Skip to navigation Skip to main content

Utilities

  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
Red Hat Customer Portal
  • Subscriptions
  • Downloads
  • Red Hat Console
  • Get Support
  • Products

    Top Products

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Products

    Downloads and Containers

    • Downloads
    • Packages
    • Containers

    Top Resources

    • Documentation
    • Product Life Cycles
    • Product Compliance
    • Errata
  • Knowledge

    Red Hat Knowledge Center

    • Knowledgebase Solutions
    • Knowledgebase Articles
    • Customer Portal Labs
    • Errata

    Top Product Docs

    • Red Hat Enterprise Linux
    • Red Hat OpenShift
    • Red Hat Ansible Automation Platform
    All Product Docs

    Training and Certification

    • About
    • Course Index
    • Certification Index
    • Skill Assessment
  • Security

    Red Hat Product Security Center

    • Security Updates
    • Security Advisories
    • Red Hat CVE Database
    • Errata

    References

    • Security Bulletins
    • Severity Ratings
    • Security Data

    Top Resources

    • Security Labs
    • Backporting Policies
    • Security Blog
  • Support

    Red Hat Support

    • Support Cases
    • Troubleshoot
    • Get Support
    • Contact Red Hat Support

    Red Hat Community Support

    • Customer Portal Community
    • Community Discussions
    • Red Hat Accelerator Program

    Top Resources

    • Product Life Cycles
    • Customer Portal Labs
    • Red Hat JBoss Supported Configurations
    • Red Hat Lightspeed
Or troubleshoot an issue.

Select Your Language

  • English
  • Français
  • 한국어
  • 日本語
  • 中文 (中国)

Infrastructure and Management

  • Red Hat Enterprise Linux
  • Red Hat Satellite
  • Red Hat Subscription Management
  • Red Hat Lightspeed
  • Red Hat Ansible Automation Platform

Cloud Computing

  • Red Hat OpenShift
  • Red Hat OpenStack Platform
  • Red Hat OpenShift
  • Red Hat OpenShift AI
  • Red Hat OpenShift Dedicated
  • Red Hat Advanced Cluster Security for Kubernetes
  • Red Hat Advanced Cluster Management for Kubernetes
  • Red Hat Quay
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Service on AWS

Storage

  • Red Hat Gluster Storage
  • Red Hat Hyperconverged Infrastructure
  • Red Hat Ceph Storage
  • Red Hat OpenShift Data Foundation

Runtimes

  • Red Hat Runtimes
  • Red Hat JBoss Enterprise Application Platform
  • Red Hat Data Grid
  • Red Hat JBoss Web Server
  • Red Hat build of Keycloak
  • Red Hat support for Spring Boot
  • Red Hat build of Node.js
  • Red Hat build of Quarkus

Integration and Automation

  • Red Hat Application Foundations
  • Red Hat Fuse
  • Red Hat AMQ
  • Red Hat 3scale API Management
All Products
Red Hat Product Errata RHSA-2026:33447 - Security Advisory
Issued:
2026-06-30
Updated:
2026-06-30

RHSA-2026:33447 - Security Advisory

  • Overview
  • Updated Packages

Synopsis

Important: giflib security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for giflib is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

giflib is a library for reading and writing gif images.

Security Fix(es):

  • giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
  • Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64

Fixes

  • BZ - 2448747 - CVE-2026-26740 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension

CVEs

  • CVE-2026-26740

References

  • https://access.redhat.com/security/updates/classification/#important
Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0

SRPM
giflib-5.2.1-22.el10_0.2.src.rpm SHA-256: d7aad9749bf08d43df095f118df78c8b3ca38ef26361f12948bdbabe16bd9c7f
x86_64
giflib-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: 5d79bfd4f61c2eedf4cea0408e9615afe066e9dbc9ab6cc50cb4e96acf6c9b39
giflib-debuginfo-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: c3b036f7f6ef68b535f838af3e4ea007be59f806bebe38a5d6559803481a570f
giflib-debugsource-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: aa271c1972aa96a78bbad1fa9448b2798fb5c9b55c46646692bf431d1dea3e61
giflib-utils-debuginfo-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: 316d8d827a8dc204f130e004a3ab9a87f0850beac25201ee941f2d8b173bd796

