Linux · Security advisory · May 15, 2026

RHSA-2026:17533: Security update for 14 packages

RHSA-2026:17533, released May 15, 2026, fixes 4 CVEs across 14 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
4
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0074
54th percentile

Priority of the 4 CVEs

Patch now 0 Urgent 0 High 4 Routine 0

Fixed package versions

ProductReleaseFixed in
gimpRHEL 82:2.8.22-26.module+el8.10.0+24277+6acc3952.6
gimp-develRHEL 82:2.8.22-26.module+el8.10.0+24277+6acc3952.6
gimp-devel-toolsRHEL 82:2.8.22-26.module+el8.10.0+24277+6acc3952.6
gimp-libsRHEL 82:2.8.22-26.module+el8.10.0+24277+6acc3952.6
pygobject2RHEL 80:2.28.7-5.module+el8.10.0+22676+becd68d6
pygobject2-codegenRHEL 80:2.28.7-5.module+el8.10.0+22676+becd68d6
pygobject2-develRHEL 80:2.28.7-5.module+el8.10.0+22676+becd68d6
pygobject2-docRHEL 80:2.28.7-5.module+el8.10.0+22676+becd68d6
pygtk2RHEL 80:2.24.0-25.module+el8.9.0+21228+8e80d31d
pygtk2-codegenRHEL 80:2.24.0-25.module+el8.9.0+21228+8e80d31d
pygtk2-develRHEL 80:2.24.0-25.module+el8.9.0+21228+8e80d31d
pygtk2-docRHEL 80:2.24.0-25.module+el8.9.0+21228+8e80d31d
python2-cairoRHEL 80:1.16.3-7.module+el8.10.0+22676+becd68d6
python2-cairo-develRHEL 80:1.16.3-7.module+el8.10.0+22676+becd68d6

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-4150 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0074 None reported
High CVE-2026-4887 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0065 None reported
High CVE-2026-4153 gimp: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 0.0064 None reported
High CVE-2026-4154 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0060 None reported
Showing 1 to 4 of 4 1