Debian Patches
Status for libavif/1.2.1-1.2
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| Add-integer-overflow-checks-to-makeRoom.patch | Add integer overflow checks to makeRoom. | DanisJiang <43723722+DanisJiang@users.noreply.github.com> | yes | debian upstream | https://github.com/AOMediaCodec/libavif/commit/e5fdefe7d1776e6c4cf1703c163a8c0535599029 | 2025-04-18 |
| Add-integer-overflow-check-to-makeRoom.patch | Add integer overflow check to makeRoom. | DanisJiang <43723722+DanisJiang@users.noreply.github.com> | yes | debian upstream | https://github.com/AOMediaCodec/libavif/commit/50a743062938a3828581d725facc9c2b92a1d109 | 2025-04-21 |
| Fix-format-errors.patch | Fix format errors | "Danis Jiang (Yuhao Jiang)" | yes | debian upstream | https://github.com/AOMediaCodec/libavif/commit/c9f1bea437f21cb78f9919c332922a3b0ba65e11 | 2025-04-24 |
| Declare-RowBytes-as-size_t-in-avifImageRGBToYUV.patch | Declare *RowBytes as size_t in avifImageRGBToYUV() Declare rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes as size_t in avifImageRGBToYUV(). This causes multiplications with these variables to be performed in size_t (which may be 64 bits) instead of uint32_t. For very large image width and height, these multiplications may overflow uint32_t. https://github.com/AOMediaCodec/libavif/security/advisories/GHSA-762c-2538-h844 |
Wan-Teh Chang <wtc@google.com> | yes | debian upstream | https://github.com/AOMediaCodec/libavif/commit/64d956ed5a602f78cebf29da023280944ee92efd | 2025-04-18 |
| Add-another-integer-overflow-check-to-makeRoom.patch | Add another integer overflow check to makeRoom Replace the while loop with a formula in makeRoom. Test the integer overflow checks in makeRoom. See https://github.com/AOMediaCodec/libavif/pull/2768. |
Wan-Teh Chang <wtc@google.com> | yes | upstream | https://github.com/AOMediaCodec/libavif/commit/32eae7c5c1e72d9999cb31d02e333b6a76029bad | 2025-04-27 |
All known versions for source package 'libavif'
- 1.3.0-1 (sid, forky)
- 1.2.1-1.2 (trixie)
- 0.11.1-1+deb12u1 (bookworm-security, bookworm)
