diff -Nru giflib-5.2.2/debian/changelog giflib-5.2.2/debian/changelog --- giflib-5.2.2/debian/changelog 2024-02-25 18:44:51.000000000 +0100 +++ giflib-5.2.2/debian/changelog 2024-04-05 10:31:09.000000000 +0200 @@ -1,3 +1,10 @@ +giflib (5.2.2-1ubuntu1) noble; urgency=medium + + [Adam Sampson] + * d/p/snprintf.patch: Fix incorrect length arg to snprintf (LP:#2060282). + + -- Nathan Pratta Teodosio Fri, 05 Apr 2024 10:31:09 +0200 + giflib (5.2.2-1) unstable; urgency=medium [ Debian Janitor] diff -Nru giflib-5.2.2/debian/control giflib-5.2.2/debian/control --- giflib-5.2.2/debian/control 2024-02-25 18:44:51.000000000 +0100 +++ giflib-5.2.2/debian/control 2024-04-05 10:31:09.000000000 +0200 @@ -1,7 +1,8 @@ Source: giflib Section: libs Priority: optional -Maintainer: David Suárez +Maintainer: Ubuntu Developers +XSBC-Original-Maintainer: David Suárez Build-Depends: debhelper-compat (= 13), xmlto Standards-Version: 4.6.1 Homepage: https://giflib.sourceforge.net/ diff -Nru giflib-5.2.2/debian/patches/series giflib-5.2.2/debian/patches/series --- giflib-5.2.2/debian/patches/series 2024-02-25 18:29:30.000000000 +0100 +++ giflib-5.2.2/debian/patches/series 2024-04-05 10:20:12.000000000 +0200 @@ -5,3 +5,4 @@ dont-spoil-tests-with-stderr.patch giflib_quantize-header.patch Clean-up-memory-better-at-end-of-run-CVE-2021-40633.patch +snprintf.patch diff -Nru giflib-5.2.2/debian/patches/snprintf.patch giflib-5.2.2/debian/patches/snprintf.patch --- giflib-5.2.2/debian/patches/snprintf.patch 1970-01-01 01:00:00.000000000 +0100 +++ giflib-5.2.2/debian/patches/snprintf.patch 2024-04-05 10:30:28.000000000 +0200 @@ -0,0 +1,24 @@ +Description: Fix incorrect length args to snprintf +Author: Adam Sampson +Bug: https://sourceforge.net/p/giflib/bugs/170/ + +--- giflib-5.2.2/giftext.c 2024-02-19 03:01:28.000000000 +0000 ++++ giflib-5.2.2/giftext.c 2024-04-04 19:20:51.474029582 +0100 +@@ -442,7 +442,7 @@ + for (i = 1; i <= Len; i++) { + (void)snprintf(&HexForm[CrntPlace * 3], 3, " %02x", + Extension[i]); +- (void)snprintf(&AsciiForm[CrntPlace], 3, "%c", ++ (void)snprintf(&AsciiForm[CrntPlace], 2, "%c", + MAKE_PRINTABLE(Extension[i])); + if (++CrntPlace == 16) { + HexForm[CrntPlace * 3] = 0; +@@ -488,7 +488,7 @@ + for (i = 0; i < Len; i++) { + (void)snprintf(&HexForm[CrntPlace * 3], 3, " %02x", + PixelBlock[i]); +- (void)snprintf(&AsciiForm[CrntPlace], 3, "%c", ++ (void)snprintf(&AsciiForm[CrntPlace], 2, "%c", + MAKE_PRINTABLE(PixelBlock[i])); + if (++CrntPlace == 16) { + HexForm[CrntPlace * 3] = 0;