{"id":"CVE-2026-23868","aliases":["ALSA-2026:19154","ALSA-2026:19367","ALSA-2026:8858","ALSA-2026:8859","ALSA-2026:8861","AZL-79662","BELL-CVE-2026-23868","CLSA-2026-1776936280","CLSA-2026-1776943678","CLSA-2026-1787646995","DEBIAN-CVE-2026-23868","EUVD-2026-10794","GHSA-hq9h-682q-jg37","JLSEC-2026-821","MGASA-2026-0103","OESA-2026-1972","OESA-2026-1973","OESA-2026-1974","OESA-2026-1975","OESA-2026-1976","OESA-2026-2094","RHSA-2026:19154","RHSA-2026:19367","RHSA-2026:8858","RHSA-2026:8859","RHSA-2026:8861","RHSA-2026:8883","RHSA-2026:8884","RHSA-2026:8885","RHSA-2026:8886","RHSA-2026:8887","RHSA-2026:9290","RHSA-2026:9291","RHSA-2026:9292","RHSA-2026:9294","RHSA-2026:9295","RLSA-2026:19154","RLSA-2026:19367","RLSA-2026:8858","RLSA-2026:8859","RLSA-2026:8861","ROOT-OS-DEBIAN-12-CVE-2026-23868","SUSE-SU-2026:1005-1","SUSE-SU-2026:1338-1","SUSE-SU-2026:21368-1","UBUNTU-CVE-2026-23868","USN-8583-1","openSUSE-SU-2026:10326-1","openSUSE-SU-2026:20601-1"],"status":"published","title":"Giflib contains a double-free vulnerability that is the result of a shallow copy in...","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","severity":{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00174,"percentile":0.06894,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415","CWE-825"],"published":"2026-03-10T18:53:25Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"AlmaLinux:10","package":"giflib","fixed_in":["5.2.1-24.el10_2","5.2.1-22.el10_1.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:10","package":"giflib-devel","fixed_in":["5.2.1-24.el10_2","5.2.1-22.el10_1.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"giflib","fixed_in":["5.2.1-10.el9_8.1","5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"giflib-devel","fixed_in":["5.2.1-10.el9_8.1","5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"giflib","fixed_in":["5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"giflib-devel","fixed_in":["5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"giflib","fixed_in":["5.2.1-11"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"giflib","fixed_in":["5.2.2-r3"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"giflib","fixed_in":["5.2.2-r2"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"giflib","fixed_in":["5.2.2-r2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib","fixed_in":["5.2.1-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib-devel","fixed_in":["5.2.1-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib-utils","fixed_in":["5.2.1-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib","fixed_in":["5.2.1-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib-devel","fixed_in":["5.2.1-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib-utils","fixed_in":["5.2.1-9.el9.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"giflib","fixed_in":["5.2.1-2.5+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"giflib","fixed_in":["5.2.2-1+deb13u1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"giflib","fixed_in":["6.1.3-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"Giflib_jll","fixed_in":["6.1.3+0"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"giflib","fixed_in":["5.2.1-7.3.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"giflib","fixed_in":["5.2.2-3.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"giflib","fixed_in":["5.2.2-3.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"giflib","fixed_in":["5.2.2-3.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP2","package":"giflib","fixed_in":["5.2.2-3.oe2403sp2"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"giflib","fixed_in":["5.2.2-3.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"giflib","fixed_in":["5.2.2-3.oe2003sp4"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib","fixed_in":["0:5.2.1-24.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib-debuginfo","fixed_in":["0:5.2.1-24.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib-debugsource","fixed_in":["0:5.2.1-24.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-24.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib-devel","fixed_in":["0:5.2.1-24.el10_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-debuginfo","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-debugsource","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-debuginfo","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-debugsource","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-devel","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib","fixed_in":["0:5.2.1-22.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib-debuginfo","fixed_in":["0:5.2.1-22.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib-debugsource","fixed_in":["0:5.2.1-22.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-22.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib-devel","fixed_in":["0:5.2.1-22.el10_1.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"giflib","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"giflib-debuginfo","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"giflib-debugsource","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"giflib-devel","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"giflib","fixed_in":["0:4.1.6-9.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"giflib-debuginfo","fixed_in":["0:4.1.6-9.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"giflib-devel","fixed_in":["0:4.1.6-9.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_els:7","package":"giflib-utils","fixed_in":["0:4.1.6-9.el7_9.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"giflib","fixed_in":["0:5.1.4-3.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-3.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-3.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-3.el8_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"giflib","fixed_in":["0:5.1.4-3.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-3.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-3.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-3.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"giflib","fixed_in":["0:5.1.4-3.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-3.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-3.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-3.el8_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"giflib","fixed_in":["0:5.1.4-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"giflib","fixed_in":["0:5.1.4-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-3.el8_8.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"giflib","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"giflib","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"giflib","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"giflib-debuginfo","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"giflib-debugsource","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.1.4-3.el8_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib","fixed_in":["0:5.2.1-22.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib-debuginfo","fixed_in":["0:5.2.1-22.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib-debugsource","fixed_in":["0:5.2.1-22.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-22.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib-devel","fixed_in":["0:5.2.1-22.el10_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"giflib","fixed_in":["0:5.2.1-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"giflib-debuginfo","fixed_in":["0:5.2.1-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"giflib-debugsource","fixed_in":["0:5.2.1-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-9.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"giflib","fixed_in":["0:5.2.1-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"giflib-debuginfo","fixed_in":["0:5.2.1-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"giflib-debugsource","fixed_in":["0:5.2.1-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-9.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"giflib","fixed_in":["0:5.2.1-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"giflib-debuginfo","fixed_in":["0:5.2.1-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"giflib-debugsource","fixed_in":["0:5.2.1-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"giflib-debuginfo","fixed_in":["0:5.2.1-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"giflib-debugsource","fixed_in":["0:5.2.1-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"giflib-devel","fixed_in":["0:5.2.1-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-9.el9_6.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"giflib","fixed_in":["0:5.2.1-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"giflib-debuginfo","fixed_in":["0:5.2.1-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"giflib-debugsource","fixed_in":["0:5.2.1-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"giflib-debuginfo","fixed_in":["0:5.2.1-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"giflib-debugsource","fixed_in":["0:5.2.1-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"giflib-devel","fixed_in":["0:5.2.1-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"giflib-utils-debuginfo","fixed_in":["0:5.2.1-9.el9_4.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:10","package":"giflib","fixed_in":["0:5.2.1-24.el10_2","0:5.2.1-22.el10_1.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"giflib","fixed_in":["0:5.2.1-10.el9_8.1","0:5.2.1-9.el9_7.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"giflib","fixed_in":["0:5.1.4-4.el8_10"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"giflib","fixed_in":["5.2.2-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"giflib","fixed_in":["5.2.2-150000.4.19.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"giflib","fixed_in":["5.1.9-2ubuntu0.3"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"giflib","fixed_in":["5.2.2-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"giflib","fixed_in":["5.2.2-1ubuntu3.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"giflib","fixed_in":["5.2.2-3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"giflib","fixed_in":["5.2.2-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:10","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-24.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-24.el10_2"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-22.el10_1.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:10","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-22.el10_1.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-11"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.1-r2"},{"fixed":"5.2.2-r3"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.2-r1"},{"fixed":"5.2.2-r2"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.1-r2"},{"fixed":"5.2.2-r2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"giflib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"giflib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-9.el9.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"giflib-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgif-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libgif7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-2.5+deb12u1"}]}],"versions":["5.2.1-2.5"]},{"source":"osv","ecosystem":"Debian:13","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1+deb13u1"}]}],"versions":["5.2.2-1"]},{"source":"osv","ecosystem":"Debian:14","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.3-1"}]}],"versions":["5.2.2-1"]},{"source":"osv","ecosystem":"Julia","package":"Giflib_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"6.1.3+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.1-7.3.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2403sp2"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-24.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-24.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-24.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-24.