High ELSA-2026-12114 1 CVE

Important: gdk-pixbuf2 security update (Oracle Linux 7)

Published May 21, 2026 · Updated May 21, 2026

Ecosystem: Oracle Linux

Summary

[2.36.12-3.0.3]
- Backport fixes for CVE-2026-5201 [Orabug: 39288631]

[2.36.12-3.0.1]
- jpeg: Be more careful with chunked icc data [Orabug: 38359772][CVE-2025-7345]

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 7	gdk-pixbuf2	0:2.36.12-3.0.3.el7
Oracle Linux · 7	gdk-pixbuf2-devel	0:2.36.12-3.0.3.el7
Oracle Linux · 7	gdk-pixbuf2-tests	0:2.36.12-3.0.3.el7

Vulnerabilities 1

High 7.5

CVE-2026-5201 Public exploit

Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image

A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this f…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Wolfi

Mar 31, 2026