# giflib security updates

Patch Radar has 53 security fixes for giflib, closing 9 CVEs. The newest security fix is ELSA-2026-33502 (0:5.2.1-25.el10_2), released July 16, 2026.

- Web page: https://patchblox.com/security/product/linux/giflib
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [ELSA-2026-33502](https://patchblox.com/security/data/fix/linux/elsa-2026-33502.md) | Jul 16, 2026 | ol 10 0:5.2.1-25.el10_2 | High | 1 | 0 |
| [RLSA-2026:33502](https://patchblox.com/security/data/fix/linux/rlsa-2026-33502.md) | Jul 5, 2026 | rocky 10 0:5.2.1-25.el10_2 | High | 1 | 0 |
| [RHSA-2026:33501](https://patchblox.com/security/data/fix/linux/rhsa-2026-33501.md) | Jul 1, 2026 | RHEL 9 0:5.2.1-10.el9_8.2 | High | 1 | 0 |
| [RHSA-2026:33503](https://patchblox.com/security/data/fix/linux/rhsa-2026-33503.md) | Jul 1, 2026 | RHEL 8 0:5.1.4-5.el8_10 | High | 1 | 0 |
| [RLSA-2026:33501](https://patchblox.com/security/data/fix/linux/rlsa-2026-33501.md) | Jul 1, 2026 | rocky 9 0:5.2.1-10.el9_8.2 | High | 1 | 0 |
| [RLSA-2026:33503](https://patchblox.com/security/data/fix/linux/rlsa-2026-33503.md) | Jul 1, 2026 | rocky 8 0:5.1.4-5.el8_10 | High | 1 | 0 |
| [ELSA-2026-33501](https://patchblox.com/security/data/fix/linux/elsa-2026-33501.md) | Jul 1, 2026 | ol 9 0:5.2.1-10.el9_8.2 | High | 1 | 0 |
| [ALSA-2026:33501](https://patchblox.com/security/data/fix/linux/alsa-2026-33501.md) | Jun 30, 2026 | almalinux 9 5.2.1-10.el9_8.2 | High | 1 | 0 |
| [ALSA-2026:33502](https://patchblox.com/security/data/fix/linux/alsa-2026-33502.md) | Jun 30, 2026 | almalinux 10 5.2.1-25.el10_2 | High | 1 | 0 |
| [ALSA-2026:33503](https://patchblox.com/security/data/fix/linux/alsa-2026-33503.md) | Jun 30, 2026 | almalinux 8 5.1.4-5.el8_10 | High | 1 | 0 |
| [ELSA-2026-33503](https://patchblox.com/security/data/fix/linux/elsa-2026-33503.md) | Jun 30, 2026 | ol 8 0:5.1.4-5.el8_10 | High | 1 | 0 |
| [OPENSUSE-SU-2026:21076-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21076-1.md) | Jun 28, 2026 | opensuse-leap 16.0 5.2.2-160000.4.1 | High | 1 | 0 |
| [SUSE-SU-2026:22382-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-22382-1.md) | Jun 28, 2026 | sles 16.0 5.2.2-160000.4.1 | High | 1 | 0 |
| [SUSE-SU-2026:2666-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2666-1.md) | Jun 26, 2026 | sles 15.6 5.2.2-150000.4.22.1 | High | 1 | 0 |
| [SUSE-SU-2026:2666-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2666-1.md) | Jun 26, 2026 | sles 15.7 5.2.2-150000.4.22.1 | High | 1 | 0 |
| [ALAS2023-2026-1883](https://patchblox.com/security/data/fix/linux/alas2023-2026-1883.md) | Jun 22, 2026 | amzn 2023 5.2.1-9.amzn2023.0.4 | High | 1 | 0 |
| [RLSA-2026:19154](https://patchblox.com/security/data/fix/linux/rlsa-2026-19154.md) | May 29, 2026 | rocky 10 0:5.2.1-24.el10_2 | High | 1 | 0 |
| [RLSA-2026:19367](https://patchblox.com/security/data/fix/linux/rlsa-2026-19367.md) | May 28, 2026 | rocky 9 0:5.2.1-10.el9_8.1 | High | 1 | 0 |
| [ALSA-2026:19154](https://patchblox.com/security/data/fix/linux/alsa-2026-19154.md) | May 19, 2026 | almalinux 10 5.2.1-24.el10_2 | High | 1 | 0 |
| [ALSA-2026:19367](https://patchblox.com/security/data/fix/linux/alsa-2026-19367.md) | May 19, 2026 | almalinux 9 5.2.1-10.el9_8.1 | High | 1 | 0 |
| [RHSA-2026:8859](https://patchblox.com/security/data/fix/linux/rhsa-2026-8859.md) | Apr 30, 2026 | RHEL 9 0:5.2.1-9.el9_7.1 | High | 1 | 0 |
| [RHSA-2026:8861](https://patchblox.com/security/data/fix/linux/rhsa-2026-8861.md) | Apr 30, 2026 | RHEL 8 0:5.1.4-4.el8_10 | High | 1 | 0 |
| [RLSA-2026:8861](https://patchblox.com/security/data/fix/linux/rlsa-2026-8861.md) | Apr 23, 2026 | rocky 8 0:5.1.4-4.el8_10 | High | 1 | 0 |
| [OPENSUSE-SU-2026:20601-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-20601-1.md) | Apr 22, 2026 | opensuse-leap 16.0 5.2.2-160000.3.1 | High | 1 | 0 |
| [ALSA-2026:8861](https://patchblox.com/security/data/fix/linux/alsa-2026-8861.md) | Apr 20, 2026 | almalinux 8 5.1.4-4.el8_10 | High | 1 | 0 |
| [ELSA-2026-8859](https://patchblox.com/security/data/fix/linux/elsa-2026-8859.md) | Apr 20, 2026 | ol 9 0:5.2.1-9.el9_7.1 | High | 1 | 0 |
| [ELSA-2026-8861](https://patchblox.com/security/data/fix/linux/elsa-2026-8861.md) | Apr 20, 2026 | ol 8 0:5.1.4-4.el8_10 | High | 1 | 0 |
