RHSA-2026:1591 | Mondoo Vulnerability Intelligence

RHSA-2026:1591

HIGH7.8

Red Hat Security Advisory: gimp:2.8 security update

Published Jan 30, 2026

Modified 1 months ago

Fix available

Affected Packages(25 packages)

gimp

Red Hat rhel_aus 8.2 appstream

Fixed in:

2:2.8.22-16.module+el8.2.0+23929+1dcebf0e.6

gimp-debuginfo

Red Hat rhel_aus 8.2 appstream

Fixed in:

2:2.8.22-16.module+el8.2.0+23929+1dcebf0e.6

gimp-debugsource

Red Hat rhel_aus 8.2 appstream

Fixed in:

2:2.8.22-16.module+el8.2.0+23929+1dcebf0e.6

gimp-devel

Red Hat rhel_aus 8.2 appstream

Fixed in:

2:2.8.22-16.module+el8.2.0+23929+1dcebf0e.6

gimp-devel-tools

Red Hat rhel_aus 8.2 appstream

Fixed in:

2:2.8.22-16.module+el8.2.0+23929+1dcebf0e.6

gimp-devel-tools-debuginfo

Red Hat rhel_aus 8.2 appstream

Fixed in:

2:2.8.22-16.module+el8.2.0+23929+1dcebf0e.6

gimp-libs

Red Hat rhel_aus 8.2 appstream

Fixed in:

2:2.8.22-16.module+el8.2.0+23929+1dcebf0e.6

gimp-libs-debuginfo

Red Hat rhel_aus 8.2 appstream

Fixed in:

2:2.8.22-16.module+el8.2.0+23929+1dcebf0e.6

pygobject2

Red Hat rhel_aus 8.2 appstream

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

pygobject2-codegen

Red Hat rhel_aus 8.2 appstream

Fixed in:

0:2.28.7-4.module+el8+2760+3d7d61b2

References

https://access.redhat.com/errata/RHSA-2026:1591

https://access.redhat.com/security/cve/CVE-2025-14422

https://access.redhat.com/security/updates/classification/#important

https://bugzilla.redhat.com/show_bug.cgi?id=2424766

https://gitlab.gnome.org/GNOME/gimp/-/commit/4ff2d773d58064e6130495de498e440f4a6d5edb

https://nvd.nist.gov/vuln/detail/CVE-2025-14422

https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1591.json

https://www.cve.org/CVERecord?id=CVE-2025-14422

https://www.zerodayinitiative.com/advisories/ZDI-25-1136/

CVSS Analysis

CVSS v3.1

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Upstream

Ecosystems

Red Hat rhel_aus 8.2 appstream

Timeline

PublishedJan 30, 2026

ModifiedJan 30, 2026