HighFix available
Red Hat Security Advisory: gimp:2.8 security update
Type: advisorySources: OSV
- Products
- gimp, gimp-debuginfo, gimp-debugsource, gimp-devel, gimp-devel-tools, gimp-devel-tools-debuginfo, gimp-libs, gimp-libs-debuginfo, pygobject2, pygobject2-codegen, pygobject2-debuginfo, pygobject2-debugsource, pygobject2-devel, pygobject2-doc, pygtk2, pygtk2-codegen, pygtk2-debuginfo, pygtk2-debugsource, pygtk2-devel, pygtk2-doc, python2-cairo, python2-cairo-debuginfo, python2-cairo-devel, python2-pycairo, python2-pycairo-debugsource
- Affected versions
- Not specified
- Fixed versions
- 0:1.16.3-7.module+el8.10.0+22676+becd68d6, 0:2.24.0-25.module+el8.9.0+21228+8e80d31d, 0:2.28.7-5.module+el8.10.0+22676+becd68d6, 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
- CVEs
- CVE-2026-18301, CVE-2026-18303, CVE-2026-18304, CVE-2026-18305, CVE-2026-18306, CVE-2026-18307, CVE-2026-58380, CVE-2026-66758
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 06:32 UTC · Revision 1
Source evidence
Red Hat Security Advisory: gimp:2.8 security update
core-osv · Original sourcePublished 2 Sept 2026, 10:22 UTC
Red Hat Security Advisory: gimp:2.8 security update
osv:RHSA-2026:62507
gimp
Fixed versions: 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
gimp-debuginfo
Fixed versions: 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
gimp-debugsource
Fixed versions: 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
gimp-devel
Fixed versions: 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
gimp-devel-tools
Fixed versions: 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
gimp-devel-tools-debuginfo
Fixed versions: 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
gimp-libs
Fixed versions: 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
gimp-libs-debuginfo
Fixed versions: 2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
pygobject2
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
pygobject2-codegen
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
pygobject2-debuginfo
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
pygobject2-debugsource
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
pygobject2-devel
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
pygobject2-doc
Fixed versions: 0:2.28.7-5.module+el8.10.0+22676+becd68d6
pygtk2
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
pygtk2-codegen
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
pygtk2-debuginfo
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
pygtk2-debugsource
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
pygtk2-devel
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
pygtk2-doc
Fixed versions: 0:2.24.0-25.module+el8.9.0+21228+8e80d31d
python2-cairo
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
python2-cairo-debuginfo
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
python2-cairo-devel
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
python2-pycairo
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
python2-pycairo-debugsource
Fixed versions: 0:1.16.3-7.module+el8.10.0+22676+becd68d6
Complete source record
{
"id": "373dfd947b5b259b35fe268e58c70244d7c4cc5faf7a858fdadef73d7f034a06",
"url": "https://osv.dev/vulnerability/RHSA-2026%3A62507",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: gimp:2.8 security update",
"summary": "Red Hat Security Advisory: gimp:2.8 security update",
"evidence": "osv:RHSA-2026:62507",
"products": [
{
"name": {
"value": "gimp",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gimp-debuginfo",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gimp-debugsource",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gimp-devel",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gimp-devel-tools",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gimp-devel-tools-debuginfo",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gimp-libs",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "gimp-libs-debuginfo",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygobject2",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.28.7-5.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygobject2-codegen",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.28.7-5.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygobject2-debuginfo",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.28.7-5.