- What: Security update for gdk-pixbuf2 in Red Hat Enterprise Linux 9
- Impact: Systems using the affected gdk-pixbuf2 version may be vulnerable to denial of service via heap-based buffer overflow
Red Hat Product Errata RHSA-2026:19210 - Security Advisory Issued: 2026-05-19 Updated: 2026-05-19 RHSA-2026:19210 - Security Advisory Overview Updated Packages Synopsis Important: gdk-pixbuf2 security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for gdk-pixbuf2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The gdk-pixbuf2 packages provide an image loading library that can be extended by loadable modules for new image formats. It is used by toolkits such as GTK+ or clutter. Security Fix(es): gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image (CVE-2026-5201) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2453291 - CVE-2026-5201 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image CVEs CVE-2026-5201 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM gdk-pixbuf2-2.42.6-6.el9_8.1.src.rpm SHA-256: b1ffd42fc9491e4597ba7048913cb4728cdd8cf5d4ae1643570bbcfdd4634003 x86_64 gdk-pixbuf2-2.42.6-6.el9_8.1.i686.rpm SHA-256: 75053f2da26ecec95f16a7403712b6b3e0c69a801e23326337c51d12fa9aef49 gdk-pixbuf2-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 9f4b7fbea0067ef1e461e8785b0c1ca69871ecb4d75764317b394620ad25cfd0 gdk-pixbuf2-debuginfo-2.42.6-6.el9_8.1.i686.rpm SHA-256: 07f8b0b9a2f03fe9f89e2cc81c5bcf333a3f74e407a776e516302ad6af918799 gdk-pixbuf2-debuginfo-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 14872d60ba6965fae48ccf716cc684ad15d583a13eb492544e33268d4135a924 gdk-pixbuf2-debugsource-2.42.6-6.el9_8.1.i686.rpm SHA-256: 7801500b93c14fb5f32d6f8bf062dcb36e9bbdc8fd3295570ec0bf04ec0a1ffc gdk-pixbuf2-debugsource-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 2c2e0db7ab91fd1a5967973966714f5c343713c281f556414d3d24d21a1fd0e7 gdk-pixbuf2-devel-2.42.6-6.el9_8.1.i686.rpm SHA-256: 4efea6992e94f04932ed9f598b36d1f714e58ce8d3ccd2aadf4890308ed93ebb gdk-pixbuf2-devel-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 913989ec54ffb111fe2c8aaa4ba3f628e73db6011920947a86b94f9d5dc3705f gdk-pixbuf2-devel-debuginfo-2.42.6-6.el9_8.1.i686.rpm SHA-256: 98c543bfd280697eaae9c3757d49e41e0ca0be04170902ef4fa2e24d915bdbe7 gdk-pixbuf2-devel-debuginfo-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 94495d1f436ae24145f3750870003b333156cb5f56cb37488b0ca4de8e6b7891 gdk-pixbuf2-modules-2.42.6-6.el9_8.1.i686.rpm SHA-256: 3bc46ee1148fcb1bb5776f71c5099a9d9013c18e12018d29891ec92cc9525ded gdk-pixbuf2-modules-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: f2094979f0733bf272d5924352546abe9bdba935144c00c290fb8fc4ca7d2c92 gdk-pixbuf2-modules-debuginfo-2.42.6-6.el9_8.1.i686.rpm SHA-256: 12e161048feade3667a8e26e1657c24fe804fa941b453e1784cad8be6037d6ba gdk-pixbuf2-modules-debuginfo-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 4861cefd4c776ac7136bea8600953adb6b2ad7caa62c1e729f6a7a6654f16575 gdk-pixbuf2-tests-debuginfo-2.42.6-6.el9_8.1.i686.rpm SHA-256: b9a280a69a53d0a89366571ad5ae239dd5aa7be2c7b3d54da5cd3c71fde3ad28 gdk-pixbuf2-tests-debuginfo-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 745d860ca6060a1bea610411a8d2f6cd623cd40f42fe8a0a61cb0cef18d9e54f Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM gdk-pixbuf2-2.42.6-6.el9_8.1.src.rpm SHA-256: b1ffd42fc9491e4597ba7048913cb4728cdd8cf5d4ae1643570bbcfdd4634003 x86_64 gdk-pixbuf2-2.42.6-6.el9_8.1.i686.rpm SHA-256: 75053f2da26ecec95f16a7403712b6b3e0c69a801e23326337c51d12fa9aef49 gdk-pixbuf2-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 9f4b7fbea0067ef1e461e8785b0c1ca69871ecb4d75764317b394620ad25cfd0 gdk-pixbuf2-debuginfo-2.42.6-6.el9_8.1.i686.rpm SHA-256: 07f8b0b9a2f03fe9f89e2cc81c5bcf333a3f74e407a776e516302ad6af918799 gdk-pixbuf2-debuginfo-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 14872d60ba6965fae48ccf716cc684ad15d583a13eb492544e33268d4135a924 gdk-pixbuf2-debugsource-2.42.6-6.el9_8.1.i686.rpm SHA-256: 7801500b93c14fb5f32d6f8bf062dcb36e9bbdc8fd3295570ec0bf04ec0a1ffc gdk-pixbuf2-debugsource-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 2c2e0db7ab91fd1a5967973966714f5c343713c281f556414d3d24d21a1fd0e7 gdk-pixbuf2-devel-2.42.6-6.el9_8.1.i686.rpm SHA-256: 4efea6992e94f04932ed9f598b36d1f714e58ce8d3ccd2aadf4890308ed93ebb gdk-pixbuf2-devel-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 913989ec54ffb111fe2c8aaa4ba3f628e73db6011920947a86b94f9d5dc3705f gdk-pixbuf2-devel-debuginfo-2.42.6-6.el9_8.1.i686.rpm SHA-256: 98c543bfd280697eaae9c3757d49e41e0ca0be04170902ef4fa2e24d915bdbe7 gdk-pixbuf2-devel-debuginfo-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 94495d1f436ae24145f3750870003b333156cb5f56cb37488b0ca4de8e6b7891 gdk-pixbuf2-modules-2.42.6-6.el9_8.1.i686.rpm SHA-256: 3bc46ee1148fcb1bb5776f71c5099a9d9013c18e12018d29891ec92cc9525ded gdk-pixbuf2-modules-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: f2094979f0733bf272d5924352546abe9bdba935144c00c290fb8fc4ca7d2c92 gdk-pixbuf2-modules-debuginfo-2.42.6-6.el9_8.1.i686.rpm SHA-256: 12e161048feade3667a8e26e1657c24fe804fa941b453e1784cad8be6037d6ba gdk-pixbuf2-modules-debuginfo-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 4861cefd4c776ac7136bea8600953adb6b2ad7caa62c1e729f6a7a6654f16575 gdk-pixbuf2-tests-debuginfo-2.42.6-6.el9_8.1.i686.rpm SHA-256: b9a280a69a53d0a89366571ad5ae239dd5aa7be2c7b3d54da5cd3c71fde3ad28 gdk-pixbuf2-tests-debuginfo-2.42.6-6.el9_8.1.x86_64.rpm SHA-256: 745d860ca6060a1bea610411a8d2f6cd623cd40f42fe8a0a61cb0cef18d9e54f Red Hat Enterprise Linux for IBM z Systems 9 SRPM gdk-pixbuf2-2.42.6-6.el9_8.1.src.rpm SHA-256: b1ffd42fc9491e4597ba7048913cb4728cdd8cf5d4ae1643570bbcfdd4634003 s390x gdk-pixbuf2-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 2deafea60e0ebae934aad7b4c6b4c962fc0ff76841d17e507aaca9c15495ecac gdk-pixbuf2-debuginfo-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 2c13fd33ab7e989d8f509c587be1fdaf804aae7499b572eb3db4e019b9d60397 gdk-pixbuf2-debugsource-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 835cccab19229724973e3421a44bbf3c0984b2c9e241ac8c0ce3c5157c35866d gdk-pixbuf2-devel-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 8c63be6a07348084d40b83a27049745e024fae40bcd1f2d07e1f32fbcb6ec2c0 gdk-pixbuf2-devel-debuginfo-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 1b20b3ff3a15247b1e4b82f501486200d6fe13e78ccfd6c66ff6b3a9dd306a78 gdk-pixbuf2-modules-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 84402e37839ca1fcdeab1589da8399d8edbd5d6193cb7ad4f7ce1db297743426 gdk-pixbuf2-modules-debuginfo-2.42.6-6.el9_8.1.s390x.rpm SHA-256: c457c047d23360519e035f30a4bbbe88e2adbb95d12f57ce1100f30b771dc949 gdk-pixbuf2-tests-debuginfo-2.42.6-6.el9_8.1.s390x.rpm SHA-256: bb3a8d7cdcba155ab5762611d1080b986c5d2200ecf81a0f89e6a5f4a812bd2d Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM gdk-pixbuf2-2.42.6-6.el9_8.1.src.rpm SHA-256: b1ffd42fc9491e4597ba7048913cb4728cdd8cf5d4ae1643570bbcfdd4634003 s390x gdk-pixbuf2-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 2deafea60e0ebae934aad7b4c6b4c962fc0ff76841d17e507aaca9c15495ecac gdk-pixbuf2-debuginfo-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 2c13fd33ab7e989d8f509c587be1fdaf804aae7499b572eb3db4e019b9d60397 gdk-pixbuf2-debugsource-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 835cccab19229724973e3421a44bbf3c0984b2c9e241ac8c0ce3c5157c35866d gdk-pixbuf2-devel-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 8c63be6a07348084d40b83a27049745e024fae40bcd1f2d07e1f32fbcb6ec2c0 gdk-pixbuf2-devel-debuginfo-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 1b20b3ff3a15247b1e4b82f501486200d6fe13e78ccfd6c66ff6b3a9dd306a78 gdk-pixbuf2-modules-2.42.6-6.el9_8.1.s390x.rpm SHA-256: 84402e37839ca1fcdeab1589da8399d8edbd5d6193cb7ad4f7ce1db297743426 gdk-pixbuf2-modules-debuginfo-2.42.6-6.el9_8.1.s390x.rpm SHA-256: c457c047d23360519e035f30a4bbbe88e2adbb95d12f57ce1100f30b771dc949 gdk-pixbuf2-tests-debuginfo-2.42.6-6.el9_8.1.s390x.rpm SHA-256: bb3a8d7cdcba155ab5762611d1080b986c5d2200ecf81a0f89e6a5f4a812bd2d Red Hat Enterprise Linux for Power, little endian 9 SRPM gdk-pixbuf2-2.42.6-6.el9_8.1.src.rpm SHA-256: b1ffd42fc9491e4597ba7048913cb4728cdd8cf5d4ae1643570bbcfdd4634003 ppc64le gdk-pixbuf2-2.42.6-6.el9_8.1.ppc64le.rpm SHA-256: 0ae80bc64aecc47195f616d0b49dec817a9ce0513c66841c39fb4e37f709e492 gdk-pixbuf2-debuginfo-2.42.6-6.el9_8.1.ppc64le.rpm SHA-256: d58285216eabe2646df9da5baace0bdb8ce806eea390621991d771290a51d894 gdk-pixbuf2-debugsource-2.42