[CLSA-2026:1793105655] giflib: Fix of 3 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-27 12:54:26 UTC
Description:
- CVE-2020-23922: heap-based buffer over-read in DumpScreen2RGB in gif2rgb - CVE-2023-48161: heap buffer overflow in DumpScreen2RGB in gif2rgb - CVE-2026-23868: double-free in MakeSavedImage on allocation failure
CVEs fixed:
Updated packages:
  • giflib-4.1.6-3.1.el6.tuxcare.els1.i686.rpm
    sha:2c21ad13394e581e4de15185f4636f654c0d1fd1c3c19003cc2f6b003a0eb681
  • giflib-4.1.6-3.1.el6.tuxcare.els1.x86_64.rpm
    sha:7cca33b93012365b19c33a48d4390cb1f16bceed25a11ac2a8d1a1b8d8153916
  • giflib-devel-4.1.6-3.1.el6.tuxcare.els1.i686.rpm
    sha:9005ecda4bc3c7e3ed9cd698db9ca5fb7929015528513d3041f57ed060272270
  • giflib-devel-4.1.6-3.1.el6.tuxcare.els1.x86_64.rpm
    sha:6a0bec832ec1ae4e85c87329e9e5ce37173740cf78dd70f71f67af8da644524c
  • giflib-utils-4.1.6-3.1.el6.tuxcare.els1.i686.rpm
    sha:29cc6a8ed646149c10886d51af79077a21a2b790bdfcbe68d23c4b7c79ebb241
  • giflib-utils-4.1.6-3.1.el6.tuxcare.els1.x86_64.rpm
    sha:e7b6564bbd06d9fdaa9960e6ab46d395e25c6a2c13bc8d7e65cf20625e985a48
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.