ELSA-2025-22417

ELSA-2025-22417 - gimp:2.8 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2025-12-01

Description

gimp
[2:2.8.22-26.3]
- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934

[2:2.8.22-26.2]
- fix CVE-2025-5473 (RHEL-95696)

[2:2.8.22-26.1]
- fix CVE-2025-48797 (RHEL-93503)
- fix CVE-2025-48798 (RHEL-93506)

[2:2.28.22-26]
- bump spec

[2:2.8.22-25]
- fix CVE-2023-44442
- fix CVE-2023-44444
- disable gimp-2.8.22-python-path.patch required for flatpak
- partially cherry-pick from upstream commit 2987f012 to fix fclose leak
Resolves: RHEL-17048 RHEL-17060

[2:2.8.22-24]
- fallback to RPM gegl

[2:2.8.22-23]
- enforce gegl04

[2:2.8.22-22]
- change gegl requirement to gegl04

[2:2.8.22-21]
- set manual shebang in python files

[2:2.8.22-20]
- fix python path in source code

pygobject2
[2.28.7-5]
- bump spec to fix NVR

[2.28.7-4]
- update python macro to python2

[2.28.7-3]
- Add MIT license

[2.28.7-2.1]
- Fix python shebangs (#1580854)

[2.28.7-2]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.28.7-1]
- Update to 2.28.7

[2.28.6-19]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[2.28.6-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[2.28.6-17]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[2.28.6-16]
- https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages

pygtk2
[2.24.0-25]
- Fix shebang mangling for _prefix=app (#1907579)
- disable numpy for flatpak (#1907579)

[2.24.0-24]
- remove libglade dependency and sub-package (#1622134)

[2.24.0-23.1]
- fix python2 regex in sed command

[2.24.0-23]
- resotre doc sub package

[2.24.0-22]
- fix python2 macros

[2.24.0-21.1]
- Fix python shebangs (#1580855)

[2.24.0-21]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[2.24.0-20]
- Try again to fix shebangs

[2.24.0-19]
- Fix shebangs

[2.24.0-18]
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

python2-pycairo
[1.16.3-7]
- bump spec for NVR fix

[1.16.3-6]
- Rename pycairo to python2-pycairo (RCM-39388)

[1.16.3-5]
- Add python3 packages (RCM-39388)
- remove python3-test due its missing in build root

[1.16.3-4]
- Setup python2 stream branch for python2 binding of cairo library

[1.16.3-3]
- Remove the python2 subpackages
https://bugzilla.redhat.com/show_bug.cgi?id=1590820

[1.16.3-2]
- Allow Python 2 for build
See: https://hurl.corp.redhat.com/rhel8-py2

- Skip tests on Python 2 (python2-pytest is being removed)

