Ubuntu alert USN-8583-1 (giflib)

From:
             
 
noreply+usn-bot--- via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8583-1] GIFLIB vulnerabilities
Date:
             
 
Wed, 22 Jul 2026 14:36:46 +0000
Message-ID:
             
 
<E1wmY3y-00024q-Bx@lists.ubuntu.com>
Cc:
             
 
noreply+usn-bot@canonical.com
==========================================================================
Ubuntu Security Notice USN-8583-1
July 22, 2026

giflib vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

GIFLIB could be made to crash or run programs if it opened a specially
crafted file.

Software Description:
- giflib: library for GIF images

Details:

It was discovered that GIFLIB incorrectly handled certain GIF image files.
If a user or automated system were tricked into opening a specially crafted
GIF file, a remote attacker could use this issue to cause GIFLIB to crash,
resulting in a denial of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  giflib-tools                    5.2.2-1ubuntu3.2
  libgif7                         5.2.2-1ubuntu3.2

Ubuntu 24.04 LTS
  giflib-tools                    5.2.2-1ubuntu1.2
  libgif7                         5.2.2-1ubuntu1.2

Ubuntu 22.04 LTS
  giflib-tools                    5.1.9-2ubuntu0.3
  libgif7                         5.1.9-2ubuntu0.3

In general, a standard system update will make all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8583-1
  CVE-2026-23868, CVE-2026-26740

Package Information:
  https://launchpad.net/ubuntu/+source/giflib/5.2.2-1ubuntu3.2
  https://launchpad.net/ubuntu/+source/giflib/5.2.2-1ubuntu1.2
  https://launchpad.net/ubuntu/+source/giflib/5.1.9-2ubuntu0.3


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEE+8neBLO2Hp/ppPlOcpJm3tlzhgEFAmpg1AoACgkQcpJm3tlz
hgENxA/+McDZsBw4ErzSTe7je5hMTPMs0Ryeqmz84Ip+mlFGW7dSho/Zc4r4KLXe
F9M/DAHTTt0PMMGHLh2/c9KusYTVEKcarl69cz/Hx/YXye+uNqkR2r1yxTXP/ch3
UWJqyQ+XAF+bQzBZ4mPntpPVmGZXUkBHHmaXngT9Ligv5rBl8QleE39OXO0gIUfS
JD04K/f/4axuB/k7+KPfYAFQWz+mCY2/3HgVFFQmqJXoh703w4BFiCqQtf2Z5qNv
1fTh5BZ/JWkakhUUNDGW2BWyGle/kvhG4hdrIjD8NnDb2lok+xB30A5YFX27iOph
vPwl25otPsBdn5AEi5ewzyCvRbr9/JxZSX3VTkkVmRyw8Gnsmlq+6oQY6VqnoHcw
ylsyEdsg+A1DRN5zzXhX7GQhCD3YDIqN7onYGCK+Fpuc2pLmygoRG5V4xEn3fxW4
dN73E6vGM6dhQ+RsRCoESzthSjH0V8zKDWFZ9ozHA+s7rZikO6ezA2swYjh6n+3a
zWtPJgNlnLbQKuRigYj7fzkcxxc9SdMLRPNnuF18DNsbENYgnj0QjTIon9OAh6oM
VR5rIJCo5v11gHY6THPmh9XCq+8MjGBVAF6WRpGNVdsh08KaC62z7gXnrc47ZFaW
qe8NOlKjru6tHOqf8ogrgrh4miTk3r/peSS6Y8Zu9jL4IwtR8uE=
=jMZ3
-----END PGP SIGNATURE-----