RHSA-2026:1588

HIGH7.8

Red Hat Security Advisory: gimp:2.8 security update

Published Jan 30, 2026

Modified 1 weeks ago

Fix available

Affected Packages(25 packages)

gimp

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

2:2.8.22-18.module+el8.6.0+23927+647c5123.4

gimp-debuginfo

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

2:2.8.22-18.module+el8.6.0+23927+647c5123.4

gimp-debugsource

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

2:2.8.22-18.module+el8.6.0+23927+647c5123.4

gimp-devel

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

2:2.8.22-18.module+el8.6.0+23927+647c5123.4

gimp-devel-tools

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

2:2.8.22-18.module+el8.6.0+23927+647c5123.4

gimp-devel-tools-debuginfo

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

2:2.8.22-18.module+el8.6.0+23927+647c5123.4

gimp-libs

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

2:2.8.22-18.module+el8.6.0+23927+647c5123.4

gimp-libs-debuginfo

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

2:2.8.22-18.module+el8.6.0+23927+647c5123.4

pygobject2

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

pygobject2-codegen

Red Hat rhel_aus 8.6 appstreamRed Hat rhel_e4s 8.6 appstreamRed Hat rhel_tus 8.6 appstream

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2026:1588 REPORThttps://access.redhat.com/security/cve/CVE-2025-14422 ARTICLEhttps://access.redhat.com/security/updates/classification/#important REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2424766 ARTICLEhttps://gitlab.gnome.org/GNOME/gimp/-/commit/4ff2d773d58064e6130495de498e440f4a6d5edb ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-14422 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1588.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-14422 ARTICLEhttps://www.zerodayinitiative.com/advisories/ZDI-25-1136/

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Upstream

CVE-2025-14422

Ecosystems

Red Hat rhel_aus 8.6 appstream Red Hat rhel_e4s 8.6 appstream Red Hat rhel_tus 8.6 appstream

Timeline

PublishedJan 30, 2026

ModifiedJan 30, 2026