Updated giflib packages fix a security vulnerability
Publication date: 25 Jul 2026Modification date: 25 Jul 2026
Type: security
Affected Mageia releases : 10 , 9
CVE: CVE-2026-26740
Description
The updated packages fix a security vulnerability:
Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker
to cause a denial of service via the EGifGCBToExtension overwriting an
existing Graphic Control Extension block without validating its
allocated size. (CVE-2026-26740)
References
- https://bugs.mageia.org/show_bug.cgi?id=35614
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AG6LRGR6CTYC6R6KKFK2YTY2NJNGE62F/
- https://github.com/zakkanijia/POC/blob/main/giflib/giftool/giflib_giftool_gce_len_heap_oobwrite_disclosure.md
- https://sourceforge.net/p/giflib/bugs/199/
- https://www.cve.org/CVERecord?id=CVE-2026-26740
SRPMS
10/core
- giflib-5.2.2-4.1.mga10
9/core
- giflib-5.2.1-7.4.mga9