Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Oracle GDK-Pixbuf2 updated, security fixes applied
published 1 month ago
Summary
The Oracle GDK-Pixbuf2 library and its development and test packages have been upgraded to version 2.36.12-3.0.3, which already includes earlier security patches. This means the previously back‑ported fixes are now built into the main release, so no extra patches are needed. Apply the updated packages to keep the system protected.
What to do
- Update oracle gdk-pixbuf2 to version 2.36.12-3.0.3.el7.tuxcare.els1.
- Update oracle gdk-pixbuf2-devel to version 2.36.12-3.0.3.el7.tuxcare.els1.
- Update oracle gdk-pixbuf2-tests to version 2.36.12-3.0.3.el7.tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:OracleLinux:7 | oracle | gdk-pixbuf2 |
< 2.36.12-3.0.3.el7.tuxcare.els1 Fix: upgrade to 2.36.12-3.0.3.el7.tuxcare.els1
|
| TuxCare:OracleLinux:7 | oracle | gdk-pixbuf2-devel |
< 2.36.12-3.0.3.el7.tuxcare.els1 Fix: upgrade to 2.36.12-3.0.3.el7.tuxcare.els1
|
| TuxCare:OracleLinux:7 | oracle | gdk-pixbuf2-tests |
< 2.36.12-3.0.3.el7.tuxcare.els1 Fix: upgrade to 2.36.12-3.0.3.el7.tuxcare.els1
|
Original advisory text
Update of gdk-pixbuf2
- rebase to 2.36.12-3.0.3.el7
- drop the 2 TuxCare CVE backports; 2.36.12 already incorporates them
- no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative
- drop the 2 TuxCare CVE backports; 2.36.12 already incorporates them
- no TuxCare CVE patches remain; the .tuxcare.elsN suffix keeps the ELS channel authoritative
References
Timeline
Published24 Sep 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1790280575 · OSV
Track software like this
Free during beta