What is RHSA-2026:25899?

RHSA-2026:25899 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: gimp security update

Which CVE IDs does RHSA-2026:25899 cover?

RHSA-2026:25899 covers the following CVE IDs: CVE-2026-4154, CVE-2026-4887, CVE-2026-4150, CVE-2026-4152, CVE-2026-4153. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2026:25899?

RHSA-2026:25899 has a CVSS v3 base score of 7.8, published by Red Hat Product Security.

RHSA-2026:25899HighCVSS 7.8

Red Hat Security Advisory: gimp security update

Vendor

Red Hat Product Security

Published

June 15, 2026

Last Modified

June 16, 2026

🔗 CVE IDs covered (5)

CVE-2026-4154 →CVE-2026-4887 →CVE-2026-4150 →CVE-2026-4152 →CVE-2026-4153 →

📋 Description

CVE-2026-4150 — GIMP: GIMP: Arbitrary code execution via specially crafted PSD file CVE-2026-4152 — gimp: GIMP: Remote Code Execution via malicious JP2 file parsing CVE-2026-4153 — gimp: GIMP: Remote Code Execution via PSP file parsing CVE-2026-4154 — gimp: GIMP: Remote Code Execution via XPM File Parsing Integer Overflow CVE-2026-4887 — gimp: GIMP:Memory disclosure and denial of service via specially crafted PCX image

🔗 References (8)

selfhttps://access.redhat.com/errata/RHSA-2026:25899
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2451669
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2457530
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2457533
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2457535
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2457536
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_25899.json