Package: giflib-doc (5.2.2-r2)

A library for reading and writing GIF images (documentation)

Download giflib-doc

ArchitecturePackage sizeInstalled sizeFilesPackage
aarch6412 KiB9.9 KiBlist of filesNot published
x86_6412 KiB9.9 KiBlist of filesNot published

Package-file coverage (not observed)

The active import did not include the repository's package-file index (Debian Contents for this cohort). This is missing coverage, not an observation that the package contains or installs zero files.

No package-associated file paths were observed for the displayed build metadata.

Field source: Alpine Linux 3.23 main aarch64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
5.2.2-r2v3.23 / mainaarch64Alpine Linux 3.23 · main · aarch6412 KiB9.9 KiBNot reported
5.2.2-r2v3.23 / mainx86_64Alpine Linux 3.23 · main · x86_6412 KiB9.9 KiBNot reported

Field source: Alpine Linux 3.23 main aarch64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-26740]

Published:

Buffer Overflow vulnerability in giflib v.5.2.2 allows a remote attacker to cause a denial of service via the EGifGCBToExtension overwriting an existing Graphic Control Extension block without validat

High(8.6)Unknown
Details (2)
  • 5.2.2-r2 · aarch64 · v3.23

    Unknown · Fixed: 5.2.2-r2

    Version impact unknown

    pypi · giflib · alpine · 3.21; pypi · giflib · alpine · 3.22; pypi · giflib · alpine · 3.23; pypi · giflib · alpine · 3.24

  • 5.2.2-r2 · x86_64 · v3.23

    Unknown · Fixed: 5.2.2-r2

    Version impact unknown

    pypi · giflib · alpine · 3.21; pypi · giflib · alpine · 3.22; pypi · giflib · alpine · 3.23; pypi · giflib · alpine · 3.24

[CVE-2025-31344]

Published:

giflib: CVE-2025-31344

Medium(5.9)Unknown
Details (2)
  • 5.2.2-r2 · aarch64 · v3.23

    Unknown · Fixed: 5.2.2-r1

    Version impact unknown

    pypi · giflib · alpine · 3.21; pypi · giflib · alpine · 3.22; pypi · giflib · alpine · 3.23; pypi · giflib · alpine · 3.24

  • 5.2.2-r2 · x86_64 · v3.23

    Unknown · Fixed: 5.2.2-r1

    Version impact unknown

    pypi · giflib · alpine · 3.21; pypi · giflib · alpine · 3.22; pypi · giflib · alpine · 3.23; pypi · giflib · alpine · 3.24

[CVE-2023-48161]

Published:

giflib: CVE-2023-48161

High(7.1)Unknown
Details (2)
  • 5.2.2-r2 · aarch64 · v3.23

    Unknown · Fixed: 5.2.2-r0

    Version impact unknown

    pypi · giflib · alpine · 3.17; pypi · giflib · alpine · 3.18; pypi · giflib · alpine · 3.19; pypi · giflib · alpine · 3.20; pypi · giflib · alpine · 3.21; pypi · giflib · alpine · 3.22; pypi · giflib · alpine · 3.23; pypi · giflib · alpine · 3.24

  • 5.2.2-r2 · x86_64 · v3.23

    Unknown · Fixed: 5.2.2-r0

    Version impact unknown

    pypi · giflib · alpine · 3.17; pypi · giflib · alpine · 3.18; pypi · giflib · alpine · 3.19; pypi · giflib · alpine · 3.20; pypi · giflib · alpine · 3.21; pypi · giflib · alpine · 3.22; pypi · giflib · alpine · 3.23; pypi · giflib · alpine · 3.24

[CVE-2023-39742]

Published:

giflib: CVE-2023-39742

Medium(5.5)Unknown
Details (2)
  • 5.2.2-r2 · aarch64 · v3.23

    Unknown · Fixed: 5.2.2-r0

    Version impact unknown

    pypi · giflib · alpine · 3.17; pypi · giflib · alpine · 3.18; pypi · giflib · alpine · 3.19; pypi · giflib · alpine · 3.20; pypi · giflib · alpine · 3.21; pypi · giflib · alpine · 3.22; pypi · giflib · alpine · 3.23; pypi · giflib · alpine · 3.24

  • 5.2.2-r2 · x86_64 · v3.23

    Unknown · Fixed: 5.2.2-r0

    Version impact unknown

    pypi · giflib · alpine · 3.17; pypi · giflib · alpine · 3.18; pypi · giflib · alpine · 3.19; pypi · giflib · alpine · 3.20; pypi · giflib · alpine · 3.21; pypi · giflib · alpine · 3.22; pypi · giflib · alpine · 3.23; pypi · giflib · alpine · 3.24

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

5.2.2-r2 / aarch64Observed Sep 1, 2026apk-checksum Q1W2ItiPmlc0…a4Vy/sM=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1W2ItiPmlc0q+GuXaNWofa4Vy/sM=

Field source: Alpine Linux 3.23 main aarch64

5.2.2-r2 / x86_64Observed Sep 1, 2026apk-checksum Q1X5rbuTqMgx…ksep7Og=Source-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (apk-checksum): Q1X5rbuTqMgxpAxppm5T9vksep7Og=

Field source: Alpine Linux 3.23 main x86_64

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    v3-23-main-aarch64:3c193cdb4a3ae8c5a08d7ef5282971be76249c13d1db367323e06212ec30d230

    Repository-signature verification record
    Signed-object SHA-256
    f399e7803b7b52f81a6307739a8951c6edcdbf54e825d0d34c309a2cd305569d
    Keyring revision
    alpine-aarch64
    SHA-256 776977684fe729c59796fb6fc0279858c44c1195302892a8da4bbb3ee167e67f
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
  • Authoritative source; repository metadata signature verified

    Signature evidence

    v3-23-main-x86-64:aecb4d45d58b2e08e09c841a9132ab6f77239d8117232bea8385b33090e25fbb

    Repository-signature verification record
    Signed-object SHA-256
    eae8fa0146127c33cd9a723915001f535277687349397f0d34f313638e33fc18
    Keyring revision
    alpine-x86_64
    SHA-256 203c4f30dddf6b0661bdf0255ddc5b7e2f703f580ae61791f00f81945132b509
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026