Red Hat Product Errata RHSA-2026:9294 - Security Advisory
Issued:
2026-04-21
Updated:
2026-04-21

RHSA-2026:9294 - Security Advisory

Synopsis

Important: giflib security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for giflib is now available for Red Hat Enterprise Linux 9.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

giflib is a library for reading and writing gif images.

Security Fix(es):

  • giflib: Giflib: Double-free vulnerability leading to memory corruption (CVE-2026-23868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat Enterprise Linux Server - AUS 9.6 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
  • Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
  • Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
  • Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
  • Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
  • Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
  • Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
  • Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
  • Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
  • Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
  • Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x

Fixes

  • BZ - 2446207 - CVE-2026-23868 giflib: Giflib: Double-free vulnerability leading to memory corruption

Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
x86_64
giflib-5.2.1-9.el9_6.1.i686.rpm SHA-256: cec3eacfd80d3546e38a614b61dd7602fe0e728d334e984c24c20b85b747094c
giflib-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: 77c336ea947dd8ef427a978e5189e2b39b8c29a797514dfd2c158b1a3b1f3064
giflib-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: d8d2904787c1a7a5ad9bf3b56ceda6a13d39fe1e2030617727846e82d8387a36
giflib-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: c4442ea362d0743a924f8b88fffc81ee50d16439c5956e7bc02c7045a352532c
giflib-debugsource-5.2.1-9.el9_6.1.i686.rpm SHA-256: fb9bacce7f389171cf2c68cfbf480ea87e81e47aa8be882e414d21a4f0e0906b
giflib-debugsource-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: ab41cadc21112b370a8f1f1e6f8143b497b86d9b34d56b5e329334733a45f5db
giflib-utils-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: e99ca69ab919c98ed3a764d79e55f1feae7efe2a5adf4e9d31206db8da8110f4
giflib-utils-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: fabb9adc09411440a00ecde0a9a1dd254146780ee96143c0446adae40667f1bb

Red Hat Enterprise Linux Server - AUS 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
x86_64
giflib-5.2.1-9.el9_6.1.i686.rpm SHA-256: cec3eacfd80d3546e38a614b61dd7602fe0e728d334e984c24c20b85b747094c
giflib-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: 77c336ea947dd8ef427a978e5189e2b39b8c29a797514dfd2c158b1a3b1f3064
giflib-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: d8d2904787c1a7a5ad9bf3b56ceda6a13d39fe1e2030617727846e82d8387a36
giflib-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: c4442ea362d0743a924f8b88fffc81ee50d16439c5956e7bc02c7045a352532c
giflib-debugsource-5.2.1-9.el9_6.1.i686.rpm SHA-256: fb9bacce7f389171cf2c68cfbf480ea87e81e47aa8be882e414d21a4f0e0906b
giflib-debugsource-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: ab41cadc21112b370a8f1f1e6f8143b497b86d9b34d56b5e329334733a45f5db
giflib-utils-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: e99ca69ab919c98ed3a764d79e55f1feae7efe2a5adf4e9d31206db8da8110f4
giflib-utils-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: fabb9adc09411440a00ecde0a9a1dd254146780ee96143c0446adae40667f1bb

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
s390x
giflib-5.2.1-9.el9_6.1.s390x.rpm SHA-256: 3b52c678f1319633aa53cb82ce5433794111cd8e69af7cb1301a96e388081110
giflib-debuginfo-5.2.1-9.el9_6.1.s390x.rpm SHA-256: 7ab9af9458932de767f0d365f6c5aa7297b4b9b2d83808d9b5d1a8a7c1573b96
giflib-debugsource-5.2.1-9.el9_6.1.s390x.rpm SHA-256: a2d5de6619bb8e9b625301d5b2909afbda2311841353f59df62a8dec1df375cf
giflib-utils-debuginfo-5.2.1-9.el9_6.1.s390x.rpm SHA-256: afdf8b5abece7ef15cdb9d800a9e80962a1fc8d6781bd5d2b4aa684f12f47420

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
ppc64le
giflib-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: 72f06a9ac5d47832a9b306f31f40234ab261dcd0030bf62f1d45962b6c44d12c
giflib-debuginfo-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: f2515e64bbbad8c35c7007e0c513d48d1af6127ffcf71ce9f5a1977075057202
giflib-debugsource-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: d4f15a9bcf7b26a371854a071ddb794e8d9ed8080a94ea328fcb4e5d2fc42077
giflib-utils-debuginfo-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: 9df5093c4f03b2978d5611ff059df36519436fc7e127f18b8c8e38c984918a94

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
aarch64
giflib-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: b9fba782fd18ec9b29a3fa8084b30732c40b998437d48d1a60a4b31f60131b9e
giflib-debuginfo-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: 71e86b48faf598cd9c7664d0852cd3582a5e3f531cd4539abc6294ec3a0d3f8c
giflib-debugsource-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: d938728cfa759ef171ad5e010f8cb5325ba39d54812cac7f27ec66aa72b9b850
giflib-utils-debuginfo-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: c085d81e3579b2597d595edea6709b12ce109de885bc02c1db647949647e1b4b

