Linux · Security advisory · February 21, 2024

ELSA-2024-0861: Security update for 14 packages

ELSA-2024-0861, released February 21, 2024, fixes 2 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.6117
99th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
gimpol 82:2.8.22-25.module+el8.9.0+90151+46a7e4b5
gimp-develol 82:2.8.22-25.module+el8.9.0+90151+46a7e4b5
gimp-devel-toolsol 82:2.8.22-25.module+el8.9.0+90151+46a7e4b5
gimp-libsol 82:2.8.22-25.module+el8.9.0+90151+46a7e4b5
pygobject2ol 80:2.28.7-4.module+el8.9.0+90151+46a7e4b5
pygobject2-codegenol 80:2.28.7-4.module+el8.9.0+90151+46a7e4b5
pygobject2-develol 80:2.28.7-4.module+el8.9.0+90151+46a7e4b5
pygobject2-docol 80:2.28.7-4.module+el8.9.0+90151+46a7e4b5
pygtk2ol 80:2.24.0-25.module+el8.9.0+90151+46a7e4b5
pygtk2-codegenol 80:2.24.0-25.module+el8.9.0+90151+46a7e4b5
pygtk2-develol 80:2.24.0-25.module+el8.9.0+90151+46a7e4b5
pygtk2-docol 80:2.24.0-25.module+el8.9.0+90151+46a7e4b5
python2-cairool 80:1.16.3-6.module+el8.9.0+90151+46a7e4b5
python2-cairo-develol 80:1.16.3-6.module+el8.9.0+90151+46a7e4b5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-44442 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.6117 None reported
High CVE-2023-44444 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.5613 None reported
Showing 1 to 2 of 2 1