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygobject2-debugsource",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.28.7-5.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygobject2-devel",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.28.7-5.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygobject2-doc",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.28.7-5.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygtk2",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygtk2-codegen",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygtk2-debuginfo",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygtk2-debugsource",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygtk2-devel",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "pygtk2-doc",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2-cairo",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.16.3-7.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2-cairo-debuginfo",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.16.3-7.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2-cairo-devel",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.16.3-7.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2-pycairo",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.16.3-7.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python2-pycairo-debugsource",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.16.3-7.module+el8.10.0+22676+becd68d6",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "RHSA-2026:62507",
"aliases": [
"RHSA-2026:62507"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8"
}
]
}
],
"package": {
"name": "gimp",
"purl": "pkg:rpm/redhat/gimp",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8"
}
]
}
],
"package": {
"name": "gimp-debuginfo",
"purl": "pkg:rpm/redhat/gimp-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8"
}
]
}
],
"package": {
"name": "gimp-debugsource",
"purl": "pkg:rpm/redhat/gimp-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8"
}
]
}
],
"package": {
"name": "gimp-devel",
"purl": "pkg:rpm/redhat/gimp-devel",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8"
}
]
}
],
"package": {
"name": "gimp-devel-tools",
"purl": "pkg:rpm/redhat/gimp-devel-tools",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8"
}
]
}
],
"package": {
"name": "gimp-devel-tools-debuginfo",
"purl": "pkg:rpm/redhat/gimp-devel-tools-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8"
}
]
}
],
"package": {
"name": "gimp-libs",
"purl": "pkg:rpm/redhat/gimp-libs",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8"
}
]
}
],
"package": {
"name": "gimp-libs-debuginfo",
"purl": "pkg:rpm/redhat/gimp-libs-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "pygobject2",
"purl": "pkg:rpm/redhat/pygobject2",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "pygobject2-codegen",
"purl": "pkg:rpm/redhat/pygobject2-codegen",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "pygobject2-debuginfo",
"purl": "pkg:rpm/redhat/pygobject2-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "pygobject2-debugsource",
"purl": "pkg:rpm/redhat/pygobject2-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "pygobject2-devel",
"purl": "pkg:rpm/redhat/pygobject2-devel",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.28.7-5.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "pygobject2-doc",
"purl": "pkg:rpm/redhat/pygobject2-doc",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
}
]
}
],
"package": {
"name": "pygtk2",
"purl": "pkg:rpm/redhat/pygtk2",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
}
]
}
],
"package": {
"name": "pygtk2-codegen",
"purl": "pkg:rpm/redhat/pygtk2-codegen",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
}
]
}
],
"package": {
"name": "pygtk2-debuginfo",
"purl": "pkg:rpm/redhat/pygtk2-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
}
]
}
],
"package": {
"name": "pygtk2-debugsource",
"purl": "pkg:rpm/redhat/pygtk2-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
}
]
}
],
"package": {
"name": "pygtk2-devel",
"purl": "pkg:rpm/redhat/pygtk2-devel",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.24.0-25.module+el8.9.0+21228+8e80d31d"
}
]
}
],
"package": {
"name": "pygtk2-doc",
"purl": "pkg:rpm/redhat/pygtk2-doc",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "python2-cairo",
