Debian has released security updates for the GIMP image editing software and the wireless-regdb package. The GIMP update addresses several vulnerabilities that could lead to denial of service or arbitrary code execution if malicious XWD, ICNS, PGM, or ICO files are opened in Debian GNU/Linux 9 (Stretch) ELTS, 10 (Buster) ELTS, and 11 (Bullseye) LTS. A separate update is available for Debian GNU/Linux 11 (Bullseye) LTS, which includes changes to radio regulations in various countries and is available as version 2026.02.04-1~deb11u1

ELA-1656-1 gimp security update
[DLA 4500-1] gimp security updat
[DLA 4501-1] wireless-regdb new upstream version

ELA-1656-1 gimp security update

Package : gimp

Version : 2.8.18-1+deb9u9 (stretch), 2.10.8-2+deb10u8 (buster)

Related CVEs :
CVE-2026-0797
CVE-2026-2044
CVE-2026-2045
CVE-2026-2048

Several vulnerabilities were discovered in GIMP, the GNU Image
Manipulation Program, which could result in denial of service or
potentially the execution of arbitrary code if malformed XWD, ICNS, PGM
or ICO files are opened.

ELA-1656-1 gimp security update

[SECURITY] [DLA 4500-1] gimp security updat

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4500-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Thorsten Alteholz
March 14, 2026 https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package : gimp
Version : 2.10.22-4+deb11u6
CVE ID : CVE-2026-0797 CVE-2026-2044 CVE-2026-2045 CVE-2026-2048

Several vulnerabilities were discovered in GIMP, the GNU Image
Manipulation Program, which could result in denial of service or
potentially the execution of arbitrary code if malformed XWD, ICNS, PGM
or ICO files are opened.

For Debian 11 bullseye, these problems have been fixed in version
2.10.22-4+deb11u6.

We recommend that you upgrade your gimp packages.

For the detailed security status of gimp please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/gimp

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

[SECURITY] [DLA 4501-1] wireless-regdb new upstream version

-------------------------------------------------------------------------
Debian LTS Advisory DLA-4501-1 debian-lts@lists.debian.org
https://www.debian.org/lts/security/ Ben Hutchings
March 14, 2026 https://wiki.debian.org/LTS
-------------------------------------------------------------------------

Package : wireless-regdb
Version : 2026.02.04-1~deb11u1

This update includes the changes in wireless-regdb 2026.02.04,
reflecting changes to radio regulations in many countries.

For Debian 11 bullseye, this update is available as version
2026.02.04-1~deb11u1.

We recommend that you upgrade your wireless-regdb packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS