Ubuntu alert USN-8156-2 (gdk-pixbuf)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8156-2] GDK-PixBuf vulnerability
Date:
             
 
Tue, 09 Jun 2026 18:26:41 +0000
Message-ID:
             
 
<E1wX19t-0003il-B9@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8156-2
June 09, 2026

gdk-pixbuf vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

GDK-PixBuf could be made to crash or run programs if it opened a specially
crafted file.

Software Description:
- gdk-pixbuf: GDK Pixbuf library

Details:

USN-8156-1 fixed a vulnerability in GDK-PixBuf. This update provides the
corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS.

Original advisory details:

 It was discovered that GDK-PixBuf incorrectly handled certain JPEG  files.
 An attacker could use this issue to cause GDK-PixBuf to  crash, resulting
 in a denial of service, or possibly execute  arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  libgdk-pixbuf2.0-0              2.40.0+dfsg-3ubuntu0.5+esm3
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  libgdk-pixbuf2.0-0              2.36.11-2ubuntu0.1~esm3
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libgdk-pixbuf2.0-0              2.32.2-1ubuntu1.6+esm3
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8156-2
  https://ubuntu.com/security/notices/USN-8156-1
  CVE-2026-5201


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=05Lq
-----END PGP SIGNATURE-----