Linux · Security advisory · March 19, 2026

ELSA-2026-5113: Security update for 14 packages

ELSA-2026-5113, released March 19, 2026, fixes 4 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0529
92nd percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
gimpol 82:2.8.22-26.module+el8.10.0+90845+49de5bf7.5
gimp-develol 82:2.8.22-26.module+el8.10.0+90845+49de5bf7.5
gimp-devel-toolsol 82:2.8.22-26.module+el8.10.0+90845+49de5bf7.5
gimp-libsol 82:2.8.22-26.module+el8.10.0+90845+49de5bf7.5
pygobject2ol 80:2.28.7-5.module+el8.10.0+90497+ae78887f
pygobject2-codegenol 80:2.28.7-5.module+el8.10.0+90497+ae78887f
pygobject2-develol 80:2.28.7-5.module+el8.10.0+90497+ae78887f
pygobject2-docol 80:2.28.7-5.module+el8.10.0+90497+ae78887f
pygtk2ol 80:2.24.0-25.module+el8.9.0+90151+46a7e4b5
pygtk2-codegenol 80:2.24.0-25.module+el8.9.0+90151+46a7e4b5
pygtk2-develol 80:2.24.0-25.module+el8.9.0+90151+46a7e4b5
pygtk2-docol 80:2.24.0-25.module+el8.9.0+90151+46a7e4b5
python2-cairool 80:1.16.3-7.module+el8.10.0+90497+ae78887f
python2-cairo-develol 80:1.16.3-7.module+el8.10.0+90497+ae78887f

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-2045 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 8.8 0.0529 None reported
High CVE-2026-0797 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 8.8 0.0132 None reported
High CVE-2026-2044 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 8.8 0.0111 None reported
High CVE-2026-2048 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 8.8 0.0071 None reported
Showing 1 to 4 of 4 1