[1.16.3-1]
- Update to 1.16.3

[1.16.1-1]
- Update to 1.16.1

[1.16.0-1]
- Update to 1.16.0

[1.15.6-1]
- Update to 1.15.6

Related CVEs

CVE-2025-10920

CVE-2025-10921

CVE-2025-10922

CVE-2025-10923

CVE-2025-10924

CVE-2025-10925

CVE-2025-10934

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	gimp-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.src.rpm	03edaabc6b14407e94f18451b4b35250fed4cea8a37a22408e3955cd472f3e0f	-	ol8_aarch64_appstream
	pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.src.rpm	f2b6af9a436a0ac325d7ed2dc45c5c7d2b479753d5bcc456fc952e48cd198892	-	ol8_aarch64_appstream
	pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.src.rpm	f039bb4150fe124bdb1b2ad25a51fbccdb61b56e76e2eceb04626322eb3bf1b0	-	ol8_aarch64_appstream
	python2-pycairo-1.16.3-7.module+el8.10.0+90497+ae78887f.src.rpm	546c0b737a1ad1280ea1fa8b46867e48a644d1b38f71b1f44c0597141d220365	-	ol8_aarch64_appstream
	gimp-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.aarch64.rpm	3009b8e280e3d5d4877d88d280ec1c706519670b33fd3a32bc371ec1594d9c6e	-	ol8_aarch64_appstream
	gimp-devel-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.aarch64.rpm	692dcfca83d22c8871271f10637027f595654d5186abe3fffc6fb0fda5ca8d28	-	ol8_aarch64_appstream
	gimp-devel-tools-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.aarch64.rpm	11c9df506b3ae3fc6d5de0db1fc25d55019a12fc0ac28526e9be1f7b1e18fd92	-	ol8_aarch64_appstream
	gimp-libs-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.aarch64.rpm	71afd526ef5601599909c64096fb6f1b58ce73c1da9c4236593490384a28165f	-	ol8_aarch64_appstream
	pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm	697745da92fdda68afc4a28ebab9bb0108a616c18f5179f318a6aa1872a6e866	-	ol8_aarch64_appstream
	pygobject2-codegen-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm	7ba269d3b647be8cf33097fc7a82228e5073485dc794524f756849b961ca1cf6	-	ol8_aarch64_appstream
	pygobject2-devel-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm	2da7da07bc9349133b9c3ffb0e74131db72024531aa526b8a3e8cec89b62ca75	-	ol8_aarch64_appstream
	pygobject2-doc-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm	2f593b1f9ec7099e8c71b89d0e680fdf6aaa38675d8ae8843ed372df40906ca6	-	ol8_aarch64_appstream
	pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm	ebcba5b9fd0a569644e692d18ee447b11aefdc546dcee720c2ea3cbdc4f4b890	-	ol8_aarch64_appstream
	pygtk2-codegen-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm	6804209be9d482549468d30e62e8fec965696076554db653e28f07504e107fbd	-	ol8_aarch64_appstream
	pygtk2-devel-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm	63f1c4141df33d4f13da5c4b6737af826b7f837ac3c52da55e7522ba1cbdc31f	-	ol8_aarch64_appstream
	pygtk2-doc-2.24.0-25.module+el8.9.0+90151+46a7e4b5.noarch.rpm	08de36761520a45a1ff60fbd54e511ebc7e03e1abfa95c8938c1b3cda33009e0	-	ol8_aarch64_appstream
	python2-cairo-1.16.3-7.module+el8.10.0+90497+ae78887f.aarch64.rpm	b3525b5ea4f9c6c2d1fe567bed6099962fb2dfd29bede936970a073d3c07072d	-	ol8_aarch64_appstream
	python2-cairo-devel-1.16.3-7.module+el8.10.0+90497+ae78887f.aarch64.rpm	f5184a0c70a5101af09574f608dc5d57525d954a4c7e0068dfb0eee4cb6a28b7	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	gimp-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.src.rpm	03edaabc6b14407e94f18451b4b35250fed4cea8a37a22408e3955cd472f3e0f	-	ol8_x86_64_appstream
	pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.src.rpm	f2b6af9a436a0ac325d7ed2dc45c5c7d2b479753d5bcc456fc952e48cd198892	-	ol8_x86_64_appstream
	pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.src.rpm	f039bb4150fe124bdb1b2ad25a51fbccdb61b56e76e2eceb04626322eb3bf1b0	-	ol8_x86_64_appstream
	python2-pycairo-1.16.3-7.module+el8.10.0+90497+ae78887f.src.rpm	546c0b737a1ad1280ea1fa8b46867e48a644d1b38f71b1f44c0597141d220365	-	ol8_x86_64_appstream
	gimp-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.x86_64.rpm	80ff81f2a82c0768fbb52cbe52909645d2ee64f2538402e0472be4e221d1af02	-	ol8_x86_64_appstream
	gimp-devel-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.x86_64.rpm	338f423cf81e04fb3feaa5aa8db40d43f2e60a84c399b70bba4894a4f5b112aa	-	ol8_x86_64_appstream
	gimp-devel-tools-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.x86_64.rpm	4719f5b63cb2f320c5354ada1a4551d9aa191eac43937a0624fb54752e774733	-	ol8_x86_64_appstream
	gimp-libs-2.8.22-26.module+el8.10.0+90712+2a2d9b57.3.x86_64.rpm	e10a7636ce3c50b7b31bb53ced954344707b93b2919e08ede6eef0c206105941	-	ol8_x86_64_appstream
	pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm	57ae4e3ea05328596812a517c996ea4c9adda0c7f2e28bcb4d25ca6c0020a5ad	-	ol8_x86_64_appstream
	pygobject2-codegen-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm	8d5aa2c450cd2cb6037dfd721fd424e6a64f83b3b0febd08941dd447aa4536fc	-	ol8_x86_64_appstream
	pygobject2-devel-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm	3876c60435a4a075833ef14beea16bb74dae21a98c36e9e8174969c6ceb62aba	-	ol8_x86_64_appstream
	pygobject2-doc-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm	32032c9385ad1f1d6551945f5d722197f6eaf56050a9fb452b675ca5ef6570eb	-	ol8_x86_64_appstream
	pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm	3231b036ebfb1ddcfee4cc0a0dfb016c3d08200decd7bf96fe65c2d3853a9c55	-	ol8_x86_64_appstream
	pygtk2-codegen-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm	f54b672a43d5be06fbe020c956a9041a7d9cb7ccda3d55ee88aefdaeef4a0d47	-	ol8_x86_64_appstream
	pygtk2-devel-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm	ce2349c3fc91801f567947f237a419c664226e9230a0ba204cb15d57c0b4f711	-	ol8_x86_64_appstream
	pygtk2-doc-2.24.0-25.module+el8.9.0+90151+46a7e4b5.noarch.rpm	08de36761520a45a1ff60fbd54e511ebc7e03e1abfa95c8938c1b3cda33009e0	-	ol8_x86_64_appstream
	python2-cairo-1.16.3-7.module+el8.10.0+90497+ae78887f.x86_64.rpm	affb725f331e18fc5cae82b37832af8e4d99ddb1d4db6fa6aebc9e966bb84da5	-	ol8_x86_64_appstream
	python2-cairo-devel-1.16.3-7.module+el8.10.0+90497+ae78887f.x86_64.rpm	7b80515f9bbff35c9e70bb6d7b53409aacbdcf8b830641a1cb6d6acb96e3b755	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team