Linux · Security advisory · May 15, 2026

RHSA-2026:19362: Security update for 2 packages

RHSA-2026:19362, released May 15, 2026, fixes 6 CVEs across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
6
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0074
54th percentile

Priority of the 6 CVEs

Patch now 0 Urgent 0 High 6 Routine 0

Fixed package versions

ProductReleaseFixed in
gimpRHEL 92:3.0.4-4.el9_8.4
gimp-libsRHEL 92:3.0.4-4.el9_8.4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-4152 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0074 None reported
High CVE-2026-4150 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0074 None reported
High CVE-2026-4151 gimp: GIMP ANI File Parsing Integer Overflow Remote Code Execution Vulnerability 7.8 0.0066 None reported
High CVE-2026-4887 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0065 None reported
High CVE-2026-4153 gimp: GIMP PSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.8 0.0064 None reported
High CVE-2026-4154 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.0060 None reported
Showing 1 to 6 of 6 1