Home / mailings

PDF

[USN-8156-2] GDK-PixBuf vulnerability

Posted on 09 June 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8156-2
June 09, 2026

gdk-pixbuf vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

GDK-PixBuf could be made to crash or run programs if it opened a specially
crafted file.

Software Description:
- gdk-pixbuf: GDK Pixbuf library

Details:

USN-8156-1 fixed a vulnerability in GDK-PixBuf. This update provides the
corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS.

Original advisory details:

It was discovered that GDK-PixBuf incorrectly handled certain JPEG files.
An attacker could use this issue to cause GDK-PixBuf to crash, resulting
in a denial of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
libgdk-pixbuf2.0-0 2.40.0+dfsg-3ubuntu0.5+esm3
Available with Ubuntu Pro

Ubuntu 18.04 LTS
libgdk-pixbuf2.0-0 2.36.11-2ubuntu0.1~esm3
Available with Ubuntu Pro

Ubuntu 16.04 LTS
libgdk-pixbuf2.0-0 2.32.2-1ubuntu1.6+esm3
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8156-2
https://ubuntu.com/security/notices/USN-8156-1
CVE-2026-5201

--===============4799013729096838994==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP