RHSA-2026:1587 | Mondoo Vulnerability Intelligence

RHSA-2026:1587

HIGH7.8

Red Hat Security Advisory: gimp security update

Published Jan 30, 2026

Modified 1 weeks ago

Fix available

Affected Packages

gimp

Red Hat rhel_e4s 9.2 appstream

Fixed in:

2:2.99.8-4.el9_2.3

gimp-debuginfo

Red Hat rhel_e4s 9.2 appstream

Fixed in:

2:2.99.8-4.el9_2.3

gimp-debugsource

Red Hat rhel_e4s 9.2 appstream

Fixed in:

2:2.99.8-4.el9_2.3

gimp-devel-tools-debuginfo

Red Hat rhel_e4s 9.2 appstream

Fixed in:

2:2.99.8-4.el9_2.3

gimp-libs

Red Hat rhel_e4s 9.2 appstream

Fixed in:

2:2.99.8-4.el9_2.3

gimp-libs-debuginfo

Red Hat rhel_e4s 9.2 appstream

Fixed in:

2:2.99.8-4.el9_2.3

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:1587 REPORThttps://access.redhat.com/security/cve/CVE-2025-14422 REPORThttps://access.redhat.com/security/cve/CVE-2025-14425 ARTICLEhttps://access.redhat.com/security/updates/classification/#important REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2424766 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2424767 ARTICLEhttps://gitlab.gnome.org/GNOME/gimp/-/commit/4ff2d773d58064e6130495de498e440f4a6d5edb ARTICLEhttps://gitlab.gnome.org/GNOME/gimp/-/commit/cd1c88a0364ad1444c06536731972a99bd8643fd ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-14422 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-14425 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1587.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-14422 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-14425 ARTICLEhttps://www.zerodayinitiative.com/advisories/ZDI-25-1136/ARTICLEhttps://www.zerodayinitiative.com/advisories/ZDI-25-1139/

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Upstream

CVE-2025-14422 CVE-2025-14425

Ecosystems

Red Hat rhel_e4s 9.2 appstream

Timeline

PublishedJan 30, 2026

ModifiedJan 30, 2026