./graphics/giflib-util, GIF image format utility

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 5.2.2, Package name: giflib-util-5.2.2, Maintainer: pkgsrc-users

giflib is a library for reading and writing gif images. It is API and ABI
compatible with libungif which was in wide use while the LZW compression
algorithm was patented.


Required to run:
[graphics/giflib]

Required to build:
[textproc/xmlto] [pkgtools/cwrappers]

Master sites:

Filesize: 436.694 KB

Version history: (Expand)


CVS history: (Expand)


   2024-09-19 01:02:59 by Nia Alarie | Files touched by this commit (8)
Log message:
giflib[-util]: Update to 5.2.2. Libtoolize.

This is a point release intended to clear up a couple of CVEs and
apply point fixes that have been accumulating since 5.2.1

There are a few unresolved (but minor) memory leaks related to design
issues in the API that still need to be resolved. Expect those fixes
in the next release.

Code Fixes
----------

* Fixes for CVE-2023-48161, CVE-2022-28506,

* Address SF issue #138 Documentation for obsolete utilities still installed

* Address SF issue #139: Typo in "LZW image data" page ("110_2 = \ 
4_10")

* Address SF issue #140: Typo in "LZW image data" page ("LWZ")

* Address SF issue #141: Typo in "Bits and bytes" page ("filed")

* Note as already fixed SF issue #143: cannot compile under mingw

* Address SF issue #144: giflib-5.2.1 cannot be build on windows and other \ 
platforms using c89

* Address SF issue #145: Remove manual pages installation for binaries that are \ 
not installed too

* Address SF issue #146: [PATCH] Limit installed man pages to binaries, move \ 
giflib to section 7

* Address SF issue #147 [PATCH] Fixes to doc/whatsinagif/ content

* Address SF issue #148: heap Out of Bound Read in gif2rgb.c:298 DumpScreen2RGB

* Declared no-info on SF issue #150: There is a denial of service vulnerability \ 
in GIFLIB 5.2.1

* Declared Won't-fix on SF issue 149: Out of source builds no longer possible

* Address SF issue #151: A heap-buffer-overflow in gif2rgb.c:294:45

* Address SF issue #152: Fix some typos on the html documentation and man pages

* Address SF issue #153: Fix segmentation faults due to non correct checking for args

* Address SF issue #154: Recover the giffilter manual page

* Address SF issue #155: Add gifsponge docs

* Address SF issue #157: An OutofMemory-Exception or Memory Leak in gif2rgb

* Address SF issue #158: There is a null pointer problem in gif2rgb

* Address SF issue #159 A heap-buffer-overflow in GIFLIB5.2.1 DumpScreen2RGB() \ 
in gif2rgb.c:298:45

* Address SF issue #163: detected memory leaks in openbsd_reallocarray \ 
giflib/openbsd-reallocarray.c

* Address SF issue #164: detected memory leaks in GifMakeMapObject giflib/gifalloc.c

* Address SF issue #166: a read zero page leads segment fault in getarg.c and \ 
memory leaks in gif2rgb.c and gifmalloc.c

* Address SF issue #167: Heap-Buffer Overflow during Image Saving in \ 
DumpScreen2RGB Function at Line 321 of gif2rgb.c
   2023-12-21 11:46:15 by Niclas Rosenvik | Files touched by this commit (3)
Log message:
giflib-util: Fix manpage installation when custom PKGMANDIR is set
   2023-06-06 14:42:56 by Taylor R Campbell | Files touched by this commit (1319)
Log message:
Mass-change BUILD_DEPENDS to TOOL_DEPENDS outside mk/.

Almost all uses, if not all of them, are wrong, according to the
semantics of BUILD_DEPENDS (packages built for target available for
use _by_ tools at build-time) and TOOL_DEPEPNDS (packages built for
host available for use _as_ tools at build-time).

No change to BUILD_DEPENDS as used correctly inside buildlink3.

As proposed on tech-pkg:
https://mail-index.netbsd.org/tech-pkg/2023/06/03/msg027632.html
   2020-06-05 14:49:18 by Jonathan Perkin | Files touched by this commit (189)
Log message:
*: Apply revbump for graphics/giflib API change.
   2020-01-07 21:25:14 by Sevan Janiyan | Files touched by this commit (8)
Log message:
Update to giflib/giflib-util 5.2.1
   2015-01-16 10:35:43 by Thomas Klausner | Files touched by this commit (3)
Log message:
Update giflib* to 5.1.1:

Version 5.1.1
=============

Code Fixes
----------

* Numerous minor fixes in getarg.c. Affects only the utilities, not the
  core library.

* Fix SourceForge bug #59 DGifOpen can segfault if DGifGetScreenDesc fails.

* SourceForge patch #20: In gifalloc, fix usage of realloc() in case of failure.

* Fix SourceForge bug #61 Leak in gifsponge.

Build Fixes
----------

* glibtoolize port fix for OS X.
   2014-05-31 17:56:28 by Thomas Klausner | Files touched by this commit (58)
Log message:
libungif is not relevant any longer since the GIF relevant patents
expired (about 10 years ago).

Unconditionally switch to libgif.

As discussed on tech-pkg without dissent.

Bump PKGREVISION.
   2014-05-15 16:16:11 by Adam Ciarcinski | Files touched by this commit (4)
Log message:
Version 5.1.0
=============

Changes to the API require a library major-version bump.

Code Fixes
----------
* A small change to the API: DGifClose() and EGifClose() now take a
  pointer-to-int second argument (like the corresponding openers)
  where a diagnostic code will be deposited when they return
  GIF_ERROR.  This replaces the old behavior in which the GifFile
  structure was left unfreed so the Error member in it could be filled
  and remain available.  The change was was required because it's
  not always possible to free the struct afterwards. Case in point is
  a C# wrapper for giflib (or any language/environment where you can't
  just free objects allocated in a foreign shared library.)

* Minor fix for SF bug 56; BitsPerPixel may be left as uninitialized
  value when reading (truncated) gif.

* Applied SF patch 17: Use a fallback on Windows where mkstemp is not
  available.

* Applied SF patch 15: Code hardening, preventing spurious
  defective-image messages.

Retirements
-----------
* Removed gif2raw from utils. Its blithe assumption that the EGA16
  palette is a reliable default is now about 20 years obsolete. Format
  conversion is better done with convert(1) from the ImageMagick suite,
  anyway.