Back Linuxsecurity

Oracle GIMP Important Security Update ELSA-2026-62507

Linuxsecurity •LinuxSecurity Advisories • September 3, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

gimp [2:2.8.22-26.8] - fix CVE-2026-59090 - fix CVE-2026-18301 - fix CVE-2026-18303 - fix CVE-2026-18305 - fix CVE-2026-18306 - fix CVE-2026-66758 - fix CVE-2026-18304 - fix CVE-2026-18307 pygobject2 [2.28.7-5] - bump spec to fix NVR pygtk2 [2.24.0-25] - Fix shebang mangling for _prefix=app (#1907579) - disable numpy for flatpak (#1907579) python2-pycairo [1.16.3-7] - bump spec for NVR fix

gimp-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.x86_64.rpm gimp-devel-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.x86_64.rpm gimp-devel-tools-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.x86_64.rpm gimp-libs-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.x86_64.rpm pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm pygobject2-codegen-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm pygobject2-devel-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm pygobject2-doc-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm pygtk2-codegen-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm pygtk2-devel-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm pygtk2-doc-2.24.0-25.module+el8.9.0+90151+46a7e4b5.noarch.rpm python2-cairo-1.16.3-7.module+el8.10.0+90497+ae78887f.x86_64.rpm python2-cairo-devel-1.16.3-7.module+el8.10.0+90497+ae78887f.x86_64.rpm

gimp-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.aarch64.rpm gimp-devel-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.aarch64.rpm gimp-devel-tools-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.aarch64.rpm gimp-libs-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.aarch64.rpm pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm pygobject2-codegen-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm pygobject2-devel-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm pygobject2-doc-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm pygtk2-codegen-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm pygtk2-devel-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm pygtk2-doc-2.24.0-25.module+el8.9.0+90151+46a7e4b5.noarch.rpm python2-cairo-1.16.3-7.module+el8.10.0+90497+ae78887f.aarch64.rpm python2-cairo-devel-1.16.3-7.module+el8.10.0+90497+ae78887f.aarch64.rpm

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple Oracle Linux Security Updates Address Critical Vulnerabilities Oracle has released multiple security updates for its Linux distributions, addressing several critical vulnerabilities. Key updates include patches for CVE-2026-59090 and CVE-2026-18301 in GIMP, and multiple CVEs in FreeRDP, libssh, and Grafana. Affected systems include Oracle Linux 8, 9, and 10, with vulnerabilities allowing for potential remote code execution and privilege escalation. The updates also resolve issues related to file handling and email verification in Grafana. Administrators are urged to apply these patches promptly to mitigate risks. The updates were published on September 3, 2026, and are part of ongoing efforts to maintain system security. Specific CVEs include CVE-2026-55194, CVE-2026-67288, and CVE-2026-18300, among others. 40 sources 46

Extracted Entities

CVEs (9)

CVE-2026-18301 CVE-2026-18303 CVE-2026-18304 CVE-2026-18305 CVE-2026-18306 CVE-2026-18307 CVE-2026-58380 CVE-2026-59090 CVE-2026-66758

Platforms (1)

Linux