Path to this page:
./
graphics/giflib,
GIF image format library
Branch: CURRENT,
Version: 6.1.3,
Package name: giflib-6.1.3,
Maintainer: pkgsrc-usersgiflib is a library for reading and writing gif images. It is API and ABI
compatible with libungif which was in wide use while the LZW compression
algorithm was patented.
Required to build:[
pkgtools/cwrappers]
Master sites:
Filesize: 459.55 KB
Version history: (Expand)
- (2026-04-12) Updated to version: giflib-6.1.3
- (2026-03-10) Updated to version: giflib-6.1.2
- (2025-10-24) Package has been reborn
- (2025-10-24) Package deleted from pkgsrc
- (2025-07-15) Package has been reborn
- (2025-07-15) Package deleted from pkgsrc
CVS history: (Expand)
2026-04-12 20:29:17 by Thomas Klausner | Files touched by this commit (4) |  |
Log message:
giflib: update to 6.1.3.
* Fix SF bugs #194, #195, #196, #197: these were in the gif_fiont.c
code, which is a historical relic not affecting general library clients.
* Fix SF bug #193, double free on malicious GIF when built with reallocarray.
|
2026-03-10 21:40:57 by Thomas Klausner | Files touched by this commit (7) |  |
Log message:
giflib*: update to 6.1.2
Version 6.1.2
=============
Code Fixes
----------
* Fix for low-severity CVE-2026-23868 affecting gifponge, giftool, and gifbuild,
but not the core library - library clients need not be alarned.
Version 6.1.1
=============
This release bumps the major version, but only one entry point -
EGifSpew() - has changed signature and behavior (in order to be able
to pass out a detailed error code). The internal error
codes in the E_GIF_ERR series have changed value so none of them
collides with GIF_ERROR.
This code has been systematically audited and hardened wuth
ChatGPT-5.2. The only library fixes reported by users or found by
robot were for some memory leaks that could only triggered by severely
malformed GIFs. Other bugs are edge-case failures in the CLI tools.
The gif2rbg CLI tool has been moved to the "obsolete" bin, because its
only deployment case in 2026 is as a piñata at fuzzer parties.
Warning: the CLI tools in the obsolete category will soon be removed
from the distribution entirely. The maintainer is tired of fielding
junk bugs filed against them by would-be coup-counters who found yet
another edge case, and the rest of the world doesn't need noisy CVEs
that aren't actually DoS or security issues for giflib clients.
Code Fixes
----------
* Fix for CVE-2021-40633.
* Fix SF bug #165 EGifSpew leaks GifFileOut->SColorMap
* Fix SF bug #171 ImageMagick required to build giflib on non-Darwin Platforms
* Fix SF bug #172 Incorrect object files in shared libutil on darwin
* Fix SF bug #173 installation of manual pages and html documentation
* Fix SF bug #175 Memory leaks in gifecho.c's main() and in gifalloc.c's \
GifMakeMapObject
* Fix SF bug #177 wrong pointer used in giftool getbool
* Fix SF bug #179 Path Traversal vulnerability
* Fix SF bug #180: -Wformat-truncation likely pointing out an actual bug
* Fix SF bug #182 out‐of‐bounds writes in Icon2Gif
* Fix SF bug #184 uninitialized buffer in DumpScreen2RGB
* Fix SF bug #185 integer overflow in gifbg.c
* Fix SF bug #186 integer overflow in Icon2Gif
* Fix SF bug #187: CVE-2025-31344
* Fix SF bug #170 Tests failing on Ubuntu Noble, giftext buffer overflow
* Fix SF bug #165 EGifSpew leaks GifFileOut->SColorMap
* Fix SF bug #162 detected memory leaks in GifMakeSavedImage giflib/gifalloc.c
* Fix SF bug #161 detected memory leaks in EGifOpenFileHandle giflib/egif_lib.c
* Fix SF bug #142 ABI break public symbol GifQuantizeBuffer
Other bugs that duplicate these have breen addressesed by these fixes
* SF bug #156 EGifSpew leaks SavedImages (and more); won't fix, caller
might want to write a GIF, modify the in-memory data, then write
again.
Tests
-----
Test suite now emits TAP (Test Anything Protocol).
|
| 2025-11-17 12:01:43 by Thomas Klausner | Files touched by this commit (709) |
Log message:
*: switch all sourceforge HOMEPAGEs to https
|
| 2025-05-04 13:19:20 by Nia Alarie | Files touched by this commit (4) |
Log message:
giflib: Apply patch for CVE-2025-31344
|
| 2024-09-19 11:01:15 by Nia Alarie | Files touched by this commit (2) |
Log message:
giflib: Simplify patches.
|
| 2024-09-19 01:02:59 by Nia Alarie | Files touched by this commit (8) |
Log message:
giflib[-util]: Update to 5.2.2. Libtoolize.
This is a point release intended to clear up a couple of CVEs and
apply point fixes that have been accumulating since 5.2.1
There are a few unresolved (but minor) memory leaks related to design
issues in the API that still need to be resolved. Expect those fixes
in the next release.
Code Fixes
----------
* Fixes for CVE-2023-48161, CVE-2022-28506,
* Address SF issue #138 Documentation for obsolete utilities still installed
* Address SF issue #139: Typo in "LZW image data" page ("110_2 = \
4_10")
* Address SF issue #140: Typo in "LZW image data" page ("LWZ")
* Address SF issue #141: Typo in "Bits and bytes" page ("filed")
* Note as already fixed SF issue #143: cannot compile under mingw
* Address SF issue #144: giflib-5.2.1 cannot be build on windows and other \
platforms using c89
* Address SF issue #145: Remove manual pages installation for binaries that are \
not installed too
* Address SF issue #146: [PATCH] Limit installed man pages to binaries, move \
giflib to section 7
* Address SF issue #147 [PATCH] Fixes to doc/whatsinagif/ content
* Address SF issue #148: heap Out of Bound Read in gif2rgb.c:298 DumpScreen2RGB
* Declared no-info on SF issue #150: There is a denial of service vulnerability \
in GIFLIB 5.2.1
* Declared Won't-fix on SF issue 149: Out of source builds no longer possible
* Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45
* Address SF issue #152: Fix some typos on the html documentation and man pages
* Address SF issue #153: Fix segmentation faults due to non correct checking for args
* Address SF issue #154: Recover the giffilter manual page
* Address SF issue #155: Add gifsponge docs
* Address SF issue #157: An OutofMemory-Exception or Memory Leak in gif2rgb
* Address SF issue #158: There is a null pointer problem in gif2rgb
* Address SF issue #159 A heap-buffer-overflow in GIFLIB5.2.1 DumpScreen2RGB() \
in gif2rgb.c:298:45
* Address SF issue #163: detected memory leaks in openbsd_reallocarray \
giflib/openbsd-reallocarray.c
* Address SF issue #164: detected memory leaks in GifMakeMapObject giflib/gifalloc.c
* Address SF issue #166: a read zero page leads segment fault in getarg.c and \
memory leaks in gif2rgb.c and gifmalloc.c
* Address SF issue #167: Heap-Buffer Overflow during Image Saving in \
DumpScreen2RGB Function at Line 321 of gif2rgb.c
|
| 2023-12-21 11:46:15 by Niclas Rosenvik | Files touched by this commit (3) |
Log message:
giflib-util: Fix manpage installation when custom PKGMANDIR is set
|
| 2023-11-09 21:31:00 by Nia Alarie | Files touched by this commit (3) |
Log message:
giflib: Honour CFLAGS.
|