Linux · Security advisory · August 5, 2026

ELSA-2026-50817: Security update for 2 packages

ELSA-2026-50817, released August 5, 2026, fixes 3 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0031

23rd percentile

Patch now 0
                                Urgent 0
                                High 3
                                Routine 0

Fixed package versions

Product	Release	Fixed in
gimp	ol 9	2:3.0.4-4.el9_8.9
gimp-libs	ol 9	2:3.0.4-4.el9_8.9

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-66759	gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program	7.1	0.0031	None reported
High	CVE-2026-66758	gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program	7.8	0.0030	None reported
High	CVE-2026-42169	gimp: A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) file loader of GIMP	7.8	0.0013	None reported