rpms/giflib
7
0
Fork 0
Code Issues Pull Requests Releases Activity

fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157086)

Browse Source 
Resolves: RHEL-157086
This commit is contained in:
Michal Hlavinka 2026-06-08 10:22:44 +02:00
parent f5a13c76d4
commit 1fe5b855f0
2 changed files with 20 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
giflib-5.2.1-cve-2026-26740.patch Normal file
View File

@ -0,0 +1,13 @@
diff --git a/egif_lib.c b/egif_lib.c
index 6219af0..5fb458f 100644
--- a/egif_lib.c
+++ b/egif_lib.c
@@ -689,6 +689,8 @@ int EGifGCBToSavedExtension(const GraphicsControlBlock *GCB,
for (i = 0; i < GifFile->SavedImages[ImageIndex].ExtensionBlockCount; i++) {
ExtensionBlock *ep = &GifFile->SavedImages[ImageIndex].ExtensionBlocks[i];
if (ep->Function == GRAPHICS_EXT_FUNC_CODE) {
+ if (ep->ByteCount != 4)
+ return GIF_ERROR;
EGifGCBToExtension(GCB, ep->Bytes);
return GIF_OK;
}

8
giflib.spec
View File

@ -1,7 +1,7 @@
Name: giflib
Summary: A library and utilities for processing GIFs
Version: 5.2.1
Release: 24%{?dist}
Release: 25%{?dist}
License: MIT
URL: http://www.sourceforge.net/projects/%{name}/
@ -24,6 +24,9 @@ Patch5: giflib-5.2.1-fixsnprintf.patch
# from upstream, for <= 6.1.1, RHEL-154850
# https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/
Patch6: giflib-5.2.1-cve-2026-23868.patch
# sent upstream, RHEL-157086
# https://sourceforge.net/p/giflib/bugs/199/
Patch7: giflib-5.2.1-cve-2026-26740.patch
BuildRequires: cmake
@ -158,6 +161,9 @@ rm -rf %{buildroot}%{mingw64_mandir}
%changelog
* Mon Jun 08 2026 Michal Hlavinka <mhlavink@redhat.com> - 5.2.1-25
- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157086)
* Mon May 11 2026 Michal Hlavinka <mhlavink@redhat.com> - 5.2.1-24
- rebuild