A buffer overflow vulnerability (CVE-2026-26740, CVSS 8.2 HIGH) in the giflib library allows for denial of service via a crafted GIF image processed by the EGifGCBToExtension function. The vulnerability affects giflib version 5.2.2, as confirmed by the NVD. Red Hat has issued an Important security update for giflib packages across multiple RHEL 9 architectures; administrators should apply the referenced patch to affected systems.
Red Hat Product Errata RHSA-2026:33501 - Security Advisory Issued: 2026-06-30 Updated: 2026-06-30 RHSA-2026:33501 - Security Advisory Overview Updated Packages Synopsis Important: giflib security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for giflib is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description giflib is a library for reading and writing gif images. Security Fix(es): giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat CodeReady Linux Builder for x86_64 9 x86_64 Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le Red Hat CodeReady Linux Builder for ARM 64 9 aarch64 Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.8 x86_64 Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.8 s390x Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2448747 - CVE-2026-26740 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension CVEs CVE-2026-26740 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 x86_64 giflib-5.2.1-10.el9_8.2.i686.rpm SHA-256: 579184e8c3b25ff42d75bc05b14b5707cf9a07d0172c1be56a1c6b41bd15e929 giflib-5.2.1-10.el9_8.2.x86_64.rpm SHA-256: 620333ffd5a79a936dd52a58030be1b0a1064398864e41a36bc6befedbe1082e giflib-debuginfo-5.2.1-10.el9_8.2.i686.rpm SHA-256: c7851672663ef0055c4a18ffe5bb0c5bb945cc2f557a3a2952016eb994bb33a6 giflib-debuginfo-5.2.1-10.el9_8.2.x86_64.rpm SHA-256: 939caafeb3a008d9538305f3aad52ae6fe9d3661b8fed08659f1664ffdcbec65 giflib-debugsource-5.2.1-10.el9_8.2.i686.rpm SHA-256: 5c784be4c7c37c5d2ca0182a46025c87a700e269b93128d2acd31a09e0553294 giflib-debugsource-5.2.1-10.el9_8.2.x86_64.rpm SHA-256: b3b10230598ae6a4d79bf270918c2560cdd53ebb845a80f3a7c9fba1087301f2 giflib-utils-debuginfo-5.2.1-10.el9_8.2.i686.rpm SHA-256: c9e68eb2c7f6eb98f66d2d1fb8b2ed6c2ca80dae3d73aeb43d8b4cfd3c5a2036 giflib-utils-debuginfo-5.2.1-10.el9_8.2.x86_64.rpm SHA-256: 3700ec0c88601a22b520263dad5608f9e17a2d8f1e9832c877562828b95e597e Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 x86_64 giflib-5.2.1-10.el9_8.2.i686.rpm SHA-256: 579184e8c3b25ff42d75bc05b14b5707cf9a07d0172c1be56a1c6b41bd15e929 giflib-5.2.1-10.el9_8.2.x86_64.rpm SHA-256: 620333ffd5a79a936dd52a58030be1b0a1064398864e41a36bc6befedbe1082e giflib-debuginfo-5.2.1-10.el9_8.2.i686.rpm SHA-256: c7851672663ef0055c4a18ffe5bb0c5bb945cc2f557a3a2952016eb994bb33a6 giflib-debuginfo-5.2.1-10.el9_8.2.x86_64.rpm SHA-256: 939caafeb3a008d9538305f3aad52ae6fe9d3661b8fed08659f1664ffdcbec65 giflib-debugsource-5.2.1-10.el9_8.2.i686.rpm SHA-256: 5c784be4c7c37c5d2ca0182a46025c87a700e269b93128d2acd31a09e0553294 giflib-debugsource-5.2.1-10.el9_8.2.x86_64.rpm SHA-256: b3b10230598ae6a4d79bf270918c2560cdd53ebb845a80f3a7c9fba1087301f2 giflib-utils-debuginfo-5.2.1-10.el9_8.2.i686.rpm SHA-256: c9e68eb2c7f6eb98f66d2d1fb8b2ed6c2ca80dae3d73aeb43d8b4cfd3c5a2036 giflib-utils-debuginfo-5.2.1-10.el9_8.2.x86_64.rpm SHA-256: 3700ec0c88601a22b520263dad5608f9e17a2d8f1e9832c877562828b95e597e Red Hat Enterprise Linux for IBM z Systems 9 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 s390x giflib-5.2.1-10.el9_8.2.s390x.rpm SHA-256: 787f4c3088ab9ecc95b1927bbdf736dedf9fef02e984a4d4824457b3ba56a33c giflib-debuginfo-5.2.1-10.el9_8.2.s390x.rpm SHA-256: e0fa2b97dcba4647f815b0ca702c298c0be0fb58071ffedde19dd170b6228d28 giflib-debugsource-5.2.1-10.el9_8.2.s390x.rpm