** Description changed: + Sync giflib 6.1.3-1 (main) from Debian unstable (main) + + Description: + Please sync giflib 6.1.3-1 (main) from Debian unstable (main) + + Explanation of the Ubuntu delta and why it can be dropped: + * d/p/snprintf.patch: + - cherry pick a patch from Adam Sampson to fix incorrect length arg + to snprintf (LP:#2060282). + + Patch was accepted upstream and included in giflib 6.1.3-1. This + resolves the entire Ubuntu delta. + + Changelog entries since current stonking version 5.2.2-1ubuntu3: + + giflib (6.1.3-1) unstable; urgency=medium + + * New upstream version: + - Fix CVE-2026-23868; Closes: #1130495 + - Fix CVE-2024-45993; Closes: #1084058 + - Fix CVE-2025-31344; Closes: #1102520 + - Closes: #1068438 + * debian/patches: + - Drop dont-build-html-pages-images patch; Applied upstream. + - Drop Correct-document-page-install patch; Applied upstream. + - Drop revert-GifQuantizeBuffer-remove-from-lib patch; + Applied upstream. + - Drop Clean-up-memory-better-at-end-of-run-CVE-2021-40633 patch; + Applied upstream. + - Refresh giflib_quantize-header patch. + - Refresh dont-spoil-tests-with-stderr patch. + - Add fix-CVE-2026-26740 patch; Closes: #1131368. + * Improve html documentation: + - Nows the install doc rule, installs the html docs. + - Don't install html docs for binaries not distributed. + - Remove doc-base as the index contains references to not + installed binaries. + * Add autopkgtests. + * Remove lintian override for sourceforge, now we use it. + * Update standards version; no changes needed. + + -- David Suárez <[email protected]> Sun, 31 May 2026 16:19:21 +0200 + + + --- A new release of giflib is available for merging from Debian. Ubuntu: 5.2.2-1ubuntu3 Debian Unstable: 6.1.3-1
** Description changed: Sync giflib 6.1.3-1 (main) from Debian unstable (main) Description: Please sync giflib 6.1.3-1 (main) from Debian unstable (main) Explanation of the Ubuntu delta and why it can be dropped: - * d/p/snprintf.patch: - - cherry pick a patch from Adam Sampson to fix incorrect length arg - to snprintf (LP:#2060282). + * d/p/snprintf.patch: + - cherry pick a patch from Adam Sampson to fix incorrect length arg + to snprintf (LP:#2060282). - Patch was accepted upstream and included in giflib 6.1.3-1. This + Patch was accepted upstream [1] and included in giflib 6.1.3-1. This resolves the entire Ubuntu delta. Changelog entries since current stonking version 5.2.2-1ubuntu3: giflib (6.1.3-1) unstable; urgency=medium - * New upstream version: - - Fix CVE-2026-23868; Closes: #1130495 - - Fix CVE-2024-45993; Closes: #1084058 - - Fix CVE-2025-31344; Closes: #1102520 - - Closes: #1068438 - * debian/patches: - - Drop dont-build-html-pages-images patch; Applied upstream. - - Drop Correct-document-page-install patch; Applied upstream. - - Drop revert-GifQuantizeBuffer-remove-from-lib patch; - Applied upstream. - - Drop Clean-up-memory-better-at-end-of-run-CVE-2021-40633 patch; - Applied upstream. - - Refresh giflib_quantize-header patch. - - Refresh dont-spoil-tests-with-stderr patch. - - Add fix-CVE-2026-26740 patch; Closes: #1131368. - * Improve html documentation: - - Nows the install doc rule, installs the html docs. - - Don't install html docs for binaries not distributed. - - Remove doc-base as the index contains references to not - installed binaries. - * Add autopkgtests. - * Remove lintian override for sourceforge, now we use it. - * Update standards version; no changes needed. + * New upstream version: + - Fix CVE-2026-23868; Closes: #1130495 + - Fix CVE-2024-45993; Closes: #1084058 + - Fix CVE-2025-31344; Closes: #1102520 + - Closes: #1068438 + * debian/patches: + - Drop dont-build-html-pages-images patch; Applied upstream. + - Drop Correct-document-page-install patch; Applied upstream. + - Drop revert-GifQuantizeBuffer-remove-from-lib patch; + Applied upstream. + - Drop Clean-up-memory-better-at-end-of-run-CVE-2021-40633 patch; + Applied upstream. + - Refresh giflib_quantize-header patch. + - Refresh dont-spoil-tests-with-stderr patch. + - Add fix-CVE-2026-26740 patch; Closes: #1131368. + * Improve html documentation: + - Nows the install doc rule, installs the html docs. + - Don't install html docs for binaries not distributed. + - Remove doc-base as the index contains references to not + installed binaries. + * Add