Red Hat Product Errata RHSA-2026:84579 - Security Advisory
Issued:
2026-10-19
Updated:
2026-10-19

RHSA-2026:84579 - Security Advisory

Synopsis

Important: gd security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for gd is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats.

Security Fix(es):

  • libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

  • BZ - 2533111 - CVE-2026-9672 libgd: buffer overflow when processing specially crafted GIF file

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
x86_64
gd-2.3.2-3.el9_6.1.i686.rpm SHA-256: 94ac60096504b3c26065cfae7c7acc7945948a240a63ec1a6eaefe789f10ec41
gd-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: bfc5a243c3ac7069246d31ce0825aa952f515c9934c2db67f2204ad50b45df24
gd-debuginfo-2.3.2-3.el9_6.1.i686.rpm SHA-256: b3892f2336ad73d2842ae5aab45039a8e613915d34f575a4d215a68f661977a8
gd-debuginfo-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: 35c8dda2bde1836d956dbe0731bc8c00119e9f416b36554f9ec892359197ff58
gd-debugsource-2.3.2-3.el9_6.1.i686.rpm SHA-256: 7c2b9b08abff5c607f1c6a6a5b3175655280156803e4e980affef239f22f09e5
gd-debugsource-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: e1f0a3825f07c39aa01732f277bb2b034ec6895fc8a1def869f057fd3d0d994a
gd-devel-2.3.2-3.el9_6.1.i686.rpm SHA-256: 552e68d073f89641ce0a05b21568195ea50287cb446f6656f846d798f27b85a2
gd-devel-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: 516e90569fae0f72a3ee87b72227d99eb6afbbefd8dda9d8182c1406dc5c38ac
gd-progs-debuginfo-2.3.2-3.el9_6.1.i686.rpm SHA-256: 972837ca4e791ba028372ea3e84cbda87c1a86f61bbf06fe413183007e318f8d
gd-progs-debuginfo-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: e37da4bf39903d4a938eb2ae22c1026565981cf4bc4c7a27563e00667cbcd146

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
x86_64
gd-2.3.2-3.el9_6.1.i686.rpm SHA-256: 94ac60096504b3c26065cfae7c7acc7945948a240a63ec1a6eaefe789f10ec41
gd-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: bfc5a243c3ac7069246d31ce0825aa952f515c9934c2db67f2204ad50b45df24
gd-debuginfo-2.3.2-3.el9_6.1.i686.rpm SHA-256: b3892f2336ad73d2842ae5aab45039a8e613915d34f575a4d215a68f661977a8
gd-debuginfo-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: 35c8dda2bde1836d956dbe0731bc8c00119e9f416b36554f9ec892359197ff58
gd-debugsource-2.3.2-3.el9_6.1.i686.rpm SHA-256: 7c2b9b08abff5c607f1c6a6a5b3175655280156803e4e980affef239f22f09e5
gd-debugsource-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: e1f0a3825f07c39aa01732f277bb2b034ec6895fc8a1def869f057fd3d0d994a
gd-devel-2.3.2-3.el9_6.1.i686.rpm SHA-256: 552e68d073f89641ce0a05b21568195ea50287cb446f6656f846d798f27b85a2
gd-devel-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: 516e90569fae0f72a3ee87b72227d99eb6afbbefd8dda9d8182c1406dc5c38ac
gd-progs-debuginfo-2.3.2-3.el9_6.1.i686.rpm SHA-256: 972837ca4e791ba028372ea3e84cbda87c1a86f61bbf06fe413183007e318f8d
gd-progs-debuginfo-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: e37da4bf39903d4a938eb2ae22c1026565981cf4bc4c7a27563e00667cbcd146

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
s390x
gd-2.3.2-3.el9_6.1.s390x.rpm SHA-256: ef26e7aba1e5343b26094b1a0d49bb2d83179f9e9bda59c2f0ae46db4b8ab0e0
gd-debuginfo-2.3.2-3.el9_6.1.s390x.rpm SHA-256: e7a5720529fa6644c4e6bdd3b832c77943d249a3b0cee84a15baf815d66e9296
gd-debugsource-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 27a7944bf624158b9102f21ebed77aa959eaea06681d4b222c5740a6d8a7c45e
gd-devel-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 3ea06312bff9fef01ba80de1f318430c8e99f2b8954b607b7154809499320fbd
gd-progs-debuginfo-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 9c49b58e9bdcfdc005128a4f6d2e8d1a90289ed6d76125b18860c3b4588cfe6b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
ppc64le
gd-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 5178e0c6c29ee766e4435a0cb6911b5602283becdeccf23c45c75e840bf88fcc
gd-debuginfo-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 81829de13e4c141b444468560e67b00e4eada53bf80bc697549e70bd95f35a72
gd-debugsource-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 77b9d67bd285e06dab890f8a5249371457c78f0c8dfb629bee86cd621a6bcb73
gd-devel-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: e20406dc2e1d5847ad479f2123585115d4622633f7330081e75d450851683912
gd-progs-debuginfo-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 1bb87f9902fdafc83ee1ec76da586bd64df0b1ca2d529285ecc39fdc1452ca6d

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
aarch64
gd-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 0ca7a24da3d014d7adcfd76661a78408edcfd32fcc6ef1089487d3cd651458c9
gd-debuginfo-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: a2aa35b5f1c001db81443007898726a51cd2bf464e6988a9e7ffdcc404445a28
gd-debugsource-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 7512d9a33aa833f074a48dd6d7f4fb3f4d11ff286d5a289a13410ee347db1668
gd-devel-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: d4471460aaba8c32e22e02cb85132d03e38477b847307c8e343b7181ebc9a39d
gd-progs-debuginfo-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 2f4e6b5ae06b8d3905da6b2f61b910968c8369b3290359b25f45dc86e5185c25

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
ppc64le
gd-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 5178e0c6c29ee766e4435a0cb6911b5602283becdeccf23c45c75e840bf88fcc
gd-debuginfo-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 81829de13e4c141b444468560e67b00e4eada53bf80bc697549e70bd95f35a72
gd-debugsource-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 77b9d67bd285e06dab890f8a5249371457c78f0c8dfb629bee86cd621a6bcb73
gd-devel-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: e20406dc2e1d5847ad479f2123585115d4622633f7330081e75d450851683912
gd-progs-debuginfo-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 1bb87f9902fdafc83ee1ec76da586bd64df0b1ca2d529285ecc39fdc1452ca6d

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
x86_64
gd-2.3.2-3.el9_6.1.i686.rpm SHA-256: 94ac60096504b3c26065cfae7c7acc7945948a240a63ec1a6eaefe789f10ec41
gd-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: bfc5a243c3ac7069246d31ce0825aa952f515c9934c2db67f2204ad50b45df24
gd-debuginfo-2.3.2-3.el9_6.1.i686.rpm SHA-256: b3892f2336ad73d2842ae5aab45039a8e613915d34f575a4d215a68f661977a8
gd-debuginfo-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: 35c8dda2bde1836d956dbe0731bc8c00119e9f416b36554f9ec892359197ff58
gd-debugsource-2.3.2-3.el9_6.1.i686.rpm SHA-256: 7c2b9b08abff5c607f1c6a6a5b3175655280156803e4e980affef239f22f09e5
gd-debugsource-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: e1f0a3825f07c39aa01732f277bb2b034ec6895fc8a1def869f057fd3d0d994a
gd-devel-2.3.2-3.el9_6.1.i686.rpm SHA-256: 552e68d073f89641ce0a05b21568195ea50287cb446f6656f846d798f27b85a2
gd-devel-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: 516e90569fae0f72a3ee87b72227d99eb6afbbefd8dda9d8182c1406dc5c38ac
gd-progs-debuginfo-2.3.2-3.el9_6.1.i686.rpm SHA-256: 972837ca4e791ba028372ea3e84cbda87c1a86f61bbf06fe413183007e318f8d
gd-progs-debuginfo-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: e37da4bf39903d4a938eb2ae22c1026565981cf4bc4c7a27563e00667cbcd146

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
aarch64
gd-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 0ca7a24da3d014d7adcfd76661a78408edcfd32fcc6ef1089487d3cd651458c9
gd-debuginfo-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: a2aa35b5f1c001db81443007898726a51cd2bf464e6988a9e7ffdcc404445a28
gd-debugsource-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 7512d9a33aa833f074a48dd6d7f4fb3f4d11ff286d5a289a13410ee347db1668
gd-devel-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: d4471460aaba8c32e22e02cb85132d03e38477b847307c8e343b7181ebc9a39d
gd-progs-debuginfo-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 2f4e6b5ae06b8d3905da6b2f61b910968c8369b3290359b25f45dc86e5185c25

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
s390x
gd-2.3.2-3.el9_6.1.s390x.rpm SHA-256: ef26e7aba1e5343b26094b1a0d49bb2d83179f9e9bda59c2f0ae46db4b8ab0e0
gd-debuginfo-2.3.2-3.el9_6.1.s390x.rpm SHA-256: e7a5720529fa6644c4e6bdd3b832c77943d249a3b0cee84a15baf815d66e9296
gd-debugsource-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 27a7944bf624158b9102f21ebed77aa959eaea06681d4b222c5740a6d8a7c45e
gd-devel-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 3ea06312bff9fef01ba80de1f318430c8e99f2b8954b607b7154809499320fbd
gd-progs-debuginfo-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 9c49b58e9bdcfdc005128a4f6d2e8d1a90289ed6d76125b18860c3b4588cfe6b

