Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:2667-1

Опубликовано: 26 июн. 2026
Источник: suse-cvrf

Описание

Security update for giflib

This update for giflib fixes the following issue

  • CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).

Список пакетов

SUSE Linux Enterprise Server 12 SP5-LTSS
giflib-devel-5.0.6-13.15.1
giflib-progs-5.0.6-13.15.1
libgif6-5.0.6-13.15.1
libgif6-32bit-5.0.6-13.15.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
giflib-devel-5.0.6-13.15.1
giflib-progs-5.0.6-13.15.1
libgif6-5.0.6-13.15.1
libgif6-32bit-5.0.6-13.15.1

Описание

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:giflib-devel-5.0.6-13.15.1
SUSE Linux Enterprise Server 12 SP5-LTSS:giflib-progs-5.0.6-13.15.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libgif6-32bit-5.0.6-13.15.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libgif6-5.0.6-13.15.1

Ссылки