Commit Graph

13 Commits

Author SHA1 Message Date
Vijay Anusuri b54d0fb888 giflib: Fix CVE-2026-23868
Pick patch according to [1]

[1] https://www.facebook.com/security/advisories/cve-2026-23868
[2] https://nvd.nist.gov/vuln/detail/CVE-2026-23868

Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
2026-03-26 06:54:14 +01:00
Martin Jansa 0d361748b8 giflib: fix build with gold and avoid imagemagick-native dependency
* avoid imagemagick-native like upstream did in:
  https://sourceforge.net/p/giflib/code/ci/d54b45b0240d455bbaedee4be5203d2703e59967/

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-07-17 20:07:57 -04:00
nikhil 383cc5f413 giflib: upgrade to version 5.2.2
Upgrade to latest version giflib v5.2.2.

This version fixes bugs listed in link below:
Link: https://sourceforge.net/p/giflib/code/ci/5.2.2/tree/NEWS

Fixes for CVE-2023-48161, CVE-2022-28506, CVE-2023-39742
Link: https://clients.neighbourhood.ie/yocto/1-40.html#:~:text=CVE%2D2023%2D39742%3A%20giflib%3Agiflib%2Dnative

Added dependency on ImageMagick which includes "convert" utility,
to ensure availability of required tool during compilation process.

Add patch to rename binary used in Makefile from
"convert" to "convert.im7" as installed by imagemagick package.

Drop CVE-2022-28506.patch as it is fixed in this version.

Signed-off-by: Bhabu Bindu <bhabubindu@kpit.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-06-27 11:25:28 -04:00
nikhil ca4f69e66c giflib: Fix CVE CVE-2022-28506
There is a heap buffer overflow in DumpScreen2RGB() in gif2rgb.c.  This
occurs when a crafted gif file, where size of color table is < 256 but
image data contains pixels with color code highier than size of color
table. This causes oferflow of ColorMap->Colors array.

Fix the issue by checking if value of each pixel is within bounds of
given color table. If the value is out of color table, print error
message and exit.

Signed-off-by: Nikhil R <nikhil.r@kpit.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2024-04-28 13:10:23 -04:00
Martin Jansa c61dc077bb Convert to new override syntax
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
Andreas Müller 6c596c4acc giflib: upgrade 5.1.4 -> 5.2.1
* Project removed autotools configuration files. It is now a pure Makefile
  build so autotools are not required any more
* Checked sources: Back ported CVE-patch can go

Signed-off-by: Andreas Müller <schnitzeltony@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-05-24 07:39:35 -07:00
Mikko Rapeli 3685e6a827 giflib: apply patch for CVE-2019-15133 and set CVE_PRODUCT
Backport upstream patch for CVE-2019-15133.
Set CVE_PRODUCT to "giflib_project:giflib" which is used
in NVD. https://nvd.nist.gov/vuln/detail/CVE-2019-15133

Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-21 00:26:41 -08:00
Derek Straka 904fd8d955 giflib: update to version 5.1.4
- Remove EXTRA_OECONF to disable X11 support since direct X11 window rendering has been retired
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2016-05-10 20:18:29 +02:00
Magnus Olsson 0d38b67207 giflib: RDEPENDS on perl
The giflib utility "gifburst" is a Perl-script, so make sure Perl
is a run-time dependency for the giflib-utils package.

This will silence file-rdeps QA issue.

Signed-off-by: Magnus Olsson <magnus@minimum.se>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2015-03-21 16:42:22 +01:00
Matthieu CRAPET c95e155780 recipes: convert remaining SUMMARY/DESCRIPTION cosmetic issues
Changes:
- rename SUMMARY with length > 80 to DESCRIPTION
- rename DESCRIPTION with length < 80 to (non present tag) SUMMARY
- drop final point character at the end of SUMMARY string
- remove trailing whitespace of SUMMARY line

Note: don't bump PR

Signed-off-by: Matthieu Crapet <Matthieu.Crapet@ingenico.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2014-02-23 23:20:02 +01:00
Andreas Oberritter f45774e2b0 giflib: don't link against libx11, don't depend on libsm
libsm wasn't used unless libx11 was built before giflib. Therefore
drop the dependency on libsm and disable x11 unconditionally like
Debian does.

Signed-off-by: Andreas Oberritter <obi@opendreambox.org>
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2012-03-02 09:18:54 +01:00
Martin Jansa 863e05d622 gitflib: add LIC_FILES_CHKSUM 2011-03-24 10:45:57 +01:00
Koen Kooi d629f79d9f giflib: import from meta-shr
Signed-off-by: Koen Kooi <koen@dominion.thruhere.net>
2011-03-23 18:13:53 +01:00