Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2026:0027

HIGH7.8

Red Hat Security Advisory: gimp:2.8 security update

Published Jan 5, 2026

Modified 6 days ago

Fix available

Affected Packages

Red Hat:rhel_e4s:8.8::appstreamgimp

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_e4s:8.8::appstreamgimp-debuginfo

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_e4s:8.8::appstreamgimp-debugsource

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_e4s:8.8::appstreamgimp-devel

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_e4s:8.8::appstreamgimp-devel-tools

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_e4s:8.8::appstreamgimp-devel-tools-debuginfo

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_e4s:8.8::appstreamgimp-libs

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_e4s:8.8::appstreamgimp-libs-debuginfo

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_e4s:8.8::appstreampygobject2

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampygobject2-codegen

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampygobject2-debuginfo

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampygobject2-debugsource

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampygobject2-devel

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampygobject2-doc

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampygtk2

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_e4s:8.8::appstreampygtk2-codegen

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_e4s:8.8::appstreampygtk2-debuginfo

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_e4s:8.8::appstreampygtk2-debugsource

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_e4s:8.8::appstreampygtk2-devel

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_e4s:8.8::appstreampygtk2-doc

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_e4s:8.8::appstreampython2-cairo

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampython2-cairo-debuginfo

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampython2-cairo-devel

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampython2-pycairo

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_e4s:8.8::appstreampython2-pycairo-debugsource

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreamgimp

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_tus:8.8::appstreamgimp-debuginfo

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_tus:8.8::appstreamgimp-debugsource

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_tus:8.8::appstreamgimp-devel

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_tus:8.8::appstreamgimp-devel-tools

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_tus:8.8::appstreamgimp-devel-tools-debuginfo

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_tus:8.8::appstreamgimp-libs

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_tus:8.8::appstreamgimp-libs-debuginfo

Fixed in:

2:2.8.22-26.module+el8.8.0+23742+afc45a52.4

Red Hat:rhel_tus:8.8::appstreampygobject2

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampygobject2-codegen

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampygobject2-debuginfo

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampygobject2-debugsource

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampygobject2-devel

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampygobject2-doc

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampygtk2

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_tus:8.8::appstreampygtk2-codegen

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_tus:8.8::appstreampygtk2-debuginfo

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_tus:8.8::appstreampygtk2-debugsource

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_tus:8.8::appstreampygtk2-devel

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_tus:8.8::appstreampygtk2-doc

Fixed in:

0:2.24.0-25.module+el8.4.0+9382+ff08b506

Red Hat:rhel_tus:8.8::appstreampython2-cairo

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampython2-cairo-debuginfo

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampython2-cairo-devel

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampython2-pycairo

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

Red Hat:rhel_tus:8.8::appstreampython2-pycairo-debugsource

Fixed in:

0:1.16.3-6.module+el8+2760+3d7d61b2

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:0027 REPORThttps://access.redhat.com/security/cve/CVE-2025-10922 REPORThttps://access.redhat.com/security/cve/CVE-2025-10934 ARTICLEhttps://access.redhat.com/security/updates/classification/#important REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2407188 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2407233 ARTICLEhttps://gitlab.gnome.org/GNOME/gimp/-/commit/3d909166463731e94dfe62042d76225ecfc4c1e4 ARTICLEhttps://gitlab.gnome.org/GNOME/gimp/-/commit/5c3e2122d53869599d77ef0f1bdece117b24fd7c ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-10922 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-10934 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0027.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-10922 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-10934 ARTICLEhttps://www.zerodayinitiative.com/advisories/ZDI-25-911/ARTICLEhttps://www.zerodayinitiative.com/advisories/ZDI-25-978/

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Upstream

CVE-2025-10922 CVE-2025-10934

Ecosystems

Red Hat rhel_e4s 8.8 appstream Red Hat rhel_tus 8.8 appstream

Timeline

PublishedJan 5, 2026

ModifiedJan 8, 2026

RHSA-2026:0027 | Mondoo Vulnerability Intelligence