Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
RHSA-2026:62507
See a problem?
Please try reporting it
to the source
first.
Source
https://access.redhat.com/errata/RHSA-2026:62507
Import Source
https://security.access.redhat.com/data/osv/RHSA-2026:62507.json
JSON Data
https://api.osv.dev/v1/vulns/RHSA-2026:62507
Upstream
CVE-2026-18301
CVE-2026-18303
CVE-2026-18304
CVE-2026-18305
CVE-2026-18306
CVE-2026-18307
CVE-2026-58380
CVE-2026-66758
Published
2026-09-02T10:22:32Z
Modified
2026-09-03T10:14:24Z
Severity
7.8 (High)
CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
Red Hat Security Advisory: gimp:2.8 security update
Details
References
https://access.redhat.com/errata/RHSA-2026:62507
https://access.redhat.com/security/updates/classification/#important
https://bugzilla.redhat.com/show_bug.cgi?id=2496135
https://bugzilla.redhat.com/show_bug.cgi?id=2507475
https://bugzilla.redhat.com/show_bug.cgi?id=2520560
https://bugzilla.redhat.com/show_bug.cgi?id=2520561
https://bugzilla.redhat.com/show_bug.cgi?id=2520582
https://bugzilla.redhat.com/show_bug.cgi?id=2520583
https://bugzilla.redhat.com/show_bug.cgi?id=2520591
https://bugzilla.redhat.com/show_bug.cgi?id=2520594
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62507.json
https://access.redhat.com/security/cve/CVE-2026-18301
https://www.cve.org/CVERecord?id=CVE-2026-18301
https://nvd.nist.gov/vuln/detail/CVE-2026-18301
https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/2772
https://www.zerodayinitiative.com/advisories/ZDI-26-454/
https://access.redhat.com/security/cve/CVE-2026-18303
https://www.cve.org/CVERecord?id=CVE-2026-18303
https://nvd.nist.gov/vuln/detail/CVE-2026-18303
https://gitlab.gnome.org/GNOME/gimp/-/commit/5633b362026c6e5b2beb559a10cd76fa32a47592
https://www.zerodayinitiative.com/advisories/ZDI-26-456/
https://access.redhat.com/security/cve/CVE-2026-18304
https://www.cve.org/CVERecord?id=CVE-2026-18304
https://nvd.nist.gov/vuln/detail/CVE-2026-18304
https://gitlab.gnome.org/GNOME/gimp/-/commit/ad32d22c347674fa1bb5b60935c376b673d946e7
https://www.zerodayinitiative.com/advisories/ZDI-26-457/
https://access.redhat.com/security/cve/CVE-2026-18305
https://www.cve.org/CVERecord?id=CVE-2026-18305
https://nvd.nist.gov/vuln/detail/CVE-2026-18305
https://gitlab.gnome.org/GNOME/gimp/-/commit/0a45a2b51b877829ef523131b50c0eb2a933b8a1
https://www.zerodayinitiative.com/advisories/ZDI-26-458/
https://access.redhat.com/security/cve/CVE-2026-18306
https://www.cve.org/CVERecord?id=CVE-2026-18306
https://nvd.nist.gov/vuln/detail/CVE-2026-18306
https://gitlab.gnome.org/GNOME/gimp/-/commit/76531da9732f38566e5fd8f8f80c837158511ae5
https://www.zerodayinitiative.com/advisories/ZDI-26-459/
https://access.redhat.com/security/cve/CVE-2026-18307
https://www.cve.org/CVERecord?id=CVE-2026-18307
https://nvd.nist.gov/vuln/detail/CVE-2026-18307
https://gitlab.gnome.org/GNOME/gimp/-/commit/bace3e7fd54104fe6b70c1703e9b982a4770811d
https://www.zerodayinitiative.com/advisories/ZDI-26-460/
https://access.redhat.com/security/cve/CVE-2026-58380
https://www.cve.org/CVERecord?id=CVE-2026-58380
https://nvd.nist.gov/vuln/detail/CVE-2026-58380
https://gitlab.gnome.org/GNOME/gimp/-/commit/83699817
https://gitlab.gnome.org/GNOME/gimp/-/issues/16206
https://access.redhat.com/security/cve/CVE-2026-66758
https://www.cve.org/CVERecord?id=CVE-2026-66758
https://nvd.nist.gov/vuln/detail/CVE-2026-66758
https://gitlab.gnome.org/GNOME/gimp/-/issues/16528
Affected packages
Red Hat:enterprise_linux:8::appstream
gimp
Package
Name
gimp
Purl
pkg:rpm/redhat/gimp
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
gimp-debuginfo
Package
Name