"purl": "pkg:rpm/redhat/python2-cairo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "python2-cairo-debuginfo",
"purl": "pkg:rpm/redhat/python2-cairo-debuginfo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "python2-cairo-devel",
"purl": "pkg:rpm/redhat/python2-cairo-devel",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "python2-pycairo",
"purl": "pkg:rpm/redhat/python2-pycairo",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.16.3-7.module+el8.10.0+22676+becd68d6"
}
]
}
],
"package": {
"name": "python2-pycairo-debugsource",
"purl": "pkg:rpm/redhat/python2-pycairo-debugsource",
"ecosystem": "Red Hat:enterprise_linux:8::appstream"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
}
}
],
"modified": "2026-10-12T10:06:57Z",
"provider": "osv",
"upstream": [
"CVE-2026-18301",
"CVE-2026-18303",
"CVE-2026-18304",
"CVE-2026-18305",
"CVE-2026-18306",
"CVE-2026-18307",
"CVE-2026-58380",
"CVE-2026-66758"
],
"references": [
"https://access.redhat.com/errata/RHSA-2026:62507",
"https://access.redhat.com/security/updates/classification/#important",
"https://bugzilla.redhat.com/show_bug.cgi?id=2496135",
"https://bugzilla.redhat.com/show_bug.cgi?id=2507475",
"https://bugzilla.redhat.com/show_bug.cgi?id=2520560",
"https://bugzilla.redhat.com/show_bug.cgi?id=2520561",
"https://bugzilla.redhat.com/show_bug.cgi?id=2520582",
"https://bugzilla.redhat.com/show_bug.cgi?id=2520583",
"https://bugzilla.redhat.com/show_bug.cgi?id=2520591",
"https://bugzilla.redhat.com/show_bug.cgi?id=2520594",
"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62507.json",
"https://access.redhat.com/security/cve/CVE-2026-18301",
"https://www.cve.org/CVERecord?id=CVE-2026-18301",
"https://nvd.nist.gov/vuln/detail/CVE-2026-18301",
"https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2772",
"https://www.zerodayinitiative.com/advisories/ZDI-26-454/",
"https://access.redhat.com/security/cve/CVE-2026-18303",
"https://www.cve.org/CVERecord?id=CVE-2026-18303",
"https://nvd.nist.gov/vuln/detail/CVE-2026-18303",
"https://gitlab.gnome.org/GNOME/gimp/-/commit/5633b362026c6e5b2beb559a10cd76fa32a47592",
"https://www.zerodayinitiative.com/advisories/ZDI-26-456/",
"https://access.redhat.com/security/cve/CVE-2026-18304",
"https://www.cve.org/CVERecord?id=CVE-2026-18304",
"https://nvd.nist.gov/vuln/detail/CVE-2026-18304",
"https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32d22c347674fa1bb5b60935c376b673d946e7",
"https://www.zerodayinitiative.com/advisories/ZDI-26-457/",
"https://access.redhat.com/security/cve/CVE-2026-18305",
"https://www.cve.org/CVERecord?id=CVE-2026-18305",
"https://nvd.nist.gov/vuln/detail/CVE-2026-18305",
"https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45a2b51b877829ef523131b50c0eb2a933b8a1",
"https://www.zerodayinitiative.com/advisories/ZDI-26-458/",
"https://access.redhat.com/security/cve/CVE-2026-18306",
"https://www.cve.org/CVERecord?id=CVE-2026-18306",
"https://nvd.nist.gov/vuln/detail/CVE-2026-18306",
"https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5",
"https://www.zerodayinitiative.com/advisories/ZDI-26-459/",
"https://access.redhat.com/security/cve/CVE-2026-18307",
"https://www.cve.org/CVERecord?id=CVE-2026-18307",
"https://nvd.nist.gov/vuln/detail/CVE-2026-18307",
"https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d",
"https://www.zerodayinitiative.com/advisories/ZDI-26-460/",
"https://access.redhat.com/security/cve/CVE-2026-58380",
"https://www.cve.org/CVERecord?id=CVE-2026-58380",
"https://nvd.nist.gov/vuln/detail/CVE-2026-58380",
"https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817",
"https://gitlab.gnome.org/GNOME/gimp/-/issues/16206",
"https://access.redhat.com/security/cve/CVE-2026-66758",
"https://www.cve.org/CVERecord?id=CVE-2026-66758",
"https://nvd.nist.gov/vuln/detail/CVE-2026-66758",
"https://gitlab.gnome.org/GNOME/gimp/-/issues/16528"
]
},
"related_cves": [
{
"value": "CVE-2026-18301",
"evidence": "/upstream"
},
{
"value": "CVE-2026-18303",
"evidence": "/upstream"
},
{
"value": "CVE-2026-18304",
"evidence": "/upstream"
},
{
"value": "CVE-2026-18305",
"evidence": "/upstream"
},
{
"value": "CVE-2026-18306",
"evidence": "/upstream"
},
{
"value": "CVE-2026-18307",
"evidence": "/upstream"
},
{
"value": "CVE-2026-58380",
"evidence": "/upstream"
},
{
"value": "CVE-2026-66758",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 299723,
"published_at": "2026-09-02T10:22:32+00:00"
}