Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
giflib: Double-free error in GIF image processing
published 6 months ago
Summary
giflib, a library for reading and writing GIF images, has a security issue that can cause memory corruption. This means that if an attacker can make the software process a malicious GIF, they might be able to crash the software or execute unauthorized code. You should update giflib to the latest version to fix this issue.
What to do
- Update almalinux giflib to version 5.2.1-9.el9_7.1.
- Update almalinux giflib-devel to version 5.2.1-9.el9_7.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:9 | almalinux | giflib |
< 5.2.1-9.el9_7.1 Fix: upgrade to 5.2.1-9.el9_7.1
|
| AlmaLinux:9 | almalinux | giflib-devel |
< 5.2.1-9.el9_7.1 Fix: upgrade to 5.2.1-9.el9_7.1
|
Original advisory text
Important: giflib security update
giflib is a library for reading and writing gif images.
Security Fix(es):
* giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Security Fix(es):
* giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References
- https://access.redhat.com/errata/RHSA-2026:8859 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-23868 Third Party Advisory
- https://bugzilla.redhat.com/2446207 Third Party Advisory
- https://errata.almalinux.org/9/ALSA-2026-8859.html Vendor Advisory
Timeline
Published20 Apr 2026
Updated6 May 2026
First seen6 May 2026
Sources
ALSA-2026:8859 · OSV
Track software like this
Free during beta