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.2","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-24.el10_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:10.1","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_1.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::crb","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.6-9.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.6-9.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.6-9.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"giflib-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.6-9.el7_9.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.2::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_8.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.6::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.6::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-3.el8_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux_eus:10.0","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::crb","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_6.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::appstream","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"giflib-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"giflib-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"giflib-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.4::crb","package":"giflib-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_4.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-24.el10_2"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-10.el9_8.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:10","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-22.el10_1.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.1-9.el9_7.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.1.4-4.el8_10"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.6-13.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-150000.4.19.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.6-11","5.1.1-0ubuntu1","5.1.1-0.1","5.1.1-0.2","5.1.2-0.1","5.1.2-0.2","5.1.4-0.3~16.04","5.1.4-0.3~16.04.1","5.1.4-0.3~16.04.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.4-1","5.1.4-2","5.1.4-2ubuntu0.1","5.1.4-2ubuntu0.1+esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.4-3ubuntu1","5.1.9-1","5.1.9-1ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-2ubuntu0.3"}]}],"versions":["5.1.9-2build1","5.1.9-2build2","5.1.9-2ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1ubuntu1.2"}]}],"versions":["5.2.1-2.5","5.2.2-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.2-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1ubuntu3.2"}]}],"versions":["5.2.2-1ubuntu2","5.2.2-1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.9-2ubuntu0.3"}]}],"versions":["5.1.9-2build1","5.1.9-2build2","5.1.9-2ubuntu0.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1ubuntu1.2"}]}],"versions":["5.2.1-2.5","5.2.2-1ubuntu1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-1ubuntu3.2"}]}],"versions":["5.2.2-1ubuntu2","5.2.2-1ubuntu3"],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"giflib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.2-160000.3.1"}]}]}],"products":[{"vendor":"giflib","product":"giflib"},{"vendor":"giflib_project","product":"giflib"},{"vendor":"red hat","product":"red hat ai inference server 3.2"},{"vendor":"red hat","product":"red hat ai inference server 3.3"},{"vendor":"red hat","product":"red hat enterprise linux 10"},{"vendor":"red hat","product":"red hat enterprise linux 10.0 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 6"},{"vendor":"red hat","product":"red hat enterprise linux 7 extended lifecycle support"},{"vendor":"red hat","product":"red hat enterprise linux 8"},{"vendor":"red hat","product":"red hat enterprise linux 8.2 advanced update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.4 extended update support long-life add-on"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 advanced mission critical update support"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.6 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 telecommunications update service"},{"vendor":"red hat","product":"red hat enterprise linux 8.8 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9"},{"vendor":"red hat","product":"red hat enterprise linux 9.0 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.2 update services for sap solutions"},{"vendor":"red hat","product":"red hat enterprise linux 9.4 extended update support"},{"vendor":"red hat","product":"red hat enterprise linux 9.6 extended update support"}],"references":[{"url":"https://www.facebook.com/security/advisories/cve-2026-23868","tags":["x_refsource_CONFIRM","Third Party Advisory","web","article"]},{"url":"https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7","tags":["x_refsource_CONFIRM","Patch","web","article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23868","tags":["vdb-entry","x_refsource_REDHAT","report","web"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2446207","tags":["issue-tracking","x_refsource_REDHAT","web","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23868.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8883","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9290","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8858","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19154","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8861","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8884","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8885","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8887","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8886","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9291","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9292","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9295","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:9294","tags":["vendor-advisory","x_refsource_REDHAT","web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:8859","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19367","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:25096","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19724","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:19725","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16008","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16030","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16009","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:16174","tags":["vendor-advisory","x_refsource_REDHAT","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23868","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-hq9h-682q-jg37"},{"url":"https://bugzilla.redhat.com/2446207","tags":["report"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-19154.