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
ppc64le
giflib-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: 72f06a9ac5d47832a9b306f31f40234ab261dcd0030bf62f1d45962b6c44d12c
giflib-debuginfo-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: f2515e64bbbad8c35c7007e0c513d48d1af6127ffcf71ce9f5a1977075057202
giflib-debugsource-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: d4f15a9bcf7b26a371854a071ddb794e8d9ed8080a94ea328fcb4e5d2fc42077
giflib-utils-debuginfo-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: 9df5093c4f03b2978d5611ff059df36519436fc7e127f18b8c8e38c984918a94

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
x86_64
giflib-5.2.1-9.el9_6.1.i686.rpm SHA-256: cec3eacfd80d3546e38a614b61dd7602fe0e728d334e984c24c20b85b747094c
giflib-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: 77c336ea947dd8ef427a978e5189e2b39b8c29a797514dfd2c158b1a3b1f3064
giflib-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: d8d2904787c1a7a5ad9bf3b56ceda6a13d39fe1e2030617727846e82d8387a36
giflib-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: c4442ea362d0743a924f8b88fffc81ee50d16439c5956e7bc02c7045a352532c
giflib-debugsource-5.2.1-9.el9_6.1.i686.rpm SHA-256: fb9bacce7f389171cf2c68cfbf480ea87e81e47aa8be882e414d21a4f0e0906b
giflib-debugsource-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: ab41cadc21112b370a8f1f1e6f8143b497b86d9b34d56b5e329334733a45f5db
giflib-utils-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: e99ca69ab919c98ed3a764d79e55f1feae7efe2a5adf4e9d31206db8da8110f4
giflib-utils-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: fabb9adc09411440a00ecde0a9a1dd254146780ee96143c0446adae40667f1bb

Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6

SRPM
x86_64
giflib-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: d8d2904787c1a7a5ad9bf3b56ceda6a13d39fe1e2030617727846e82d8387a36
giflib-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: c4442ea362d0743a924f8b88fffc81ee50d16439c5956e7bc02c7045a352532c
giflib-debugsource-5.2.1-9.el9_6.1.i686.rpm SHA-256: fb9bacce7f389171cf2c68cfbf480ea87e81e47aa8be882e414d21a4f0e0906b
giflib-debugsource-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: ab41cadc21112b370a8f1f1e6f8143b497b86d9b34d56b5e329334733a45f5db
giflib-devel-5.2.1-9.el9_6.1.i686.rpm SHA-256: 534eb3173b1902e31297a00f6836b962afdbc414cda019d95b8b2cb325b4c3f4
giflib-devel-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: a64f51c7c1e9afa31eb2aa5cc38407c753f401e00c4753cb2c83b6a0bb201b83
giflib-utils-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: e99ca69ab919c98ed3a764d79e55f1feae7efe2a5adf4e9d31206db8da8110f4
giflib-utils-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: fabb9adc09411440a00ecde0a9a1dd254146780ee96143c0446adae40667f1bb

Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6

SRPM
ppc64le
giflib-debuginfo-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: f2515e64bbbad8c35c7007e0c513d48d1af6127ffcf71ce9f5a1977075057202
giflib-debugsource-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: d4f15a9bcf7b26a371854a071ddb794e8d9ed8080a94ea328fcb4e5d2fc42077
giflib-devel-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: 4ee45a5f244ee4624f571b8291aff0d5c515dbadbd2eafc1b45635425270240b
giflib-utils-debuginfo-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: 9df5093c4f03b2978d5611ff059df36519436fc7e127f18b8c8e38c984918a94

Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6

SRPM
s390x
giflib-debuginfo-5.2.1-9.el9_6.1.s390x.rpm SHA-256: 7ab9af9458932de767f0d365f6c5aa7297b4b9b2d83808d9b5d1a8a7c1573b96
giflib-debugsource-5.2.1-9.el9_6.1.s390x.rpm SHA-256: a2d5de6619bb8e9b625301d5b2909afbda2311841353f59df62a8dec1df375cf
giflib-devel-5.2.1-9.el9_6.1.s390x.rpm SHA-256: 58bf54fbb0bb9ebd58b3a0e613266ef9e41c72517de6d3297170a82a6b5ece59
giflib-utils-debuginfo-5.2.1-9.el9_6.1.s390x.rpm SHA-256: afdf8b5abece7ef15cdb9d800a9e80962a1fc8d6781bd5d2b4aa684f12f47420

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6

SRPM
aarch64
giflib-debuginfo-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: 71e86b48faf598cd9c7664d0852cd3582a5e3f531cd4539abc6294ec3a0d3f8c
giflib-debugsource-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: d938728cfa759ef171ad5e010f8cb5325ba39d54812cac7f27ec66aa72b9b850
giflib-devel-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: 289fa2b644c9941f12a9881e6bdecac330eb03de2b8bc4346b8b02813695f517
giflib-utils-debuginfo-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: c085d81e3579b2597d595edea6709b12ce109de885bc02c1db647949647e1b4b

Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
aarch64
giflib-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: b9fba782fd18ec9b29a3fa8084b30732c40b998437d48d1a60a4b31f60131b9e
giflib-debuginfo-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: 71e86b48faf598cd9c7664d0852cd3582a5e3f531cd4539abc6294ec3a0d3f8c
giflib-debugsource-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: d938728cfa759ef171ad5e010f8cb5325ba39d54812cac7f27ec66aa72b9b850
giflib-utils-debuginfo-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: c085d81e3579b2597d595edea6709b12ce109de885bc02c1db647949647e1b4b

Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
s390x
giflib-5.2.1-9.el9_6.1.s390x.rpm SHA-256: 3b52c678f1319633aa53cb82ce5433794111cd8e69af7cb1301a96e388081110
giflib-debuginfo-5.2.1-9.el9_6.1.s390x.rpm SHA-256: 7ab9af9458932de767f0d365f6c5aa7297b4b9b2d83808d9b5d1a8a7c1573b96
giflib-debugsource-5.2.1-9.el9_6.1.s390x.rpm SHA-256: a2d5de6619bb8e9b625301d5b2909afbda2311841353f59df62a8dec1df375cf
giflib-utils-debuginfo-5.2.1-9.el9_6.1.s390x.rpm SHA-256: afdf8b5abece7ef15cdb9d800a9e80962a1fc8d6781bd5d2b4aa684f12f47420

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
x86_64
giflib-5.2.1-9.el9_6.1.i686.rpm SHA-256: cec3eacfd80d3546e38a614b61dd7602fe0e728d334e984c24c20b85b747094c
giflib-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: 77c336ea947dd8ef427a978e5189e2b39b8c29a797514dfd2c158b1a3b1f3064
giflib-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: d8d2904787c1a7a5ad9bf3b56ceda6a13d39fe1e2030617727846e82d8387a36
giflib-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: c4442ea362d0743a924f8b88fffc81ee50d16439c5956e7bc02c7045a352532c
giflib-debugsource-5.2.1-9.el9_6.1.i686.rpm SHA-256: fb9bacce7f389171cf2c68cfbf480ea87e81e47aa8be882e414d21a4f0e0906b
giflib-debugsource-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: ab41cadc21112b370a8f1f1e6f8143b497b86d9b34d56b5e329334733a45f5db
giflib-utils-debuginfo-5.2.1-9.el9_6.1.i686.rpm SHA-256: e99ca69ab919c98ed3a764d79e55f1feae7efe2a5adf4e9d31206db8da8110f4
giflib-utils-debuginfo-5.2.1-9.el9_6.1.x86_64.rpm SHA-256: fabb9adc09411440a00ecde0a9a1dd254146780ee96143c0446adae40667f1bb

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
aarch64
giflib-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: b9fba782fd18ec9b29a3fa8084b30732c40b998437d48d1a60a4b31f60131b9e
giflib-debuginfo-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: 71e86b48faf598cd9c7664d0852cd3582a5e3f531cd4539abc6294ec3a0d3f8c
giflib-debugsource-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: d938728cfa759ef171ad5e010f8cb5325ba39d54812cac7f27ec66aa72b9b850
giflib-utils-debuginfo-5.2.1-9.el9_6.1.aarch64.rpm SHA-256: c085d81e3579b2597d595edea6709b12ce109de885bc02c1db647949647e1b4b

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
ppc64le
giflib-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: 72f06a9ac5d47832a9b306f31f40234ab261dcd0030bf62f1d45962b6c44d12c
giflib-debuginfo-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: f2515e64bbbad8c35c7007e0c513d48d1af6127ffcf71ce9f5a1977075057202
giflib-debugsource-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: d4f15a9bcf7b26a371854a071ddb794e8d9ed8080a94ea328fcb4e5d2fc42077
giflib-utils-debuginfo-5.2.1-9.el9_6.1.ppc64le.rpm SHA-256: 9df5093c4f03b2978d5611ff059df36519436fc7e127f18b8c8e38c984918a94

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6

SRPM
giflib-5.2.1-9.el9_6.1.src.rpm SHA-256: 7190afe993e439540a36a564f62c09dbd455f477a9e2b4223943b35c4ddf407d
s390x
giflib-5.2.1-9.el9_6.1.s390x.rpm SHA-256: 3b52c678f1319633aa53cb82ce5433794111cd8e69af7cb1301a96e388081110
giflib-debuginfo-5.2.1-9.el9_6.1.s390x.rpm SHA-256: 7ab9af9458932de767f0d365f6c5aa7297b4b9b2d83808d9b5d1a8a7c1573b96
giflib-debugsource-5.2.1-9.el9_6.1.s390x.rpm SHA-256: a2d5de6619bb8e9b625301d5b2909afbda2311841353f59df62a8dec1df375cf
giflib-utils-debuginfo-5.2.1-9.el9_6.1.s390x.rpm SHA-256: afdf8b5abece7ef15cdb9d800a9e80962a1fc8d6781bd5d2b4aa684f12f47420

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.