The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4547 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4547-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                    Thorsten Alteholz     April 23, 2026                                https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : gimp     Version        : 2.10.22-4+deb11u8     CVE ID         : CVE-2026-4150 CVE-2026-4152 CVE-2026-4153


    Several vulnerabilities were discovered in GIMP, the GNU Image     Manipulation Program, which could result in denial of service or     potentially the execution of arbitrary code if malformed PSP, JPEG     2000 or PSD files are opened.


    For Debian 11 bullseye, these problems have been fixed in version     2.10.22-4+deb11u8.

    We recommend that you upgrade your gimp packages.

    For the detailed security status of gimp please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/gimp

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dla-4547 : gimp - security update

high Nessus Plugin ID 309902

Version 1.2

Version 1.1

Version 1.2 May 8, 2026, 8:04 PM IAVM reference Plugin Feed: 202605082004
Version 1.1 Apr 23, 2026, 6:19 PM New Plugin Feed: 202604231819