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-19367.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/10/ALSA-2026-8858.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-8859.html","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-8861.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-23868","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1776936280.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1776943678.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787646995.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-23922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40633","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-23868","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2026-0103.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=35264","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ESPOSECITRO4QTJMS7ORKUX7NW3MWCWX/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1972","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1973","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1974","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1975","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1976","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2094","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19154.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23868","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19367.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8858.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8859.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8861.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8883.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8884.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8885.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8886.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8887.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9290.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9291.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9292.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9294.json","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_9295.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19154","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:19367","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:8858","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:8859","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:8861","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261005-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1259502","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39742","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2026-23868","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20261338-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202621368-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-23868","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8583-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-26740","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-23868","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","status":"published","published":"2026-03-10T18:53:25.606Z","modified":"2026-07-15T02:49:19.402Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-415","CWE-825"],"updated_at":"2026-11-02T13:42:15.603999Z"}],"euvd":[{"id":"EUVD-2026-10794","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","status":"published","published":"2026-03-10T18:53:25Z","modified":"2026-07-15T02:49:19Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:19:53.678292Z"}],"ghsa":[{"id":"GHSA-hq9h-682q-jg37","title":"Giflib contains a double-free vulnerability that is the result of a shallow copy in...","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","status":"published","published":"2026-03-10T21:32:17Z","modified":"2026-06-30T03:36:51Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-415","CWE-825"],"updated_at":"2026-11-02T15:09:05.34707Z"}],"nvd":[{"id":"CVE-2026-23868","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","status":"published","published":"2026-03-10T20:16:25.517Z","modified":"2026-07-15T02:18:44.72Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-415","CWE-825"],"updated_at":"2026-11-02T14:12:08.98071Z"}],"osv":[{"id":"BELL-CVE-2026-23868","status":"published","published":"2026-03-13T06:08:18.556505Z","modified":"2026-03-18T08:00:18.597601Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:23.315185Z"},{"id":"DEBIAN-CVE-2026-23868","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","status":"published","published":"2026-03-10T20:16:25.517Z","modified":"2026-10-01T03:03:21.070066528Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:53.516942Z"},{"id":"JLSEC-2026-821","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","status":"published","published":"2026-07-30T15:01:04.165Z","modified":"2026-07-30T15:15:05.096516772Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2026-1972","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.(CVE-2026-23868)","status":"published","published":"2026-04-17T11:10:58Z","modified":"2026-08-18T01:19:39.275716752Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1973","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.