giflib (6.1.3-1) unstable; urgency=medium

  * New upstream version:
    - Fix CVE-2026-23868; Closes: #1130495
    - Fix CVE-2024-45993; Closes: #1084058
    - Fix CVE-2025-31344; Closes: #1102520
    - Closes: #1068438
  * debian/patches:
    - Drop dont-build-html-pages-images patch; Applied upstream.
    - Drop Correct-document-page-install patch; Applied upstream.
    - Drop revert-GifQuantizeBuffer-remove-from-lib patch;
        Applied upstream.
    - Drop Clean-up-memory-better-at-end-of-run-CVE-2021-40633 patch;
        Applied upstream.
    - Refresh giflib_quantize-header patch.
    - Refresh dont-spoil-tests-with-stderr patch.
    - Add fix-CVE-2026-26740 patch; Closes: #1131368.
  * Improve html documentation:
    - Nows the install doc rule, installs the html docs.
    - Don't install html docs for binaries not distributed.
    - Remove doc-base as the index contains references to not
        installed binaries.
  * Add autopkgtests.
  * Remove lintian override for sourceforge, now we use it.
  * Update standards version; no changes needed.

 -- David Suárez <deiv@debian.org>  Sun, 31 May 2026 16:19:21 +0200

giflib (5.2.2-1) unstable; urgency=medium

  [ Debian Janitor]
  * Update standards version to 4.6.1, no changes needed.
  * Remove obsolete fields Contact, Name from debian/upstream/metadata
    (already present in machine-readable debian/copyright).
  * Use secure URI in Homepage field.

  [ Andreas Metzler ]
  * debian/patches:
    + Drop patches applied upstream (fix-get-args-segment-violation.patch
      fix-spelling-errors-on-doc-pages.patch recover-giffilter-docs.patch
      add-gifsponge-docs.patch)
    + Drop superseded patch (install-only-distributed-binaries-manuals.patch).
    + Unfuzzz patches
    + Features fixes for CVE-2023-48161, CVE-2022-28506.
  * Cherry-pick Correct-document-page-install.patch to install manpages
    instead of xml source.
  * Install giflib.7 manpage.
  * Update symbol file (added DGifDecreaseImageCounter@Base).
  * Cherry-pick Clean-up-memory-better-at-end-of-run-CVE-2021-40633.patch to
    fix CVE-2021-40633.
  * Add lintian overrides for html files built from xml (source-is-missing).

  [ David Suárez ]
  * New upstream version;
      Closes: #1024988, #988151, #1014586, #1045040, 1049653
  * Update email to debian domain.
  * Wrap and sort.
  * Add 'dont-build-html-pages-images' patch.
  * Acknowledges NMU's uploads.
  * Add 'salsa-ci.yml'.

 -- David Suárez <deiv@debian.org>  Sun, 25 Feb 2024 17:44:51 +0000

giflib (5.2.1-2.5) unstable; urgency=medium

  * Non-maintainer upload
  * Move declaration of GifQuantizeBuffer() back to gif_lib.h
    (Closes: #1011705)

 -- Graham Inggs <ginggs@debian.org>  Sun, 12 Jun 2022 16:32:15 +0000

giflib (5.2.1-2.4) unstable; urgency=medium

  * Non-maintainer upload.
  * Upload to unstable.

 -- Mattia Rizzolo <mattia@debian.org>  Wed, 27 Apr 2022 20:17:29 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libgif7`.
