Debian Patches
Status for giflib/5.2.2-1+deb13u1
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| dont-build-html-pages-images.diff | Don't build the site HTML pages images. It saves us to have ImageMagick as a b-depend. | David Suárez <david.sephirot@gmail.com> | not-needed | vendor | 2024-03-24 | |
| Correct-document-page-install.patch | Correct document page install. | "Eric S. Raymond" <esr@thyrsus.com> | no | 2024-02-21 | ||
| revert-GifQuantizeBuffer-remove-from-lib.patch | Revert the remove of GifQuantizeBuffer symbol from the main lib. It is needed for some applications (exactimage, mplayer-gui, mplayer, qutemol and xplanet). . This patch is temporary to allow switch to the new ABI, the change is trivial, the symbol is moved to libutil, so the packages will need to links against it. |
David Suárez <david.sephirot@gmail.com> | yes | debian upstream | vendor | 2024-03-24 |
| 30_link_utils_dynamically.diff | Link giflib-tools dynamically against giflib | Andreas Metzler <ametzler@debian.org> | yes | upstream | vendor | 2024-02-24 |
| dont-spoil-tests-with-stderr.patch | Do not spoil tests with stderror output | Vasyl Gello <vasek.gello@gmail.com> | not-needed | vendor | 2022-04-22 | |
| giflib_quantize-header.patch | Move declaration of GifQuantizeBuffer() back to gif_lib.h | Graham Inggs <ginggs@debian.org>, Andreas Metzler <ametzler@debian.org> | no | debian | 2024-02-24 | |
| Clean-up-memory-better-at-end-of-run-CVE-2021-40633.patch | Clean up memory better at end of run (CVE-2021-40633) | "Eric S. Raymond" <esr@thyrsus.com> | no | 2024-02-21 | ||
| CVE-2026-23868.patch | commit f5b7267aed3665ef025c13823e454170d031c106 | Eric S. Raymond <esr@thyrsus.com> | no | 2026-03-04 | ||
| CVE-2026-26740.patch | Fix heap buffer overflow in EGifGCBToSavedExtension EGifGCBToExtension() unconditionally writes 4 bytes into the buffer passed to it, but EGifGCBToSavedExtension() invoked it on ep->Bytes without checking ep->ByteCount. DGifSlurp() preserves whatever sub-block size the source GIF declared when it stores extension blocks, so a malformed GIF whose Graphics Control Extension declares a sub-block size less than 4 leaves a saved extension shorter than the 4 bytes EGifGCBToExtension() then writes. Tools that round-trip a GIF through DGifSlurp() and EGifGCBToSavedExtension() (for example giftool -d, -t, -u and -x) corrupt the heap on such input. Resize the existing extension to exactly 4 bytes before writing, matching the invariant DGifExtensionToGCB() enforces on the read side. Reproduced under AddressSanitizer with a 40-byte crafted GIF whose Graphics Control Extension declares a 1-byte sub-block; giftool -d then triggers a 1-byte heap write past the end of the ep->Bytes allocation made in GifAddExtensionBlock(). |
rootvector2 <dxbnaveed.k@gmail.com> | no | 2026-05-16 |
All known versions for source package 'giflib'
- 6.1.3-1 (forky, sid)
- 5.2.2-1+deb13u1 (trixie)
- 5.2.1-2.5+deb12u1 (bookworm)