Описание
Security update for giflib
This update for giflib fixes the following issue
- CVE-2026-26740: heap out-of-bounds read when processing a specially crafted GIF file containing a GCE block with a truncated extension byte count (bsc#1259836).
Список пакетов
SUSE Linux Enterprise Server 12 SP5-LTSS
giflib-devel-5.0.6-13.15.1
giflib-progs-5.0.6-13.15.1
libgif6-5.0.6-13.15.1
libgif6-32bit-5.0.6-13.15.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
giflib-devel-5.0.6-13.15.1
giflib-progs-5.0.6-13.15.1
libgif6-5.0.6-13.15.1
libgif6-32bit-5.0.6-13.15.1
Ссылки
- Link for SUSE-SU-2026:2667-1
- E-Mail link for SUSE-SU-2026:2667-1
- SUSE Security Ratings
- SUSE Bug 1259836
- SUSE CVE CVE-2026-26740 page
Описание
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validating its allocated size.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP5-LTSS:giflib-devel-5.0.6-13.15.1
SUSE Linux Enterprise Server 12 SP5-LTSS:giflib-progs-5.0.6-13.15.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libgif6-32bit-5.0.6-13.15.1
SUSE Linux Enterprise Server 12 SP5-LTSS:libgif6-5.0.6-13.15.1
Ссылки
- CVE-2026-26740
- SUSE Bug 1259836