Debian Patches
Status for giflib/5.2.1-2.5+deb12u1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| fix-get-args-segment-violation.patch | Fix segmentation faults due to non correct checking for args | David Suárez <david.sephirot@gmail.com> | yes | debian upstream | vendor | 2020-12-20 |
| install-only-distributed-binaries-manuals.patch | Only install the manuals for installed binaries | David Suárez <david.sephirot@gmail.com> | yes | upstream | vendor | 2019-11-25 |
| fix-spelling-errors-on-doc-pages.patch | Fix some typos on the html documentation and man pages | David Suárez <david.sephirot@gmail.com> | yes | debian upstream | vendor | 2020-12-20 |
| recover-giffilter-docs.patch | Recover the giffilter manual page | David Suárez <david.sephirot@gmail.com> | yes | upstream | vendor | 2020-12-20 |
| add-gifsponge-docs.patch | Add gifsponge docs | David Suárez <david.sephirot@gmail.com> | yes | upstream | vendor | 2020-12-20 |
| 30_link_utils_dynamically.diff | Link giflib-tools dynamically against giflib | Andreas Metzler <ametzler@debian.org> | yes | upstream | vendor | 2019-03-17 |
| giflib_quantize.patch | Move quantize.c back into libgif.so diff -rupN giflib-5.2.1/Makefile giflib-5.2.1-new/Makefile |
yes | debian upstream | other, fedora https://src.fedoraproject.org/rpms/giflib/c/109bf038d703a471b857aba44af673be103d7079 | ||
| dont-spoil-tests-with-stderr.patch | Do not spoil tests with stderror output | Vasyl Gello <vasek.gello@gmail.com> | not-needed | vendor | 2022-04-22 | |
| giflib_quantize-header.patch | Move declaration of GifQuantizeBuffer() back to gif_lib.h | Graham Inggs <ginggs@debian.org> | no | debian | 2022-06-12 | |
| CVE-2026-23868.patch | CVE-2026-23868 - double-free vulnerability commit f5b7267aed3665ef025c13823e454170d031c106 |
Eric S. Raymond <esr@thyrsus.com> | no | debian | https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106 | 2026-03-04 |
| CVE-2026-26740.patch | CVE-2026-26740 -- heap OOB write in EGifGCBToSavedExtensioncommit 061605081115bbfd7019bafc119a13b6f17fcf25 Fix CVE-2026-26740: heap OOB write in EGifGCBToSavedExtension EGifGCBToSavedExtension calls EGifGCBToExtension which unconditionally writes 4 bytes into ep->Bytes without checking ep->ByteCount. If the extension block was allocated with fewer than 4 bytes, this results in a heap buffer overflow. The read-side counterpart DGifExtensionToGCB already validates that GifExtensionLength == 4 before reading. Add the symmetric check on the write side: return GIF_ERROR when ep->ByteCount < 4. Signed-off-by: Anthony Hurtado <amhurtado@pm.me> |
Anthony Hurtado <amhurtado@protonmail.com> | yes | debian upstream | https://sourceforge.net/p/giflib/code/ci/061605081115bbfd7019bafc119a13b6f17fcf25 | 2026-06-01 |
All known versions for source package 'giflib'
- 6.1.3-1 (forky, sid)
- 5.2.2-1+deb13u1 (trixie)
- 5.2.1-2.5+deb12u1 (bookworm)