This bug was fixed in the package giflib - 5.1.4-0.3~16.04 --------------- giflib (5.1.4-0.3~16.04) xenial-proposed; urgency=medium
* SRU: LP: #1580376: Upload bug fix release for 16.04 LTS. giflib (5.1.4-0.3) unstable; urgency=medium * Non-maintainer upload. * CVE-2016-3977: gif2rgb: heap buffer overflow. Closes: #820526. giflib (5.1.4-0.2) unstable; urgency=medium * Non-maintainer upload. * Drop the local fix for issue #81, solved differently upstream. Closes: #823481. giflib (5.1.4-0.1) unstable; urgency=medium * Non-maintainer upload. * New upstream version. * Security issues already fixed in 5.1.2: CVE-2016-3977. Closes: #820594, #820526. * Update symbols file. giflib (5.1.2-0.3) unstable; urgency=medium * Non-maintainer upload. [ Tobias Frost ] * debian/patches/ef0cb9b4be572262b49fbc26fb2348683f44a517.patch: try to fix testsuite failures on feh/powerpc. (Closes: #812657) -- Matthias Klose <d...@ubuntu.com> Tue, 14 Jun 2016 17:09:38 +0200 ** Changed in: giflib (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to giflib in Ubuntu. https://bugs.launchpad.net/bugs/1580376 Title: Update giflib Xenial Package to 5.1.4 Status in One Hundred Papercuts: Confirmed Status in giflib package in Ubuntu: Fix Released Status in giflib source package in Xenial: Fix Released Bug description: Ubuntu Xenial Xerus currently ships with giflib 5.1.2-0.2, which is completely broken. It fails to read gif images in both libvips and imagemagick. Please update to 5.1.4-0.2, which is already published in Yakkety Yak. I have build the 5.1.4-0.2 package on Xenial and can confirm that it fixes both of the above mentioned problems. The upstream bug report is: https://sourceforge.net/p/giflib/bugs/94/ And fix release is 5.1.4. Prepared 5.1.4, test built in the PPA ubuntu-toolchain-r/ppa, and test-build all rdeps in main (emacs24 libgdiplus libwebp openjdk-8 tracker). Acceptance criteria: Builds, and tests succeed on all architectures. To manage notifications about this bug go to: https://bugs.launchpad.net/hundredpapercuts/+bug/1580376/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp