Описание
Security update for giflib
This update for giflib fixes the following issue
- CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).
Список пакетов
Container bci/openjdk-devel:17
libgif7-5.2.2-150000.4.22.1
Container bci/openjdk-devel:21
libgif7-5.2.2-150000.4.22.1
Container bci/openjdk-devel:latest
libgif7-5.2.2-150000.4.22.1
Container bci/openjdk:17
libgif7-5.2.2-150000.4.22.1
Container bci/openjdk:21
libgif7-5.2.2-150000.4.22.1
Container bci/openjdk:latest
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise Server 15 SP4-LTSS
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise Server 15 SP5-LTSS
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise Server 15 SP6-LTSS
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
giflib-devel-5.2.2-150000.4.22.1
libgif7-5.2.2-150000.4.22.1
Ссылки
- Link for SUSE-SU-2026:2666-1
- E-Mail link for SUSE-SU-2026:2666-1
- SUSE Security Ratings
- SUSE Bug 1259836
- SUSE CVE CVE-2026-26740 page
Описание
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.
Затронутые продукты
Container bci/openjdk-devel:17:libgif7-5.2.2-150000.4.22.1
Container bci/openjdk-devel:21:libgif7-5.2.2-150000.4.22.1
Container bci/openjdk-devel:latest:libgif7-5.2.2-150000.4.22.1
Container bci/openjdk:17:libgif7-5.2.2-150000.4.22.1
Ссылки
- CVE-2026-26740
- SUSE Bug 1259836