[UPDATE] [mittel] GIMP: Mehrere Schwachstellen ermöglichen Codeausführung

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-10-20 10:50 UTC
  • Importiert: 2026-10-21 10:18 UTC
  • Quelle-ID: cert_bund
  • uid_hash: 33523c1c9d2c550faaf9820326e0669b6a566f2fbcab1c88de3a358c955c65a1

Inhalt

Ein Angreifer kann mehrere Schwachstellen in GIMP ausnutzen, um beliebigen Programmcode auszuführen.

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-18300

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18301

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18302

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18303

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18304

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18305

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18306

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18307

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18308

MEDIUM

HIGH

7.8

2026-08-20

CVE-2026-18309

MEDIUM

HIGH

7.8

2026-08-20

Externe Referenzen

Bezeichnung Typ CVE Quelle

Red Hat Security Advisory RHSA-2026:61587 vom 2026-09-01

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:62170 vom 2026-09-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:62420 vom 2026-09-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:62425 vom 2026-09-02

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:73768 vom 2026-09-30

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:80509 vom 2026-10-12

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:84575 vom 2026-10-19

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:85253 vom 2026-10-19

VENDOR - wid_csaf

Red Hat Security Advisory RHSA-2026:85254 vom 2026-10-19

VENDOR - wid_csaf

Amazon Linux Security Advisory ALAS2-2026-3911 vom 2026-09-14

EXTERNAL - wid_csaf

Amazon Linux Security Advisory ALAS2GIMP-2026-020 vom 2026-09-14

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:62170 vom 2026-09-02

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:62420 vom 2026-09-03

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:62425 vom 2026-09-03

EXTERNAL - wid_csaf

Rocky Linux Security Advisory RLSA-2026:62507 vom 2026-09-02

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-282J-Q335-6RXF vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-28mq-m8mv-9qrq vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-2PP7-5FQX-5XCQ vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-3PR5-5PRQ-X75C vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-5G2Q-9Q4Q-P55M vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-5gmv-r46m-x6rr vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-7PM3-57J9-653G vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-7QJQ-QHFF-CHM9 vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-M928-P45F-CXG6 vom 2026-08-20

EXTERNAL - wid_csaf

GitHub Security Advisory GHSA-VRP8-QFGV-RPRJ vom 2026-08-20

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-61587 vom 2026-09-02

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-62170 vom 2026-09-03

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-62420 vom 2026-09-03

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-62425 vom 2026-09-03

EXTERNAL - wid_csaf

Oracle Linux Security Advisory ELSA-2026-62507 vom 2026-09-03

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:11771-1 vom 2026-09-15

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:21959-1 vom 2026-09-25

EXTERNAL - wid_csaf

openSUSE Security Update OPENSUSE-SU-2026:21731-1 vom 2026-09-02

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:4409-1 vom 2026-10-01

EXTERNAL - wid_csaf

SUSE Security Update SUSE-SU-2026:3996-1 vom 2026-09-12

EXTERNAL - wid_csaf

Debian Security Advisory DSA-6470 vom 2026-08-27

EXTERNAL - wid_csaf

GIMP Releases

EXTERNAL - wid_csaf

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
CERT-Bund (BSI)

cert_bund

government_cert - de https://wid.cert-bund.de/content/public/securityAdvisory/rss