HighFix available

Red Hat Security Advisory: gimp:2.8 security update

Type: advisorySource: OSV1 source record

Announced 15 May 2026Group revision 1

RHSA-2026:17533

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:RHSA-2026:17533

gimp

Source reference: /affected/0/package/name

Affected versions: Not stated in this record
Fixed versions: 2:2.8.22-26.module+el8.10.0+24277+6acc3952.6
Source reference: /affected/0/ranges
Prerequisites: Not stated in this record

gimp-debuginfo

Source reference: /affected/1/package/name

Affected versions: Not stated in this record
Fixed versions: 2:2.8.22-26.module+el8.10.0+24277+6acc3952.6
Source reference: /affected/1/ranges
Prerequisites: Not stated in this record

gimp-debugsource

Source reference: /affected/2/package/name

Affected versions: Not stated in this record
Fixed versions: 2:2.8.22-26.module+el8.10.0+24277+6acc3952.6
Source reference: /affected/2/ranges
Prerequisites: Not stated in this record

gimp-devel

Source reference: /affected/3/package/name

Affected versions: Not stated in this record
Fixed versions: 2:2.8.22-26.module+el8.10.0+24277+6acc3952.6
Source reference: /affected/3/ranges
Prerequisites: Not stated in this record

gimp-devel-tools

Source reference: /affected/4/package/name

Affected versions: Not stated in this record
Fixed versions: 2:2.8.22-26.module+el8.10.0+24277+6acc3952.6
Source reference: /affected/4/ranges
Prerequisites: Not stated in this record

gimp-devel-tools-debuginfo

Source reference: /affected/5/package/name

Affected versions: Not stated in this record
Fixed versions: 2:2.8.22-26.module+el8.10.0+24277+6acc3952.6
Source reference: /affected/5/ranges
Prerequisites: Not stated in this record

gimp-libs

Source reference: /affected/6/package/name

Affected versions: Not stated in this record
Fixed versions: 2:2.8.22-26.module+el8.10.0+24277+6acc3952.6
Source reference: /affected/6/ranges
Prerequisites: Not stated in this record

gimp-libs-debuginfo

Source reference: /affected/7/package/name

Affected versions: Not stated in this record
Fixed versions: 2:2.8.22-26.module+el8.10.0+24277+6acc3952.6
Source reference: /affected/7/ranges
Prerequisites: Not stated in this record

pygobject2

Source reference: /affected/8/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
Source reference: /affected/8/ranges
Prerequisites: Not stated in this record

pygobject2-codegen

Source reference: /affected/9/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
Source reference: /affected/9/ranges
Prerequisites: Not stated in this record

pygobject2-debuginfo

Source reference: /affected/10/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
Source reference: /affected/10/ranges
Prerequisites: Not stated in this record

pygobject2-debugsource

Source reference: /affected/11/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
Source reference: /affected/11/ranges
Prerequisites: Not stated in this record

pygobject2-devel

Source reference: /affected/12/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
Source reference: /affected/12/ranges
Prerequisites: Not stated in this record

pygobject2-doc

Source reference: /affected/13/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
Source reference: /affected/13/ranges
Prerequisites: Not stated in this record

pygtk2

Source reference: /affected/14/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Source reference: /affected/14/ranges
Prerequisites: Not stated in this record

pygtk2-codegen

Source reference: /affected/15/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Source reference: /affected/15/ranges
Prerequisites: Not stated in this record

pygtk2-debuginfo

Source reference: /affected/16/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Source reference: /affected/16/ranges
Prerequisites: Not stated in this record

pygtk2-debugsource

Source reference: /affected/17/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Source reference: /affected/17/ranges
Prerequisites: Not stated in this record

pygtk2-devel

Source reference: /affected/18/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Source reference: /affected/18/ranges
Prerequisites: Not stated in this record

pygtk2-doc

Source reference: /affected/19/package/name

Affected versions: Not stated in this record
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Source reference: /affected/19/ranges
Prerequisites: Not stated in this record

python2-cairo

Source reference: /affected/20/package/name

Affected versions: Not stated in this record
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
Source reference: /affected/20/ranges
Prerequisites: Not stated in this record

python2-cairo-debuginfo

Source reference: /affected/21/package/name

Affected versions: Not stated in this record
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
Source reference: /affected/21/ranges
Prerequisites: Not stated in this record

