Most recent entries from all

ALSA-2026:19154 — Important: giflib security update

Affected: AlmaLinux:10: giflib, AlmaLinux:10: giflib-devel

giflib is a library for reading and writing gif images.

Security Fix(es):

* giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2026-09834

BELL-CVE-2026-23868

Affected: Alpaquita:23: giflib, Alpaquita:25: giflib, Alpaquita:stream: giflib

certfr-2026-avi-0299 — De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoqu…

certfr-2026-avi-0299

Withdrawn: CLEANSTART-2026-AM39668 — yawkat LZ4 Java provides LZ4 compression for Java

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.

EUVD-2026-337786

fkie_cve-2026-23868

Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect error handling. The conditions needed to trigger this vulnerability are difficult but may be possible.

GHSA-hq9h-682q-jg37

msrc_CVE-2026-23868 — Giflib contains a double-free vulnerability that is the result of a shallow copy in GifMakeSavedImage and incorrect err…

msrc_CVE-2026-23868

OESA-2026-1972 — giflib security update

Affected: openEuler:22.03-LTS-SP4: giflib

giflib is a library of gif images and provides utilities for processing images. Security Fix(es):

openSUSE-SU-2026:10326-1 — giflib-devel-32bit-5.2.2-3.1 on GA media

giflib-devel-32bit-5.2.2-3.1 on GA media

RHSA-2026:16008 — Red Hat Security Advisory: Red Hat AI Inference Server Model Optimization Tools 3.3.3 (CUDA)

libxslt: Processing web content may disclose sensitive information gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing python: Python: Command-line option injection in webbrowser.open() via crafted URLs libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image giflib: Giflib: Double-free vulnerability leading to memory corruption vim: Vim: Arbitrary code execution via 'helpfile' option processing nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin vim: Vim: Denial of service and information disclosure via crafted swap file vim: Vim: Arbitrary code execution via command injection in glob() function Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing Pillow: Pillow: Denial of Service via integer overflow in font processing Pillow: Pillow: Den…

RLSA-2026:19154 — Important: giflib security update

Affected: Rocky Linux:10: giflib

giflib is a library for reading and writing gif images.

Security Fix(es):

* giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

SUSE-SU-2026:1005-1 — Security update for giflib

Security update for giflib

UBUNTU-CVE-2026-23868

Affected: Ubuntu:Pro:16.04:LTS: giflib, Ubuntu:Pro:18.04:LTS: giflib, Ubuntu:20.04:LTS: giflib, Ubuntu:22.04:LTS: giflib, Ubuntu:24.04:LTS: giflib, Ubuntu:25.10: giflib, Ubuntu:26.04:LTS: giflib

WID-SEC-W-2026-1169 — Red Hat Enterprise Linux (giflib): Schwachstelle ermöglicht Codeausführung oder DoS

Ein lokaler Angreifer kann eine Schwachstelle in der giflib Komponente in Red Hat Enterprise Linux ausnutzen, um den Speicher zu beschädigen, was möglicherweise zu einem Denial-of-Service-Zustand oder zur Ausführung von beliebigem Code führen kann.