SHA-256: 7f1ab2a7c10740f63808462c601e602cddb3684a054d4321cee0035edbc2cf6d giflib-utils-debuginfo-5.2.1-10.el9_8.2.s390x.rpm SHA-256: a1e09a8a9f2396c708c71168e27c77a5334984834b3935595be613633a04a3ca Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 s390x giflib-5.2.1-10.el9_8.2.s390x.rpm SHA-256: 787f4c3088ab9ecc95b1927bbdf736dedf9fef02e984a4d4824457b3ba56a33c giflib-debuginfo-5.2.1-10.el9_8.2.s390x.rpm SHA-256: e0fa2b97dcba4647f815b0ca702c298c0be0fb58071ffedde19dd170b6228d28 giflib-debugsource-5.2.1-10.el9_8.2.s390x.rpm SHA-256: 7f1ab2a7c10740f63808462c601e602cddb3684a054d4321cee0035edbc2cf6d giflib-utils-debuginfo-5.2.1-10.el9_8.2.s390x.rpm SHA-256: a1e09a8a9f2396c708c71168e27c77a5334984834b3935595be613633a04a3ca Red Hat Enterprise Linux for Power, little endian 9 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 ppc64le giflib-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 3255feedfa6943473c6c489af2f0f0a57f47743620b61a60fdd493e1498cada0 giflib-debuginfo-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 62aeb94f95869414c0b53ee927f823affd078af26932840599fdf61c899214c0 giflib-debugsource-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 0e4e4ef7a442cedf7b00329a12174a44478dd0d3266211263acf0f640c5d1259 giflib-utils-debuginfo-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: e0987a00577d1954d2dc4852582b06228578e5637356726a41d7b072226b37a2 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 ppc64le giflib-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 3255feedfa6943473c6c489af2f0f0a57f47743620b61a60fdd493e1498cada0 giflib-debuginfo-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 62aeb94f95869414c0b53ee927f823affd078af26932840599fdf61c899214c0 giflib-debugsource-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 0e4e4ef7a442cedf7b00329a12174a44478dd0d3266211263acf0f640c5d1259 giflib-utils-debuginfo-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: e0987a00577d1954d2dc4852582b06228578e5637356726a41d7b072226b37a2 Red Hat Enterprise Linux for ARM 64 9 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 aarch64 giflib-5.2.1-10.el9_8.2.aarch64.rpm SHA-256: 04205dfdbbeeb2d73c5d3ac925a10bbb8bd90e6660d4652763ed1a7eb1e537a9 giflib-debuginfo-5.2.1-10.el9_8.2.aarch64.rpm SHA-256: d58cc96d18a2157a724abe6d5f01953474c86327b7df2c8305e0cdc90a348629 giflib-debugsource-5.2.1-10.el9_8.2.aarch64.rpm SHA-256: 4ebe178d8e02f66c44f531bc3d7f681124e605b6385742108543f468629e3c37 giflib-utils-debuginfo-5.2.1-10.el9_8.2.aarch64.rpm SHA-256: 151579d4c2e4abbbc7804c5266d7e19b6a063a0c06aaa5b9cf3e32b475952584 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 aarch64 giflib-5.2.1-10.el9_8.2.aarch64.rpm SHA-256: 04205dfdbbeeb2d73c5d3ac925a10bbb8bd90e6660d4652763ed1a7eb1e537a9 giflib-debuginfo-5.2.1-10.el9_8.2.aarch64.rpm SHA-256: d58cc96d18a2157a724abe6d5f01953474c86327b7df2c8305e0cdc90a348629 giflib-debugsource-5.2.1-10.el9_8.2.aarch64.rpm SHA-256: 4ebe178d8e02f66c44f531bc3d7f681124e605b6385742108543f468629e3c37 giflib-utils-debuginfo-5.2.1-10.el9_8.2.aarch64.rpm SHA-256: 151579d4c2e4abbbc7804c5266d7e19b6a063a0c06aaa5b9cf3e32b475952584 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM giflib-5.2.1-10.el9_8.2.src.rpm SHA-256: a49743dcf5cbd2b8d5adbc284500510c3c9ff3d8fa357e2242bebecd6fc6f173 ppc64le giflib-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 3255feedfa6943473c6c489af2f0f0a57f47743620b61a60fdd493e1498cada0 giflib-debuginfo-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 62aeb94f95869414c0b53ee927f823affd078af26932840599fdf61c899214c0 giflib-debugsource-5.2.1-10.el9_8.2.ppc64le.rpm SHA-256: 0e4e4ef7a442cedf7b00329a12174a44478dd0d3266211263acf0f640c5d1259 giflib-utils-debuginfo-5.2.1-10.el9_8.2.p