Linux · Security advisory · August 31, 2026

ALSA-2026:61587: Security update for 2 packages

ALSA-2026:61587, released August 31, 2026, fixes 9 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
9
1 rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0065
51st percentile

Priority of the 9 CVEs

Patch now 0 Urgent 1 High 8 Routine 0

Fixed package versions

ProductReleaseFixed in
gimpalmalinux 92:3.0.4-4.el9_8.10
gimp-libsalmalinux 92:3.0.4-4.el9_8.10

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
Urgent CVE-2026-59090 gimp: A flaw was found in GIMP's PSD file format plugin 9.9 0.0065 None reported
High CVE-2026-18307 gimp: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 0.0042 None reported
High CVE-2026-18302 gimp: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 0.0039 None reported
High CVE-2026-18303 gimp: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability 7.8 0.0039 None reported
High CVE-2026-18304 gimp: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability 7.8 0.0036 None reported
High CVE-2026-18305 gimp: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability 7.8 0.0036 None reported
High CVE-2026-18301 gimp: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability 7.8 0.0034 None reported
High CVE-2026-18306 gimp: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability 7.8 0.0034 None reported
High CVE-2026-18308 gimp: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability 7.8 0.0034 None reported
Showing 1 to 9 of 9 1