Описание
Security update for giflib
This update for giflib fixes the following issues:
- CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).
Список пакетов
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
giflib-devel-5.0.6-13.12.1
giflib-progs-5.0.6-13.12.1
libgif6-5.0.6-13.12.1
libgif6-32bit-5.0.6-13.12.1
Ссылки
- Link for SUSE-SU-2026:1005-1
- E-Mail link for SUSE-SU-2026:1005-1
- SUSE Security Ratings
- SUSE Bug 1259502
- SUSE CVE CVE-2023-39742 page
- SUSE CVE CVE-2026-23868 page
Описание
giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c.
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:giflib-devel-5.0.6-13.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:giflib-progs-5.0.6-13.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgif6-32bit-5.0.6-13.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgif6-5.0.6-13.12.1
Ссылки
- CVE-2023-39742
- SUSE Bug 1214678
Описание
Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:giflib-devel-5.0.6-13.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:giflib-progs-5.0.6-13.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgif6-32bit-5.0.6-13.12.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:libgif6-5.0.6-13.12.1
Ссылки
- CVE-2026-23868
- SUSE Bug 1259502
- SUSE Bug 1262590
- SUSE Bug 1266445