Summary
* Wed Apr 22 2026 Benjamin Otte <botte@redhat.com - 2.36.12-8
- Backport fixes for CVE-2026-5201
- Related: RHEL-163056
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | gdk-pixbuf2 | 0:2.36.12-8.el8_10 |
| Oracle Linux · 8 | gdk-pixbuf2-devel | 0:2.36.12-8.el8_10 |
| Oracle Linux · 8 | gdk-pixbuf2-modules | 0:2.36.12-8.el8_10 |
| Oracle Linux · 8 | gdk-pixbuf2-xlib | 0:2.36.12-8.el8_10 |
| Oracle Linux · 8 | gdk-pixbuf2-xlib-devel | 0:2.36.12-8.el8_10 |
Vulnerabilities 1
-
High 7.5CVE-2026-5201 Public exploit
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this f…