Back Tenable

RockyLinux 9 : gimp (RLSA-2026:16484) | Tenable®

Tenable • May 14, 2026

CPE : p-cpe:/a:rocky:linux:gimp-debugsource , p-cpe:/a:rocky:linux:gimp , p-cpe:/a:rocky:linux:gimp-debuginfo , p-cpe:/a:rocky:linux:gimp-libs-debuginfo , cpe:/o:rocky:linux:9 , p-cpe:/a:rocky:linux:gimp-libs

Required KB Items : Host/local_checks_enabled , Host/cpu , Host/RockyLinux/release , Host/RockyLinux/rpm-list

Exploit Available : true

Exploit Ease : Exploits are available

Patch Publication Date : 5/14/2026

Vulnerability Publication Date : 3/26/2026

CVE : CVE-2026-4150 , CVE-2026-4151 , CVE-2026-4152 , CVE-2026-4153 , CVE-2026-4154 , CVE-2026-4887

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Discovered in GIMP for Rocky Linux and RHEL 9 A series of vulnerabilities affecting GIMP in Rocky Linux 9 and RHEL 9 have been identified, with multiple CVEs published on March 26, 2026. The vulnerabilities include CVE-2026-4150, CVE-2026-4151, CVE-2026-4152, CVE-2026-4153, CVE-2026-4154, and CVE-2026-4887, all of which have available exploits. The vulnerabilities are categorized under various Common Weakness Enumerations (CWEs), including buffer errors and improper validation. The patch for Rocky Linux was published on May 14, 2026, while RHEL's patch was released on May 12, 2026. Administrators are advised to apply these patches promptly to mitigate potential exploitation. The vulnerabilities affect both distributions' GIMP packages, posing a risk to users and organizations relying on these systems. The current status indicates that exploits are available, heightening the urgency for remediation. 2 sources 71

Extracted Entities

CVEs (6)

CVE-2026-4150 CVE-2026-4151 CVE-2026-4152 CVE-2026-4153 CVE-2026-4154 CVE-2026-4887

Platforms (1)

RockyLinux