Linux · Security advisory · May 13, 2026

ELSA-2026-16484: Security update for 2 packages

ELSA-2026-16484, released May 13, 2026, fixes 6 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0074
54th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
gimpol 92:3.0.4-1.el9_7.5
gimp-libsol 92:3.0.4-1.el9_7.5

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-4152 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0074 None reported
High CVE-2026-4150 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0074 None reported
High CVE-2026-4151 gimp: GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability 7.8 0.0066 None reported
High CVE-2026-4887 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0065 None reported
High CVE-2026-4153 gimp: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 0.0064 None reported
High CVE-2026-4154 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0060 None reported
Showing 1 to 6 of 6 1