| [ELSA-2026-8858](https://patchblox.com/security/data/fix/linux/elsa-2026-8858.md) | Apr 19, 2026 | ol 10 0:5.2.1-22.el10_1.1 | High | 1 | 0 |
| [SUSE-SU-2026:1338-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1338-1.md) | Apr 15, 2026 | sles 15.7 5.2.2-150000.4.19.1 | High | 1 | 0 |
| [SUSE-SU-2026:1338-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-1338-1.md) | Apr 15, 2026 | opensuse-leap 15.6 5.2.2-150000.4.19.1 | High | 1 | 0 |
| [ALAS2023-2026-1508](https://patchblox.com/security/data/fix/linux/alas2023-2026-1508.md) | Mar 30, 2026 | amzn 2023 5.2.1-9.amzn2023.0.3 | High | 1 | 0 |
| [FEDORA-2026-C260342365](https://patchblox.com/security/data/fix/linux/fedora-2026-c260342365.md) | Mar 21, 2026 | Fedora 43 5.2.2-9.fc43 | High | 1 | 0 |
| [DEBIAN-CVE-2026-26740](https://patchblox.com/security/data/fix/linux/debian-cve-2026-26740.md) | Mar 18, 2026 | Debian 14 6.1.3-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-26740](https://patchblox.com/security/data/fix/linux/debian-cve-2026-26740.md) | Mar 18, 2026 | Debian 12.15 (bookworm) 5.2.1-2.5+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-26740](https://patchblox.com/security/data/fix/linux/debian-cve-2026-26740.md) | Mar 18, 2026 | Debian 13.5 (trixie) 5.2.2-1+deb13u1 | High | 1 | 0 |
| [RHSA-2026:33447](https://patchblox.com/security/data/fix/linux/rhsa-2026-33447.md) | Mar 18, 2026 | RHEL 10 5.2.1-22.el10_0.2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-23868](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23868.md) | Mar 10, 2026 | Debian 14 6.1.3-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-23868](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23868.md) | Mar 10, 2026 | Debian 12.15 (bookworm) 5.2.1-2.5+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-23868](https://patchblox.com/security/data/fix/linux/debian-cve-2026-23868.md) | Mar 10, 2026 | Debian 13.5 (trixie) 5.2.2-1+deb13u1 | High | 1 | 0 |
| [RHSA-2026:9290](https://patchblox.com/security/data/fix/linux/rhsa-2026-9290.md) | Mar 10, 2026 | RHEL 10 5.2.1-22.el10_0.1 | High | 1 | 0 |
| [ALAS2023-2025-1220](https://patchblox.com/security/data/fix/linux/alas2023-2025-1220.md) | Oct 14, 2025 | amzn 2023 5.2.1-9.amzn2023.0.2 | High | 3 | 0 |
| [DEBIAN-CVE-2025-31344](https://patchblox.com/security/data/fix/linux/debian-cve-2025-31344.md) | Apr 14, 2025 | Debian 14 6.1.3-1 | High | 1 | 0 |
| [SUSE-SU-2025:1164-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1164-1.md) | Apr 8, 2025 | sles 15.6 5.2.2-150000.4.16.1 | High | 1 | 0 |
| [SUSE-SU-2025:1164-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-1164-1.md) | Apr 8, 2025 | opensuse-leap 15.6 5.2.2-150000.4.16.1 | High | 1 | 0 |
| [DEBIAN-CVE-2024-45993](https://patchblox.com/security/data/fix/linux/debian-cve-2024-45993.md) | Sep 30, 2024 | Debian 14 6.1.3-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-48161](https://patchblox.com/security/data/fix/linux/debian-cve-2023-48161.md) | Nov 22, 2023 | Debian 13.5 (trixie) 5.2.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-48161](https://patchblox.com/security/data/fix/linux/debian-cve-2023-48161.md) | Nov 22, 2023 | Debian 14 5.2.2-1 | High | 1 | 0 |
| [ALAS2023-2023-386](https://patchblox.com/security/data/fix/linux/alas2023-2023-386.md) | Oct 12, 2023 | amzn 2023 5.2.1-9.amzn2023.0.1 | Routine | 1 | 0 |
| [ALAS2023-2023-075](https://patchblox.com/security/data/fix/linux/alas2023-2023-075.md) | Feb 17, 2023 | amzn 2023 5.2.1-9.amzn2023 | Routine | 2 | 0 |
| [DEBIAN-CVE-2021-40633](https://patchblox.com/security/data/fix/linux/debian-cve-2021-40633.md) | Jun 14, 2022 | Debian 13.5 (trixie) 5.2.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2021-40633](https://patchblox.com/security/data/fix/linux/debian-cve-2021-40633.md) | Jun 14, 2022 | Debian 14 5.2.2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-28506](https://patchblox.com/security/data/fix/linux/debian-cve-2022-28506.md) | Apr 25, 2022 | Debian 13.5 (trixie) 5.2.2-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-28506](https://patchblox.com/security/data/fix/linux/debian-cve-2022-28506.md) | Apr 25, 2022 | Debian 14 5.2.2-1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
