giflib (5.2.2-1ubuntu3.2) resolute-security; urgency=medium

  * SECURITY UPDATE: double-free via shallow copy in GifMakeSavedImage
    - debian/patches/CVE-2026-23868-pre1.patch: Address detected memory leaks in
      gifalloc.c.
    - debian/patches/CVE-2026-23868.patch: Avoid potentuial double-free on weird
      images in gifalloc.c.
    - debian/patches/CVE-2026-23868-2.patch: Also copy ExtensionBlockCount in
      gifalloc.c.
    - CVE-2026-23868
  * SECURITY UPDATE: buffer overflow in EGifGCBToExtension
    - debian/patches/CVE-2026-26740.patch: Fix heap OOB write in
      EGifGCBToSavedExtension in egif_lib.c.
    - CVE-2026-26740
  * SECURITY UPDATE: misc security issues
    - debian/patches/misc-security-issues.patch: Fix integer overflow and type
      safety issues across giflib in dgif_lib.c, egif_lib.c, gifalloc.c,
      quantize.c.
    - No CVE number

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 16 Jul 2026 13:40:54 -0400

giflib (5.2.2-1ubuntu3) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Sebastien Bacher <seb128@ubuntu.com>  Sat, 06 Dec 2025 11:07:51 +0100

giflib (5.2.2-1ubuntu2) plucky; urgency=medium

  * No-change rebuild for upperlimit-perl.

 -- Matthias Klose <doko@ubuntu.com>  Tue, 18 Feb 2025 18:53:03 +0100

giflib (5.2.2-1ubuntu1) noble; urgency=medium

  * d/p/snprintf.patch: 
    - cherry pick a patch from Adam Sampson to fix incorrect length arg
      to snprintf (LP:#2060282).

 -- Nathan Pratta Teodosio <nathan.teodosio@canonical.com>  Fri, 05 Apr 2024 10:31:09 +0200

giflib (5.2.2-1) unstable; urgency=medium

  [ Debian Janitor]
  * Update standards version to 4.6.1, no changes needed.
  * Remove obsolete fields Contact, Name from debian/upstream/metadata
    (already present in machine-readable debian/copyright).
  * Use secure URI in Homepage field.

  [ Andreas Metzler ]
  * debian/patches:
    + Drop patches applied upstream (fix-get-args-segment-violation.patch
      fix-spelling-errors-on-doc-pages.patch recover-giffilter-docs.patch
      add-gifsponge-docs.patch)
    + Drop superseded patch (install-only-distributed-binaries-manuals.patch).
    + Unfuzzz patches
    + Features fixes for CVE-2023-48161, CVE-2022-28506.
  * Cherry-pick Correct-document-page-install.patch to install manpages
    instead of xml source.
  * Install giflib.7 manpage.
  * Update symbol file (added DGifDecreaseImageCounter@Base).
  * Cherry-pick Clean-up-memory-better-at-end-of-run-CVE-2021-40633.patch to
    fix CVE-2021-40633.
  * Add lintian overrides for html files built from xml (source-is-missing).

  [ David Suárez ]
  * New upstream version;
      Closes: #1024988, #988151, #1014586, #1045040, 1049653
  * Update email to debian domain.
  * Wrap and sort.
  * Add 'dont-build-html-pages-images' patch.
  * Acknowledges NMU's uploads.
  * Add 'salsa-ci.yml'.

 -- David Suárez <deiv@debian.org>  Sun, 25 Feb 2024 17:44:51 +0000

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libgif7`.