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
x86_64
gd-2.3.2-3.el9_6.1.i686.rpm SHA-256: 94ac60096504b3c26065cfae7c7acc7945948a240a63ec1a6eaefe789f10ec41
gd-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: bfc5a243c3ac7069246d31ce0825aa952f515c9934c2db67f2204ad50b45df24
gd-debuginfo-2.3.2-3.el9_6.1.i686.rpm SHA-256: b3892f2336ad73d2842ae5aab45039a8e613915d34f575a4d215a68f661977a8
gd-debuginfo-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: 35c8dda2bde1836d956dbe0731bc8c00119e9f416b36554f9ec892359197ff58
gd-debugsource-2.3.2-3.el9_6.1.i686.rpm SHA-256: 7c2b9b08abff5c607f1c6a6a5b3175655280156803e4e980affef239f22f09e5
gd-debugsource-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: e1f0a3825f07c39aa01732f277bb2b034ec6895fc8a1def869f057fd3d0d994a
gd-devel-2.3.2-3.el9_6.1.i686.rpm SHA-256: 552e68d073f89641ce0a05b21568195ea50287cb446f6656f846d798f27b85a2
gd-devel-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: 516e90569fae0f72a3ee87b72227d99eb6afbbefd8dda9d8182c1406dc5c38ac
gd-progs-debuginfo-2.3.2-3.el9_6.1.i686.rpm SHA-256: 972837ca4e791ba028372ea3e84cbda87c1a86f61bbf06fe413183007e318f8d
gd-progs-debuginfo-2.3.2-3.el9_6.1.x86_64.rpm SHA-256: e37da4bf39903d4a938eb2ae22c1026565981cf4bc4c7a27563e00667cbcd146

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
aarch64
gd-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 0ca7a24da3d014d7adcfd76661a78408edcfd32fcc6ef1089487d3cd651458c9
gd-debuginfo-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: a2aa35b5f1c001db81443007898726a51cd2bf464e6988a9e7ffdcc404445a28
gd-debugsource-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 7512d9a33aa833f074a48dd6d7f4fb3f4d11ff286d5a289a13410ee347db1668
gd-devel-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: d4471460aaba8c32e22e02cb85132d03e38477b847307c8e343b7181ebc9a39d
gd-progs-debuginfo-2.3.2-3.el9_6.1.aarch64.rpm SHA-256: 2f4e6b5ae06b8d3905da6b2f61b910968c8369b3290359b25f45dc86e5185c25

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
ppc64le
gd-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 5178e0c6c29ee766e4435a0cb6911b5602283becdeccf23c45c75e840bf88fcc
gd-debuginfo-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 81829de13e4c141b444468560e67b00e4eada53bf80bc697549e70bd95f35a72
gd-debugsource-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 77b9d67bd285e06dab890f8a5249371457c78f0c8dfb629bee86cd621a6bcb73
gd-devel-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: e20406dc2e1d5847ad479f2123585115d4622633f7330081e75d450851683912
gd-progs-debuginfo-2.3.2-3.el9_6.1.ppc64le.rpm SHA-256: 1bb87f9902fdafc83ee1ec76da586bd64df0b1ca2d529285ecc39fdc1452ca6d

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
gd-2.3.2-3.el9_6.1.src.rpm SHA-256: 8323198b7c8e2311c01ed348488980778bb62ea11c71bd51f8b7aed5c036301e
s390x
gd-2.3.2-3.el9_6.1.s390x.rpm SHA-256: ef26e7aba1e5343b26094b1a0d49bb2d83179f9e9bda59c2f0ae46db4b8ab0e0
gd-debuginfo-2.3.2-3.el9_6.1.s390x.rpm SHA-256: e7a5720529fa6644c4e6bdd3b832c77943d249a3b0cee84a15baf815d66e9296
gd-debugsource-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 27a7944bf624158b9102f21ebed77aa959eaea06681d4b222c5740a6d8a7c45e
gd-devel-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 3ea06312bff9fef01ba80de1f318430c8e99f2b8954b607b7154809499320fbd
gd-progs-debuginfo-2.3.2-3.el9_6.1.s390x.rpm SHA-256: 9c49b58e9bdcfdc005128a4f6d2e8d1a90289ed6d76125b18860c3b4588cfe6b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.