autopkgtests. + * Remove lintian override for sourceforge, now we use it. + * Update standards version; no changes needed. - -- David Suárez <[email protected]> Sun, 31 May 2026 16:19:21 +0200 + -- David Suárez <[email protected]> Sun, 31 May 2026 16:19:21 +0200 + [1]: https://sourceforge.net/p/giflib/bugs/170/ --- + A new release of giflib is available for merging from Debian. Ubuntu: 5.2.2-1ubuntu3 Debian Unstable: 6.1.3-1 ** Summary changed: - Merge giflib from Debian for stonking cycle + Sync giflib from Debian ** Changed in: giflib (Ubuntu) Status: New => Triaged ** Summary changed: - Sync giflib from Debian + Sync giflib from Debian for stonking ** Description changed: - Sync giflib 6.1.3-1 (main) from Debian unstable (main) - - Description: Please sync giflib 6.1.3-1 (main) from Debian unstable (main) Explanation of the Ubuntu delta and why it can be dropped: * d/p/snprintf.patch: - cherry pick a patch from Adam Sampson to fix incorrect length arg to snprintf (LP:#2060282). Patch was accepted upstream [1] and included in giflib 6.1.3-1. This resolves the entire Ubuntu delta. Changelog entries since current stonking version 5.2.2-1ubuntu3: giflib (6.1.3-1) unstable; urgency=medium * New upstream version: - Fix CVE-2026-23868; Closes: #1130495 - Fix CVE-2024-45993; Closes: #1084058 - Fix CVE-2025-31344; Closes: #1102520 - Closes: #1068438 * debian/patches: - Drop dont-build-html-pages-images patch; Applied upstream. - Drop Correct-document-page-install patch; Applied upstream. - Drop revert-GifQuantizeBuffer-remove-from-lib patch; Applied upstream. - Drop Clean-up-memory-better-at-end-of-run-CVE-2021-40633 patch; Applied upstream. - Refresh giflib_quantize-header patch. - Refresh dont-spoil-tests-with-stderr patch. - Add fix-CVE-2026-26740 patch; Closes: #1131368. * Improve html documentation: - Nows the install doc rule, installs the html docs. - Don't install html docs for binaries not distributed. - Remove doc-base as the index contains references to not installed binaries. * Add autopkgtests. * Remove lintian override for sourceforge, now we use it. * Update standards version; no changes needed. -- David Suárez <[email protected]> Sun, 31 May 2026 16:19:21 +0200 [1]: https://sourceforge.net/p/giflib/bugs/170/ --- A new release of giflib is available for merging from Debian. Ubuntu: 5.2.2-1ubuntu3 Debian Unstable: 6.1.3-1 ** Description changed: Please sync giflib 6.1.3-1 (main) from Debian unstable (main) Explanation of the Ubuntu delta and why it can be dropped: * d/p/snprintf.patch: - cherry pick a patch from Adam Sampson to fix incorrect length arg to snprintf (LP:#2060282). Patch was accepted upstream [1] and included in giflib 6.1.3-1. This - resolves the entire Ubuntu delta. + resolves the entire Ubuntu delta (with all other version bumps done for + rebuilds). Changelog entries since current stonking version 5.2.2-1ubuntu3: giflib (6.1.3-1) unstable; urgency=medium * New upstream version: - Fix CVE-2026-23868; Closes: #1130495 - Fix CVE-2024-45993; Closes: #1084058 - Fix CVE-2025-31344; Closes: #1102520 - Closes: #1068438 * debian/patches: - Drop dont-build-html-pages-images patch; Applied upstream. - Drop Correct-document-page-install patch; Applied upstream. - Drop revert-GifQuantizeBuffer-remove-from-lib patch; Applied upstream. - Drop Clean-up-memory-better-at-end-of-run-CVE-2021-40633 patch; Applied upstream. - Refresh giflib_quantize-header patch. - Refresh dont-spoil-tests-with-stderr patch. - Add fix-CVE-2026-26740 patch; Closes: #1131368. * Improve html documentation: - Nows the install doc rule, installs the html docs. - Don't install html docs for binaries not distributed. - Remove doc-base as the index contains references to not installed binaries. * Add autopkgtests. * Remove lintian override for sourceforge, now we use it. * Update standards version; no changes needed. -- David Suárez <[email protected]> Sun, 31 May 2026 16:19:21 +0200 [1]: https://sourceforge.net/p/giflib/bugs/170/ --- A new release of giflib is available for merging from Debian. Ubuntu: 5.2.2-1ubuntu3 Debian Unstable: 6.1.3-1 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2158776 Title: Sync giflib from Debian for stonking To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/giflib/+bug/2158776/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
