Linux · Security advisory · October 5, 2026

ALSA-2026:75575: Security update for 2 packages

ALSA-2026:75575, released October 5, 2026, fixes 4 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0023
13th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
gimpalmalinux 92:3.0.4-4.el9_8.14
gimp-libsalmalinux 92:3.0.4-4.el9_8.14

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-90948 gimp: A flaw was found in GIMP's ICO file loader 7.8 0.0023 None reported
High CVE-2026-92248 gimp: A flaw was found in the file-psd plugin in GIMP 7.8 0.0019 None reported
High CVE-2026-90947 gimp: A flaw was found in GIMP 7.8 0.0013 None reported
High CVE-2026-97185 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0013 None reported
Showing 1 to 4 of 4 1