{"id":"CLSA-2026-1787646995","summary":"Fix CVE(s): CVE-2020-23922, CVE-2021-40633, CVE-2026-23868","details":"   * SECURITY UPDATE: heap buffer over-read in gif2rgb\n     - debian/patches/CVE-2020-23922.patch: bound each pixel index against\n       the active color table before indexing ColorMap-\u003eColors in\n       DumpScreen2RGB in util/gif2rgb.c.\n     - CVE-2020-23922\n   * SECURITY UPDATE: memory leak leading to denial of service\n     - debian/patches/CVE-2021-40633.patch: free every ScreenBuffer row, not\n       just the row-pointer array, at the end of GIF2RGB in\n       util/gif2rgb.c.\n     - CVE-2021-40633\n   * SECURITY UPDATE: double free in GifMakeSavedImage\n     - debian/patches/CVE-2026-23868.patch: null out the heap pointers\n       aliased by the shallow copy of CopyFrom, test the source record when\n       deciding what to deep-copy, and restore ExtensionBlockCount after the\n       extension blocks are copied, in lib/gifalloc.c.\n     - CVE-2026-23868","modified":"2026-10-26T09:30:42.804789392Z","published":"2026-08-25T08:36:48Z","upstream":["CVE-2020-23922","CVE-2021-40633","CVE-2026-23868"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1787646995.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-23922"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-40633"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23868"}],"affected":[{"package":{"name":"giflib-tools","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/giflib-tools?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787646995.json"}},{"package":{"name":"libgif-dev","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgif-dev?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787646995.json"}},{"package":{"name":"libgif7","ecosystem":"TuxCare:Ubuntu:18.04","purl":"pkg:deb/tuxcare/libgif7?distro=ubuntu-18.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-2ubuntu0.1+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1787646995.json"}}],"schema_version":"1.9.0"}