Linux · Security advisory · February 13, 2025

RLSA-2025:0746: Security update for 4 packages

RLSA-2025:0746, released February 13, 2025, fixes 3 CVEs across 4 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
3
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.9364
99th percentile

Priority of the 3 CVEs

Patch now 0 Urgent 0 High 3 Routine 0

Fixed package versions

ProductReleaseFixed in
gimprocky 82:2.8.22-26.module+el8.10.0+1927+52edb5a0
pygobject2rocky 80:2.28.7-5.module+el8.10.0+1927+52edb5a0
pygtk2rocky 80:2.24.0-25.module+el8.9.0+1723+9bc93544
python2-pycairorocky 80:1.16.3-7.module+el8.10.0+1927+52edb5a0

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-44443 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.9364 None reported
High CVE-2023-44442 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.6117 None reported
High CVE-2023-44444 gimp: The GIMP (GNU Image Manipulation Program) is an image composition and editing program 7.8 0.5613 None reported
Showing 1 to 3 of 3 1