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0

SRPM
giflib-5.2.1-22.el10_0.2.src.rpm SHA-256: d7aad9749bf08d43df095f118df78c8b3ca38ef26361f12948bdbabe16bd9c7f
s390x
giflib-5.2.1-22.el10_0.2.s390x.rpm SHA-256: a764d0825156b6284b0b0f3b67d33642f0b1deaa319e91b1dae55ec2a8dbdad4
giflib-debuginfo-5.2.1-22.el10_0.2.s390x.rpm SHA-256: 5398f68793a57c8068db2771bc72d547adbea83129aeb3e8c6dd69c6237f56ce
giflib-debugsource-5.2.1-22.el10_0.2.s390x.rpm SHA-256: 8c872f5ff5fc3f041850e36ebcfb8d22bc1a744b016dcf0f4860420d2bbed124
giflib-utils-debuginfo-5.2.1-22.el10_0.2.s390x.rpm SHA-256: c90fc38ed4c4887e6d526bf56fa8826591ef1c0a92b45cf06fcf642a19b02d9e

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0

SRPM
giflib-5.2.1-22.el10_0.2.src.rpm SHA-256: d7aad9749bf08d43df095f118df78c8b3ca38ef26361f12948bdbabe16bd9c7f
ppc64le
giflib-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: 8ce181e9aa5dc5acc5024be0c19039e1969887024646a3ff29059e3a6741b86e
giflib-debuginfo-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: 28b224e3e111aba64b221eece304df8739ecc57fbe1c672446b9d20efbd85014
giflib-debugsource-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: e38228676b2c0045089926f968d3d92cff8277d13903d686de1274b2149f7367
giflib-utils-debuginfo-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: 9470cd54977db20716271260da69a0735983a37c5886561c3380c677e28e1bcc

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0

SRPM
giflib-5.2.1-22.el10_0.2.src.rpm SHA-256: d7aad9749bf08d43df095f118df78c8b3ca38ef26361f12948bdbabe16bd9c7f
aarch64
giflib-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 902ae8fc6c17c779273ebb9a4cc9a012895f5e477fd080d9c6885d6234792620
giflib-debuginfo-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 6f28bc96602c85316dfaa66991f9f8a77f8881f420f02365b09ded41c7472c34
giflib-debugsource-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: b348f0b271f20bee187189c0636896648e39a15242ab2e746df640d1b28739ef
giflib-utils-debuginfo-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 8e1287517a0e3e1b6d936902cc0816d6dd70fe27bade66b2b4e02037c20b390a

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0

SRPM
x86_64
giflib-debuginfo-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: c3b036f7f6ef68b535f838af3e4ea007be59f806bebe38a5d6559803481a570f
giflib-debugsource-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: aa271c1972aa96a78bbad1fa9448b2798fb5c9b55c46646692bf431d1dea3e61
giflib-devel-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: 333bae7c5be57d6f98a4d28280760d72f3930a77dcc7dcb44e6c53356e6e160a
giflib-utils-debuginfo-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: 316d8d827a8dc204f130e004a3ab9a87f0850beac25201ee941f2d8b173bd796

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0

SRPM
ppc64le
giflib-debuginfo-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: 28b224e3e111aba64b221eece304df8739ecc57fbe1c672446b9d20efbd85014
giflib-debugsource-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: e38228676b2c0045089926f968d3d92cff8277d13903d686de1274b2149f7367
giflib-devel-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: b241485caa92952ff712339f55d464f4cf35f0f535a992e2a8a96e3f88a0ae07
giflib-utils-debuginfo-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: 9470cd54977db20716271260da69a0735983a37c5886561c3380c677e28e1bcc

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0

SRPM
s390x
giflib-debuginfo-5.2.1-22.el10_0.2.s390x.rpm SHA-256: 5398f68793a57c8068db2771bc72d547adbea83129aeb3e8c6dd69c6237f56ce
giflib-debugsource-5.2.1-22.el10_0.2.s390x.rpm SHA-256: 8c872f5ff5fc3f041850e36ebcfb8d22bc1a744b016dcf0f4860420d2bbed124
giflib-devel-5.2.1-22.el10_0.2.s390x.rpm SHA-256: 5947cb7635fb2cabca75c71471624a034ae2e0a5d9130fd3cfcc4897be5d46bf
giflib-utils-debuginfo-5.2.1-22.el10_0.2.s390x.rpm SHA-256: c90fc38ed4c4887e6d526bf56fa8826591ef1c0a92b45cf06fcf642a19b02d9e

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0

SRPM
aarch64
giflib-debuginfo-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 6f28bc96602c85316dfaa66991f9f8a77f8881f420f02365b09ded41c7472c34
giflib-debugsource-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: b348f0b271f20bee187189c0636896648e39a15242ab2e746df640d1b28739ef
giflib-devel-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 5a0bf82d53bec731180168f9f988a8ad0eb30fcbba7cbaf238fb98fcc8327f82
giflib-utils-debuginfo-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 8e1287517a0e3e1b6d936902cc0816d6dd70fe27bade66b2b4e02037c20b390a

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0

SRPM
giflib-5.2.1-22.el10_0.2.src.rpm SHA-256: d7aad9749bf08d43df095f118df78c8b3ca38ef26361f12948bdbabe16bd9c7f
aarch64
giflib-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 902ae8fc6c17c779273ebb9a4cc9a012895f5e477fd080d9c6885d6234792620
giflib-debuginfo-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 6f28bc96602c85316dfaa66991f9f8a77f8881f420f02365b09ded41c7472c34
giflib-debugsource-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: b348f0b271f20bee187189c0636896648e39a15242ab2e746df640d1b28739ef
giflib-utils-debuginfo-5.2.1-22.el10_0.2.aarch64.rpm SHA-256: 8e1287517a0e3e1b6d936902cc0816d6dd70fe27bade66b2b4e02037c20b390a

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0

SRPM
giflib-5.2.1-22.el10_0.2.src.rpm SHA-256: d7aad9749bf08d43df095f118df78c8b3ca38ef26361f12948bdbabe16bd9c7f
s390x
giflib-5.2.1-22.el10_0.2.s390x.rpm SHA-256: a764d0825156b6284b0b0f3b67d33642f0b1deaa319e91b1dae55ec2a8dbdad4
giflib-debuginfo-5.2.1-22.el10_0.2.s390x.rpm SHA-256: 5398f68793a57c8068db2771bc72d547adbea83129aeb3e8c6dd69c6237f56ce
giflib-debugsource-5.2.1-22.el10_0.2.s390x.rpm SHA-256: 8c872f5ff5fc3f041850e36ebcfb8d22bc1a744b016dcf0f4860420d2bbed124
giflib-utils-debuginfo-5.2.1-22.el10_0.2.s390x.rpm SHA-256: c90fc38ed4c4887e6d526bf56fa8826591ef1c0a92b45cf06fcf642a19b02d9e

Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0

SRPM
giflib-5.2.1-22.el10_0.2.src.rpm SHA-256: d7aad9749bf08d43df095f118df78c8b3ca38ef26361f12948bdbabe16bd9c7f
ppc64le
giflib-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: 8ce181e9aa5dc5acc5024be0c19039e1969887024646a3ff29059e3a6741b86e
giflib-debuginfo-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: 28b224e3e111aba64b221eece304df8739ecc57fbe1c672446b9d20efbd85014
giflib-debugsource-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: e38228676b2c0045089926f968d3d92cff8277d13903d686de1274b2149f7367
giflib-utils-debuginfo-5.2.1-22.el10_0.2.ppc64le.rpm SHA-256: 9470cd54977db20716271260da69a0735983a37c5886561c3380c677e28e1bcc

Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0

SRPM
giflib-5.2.1-22.el10_0.2.src.rpm SHA-256: d7aad9749bf08d43df095f118df78c8b3ca38ef26361f12948bdbabe16bd9c7f
x86_64
giflib-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: 5d79bfd4f61c2eedf4cea0408e9615afe066e9dbc9ab6cc50cb4e96acf6c9b39
giflib-debuginfo-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: c3b036f7f6ef68b535f838af3e4ea007be59f806bebe38a5d6559803481a570f
giflib-debugsource-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: aa271c1972aa96a78bbad1fa9448b2798fb5c9b55c46646692bf431d1dea3e61
giflib-utils-debuginfo-5.2.1-22.el10_0.2.x86_64.rpm SHA-256: 316d8d827a8dc204f130e004a3ab9a87f0850beac25201ee941f2d8b173bd796

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Red Hat LinkedIn YouTube Facebook X, formerly Twitter

Quick Links

  • Downloads
  • Subscriptions
  • Support Cases
  • Customer Service
  • Product Documentation

Help

  • Contact Us
  • Customer Portal FAQ
  • Log-in Assistance

Site Info

  • Trust Red Hat
  • Browser Support Policy
  • Accessibility
  • Awards and Recognition
  • Colophon

Related Sites

  • redhat.com
  • developers.redhat.com
  • connect.redhat.com
  • cloud.redhat.com

Red Hat legal and privacy links

  • About Red Hat
  • Jobs
  • Events
  • Locations
  • Contact Red Hat
  • Red Hat Blog
  • Inclusion at Red Hat
  • Cool Stuff Store
  • Red Hat Summit
© 2026 Red Hat

Red Hat legal and privacy links

  • Privacy statement
  • Terms of use
  • All policies and guidelines
  • Digital accessibility