Release gd-2.3.2-3.el9_8.1 ALSA-2026:81517
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
Research direction
The issue identifies libgd’s GIF buffer overflow (CVE-2026-9672) and lists affected gd packages, but names no source files or tests. Start by locating the libgd GIF processing code and the project’s security update or validation instructions. Done means the crafted GIF no longer triggers the reported overflow and the affected package builds are updated.
Written by the indexing model from the issue text.
Description
gd security update
Severity: Important
Description
GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats.
Security Fix(es):
- libgd: buffer overflow when processing specially crafted GIF file (CVE-2026-9672)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
gd-2.3.2-3.el9_8.1.i686
gd-2.3.2-3.el9_8.1.x86_64
gd-devel-2.3.2-3.el9_8.1.i686
gd-devel-2.3.2-3.el9_8.1.x86_64
gd-2.3.2-3.el9_8.1.s390x
gd-devel-2.3.2-3.el9_8.1.s390x
gd-2.3.2-3.el9_8.1.ppc64le
gd-devel-2.3.2-3.el9_8.1.ppc64le
gd-2.3.2-3.el9_8.1.aarch64
gd-devel-2.3.2-3.el9_8.1.aarch64
- Dominant language
- No language data
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from AlmaLinux/updates
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
-
Difficulty 1/5 Under an hour Newbie friendliness 60/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
-
Difficulty 4/5 3-5 days Newbie friendliness 15/100
-
Difficulty 5/5 Over a week Newbie friendliness 5/100
All issues in AlmaLinux/updates
Similar issues
-
URL-encoded parser builds nested objects nothing readsPossibly taken @Senthil455 claimed this today. Open
Difficulty 1/5 Under an hour Newbie friendliness 82/100
Janani-bn/CivicFix#168 · 1 comment ·
Maintainers usually reply within 1 day
-
frontend good first issue testing
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
pallets-eco/flask-security#1299 · 1 comment ·
Maintainers usually reply within 1 day
-
Client customer-reported KeyVault needs-team-attention question Service Attention
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Azure/azure-sdk-for-net#63860 · 3 comments · 1 reaction ·
Maintainers usually reply within 1 day
-
Security headersOpeneffort: trivial module-3-api
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
soroban-forge-labs/soroban-lens#176 ·
Maintainers usually reply within 1 day