[El-errata] ELSA-2026-62507-0 Important: Oracle Linux 8 gimp:2.8 security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-62507-0

http://linux.oracle.com/errata/ELSA-2026-62507-0.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
gimp-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.x86_64.rpm
gimp-devel-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.x86_64.rpm
gimp-devel-tools-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.x86_64.rpm
gimp-libs-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.x86_64.rpm
pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm
pygobject2-codegen-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm
pygobject2-devel-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm
pygobject2-doc-2.28.7-5.module+el8.10.0+90497+ae78887f.x86_64.rpm
pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm
pygtk2-codegen-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm
pygtk2-devel-2.24.0-25.module+el8.9.0+90151+46a7e4b5.x86_64.rpm
pygtk2-doc-2.24.0-25.module+el8.9.0+90151+46a7e4b5.noarch.rpm
python2-cairo-1.16.3-7.module+el8.10.0+90497+ae78887f.x86_64.rpm
python2-cairo-devel-1.16.3-7.module+el8.10.0+90497+ae78887f.x86_64.rpm

aarch64:
gimp-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.aarch64.rpm
gimp-devel-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.aarch64.rpm
gimp-devel-tools-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.aarch64.rpm
gimp-libs-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.aarch64.rpm
pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm
pygobject2-codegen-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm
pygobject2-devel-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm
pygobject2-doc-2.28.7-5.module+el8.10.0+90497+ae78887f.aarch64.rpm
pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm
pygtk2-codegen-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm
pygtk2-devel-2.24.0-25.module+el8.9.0+90151+46a7e4b5.aarch64.rpm
pygtk2-doc-2.24.0-25.module+el8.9.0+90151+46a7e4b5.noarch.rpm
python2-cairo-1.16.3-7.module+el8.10.0+90497+ae78887f.aarch64.rpm
python2-cairo-devel-1.16.3-7.module+el8.10.0+90497+ae78887f.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/gimp-2.8.22-26.module+el8.10.0+91014+a7f2de23.8.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/pygobject2-2.28.7-5.module+el8.10.0+90497+ae78887f.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/pygtk2-2.24.0-25.module+el8.9.0+90151+46a7e4b5.src.rpm
http://oss.oracle.com/ol8/SRPMS-updates/python2-pycairo-1.16.3-7.module+el8.10.0+90497+ae78887f.src.rpm

Related CVEs:

CVE-2026-18301
CVE-2026-18303
CVE-2026-18304
CVE-2026-18305
CVE-2026-18306
CVE-2026-18307
CVE-2026-58380
CVE-2026-66758




Description of changes:

gimp
[2:2.8.22-26.8]
- fix CVE-2026-59090
- fix CVE-2026-18301
- fix CVE-2026-18303
- fix CVE-2026-18305
- fix CVE-2026-18306
- fix CVE-2026-66758
- fix CVE-2026-18304
- fix CVE-2026-18307

pygobject2
[2.28.7-5]
- bump spec to fix NVR

pygtk2
[2.24.0-25]
- Fix shebang mangling for _prefix=app (#1907579)
- disable numpy for flatpak (#1907579)

python2-pycairo
[1.16.3-7]
- bump spec for NVR fix