Advisories » MGASA-2026-0550

Updated perl-Imager package fixes a security vulnerability

Publication date: 27 Oct 2026
Modification date: 27 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-112202

Description

Heap out-of-bounds read in Imager::File::GIF gif_consolidate reader
(i_readgif_low) via crafted colour-map index. (CVE-2026-112202)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36557
• https://www.openwall.com/lists/oss-security/2026/10/21/1
• https://metacpan.org/release/TONYC/Imager-1.040/changes
• https://github.com/tonycoz/imager/security/advisories/GHSA-v4hp-5h6w-9897
• https://www.cve.org/CVERecord?id=CVE-2026-112202

SRPMS

10/core

• perl-Imager-1.40.0-1.mga10