Summary
* Tue Apr 21 2026 Benjamin Otte <botte@redhat.com - 2.42.6-6.1
- Backport fixes for CVE-2026-5201
- Related: RHEL-163069
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | gdk-pixbuf2 | 0:2.42.6-6.el9_8.1 |
| Oracle Linux · 9 | gdk-pixbuf2-devel | 0:2.42.6-6.el9_8.1 |
| Oracle Linux · 9 | gdk-pixbuf2-modules | 0:2.42.6-6.el9_8.1 |
Vulnerabilities 1
-
High 7.5CVE-2026-5201 Public exploit
Gdk-pixbuf: gdk-pixbuf: denial of service via heap-based buffer overflow when processing a specially crafted jpeg image
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this f…