close

./graphics/giflib, GIF image format library

[ Image CVSweb ] [ Image Homepage ] [ Image RSS ] [ Image Required by ] [ Image Add to tracker ]


Branch: CURRENT, Version: 6.1.3, Package name: giflib-6.1.3, Maintainer: pkgsrc-users

giflib is a library for reading and writing gif images. It is API and ABI
compatible with libungif which was in wide use while the LZW compression
algorithm was patented.


Required to build:
[pkgtools/cwrappers]

Master sites:

Filesize: 459.55 KB

Version history: (Expand)


CVS history: (Expand)


   2026-04-12 20:29:17 by Thomas Klausner | Files touched by this commit (4) | Package updated
Log message:
giflib: update to 6.1.3.

* Fix SF bugs #194, #195, #196, #197: these were in the gif_fiont.c
  code, which is a historical relic not affecting general library clients.

* Fix SF bug #193, double free on malicious GIF when built with reallocarray.
   2026-03-10 21:40:57 by Thomas Klausner | Files touched by this commit (7) | Package updated
Log message:
giflib*: update to 6.1.2

Version 6.1.2
=============

Code Fixes
----------

* Fix for low-severity CVE-2026-23868 affecting gifponge, giftool, and gifbuild,
  but not the core library - library clients need not be alarned.

Version 6.1.1
=============

This release bumps the major version, but only one entry point -
EGifSpew() - has changed signature and behavior (in order to be able
to pass out a detailed error code). The internal error
codes in the E_GIF_ERR series have changed value so none of them
collides with GIF_ERROR.

This code has been systematically audited and hardened wuth
ChatGPT-5.2. The only library fixes reported by users or found by
robot were for some memory leaks that could only triggered by severely
malformed GIFs. Other bugs are edge-case failures in the CLI tools.

The gif2rbg CLI tool has been moved to the "obsolete" bin, because its
only deployment case in 2026 is as a piñata at fuzzer parties.

Warning: the CLI tools in the obsolete category will soon be removed
from the distribution entirely. The maintainer is tired of fielding
junk bugs filed against them by would-be coup-counters who found yet
another edge case, and the rest of the world doesn't need noisy CVEs
that aren't actually DoS or security issues for giflib clients.

Code Fixes
----------

* Fix for CVE-2021-40633.

* Fix SF bug #165 EGifSpew leaks GifFileOut->SColorMap

* Fix SF bug #171 ImageMagick required to build giflib on non-Darwin Platforms

* Fix SF bug #172 Incorrect object files in shared libutil on darwin

* Fix SF bug #173 installation of manual pages and html documentation

* Fix SF bug #175 Memory leaks in gifecho.c's main() and in gifalloc.c's \ 
GifMakeMapObject

* Fix SF bug #177 wrong pointer used in giftool getbool

* Fix SF bug #179 Path Traversal vulnerability

* Fix SF bug #180: -Wformat-truncation likely pointing out an actual bug

* Fix SF bug #182 out‐of‐bounds writes in Icon2Gif

* Fix SF bug #184 uninitialized buffer in DumpScreen2RGB

* Fix SF bug #185 integer overflow in gifbg.c

* Fix SF bug #186 integer overflow in Icon2Gif

* Fix SF bug #187: CVE-2025-31344

* Fix SF bug #170 Tests failing on Ubuntu Noble, giftext buffer overflow

* Fix SF bug #165 EGifSpew leaks GifFileOut->SColorMap

* Fix SF bug #162 detected memory leaks in GifMakeSavedImage giflib/gifalloc.c

* Fix SF bug #161 detected memory leaks in EGifOpenFileHandle giflib/egif_lib.c

* Fix SF bug #142 ABI break public symbol GifQuantizeBuffer

Other bugs that duplicate these have breen addressesed by these fixes

* SF bug #156 EGifSpew leaks SavedImages (and more); won't fix, caller
  might want to write a GIF, modify the in-memory data, then write
  again.

Tests
-----

Test suite now emits TAP (Test Anything Protocol).
   2025-11-17 12:01:43 by Thomas Klausner | Files touched by this commit (709)
Log message:
*: switch all sourceforge HOMEPAGEs to https
   2025-05-04 13:19:20 by Nia Alarie | Files touched by this commit (4)
Log message:
giflib: Apply patch for CVE-2025-31344
   2024-09-19 11:01:15 by Nia Alarie | Files touched by this commit (2)
Log message:
giflib: Simplify patches.
   2024-09-19 01:02:59 by Nia Alarie | Files touched by this commit (8)
Log message:
giflib[-util]: Update to 5.2.2. Libtoolize.

This is a point release intended to clear up a couple of CVEs and
apply point fixes that have been accumulating since 5.2.1

There are a few unresolved (but minor) memory leaks related to design
issues in the API that still need to be resolved. Expect those fixes
in the next release.

Code Fixes
----------

* Fixes for CVE-2023-48161, CVE-2022-28506,

* Address SF issue #138 Documentation for obsolete utilities still installed

* Address SF issue #139: Typo in "LZW image data" page ("110_2 = \ 
4_10")

* Address SF issue #140: Typo in "LZW image data" page ("LWZ")

* Address SF issue #141: Typo in "Bits and bytes" page ("filed")

* Note as already fixed SF issue #143: cannot compile under mingw

* Address SF issue #144: giflib-5.2.1 cannot be build on windows and other \ 
platforms using c89

* Address SF issue #145: Remove manual pages installation for binaries that are \ 
not installed too

* Address SF issue #146: [PATCH] Limit installed man pages to binaries, move \ 
giflib to section 7

* Address SF issue #147 [PATCH] Fixes to doc/whatsinagif/ content

* Address SF issue #148: heap Out of Bound Read in gif2rgb.c:298 DumpScreen2RGB

* Declared no-info on SF issue #150: There is a denial of service vulnerability \ 
in GIFLIB 5.2.1

* Declared Won't-fix on SF issue 149: Out of source builds no longer possible

* Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45

* Address SF issue #152: Fix some typos on the html documentation and man pages

* Address SF issue #153: Fix segmentation faults due to non correct checking for args

* Address SF issue #154: Recover the giffilter manual page

* Address SF issue #155: Add gifsponge docs

* Address SF issue #157: An OutofMemory-Exception or Memory Leak in gif2rgb

* Address SF issue #158: There is a null pointer problem in gif2rgb

* Address SF issue #159 A heap-buffer-overflow in GIFLIB5.2.1 DumpScreen2RGB() \ 
in gif2rgb.c:298:45

* Address SF issue #163: detected memory leaks in openbsd_reallocarray \ 
giflib/openbsd-reallocarray.c

* Address SF issue #164: detected memory leaks in GifMakeMapObject giflib/gifalloc.c

* Address SF issue #166: a read zero page leads segment fault in getarg.c and \ 
memory leaks in gif2rgb.c and gifmalloc.c

* Address SF issue #167: Heap-Buffer Overflow during Image Saving in \ 
DumpScreen2RGB Function at Line 321 of gif2rgb.c
   2023-12-21 11:46:15 by Niclas Rosenvik | Files touched by this commit (3)
Log message:
giflib-util: Fix manpage installation when custom PKGMANDIR is set
   2023-11-09 21:31:00 by Nia Alarie | Files touched by this commit (3)
Log message:
giflib: Honour CFLAGS.