gimp-debuginfo
Purl
pkg:rpm/redhat/gimp-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
gimp-debugsource
Package
Name
gimp-debugsource
Purl
pkg:rpm/redhat/gimp-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
gimp-devel
Package
Name
gimp-devel
Purl
pkg:rpm/redhat/gimp-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
gimp-devel-tools
Package
Name
gimp-devel-tools
Purl
pkg:rpm/redhat/gimp-devel-tools
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
gimp-devel-tools-debuginfo
Package
Name
gimp-devel-tools-debuginfo
Purl
pkg:rpm/redhat/gimp-devel-tools-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
gimp-libs
Package
Name
gimp-libs
Purl
pkg:rpm/redhat/gimp-libs
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
gimp-libs-debuginfo
Package
Name
gimp-libs-debuginfo
Purl
pkg:rpm/redhat/gimp-libs-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
2:2.8.22-26.module+el8.10.0+24752+9e6a86ef.8
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygobject2
Package
Name
pygobject2
Purl
pkg:rpm/redhat/pygobject2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygobject2-codegen
Package
Name
pygobject2-codegen
Purl
pkg:rpm/redhat/pygobject2-codegen
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygobject2-debuginfo
Package
Name
pygobject2-debuginfo
Purl
pkg:rpm/redhat/pygobject2-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygobject2-debugsource
Package
Name
pygobject2-debugsource
Purl
pkg:rpm/redhat/pygobject2-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygobject2-devel
Package
Name
pygobject2-devel
Purl
pkg:rpm/redhat/pygobject2-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygobject2-doc
Package
Name
pygobject2-doc
Purl
pkg:rpm/redhat/pygobject2-doc
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.28.7-5.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygtk2
Package
Name
pygtk2
Purl
pkg:rpm/redhat/pygtk2
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygtk2-codegen
Package
Name
pygtk2-codegen
Purl
pkg:rpm/redhat/pygtk2-codegen
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygtk2-debuginfo
Package
Name
pygtk2-debuginfo
Purl
pkg:rpm/redhat/pygtk2-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygtk2-debugsource
Package
Name
pygtk2-debugsource
Purl
pkg:rpm/redhat/pygtk2-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygtk2-devel
Package
Name
pygtk2-devel
Purl
pkg:rpm/redhat/pygtk2-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
pygtk2-doc
Package
Name
pygtk2-doc
Purl
pkg:rpm/redhat/pygtk2-doc
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:2.24.0-25.module+el8.9.0+21228+8e80d31d
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
python2-cairo
Package
Name
python2-cairo
Purl
pkg:rpm/redhat/python2-cairo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
python2-cairo-debuginfo
Package
Name
python2-cairo-debuginfo
Purl
pkg:rpm/redhat/python2-cairo-debuginfo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
python2-cairo-devel
Package
Name
python2-cairo-devel
Purl
pkg:rpm/redhat/python2-cairo-devel
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
python2-pycairo
Package
Name
python2-pycairo
Purl
pkg:rpm/redhat/python2-pycairo
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
python2-pycairo-debugsource
Package
Name
python2-pycairo-debugsource
Purl
pkg:rpm/redhat/python2-pycairo-debugsource
Affected ranges
Type
ECOSYSTEM
Events
Introduced
0
Unknown introduced version / All previous versions are affected
Fixed
0:1.16.3-7.module+el8.10.0+22676+becd68d6
Database specific
source
"https://security.access.redhat.com/data/osv/RHSA-2026:62507.json"
RHSA-2026:62507 - OSV