.0.8-bp160.6.1 | High | 2 | 0 |
| [SUSE-SU-2026:3399-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-3399-1.md) | Jul 29, 2026 | sles 15.7 2.10.30-150400.3.58.1 | High | 3 | 0 |
| [DEBIAN-CVE-2026-66759](https://patchblox.com/security/data/fix/linux/debian-cve-2026-66759.md) | Jul 27, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-66759](https://patchblox.com/security/data/fix/linux/debian-cve-2026-66759.md) | Jul 27, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-66758](https://patchblox.com/security/data/fix/linux/debian-cve-2026-66758.md) | Jul 27, 2026 | Debian 13.5 (trixie) 3.0.4-3+deb13u10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-66758](https://patchblox.com/security/data/fix/linux/debian-cve-2026-66758.md) | Jul 27, 2026 | Debian 14 3.2.6-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-66757](https://patchblox.com/security/data/fix/linux/debian-cve-2026-66757.md) | Jul 27, 2026 | Debian 14 3.2.6-1 | Routine | 1 | 0 |
| [RHSA-2026:40751](https://patchblox.com/security/data/fix/linux/rhsa-2026-40751.md) | Jul 18, 2026 | RHEL 9 2:3.0.4-4.el9_8.7 | High | 2 | 0 |
| [ALSA-2026:40751](https://patchblox.com/security/data/fix/linux/alsa-2026-40751.md) | Jul 16, 2026 | almalinux 9 2:3.0.4-4.el9_8.7 | High | 2 | 0 |
| [ELSA-2026-40751](https://patchblox.com/security/data/fix/linux/elsa-2026-40751.md) | Jul 16, 2026 | ol 9 2:3.0.4-4.el9_8.7 | High | 2 | 0 |
| [OPENSUSE-SU-2026:21359-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21359-1.md) | Jul 15, 2026 | opensuse-leap 16.0 3.0.8-bp160.5.1 | High | 3 | 0 |
| [RHSA-2026:38496](https://patchblox.com/security/data/fix/linux/rhsa-2026-38496.md) | Jul 13, 2026 | RHEL 9 2:3.0.4-4.el9_8.5 | High | 1 | 0 |
| [ALSA-2026:38496](https://patchblox.com/security/data/fix/linux/alsa-2026-38496.md) | Jul 13, 2026 | almalinux 9 2:3.0.4-4.el9_8.5 | High | 1 | 0 |
| [ELSA-2026-38496](https://patchblox.com/security/data/fix/linux/elsa-2026-38496.md) | Jul 13, 2026 | ol 9 2:3.0.4-4.el9_8.5 | High | 1 | 0 |
| [DEBIAN-CVE-2026-58382](https://patchblox.com/security/data/fix/linux/debian-cve-2026-58382.md) | Jul 9, 2026 | Debian 14 3.2.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-58383](https://patchblox.com/security/data/fix/linux/debian-cve-2026-58383.md) | Jul 9, 2026 | Debian 14 3.2.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-58385](https://patchblox.com/security/data/fix/linux/debian-cve-2026-58385.md) | Jul 9, 2026 | Debian 14 3.2.4-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-58386](https://patchblox.com/security/data/fix/linux/debian-cve-2026-58386.md) | Jul 9, 2026 | Debian 14 3.2.4-1 | Routine | 1 | 0 |

Showing the newest 100 of 334 fixes.

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.