A buffer overflow vulnerability in the EGifGCBToExtension function of giflib (CVE-2026-26740, CVSS 8.2 HIGH) can be exploited to cause a denial of service. According to the NVD, the affected version is giflib 5.2.2; the article provides patched RPM packages for Red Hat Enterprise Linux 8.6 but does not specify the upstream fixed version number.
Red Hat Product Errata RHSA-2026:33455 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33455 - Security Advisory Overview Updated Packages Synopsis Important: giflib security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for giflib is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description giflib is a library for reading and writing gif images. Security Fix(es): giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64 Red Hat Enterprise Linux Server - AUS 8.6 x86_64 Fixes BZ - 2448747 - CVE-2026-26740 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVEs CVE-2026-26740 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 SRPM giflib-5.1.4-3.el8_6.2.src.rpm SHA-256: 4635cbad6201bbadc2f3002ca4bfbd6ec9cc9f8178f93965da7cda8507787d95 x86_64 giflib-5.1.4-3.el8_6.2.i686.rpm SHA-256: e4fbc60a48d8811906bb3654dc916975158c7197c86f35e743f1585be1f29827 giflib-5.1.4-3.el8_6.2.x86_64.rpm SHA-256: 7cb78f8548018146788ffdd3821b38f6e9a72a0cc80c6a3de91dce585d8a0723 giflib-debuginfo-5.1.4-3.el8_6.2.i686.rpm SHA-256: eb499243dda8c485f23d4d93d0fd94c1bf7f617c6717eec118b3afe8b56f1d5c giflib-debuginfo-5.1.4-3.el8_6.2.x86_64.rpm SHA-256: 1318083784ca1185f97c7b6b15d1bab0c56b38bbbdc170f411ab5fc2db41657d giflib-debugsource-5.1.4-3.el8_6.2.i686.rpm SHA-256: 328eab956e882b0df641e398457a8f80e47d7622b43b0d9af96c91870a6748f3 giflib-debugsource-5.1.4-3.el8_6.2.x86_64.rpm SHA-256: dc477aee5aaa8f453d3ea2ed064f47d0345488ec0830c9ec745fcf031ad55011 giflib-utils-debuginfo-5.1.4-3.el8_6.2.i686.rpm SHA-256: 09bb66d37fdaceaf1c264d1e639364173d576e883774de026145e7a9420be8b8 giflib-utils-debuginfo-5.1.4-3.el8_6.2.x86_64.rpm SHA-256: 12267f0e8d83b02a8b06acf4d4b0561eaec7aa04661fdcaf312444262dcaf5d6 Red Hat Enterprise Linux Server - AUS 8.6 SRPM giflib-5.1.4-3.el8_6.2.src.rpm SHA-256: 4635cbad6201bbadc2f3002ca4bfbd6ec9cc9f8178f93965da7cda8507787d95 x86_64 giflib-5.1.4-3.el8_6.2.i686.rpm SHA-256: e4fbc60a48d8811906bb3654dc916975158c7197c86f35e743f1585be1f29827 giflib-5.1.4-3.el8_6.2.x86_64.rpm SHA-256: 7cb78f8548018146788ffdd3821b38f6e9a72a0cc80c6a3de91dce585d8a0723 giflib-debuginfo-5.1.4-3.el8_6.2.i686.rpm SHA-256: eb499243dda8c485f23d4d93d0fd94c1bf7f617c6717eec118b3afe8b56f1d5c giflib-debuginfo-5.1.4-3.el8_6.2.x86_64.rpm SHA-256: 1318083784ca1185f97c7b6b15d1bab0c56b38bbbdc170f411ab5fc2db41657d giflib-debugsource-5.1.4-3.el8_6.2.i686.rpm SHA-256: 328eab956e882b0df641e398457a8f80e47d7622b43b0d9af96c91870a6748f3 giflib-debugsource-5.1.4-3.el8_6.2.x86_64.rpm SHA-256: dc477aee5aaa8f453d3ea2ed064f47d0345488ec0830c9ec745fcf031ad55011 giflib-utils-debuginfo-5.1.4-3.el8_6.2.i686.rpm SHA-256: 09bb66d37fdaceaf1c264d1e639364173d576e883774de026145e7a9420be8b8 giflib-utils-debuginfo-5.1.4-3.el8_6.2.x86_64.rpm SHA-256: 12267f0e8d83b02a8b06acf4d4b0561eaec7aa04661fdcaf312444262dcaf5d6 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .