Red Hat Product Errata RHSA-2026:33451 - Security Advisory
Issued:
2026-06-30
Updated:
2026-06-30

RHSA-2026:33451 - Security Advisory

Synopsis

Important: giflib security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for giflib is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

giflib is a library for reading and writing gif images.

Security Fix(es):

  • giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension (CVE-2026-26740)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

  • BZ - 2448747 - CVE-2026-26740 giflib: giflib: Denial of Service via buffer overflow in EGifGCBToExtension

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
x86_64
giflib-5.2.1-9.el9_6.2.i686.rpm SHA-256: f9917874ed81e603c71f75c25a5fe3372e58808f6d6171f0a193a6687cf795de
giflib-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 3f4f713707a7b55bd0fbb89aadf19a0fc56d9bee7a6484686b74659225329b05
giflib-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: e2cad458854b701da743c71c623b2ac9703a3dd0ec0d5a092a46657934043415
giflib-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: a4fe423f3fce31d454967ad9a509d1953933f60b4376f5ac55ac5272402cea5d
giflib-debugsource-5.2.1-9.el9_6.2.i686.rpm SHA-256: 2c5bd5c91ce64223d916564c0dd909ae98e213246d4029d7d7eb8b97e368a588
giflib-debugsource-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 30203502a4a765d6fc68665414d7e6633bb758ca99df35c57a20d4331b05649e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: 889e35e64bbef9c6b555fc581d6f53680c2db5ad1d119687f655f2a29d0c081e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: f8bb2f496e06b83b51dae082796311d9d34a357fc0d0261cb74a7000eb4723e6

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
x86_64
giflib-5.2.1-9.el9_6.2.i686.rpm SHA-256: f9917874ed81e603c71f75c25a5fe3372e58808f6d6171f0a193a6687cf795de
giflib-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 3f4f713707a7b55bd0fbb89aadf19a0fc56d9bee7a6484686b74659225329b05
giflib-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: e2cad458854b701da743c71c623b2ac9703a3dd0ec0d5a092a46657934043415
giflib-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: a4fe423f3fce31d454967ad9a509d1953933f60b4376f5ac55ac5272402cea5d
giflib-debugsource-5.2.1-9.el9_6.2.i686.rpm SHA-256: 2c5bd5c91ce64223d916564c0dd909ae98e213246d4029d7d7eb8b97e368a588
giflib-debugsource-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 30203502a4a765d6fc68665414d7e6633bb758ca99df35c57a20d4331b05649e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: 889e35e64bbef9c6b555fc581d6f53680c2db5ad1d119687f655f2a29d0c081e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: f8bb2f496e06b83b51dae082796311d9d34a357fc0d0261cb74a7000eb4723e6

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
s390x
giflib-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 7392ee0dfe114e005c900d1c69a0aa0a026072fc5fe35cae6586ad682057161d
giflib-debuginfo-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 118b8609867165f0efe859454e8c50a1e47d41b505f54d50f388ecb223ef48fa
giflib-debugsource-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 59f2bacda0f3b48b21602442db2396ec4f1abfe3c5a1e95b52fbc9f03f4eff4c
giflib-utils-debuginfo-5.2.1-9.el9_6.2.s390x.rpm SHA-256: f2fc8dd08f9417c85d1199de4d123f587db09bac60805068d770bb5894bcc17e

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
ppc64le
giflib-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 1fe4ca95a86b459a65ad672d650794fd38545a1bb4133fec11f62f131ccc359e
giflib-debuginfo-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 175c3ce4ef12c8aed7bb0dbfa9f4bcaf618bb117e309c5449d4fe854c2405647
giflib-debugsource-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 0156c68ffed47fa05d2d4b47a9b626695b536b959df6367e59060c75188d34cd
giflib-utils-debuginfo-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 8a488da30c967ede1bb275eca3b79f650b71eb582ff56a2b058bd2a5254379cc

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
aarch64
giflib-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: d9cfa8905d7581d12b3116d508d9c22861db1876eb40a52e65a4aadd3c63fa96
giflib-debuginfo-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: e78d4d45a2f5be33151a643fa6868f8c05f5465ab6a29229f0c9d1113c381d82
giflib-debugsource-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: b314ae206cf26bb392d82dde03f2f4225dd33b8dd767a1ffcc1da76fd42720f3
giflib-utils-debuginfo-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: 598453a609286144a9e070a91c75d884d4713fd22e57989de6e18532bd01fb6a

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
ppc64le
giflib-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 1fe4ca95a86b459a65ad672d650794fd38545a1bb4133fec11f62f131ccc359e
giflib-debuginfo-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 175c3ce4ef12c8aed7bb0dbfa9f4bcaf618bb117e309c5449d4fe854c2405647
giflib-debugsource-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 0156c68ffed47fa05d2d4b47a9b626695b536b959df6367e59060c75188d34cd
giflib-utils-debuginfo-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 8a488da30c967ede1bb275eca3b79f650b71eb582ff56a2b058bd2a5254379cc

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
x86_64
giflib-5.2.1-9.el9_6.2.i686.rpm SHA-256: f9917874ed81e603c71f75c25a5fe3372e58808f6d6171f0a193a6687cf795de
giflib-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 3f4f713707a7b55bd0fbb89aadf19a0fc56d9bee7a6484686b74659225329b05
giflib-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: e2cad458854b701da743c71c623b2ac9703a3dd0ec0d5a092a46657934043415
giflib-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: a4fe423f3fce31d454967ad9a509d1953933f60b4376f5ac55ac5272402cea5d
giflib-debugsource-5.2.1-9.el9_6.2.i686.rpm SHA-256: 2c5bd5c91ce64223d916564c0dd909ae98e213246d4029d7d7eb8b97e368a588
giflib-debugsource-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 30203502a4a765d6fc68665414d7e6633bb758ca99df35c57a20d4331b05649e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: 889e35e64bbef9c6b555fc581d6f53680c2db5ad1d119687f655f2a29d0c081e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: f8bb2f496e06b83b51dae082796311d9d34a357fc0d0261cb74a7000eb4723e6

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6

SRPM
x86_64
giflib-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: e2cad458854b701da743c71c623b2ac9703a3dd0ec0d5a092a46657934043415
giflib-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: a4fe423f3fce31d454967ad9a509d1953933f60b4376f5ac55ac5272402cea5d
giflib-debugsource-5.2.1-9.el9_6.2.i686.rpm SHA-256: 2c5bd5c91ce64223d916564c0dd909ae98e213246d4029d7d7eb8b97e368a588
giflib-debugsource-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 30203502a4a765d6fc68665414d7e6633bb758ca99df35c57a20d4331b05649e
giflib-devel-5.2.1-9.el9_6.2.i686.rpm SHA-256: 35f728b2f7dd2397a064164c6f6bcb7720b474f20e2735d9fc4c5aa4bed4d160
giflib-devel-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: babd15cb9a5f4e5550537a90ce90583520ce7bdeebd8551eb10adad320250ec2
giflib-utils-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: 889e35e64bbef9c6b555fc581d6f53680c2db5ad1d119687f655f2a29d0c081e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: f8bb2f496e06b83b51dae082796311d9d34a357fc0d0261cb74a7000eb4723e6

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6

SRPM
ppc64le
giflib-debuginfo-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 175c3ce4ef12c8aed7bb0dbfa9f4bcaf618bb117e309c5449d4fe854c2405647
giflib-debugsource-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 0156c68ffed47fa05d2d4b47a9b626695b536b959df6367e59060c75188d34cd
giflib-devel-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 07f3f4790b3ae117161eb5fcaaeb286888cb4f75df85eed5dea3e78e6532e151
giflib-utils-debuginfo-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 8a488da30c967ede1bb275eca3b79f650b71eb582ff56a2b058bd2a5254379cc

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6

SRPM
s390x
giflib-debuginfo-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 118b8609867165f0efe859454e8c50a1e47d41b505f54d50f388ecb223ef48fa
giflib-debugsource-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 59f2bacda0f3b48b21602442db2396ec4f1abfe3c5a1e95b52fbc9f03f4eff4c
giflib-devel-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 9490b77d218a0bb8cc5d72c85742733c0c2c2e1603ac540642657a51feee3118
giflib-utils-debuginfo-5.2.1-9.el9_6.2.s390x.rpm SHA-256: f2fc8dd08f9417c85d1199de4d123f587db09bac60805068d770bb5894bcc17e

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6

SRPM
aarch64
giflib-debuginfo-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: e78d4d45a2f5be33151a643fa6868f8c05f5465ab6a29229f0c9d1113c381d82
giflib-debugsource-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: b314ae206cf26bb392d82dde03f2f4225dd33b8dd767a1ffcc1da76fd42720f3
giflib-devel-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: a83326682a7674874c9c3f1a5e09ebfeb65bb737e935ec73902fd27582c18e1b
giflib-utils-debuginfo-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: 598453a609286144a9e070a91c75d884d4713fd22e57989de6e18532bd01fb6a

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
aarch64
giflib-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: d9cfa8905d7581d12b3116d508d9c22861db1876eb40a52e65a4aadd3c63fa96
giflib-debuginfo-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: e78d4d45a2f5be33151a643fa6868f8c05f5465ab6a29229f0c9d1113c381d82
giflib-debugsource-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: b314ae206cf26bb392d82dde03f2f4225dd33b8dd767a1ffcc1da76fd42720f3
giflib-utils-debuginfo-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: 598453a609286144a9e070a91c75d884d4713fd22e57989de6e18532bd01fb6a

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
s390x
giflib-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 7392ee0dfe114e005c900d1c69a0aa0a026072fc5fe35cae6586ad682057161d
giflib-debuginfo-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 118b8609867165f0efe859454e8c50a1e47d41b505f54d50f388ecb223ef48fa
giflib-debugsource-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 59f2bacda0f3b48b21602442db2396ec4f1abfe3c5a1e95b52fbc9f03f4eff4c
giflib-utils-debuginfo-5.2.1-9.el9_6.2.s390x.rpm SHA-256: f2fc8dd08f9417c85d1199de4d123f587db09bac60805068d770bb5894bcc17e

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
x86_64
giflib-5.2.1-9.el9_6.2.i686.rpm SHA-256: f9917874ed81e603c71f75c25a5fe3372e58808f6d6171f0a193a6687cf795de
giflib-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 3f4f713707a7b55bd0fbb89aadf19a0fc56d9bee7a6484686b74659225329b05
giflib-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: e2cad458854b701da743c71c623b2ac9703a3dd0ec0d5a092a46657934043415
giflib-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: a4fe423f3fce31d454967ad9a509d1953933f60b4376f5ac55ac5272402cea5d
giflib-debugsource-5.2.1-9.el9_6.2.i686.rpm SHA-256: 2c5bd5c91ce64223d916564c0dd909ae98e213246d4029d7d7eb8b97e368a588
giflib-debugsource-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: 30203502a4a765d6fc68665414d7e6633bb758ca99df35c57a20d4331b05649e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.i686.rpm SHA-256: 889e35e64bbef9c6b555fc581d6f53680c2db5ad1d119687f655f2a29d0c081e
giflib-utils-debuginfo-5.2.1-9.el9_6.2.x86_64.rpm SHA-256: f8bb2f496e06b83b51dae082796311d9d34a357fc0d0261cb74a7000eb4723e6

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
aarch64
giflib-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: d9cfa8905d7581d12b3116d508d9c22861db1876eb40a52e65a4aadd3c63fa96
giflib-debuginfo-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: e78d4d45a2f5be33151a643fa6868f8c05f5465ab6a29229f0c9d1113c381d82
giflib-debugsource-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: b314ae206cf26bb392d82dde03f2f4225dd33b8dd767a1ffcc1da76fd42720f3
giflib-utils-debuginfo-5.2.1-9.el9_6.2.aarch64.rpm SHA-256: 598453a609286144a9e070a91c75d884d4713fd22e57989de6e18532bd01fb6a

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
ppc64le
giflib-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 1fe4ca95a86b459a65ad672d650794fd38545a1bb4133fec11f62f131ccc359e
giflib-debuginfo-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 175c3ce4ef12c8aed7bb0dbfa9f4bcaf618bb117e309c5449d4fe854c2405647
giflib-debugsource-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 0156c68ffed47fa05d2d4b47a9b626695b536b959df6367e59060c75188d34cd
giflib-utils-debuginfo-5.2.1-9.el9_6.2.ppc64le.rpm SHA-256: 8a488da30c967ede1bb275eca3b79f650b71eb582ff56a2b058bd2a5254379cc

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
giflib-5.2.1-9.el9_6.2.src.rpm SHA-256: 9934b5f2946fe5c5498854387335d2c9735a35c807265dc32a64d9e981be39ff
s390x
giflib-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 7392ee0dfe114e005c900d1c69a0aa0a026072fc5fe35cae6586ad682057161d
giflib-debuginfo-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 118b8609867165f0efe859454e8c50a1e47d41b505f54d50f388ecb223ef48fa
giflib-debugsource-5.2.1-9.el9_6.2.s390x.rpm SHA-256: 59f2bacda0f3b48b21602442db2396ec4f1abfe3c5a1e95b52fbc9f03f4eff4c
giflib-utils-debuginfo-5.2.1-9.el9_6.2.s390x.rpm SHA-256: f2fc8dd08f9417c85d1199de4d123f587db09bac60805068d770bb5894bcc17e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.