(CVE-2026-23868)","status":"published","published":"2026-04-17T11:10:58Z","modified":"2026-08-18T01:19:56.048417218Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1974","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.(CVE-2026-23868)","status":"published","published":"2026-04-17T11:10:58Z","modified":"2026-08-18T01:19:39.258102107Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1975","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.(CVE-2026-23868)","status":"published","published":"2026-04-17T11:10:58Z","modified":"2026-08-18T01:19:39.207190369Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-1976","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.(CVE-2026-23868)","status":"published","published":"2026-04-17T11:10:59Z","modified":"2026-08-18T01:19:47.972788048Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"OESA-2026-2094","title":"giflib security update","description":"giflib is a library of gif images and provides utilities for processing images.\r\n\r\nSecurity Fix(es):\n\nGiflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.(CVE-2026-23868)","status":"published","published":"2026-04-25T11:11:05Z","modified":"2026-08-18T01:19:49.608701083Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:46.087701Z"},{"id":"RHSA-2026:19154","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-05-20T10:10:06Z","modified":"2026-07-15T10:05:33Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.520917Z"},{"id":"RHSA-2026:19367","title":"Red Hat Security Advisory: giflib update","status":"published","published":"2026-05-20T10:10:38Z","modified":"2026-07-15T10:05:43Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:18.983284Z"},{"id":"RHSA-2026:8858","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-20T10:12:24Z","modified":"2026-07-15T10:12:04Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:8859","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-20T10:12:24Z","modified":"2026-07-15T10:12:04Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:8861","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-20T10:12:25Z","modified":"2026-07-15T10:12:05Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"RHSA-2026:8883","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-20T10:12:37Z","modified":"2026-07-15T10:12:09Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:8884","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-20T10:12:37Z","modified":"2026-07-15T10:12:10Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:8885","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-20T10:12:37Z","modified":"2026-07-15T10:12:10Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:8886","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-20T10:12:38Z","modified":"2026-07-15T10:12:11Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:8887","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-20T10:12:38Z","modified":"2026-07-15T10:12:11Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:9290","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-22T10:11:18Z","modified":"2026-07-15T10:12:18Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:9291","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-22T10:11:19Z","modified":"2026-07-15T10:12:19Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:9292","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-22T10:11:19Z","modified":"2026-07-15T10:12:20Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:9294","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-22T10:11:20Z","modified":"2026-07-15T10:12:20Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RHSA-2026:9295","title":"Red Hat Security Advisory: giflib security update","status":"published","published":"2026-04-22T10:11:20Z","modified":"2026-07-15T10:12:21Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"RLSA-2026:19154","title":"Important: giflib security update","description":"giflib is a library for reading and writing gif images.\n\nSecurity Fix(es):\n\n* giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-05-29T16:03:24.060458Z","modified":"2026-05-29T16:30:38.582320289Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:19367","title":"Important: giflib update","description":"Please update","status":"published","published":"2026-05-28T15:43:06.024531Z","modified":"2026-05-28T16:00:31.559748491Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:25.804165Z"},{"id":"RLSA-2026:8858","title":"Important: giflib security update","description":"giflib is a library for reading and writing gif images.\n\nSecurity Fix(es):\n\n* giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-21T12:07:14.17691Z","modified":"2026-04-21T12:30:26.348145Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:8859","title":"Important: giflib security update","description":"giflib is a library for reading and writing gif images.\n\nSecurity Fix(es):\n\n* giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-21T12:03:54.560238Z","modified":"2026-04-21T12:30:11.345917Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"RLSA-2026:8861","title":"Important: giflib security update","description":"giflib is a library for reading and writing gif images.\n\nSecurity Fix(es):\n\n* giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-04-23T12:01:08.67187Z","modified":"2026-04-23T12:30:13.169302Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.76659Z"},{"id":"UBUNTU-CVE-2026-23868","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","status":"published","published":"2026-03-10T20:16:00Z","modified":"2026-07-22T20:45:27.753361305Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:56:04.456047Z"},{"id":"ALSA-2026:19154","title":"Important: giflib security update","description":"giflib is a library for reading and writing gif images.  \n\nSecurity Fix(es):  \n\n  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:30:23.399314256Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:19367","title":"Important: giflib update","description":"Please update\n","status":"published","published":"2026-05-19T00:00:00Z","modified":"2026-10-29T11:32:33.904359414Z","updated_at":"2026-11-02T15:27:53.875139Z"},{"id":"ALSA-2026:8858","title":"Important: giflib security update","description":"giflib is a library for reading and writing gif images.  \n\nSecurity Fix(es):  \n\n  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-20T00:00:00Z","modified":"2026-10-29T11:58:15.347552Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:8859","title":"Important: giflib security update","description":"giflib is a library for reading and writing gif images.  \n\nSecurity Fix(es):  \n\n  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-20T00:00:00Z","modified":"2026-10-29T11:32:32.775603716Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"ALSA-2026:8861","title":"Important: giflib security update","description":"giflib is a library for reading and writing gif images.  \n\nSecurity Fix(es):  \n\n  * giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-04-20T00:00:00Z","modified":"2026-10-29T11:02:25.490205786Z","updated_at":"2026-11-02T15:27:57.367731Z"},{"id":"AZL-79662","title":"CVE-2026-23868 affecting package giflib for versions less than 5.2.1-11","description":"Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.","status":"published","published":"2026-03-10T20:16:25Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:24.800038Z"},{"id":"CLSA-2026-1776936280","title":"giflib: Fix of CVE-2026-23868","description":"- CVE-2026-23868: fix double-free in GifMakeSavedImage","status":"published","published":"2026-04-23T09:24:45Z","modified":"2026-06-01T00:32:25.081453955Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1776943678","title":"giflib: Fix of CVE-2026-23868","description":"- CVE-2026-23868: fix double-free in GifMakeSavedImage","status":"published","published":"2026-04-23T17:50:16Z","modified":"2026-06-01T00:32:49.780649605Z","updated_at":"2026-11-02T15:43:44.384419Z"},{"id":"CLSA-2026-1787646995","title":"Fix CVE(s): CVE-2020-23922, CVE-2021-40633, CVE-2026-23868","description":"   * SECURITY UPDATE: heap buffer over-read in gif2rgb\n     - debian/patches/CVE-2020-23922.patch: bound each pixel index against\n       the active color table before indexing ColorMap-\u003eColors in\n       DumpScreen2RGB in util/gif2rgb.c.\n     - CVE-2020-23922\n   * SECURITY UPDATE: memory leak leading to denial of service\n     - debian/patches/CVE-2021-40633.patch: free every ScreenBuffer row, not\n       just the row-pointer array, at the end of GIF2RGB in\n       util/gif2rgb.c.\n     - CVE-2021-40633\n   * SECURITY UPDATE: double free in GifMakeSavedImage\n     - debian/patches/CVE-2026-23868.patch: null out the heap pointers\n       aliased by the shallow copy of CopyFrom, test the source record when\n       deciding what to deep-copy, and restore ExtensionBlockCount after the\n       extension blocks are copied, in lib/gifalloc.c.\n     - CVE-2026-23868","status":"published","published":"2026-08-25T08:36:48Z","modified":"2026-10-26T09:30:42.804789392Z","updated_at":"2026-11-02T15:43:47.20725Z"},{"id":"MGASA-2026-0103","title":"Updated giflib packages fix security vulnerability","description":"Giflib contains a double-free vulnerability that is the result of a\nshallow copy in GifMakeSavedImage and incorrect error handling. The\nconditions needed to trigger this vulnerability are difficult but may be\npossible. (CVE-2026-23868)\n","status":"published","published":"2026-04-18T16:43:23Z","modified":"2026-04-18T16:45:27.597582Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2026:10326-1","title":"giflib-devel-32bit-5.2.2-3.1 on GA media","description":"These are all security issues fixed in the giflib-devel-32bit-5.2.2-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-03-13T00:00:00Z","modified":"2026-03-14T08:29:16.709735Z","updated_at":"2026-11-02T16:58:38.101535Z"},{"id":"openSUSE-SU-2026:20601-1","title":"Security update for giflib","description":"This update for giflib fixes the following issue:\n\n- CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).\n","status":"published","published":"2026-04-22T08:10:14Z","modified":"2026-04-24T18:24:58.088441Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2026-23868","title":"CVE-2026-23868 in rootio-giflib - Patched by Root","description":"Root has patched CVE-2026-23868 in the rootio-giflib package for Root:Debian:12. Multiple fixed versions available.","status":"withdrawn","published":"2026-06-12T10:07:32Z","modified":"2026-08-27T14:00:07.065831442Z","updated_at":"2026-11-02T15:53:31.773105Z"},{"id":"SUSE-SU-2026:1005-1","title":"Security update for giflib","description":"This update for giflib fixes the following issues:\n\n- CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).\n","status":"published","published":"2026-03-25T09:32:48Z","modified":"2026-03-26T09:00:20.299683Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:1338-1","title":"Security update for giflib","description":"This update for giflib fixes the following issue:\n\n- CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).\n","status":"published","published":"2026-04-15T07:33:53Z","modified":"2026-04-16T08:30:51.261112Z","updated_at":"2026-11-02T15:54:01.262144Z"},{"id":"SUSE-SU-2026:21368-1","title":"Security update for giflib","description":"This update for giflib fixes the following issue:\n\n- CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption (bsc#1259502).\n","status":"published","published":"2026-04-22T08:10:04Z","modified":"2026-04-29T18:23:57.846637Z","updated_at":"2026-11-02T15:54:02.312556Z"},{"id":"USN-8583-1","title":"giflib vulnerabilities","description":"It was discovered that GIFLIB incorrectly handled certain GIF image files.\nIf a user or automated system were tricked into opening a specially crafted\nGIF file, a remote attacker could use this issue to cause GIFLIB to crash,\nresulting in a denial of service, or possibly execute arbitrary code.","status":"published","published":"2026-07-22T12:42:04Z","modified":"2026-07-22T20:59:38.396563207Z","updated_at":"2026-11-02T16:58:25.103481Z"}]}}