Vulnerability Database
Blog
FAQ
Docs
RHSA-2025:9165
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2025:9165
Import Source
https://security.access.redhat.com/data/osv/RHSA-2025:9165.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2025:9165
Published
2025-06-17T10:09:38Z
Modified
2025-06-23T10:03:21Z
Upstream
CVE-2025-48797
CVE-2025-48798
CVE-2025-5473
Severity
7.8 (High)
CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: gimp:2.8 security update
Details
References
https://access.redhat.com/errata/RHSA-2025:9165
https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=2368557
https://bugzilla.redhat.com/show_bug.cgi?id=2368558
https://bugzilla.redhat.com/show_bug.cgi?id=2370867
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_9165.json
https://access.redhat.com/security/cve/CVE-2025-5473
https://www.cve.org/CVERecord?id=CVE-2025-5473
https://nvd.nist.gov/vuln/detail/CVE-2025-5473
https://www.gimp.org/news/2025/05/18/gimp-3-0-4-released/#general-bugfixes
https://www.zerodayinitiative.com/advisories/ZDI-25-321/
https://access.redhat.com/security/cve/CVE-2025-48797
https://www.cve.org/CVERecord?id=CVE-2025-48797
https://nvd.nist.gov/vuln/detail/CVE-2025-48797
https://access.redhat.com/security/cve/CVE-2025-48798
https://www.cve.org/CVERecord?id=CVE-2025-48798
https://nvd.nist.gov/vuln/detail/CVE-2025-48798
Affected packages
Red Hat:enterprise_linux:8::appstream
/
gimp
Package
Name
gimp
Purl
pkg:rpm/redhat/gimp
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+23269+4b36efb0.2
Red Hat:enterprise_linux:8::appstream
/
gimp-debuginfo
Package
Name
gimp-debuginfo
Purl
pkg:rpm/redhat/gimp-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+23269+4b36efb0.2
Red Hat:enterprise_linux:8::appstream
/
gimp-debugsource
Package
Name
gimp-debugsource
Purl
pkg:rpm/redhat/gimp-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+23269+4b36efb0.2
Red Hat:enterprise_linux:8::appstream
/
gimp-devel
Package
Name
gimp-devel
Purl
pkg:rpm/redhat/gimp-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+23269+4b36efb0.2
Red Hat:enterprise_linux:8::appstream
/
gimp-devel-tools
Package
Name
gimp-devel-tools
Purl
pkg:rpm/redhat/gimp-devel-tools
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+23269+4b36efb0.2
Red Hat:enterprise_linux:8::appstream
/
gimp-devel-tools-debuginfo
Package
Name
gimp-devel-tools-debuginfo
Purl
pkg:rpm/redhat/gimp-devel-tools-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+23269+4b36efb0.2
Red Hat:enterprise_linux:8::appstream
/
gimp-libs
Package
Name
gimp-libs
Purl
pkg:rpm/redhat/gimp-libs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+23269+4b36efb0.2
Red Hat:enterprise_linux:8::appstream
/
gimp-libs-debuginfo
Package
Name
gimp-libs-debuginfo
Purl
pkg:rpm/redhat/gimp-libs-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+23269+4b36efb0.2
Red Hat:enterprise_linux:8::appstream
/
pygobject2
Package
Name
pygobject2
Purl
pkg:rpm/redhat/pygobject2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
pygobject2-codegen
Package
Name
pygobject2-codegen
Purl
pkg:rpm/redhat/pygobject2-codegen
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
pygobject2-debuginfo
Package
Name
pygobject2-debuginfo
Purl
pkg:rpm/redhat/pygobject2-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
pygobject2-debugsource
Package
Name
pygobject2-debugsource
Purl
pkg:rpm/redhat/pygobject2-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
pygobject2-devel
Package
Name
pygobject2-devel
Purl
pkg:rpm/redhat/pygobject2-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
pygobject2-doc
Package
Name
pygobject2-doc
Purl
pkg:rpm/redhat/pygobject2-doc
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
pygtk2
Package
Name
pygtk2
Purl
pkg:rpm/redhat/pygtk2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Red Hat:enterprise_linux:8::appstream
/
pygtk2-codegen
Package
Name
pygtk2-codegen
Purl
pkg:rpm/redhat/pygtk2-codegen
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Red Hat:enterprise_linux:8::appstream
/
pygtk2-debuginfo
Package
Name
pygtk2-debuginfo
Purl
pkg:rpm/redhat/pygtk2-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Red Hat:enterprise_linux:8::appstream
/
pygtk2-debugsource
Package
Name
pygtk2-debugsource
Purl
pkg:rpm/redhat/pygtk2-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Red Hat:enterprise_linux:8::appstream
/
pygtk2-devel
Package
Name
pygtk2-devel
Purl
pkg:rpm/redhat/pygtk2-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Red Hat:enterprise_linux:8::appstream
/
pygtk2-doc
Package
Name
pygtk2-doc
Purl
pkg:rpm/redhat/pygtk2-doc
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Red Hat:enterprise_linux:8::appstream
/
python2-cairo
Package
Name
python2-cairo
Purl
pkg:rpm/redhat/python2-cairo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
python2-cairo-debuginfo
Package
Name
python2-cairo-debuginfo
Purl
pkg:rpm/redhat/python2-cairo-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
python2-cairo-devel
Package
Name
python2-cairo-devel
Purl
pkg:rpm/redhat/python2-cairo-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
python2-pycairo
Package
Name
python2-pycairo
Purl
pkg:rpm/redhat/python2-pycairo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Red Hat:enterprise_linux:8::appstream
/
python2-pycairo-debugsource
Package
Name
python2-pycairo-debugsource
Purl
pkg:rpm/redhat/python2-pycairo-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
RHSA-2025:9165 - OSV