Stay Secure with the Latest Linux Advisories

security advisorydenial of servicefedora

Fedora 42 GIMP Essential PSD Loader Denial of Service Vulnerability Fix

This is a security update fixing the loader for PSD files.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-aecd3809f1 2026-03-07 00:50:29.728035+00:00 -------------------------------------------------------------------------------- Name : gimp Product : Fedora 42 Version : 3.0.8 Release : 5.fc42 URL : https://www.gimp.org Summary : GNU Image Manipulation Program Description : GIMP (GNU Image Manipulation Program) is a powerful image composition and editing program, which can be extremely useful for creating logos and other graphics for web pages. GIMP has many of the tools and filters you would expect to find in similar commercial offerings, and some interesting extras as well. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. -------------------------------------------------------------------------------- Update Information: This is a security update fixing the loader for PSD files. -------------------------------------------------------------------------------- ChangeLog: * Thu Feb 26 2026 Nils Philippsen - 2:3.0.8-5 - Fix overflows and crashes in the PSD loader -------------------------------------------------------------------------------- References: [ 1 ] Bug #2437676 - CVE-2026-2239 gimp: GIMP: Denial of Service via crafted PSD file due to heap-buffer-overflow [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2437676 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-aecd3809f1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with theFedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . Security fix for GIMP in Fedora 42 addressing PSD file loader issues to prevent DoS attacks.. GIMP security fix, Fedora 42 update, PSD file vulnerability, Denial of Service. . Severity: Important. LinuxSecurity.com Team

Mar 07, 2026 •Important Fedora