RHSA-2026:1584

HIGH7.8

Red Hat Security Advisory: gimp:2.8 security update

Published Jan 30, 2026

Modified 1 months ago

Fix available

Affected Packages(25 packages)

gimp

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

2:2.8.22-26.module+el8.8.0+23925+fa21445c.5

gimp-debuginfo

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

2:2.8.22-26.module+el8.8.0+23925+fa21445c.5

gimp-debugsource

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

2:2.8.22-26.module+el8.8.0+23925+fa21445c.5

gimp-devel

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

2:2.8.22-26.module+el8.8.0+23925+fa21445c.5

gimp-devel-tools

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

2:2.8.22-26.module+el8.8.0+23925+fa21445c.5

gimp-devel-tools-debuginfo

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

2:2.8.22-26.module+el8.8.0+23925+fa21445c.5

gimp-libs

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

2:2.8.22-26.module+el8.8.0+23925+fa21445c.5

gimp-libs-debuginfo

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

2:2.8.22-26.module+el8.8.0+23925+fa21445c.5

pygobject2

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

pygobject2-codegen

Red Hat rhel_e4s 8.8 appstreamRed Hat rhel_tus 8.8 appstream

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

References

ADVISORY

https://access.redhat.com/errata/RHSA-2026:1584

REPORT

https://access.redhat.com/security/cve/CVE-2025-14422

ARTICLE

https://access.redhat.com/security/updates/classification/#important

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2424766

ARTICLE

https://gitlab.gnome.org/GNOME/gimp/-/commit/4ff2d773d58064e6130495de498e440f4a6d5edb

ADVISORY

https://nvd.nist.gov/vuln/detail/CVE-2025-14422

ADVISORY

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1584.json

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2025-14422

ARTICLE

https://www.zerodayinitiative.com/advisories/ZDI-25-1136/

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Upstream

CVE-2025-14422

Ecosystems

Red Hat rhel_e4s 8.8 appstream Red Hat rhel_tus 8.8 appstream

Timeline

PublishedJan 30, 2026

ModifiedJan 30, 2026