Fabrice Fontaine d7926d7cb5 package/giflib: add two upstream security fixes ...

- Fix CVE-2018-11490: The DGifDecompressLine function in dgif_lib.c in
  GIFLIB (possibly version 3.0.x), as later shipped in cgif.c in sam2p
  0.49.4, has a heap-based buffer overflow because a certain
  "Private->RunningCode - 2" array index is not checked. This will lead
  to a denial of service or possibly unspecified other impact.

- Fix CVE-2019-15133: In GIFLIB before 2019-02-16, a malformed GIF file
  triggers a divide-by-zero exception in the decoder function DGifSlurp
  in dgif_lib.c if the height field of the ImageSize data structure is
  equal to zero.

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2019-08-19 23:46:55 +02:00

..

0001-Address-SF-bug-113-Heap-Buffer-Overflow-2-in-functio.patch

package/giflib: add two upstream security fixes

2019-08-19 23:46:55 +02:00

0002-Address-SF-bug-119-MemorySanitizer-FPE-on-unknown-ad.patch

package/giflib: add two upstream security fixes

2019-08-19 23:46:55 +02:00

Config.in

…

giflib.hash

…

giflib.mk

…