GDK-PixBuf could be made to crash or run programs if it opened a specially
crafted file.
Software Description:
- gdk-pixbuf: GDK Pixbuf library
Details:
USN-8156-1 fixed a vulnerability in GDK-PixBuf. This update provides the
corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS.
Original advisory details:
It was discovered that GDK-PixBuf incorrectly handled certain JPEG files.
An attacker could use this issue to cause GDK-PixBuf to crash, resulting
in a denial of service, or possibly execute arbitrary code.
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
libgdk-pixbuf2.0-0 2.40.0+dfsg-3ubuntu0.5+esm3
Available with Ubuntu Pro
Ubuntu 18.04 LTS
libgdk-pixbuf2.0-0 2.36.11-2ubuntu0.1~esm3
Available with Ubuntu Pro
Ubuntu 16.04 LTS
libgdk-pixbuf2.0-0 2.32.2-1ubuntu1.6+esm3
Available with Ubuntu Pro
In general, a standard system update will make all the necessary changes.https://ubuntu.com/security/notices/USN-8156-2
https://ubuntu.com/security/notices/USN-8156-1
CVE-2026-5201
Get the latest Linux and open source security news straight to your inbox.