python2-cairo-devel

Source reference: /affected/22/package/name

Affected versions: Not stated in this record
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
Source reference: /affected/22/ranges
Prerequisites: Not stated in this record

python2-pycairo

Source reference: /affected/23/package/name

Affected versions: Not stated in this record
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
Source reference: /affected/23/ranges
Prerequisites: Not stated in this record

python2-pycairo-debugsource

Source reference: /affected/24/package/name

Affected versions: Not stated in this record
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
Source reference: /affected/24/ranges
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp",
      "purl": "pkg:rpm/redhat/gimp",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp-debuginfo",
      "purl": "pkg:rpm/redhat/gimp-debuginfo",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp-debugsource",
      "purl": "pkg:rpm/redhat/gimp-debugsource",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp-devel",
      "purl": "pkg:rpm/redhat/gimp-devel",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp-devel-tools",
      "purl": "pkg:rpm/redhat/gimp-devel-tools",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp-devel-tools-debuginfo",
      "purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp-libs",
      "purl": "pkg:rpm/redhat/gimp-libs",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "2:2.8.22-26.module+el8.10.0+24277+6acc3952.6"
          }
        ]
      }
    ],
    "package": {
      "name": "gimp-libs-debuginfo",
      "purl": "pkg:rpm/redhat/gimp-libs-debuginfo",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "pygobject2",
      "purl": "pkg:rpm/redhat/pygobject2",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "pygobject2-codegen",
      "purl": "pkg:rpm/redhat/pygobject2-codegen",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "pygobject2-debuginfo",
      "purl": "pkg:rpm/redhat/pygobject2-debuginfo",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "pygobject2-debugsource",
      "purl": "pkg:rpm/redhat/pygobject2-debugsource",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "pygobject2-devel",
      "purl": "pkg:rpm/redhat/pygobject2-devel",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "pygobject2-doc",
      "purl": "pkg:rpm/redhat/pygobject2-doc",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
          }
        ]
      }
    ],
    "package": {
      "name": "pygtk2",
      "purl": "pkg:rpm/redhat/pygtk2",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
          }
        ]
      }
    ],
    "package": {
      "name": "pygtk2-codegen",
      "purl": "pkg:rpm/redhat/pygtk2-codegen",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
          }
        ]
      }
    ],
    "package": {
      "name": "pygtk2-debuginfo",
      "purl": "pkg:rpm/redhat/pygtk2-debuginfo",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
          }
        ]
      }
    ],
    "package": {
      "name": "pygtk2-debugsource",
      "purl": "pkg:rpm/redhat/pygtk2-debugsource",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
          }
        ]
      }
    ],
    "package": {
      "name": "pygtk2-devel",
      "purl": "pkg:rpm/redhat/pygtk2-devel",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
          }
        ]
      }
    ],
    "package": {
      "name": "pygtk2-doc",
      "purl": "pkg:rpm/redhat/pygtk2-doc",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "python2-cairo",
      "purl": "pkg:rpm/redhat/python2-cairo",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "python2-cairo-debuginfo",
      "purl": "pkg:rpm/redhat/python2-cairo-debuginfo",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "python2-cairo-devel",
      "purl": "pkg:rpm/redhat/python2-cairo-devel",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "python2-pycairo",
      "purl": "pkg:rpm/redhat/python2-pycairo",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
          }
        ]
      }
    ],
    "package": {
      "name": "python2-pycairo-debugsource",
      "purl": "pkg:rpm/redhat/python2-pycairo-debugsource",
      "ecosystem": "Red Hat:enterprise_linux:8::appstream"
    },
    "database_specific": {
      "source": "https://security.access.redhat.com/data/osv/RHSA-2026:17533.json"
    }
  }
]

Related CVEs: CVE-2026-4150
Source reference: /upstream
CVE-2026-4153
Source reference: /upstream
CVE-2026-4154
Source reference: /upstream
CVE-2026-4887
Source reference: /upstream

Publisher severity

high

Source reference: /severity/0/score

Event: #73013 · Revision 1
Added to Heist Feed: Mon, 26 Oct 2026 00:21:18 GMT
Publisher date: Fri, 15 May 2026 10:15:02 GMT

Read the original announcement

Revision history

26 Oct 2026RHSA-2026:17533 · Revision 1Source updated