Package: gdk-pixbuf / 2.42.10+dfsg-1+deb12u2

Metadata

Package Version Patches format
gdk-pixbuf 2.42.10+dfsg-1+deb12u2 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
Skip test for GNOME 753605.patch | (download)

tests/meson.build | 1 0 + 1 - 0 !
tests/pixbuf-jpeg.c | 6 6 + 0 - 0 !
2 files changed, 6 insertions(+), 1 deletion(-)

 skip test for gnome#753605

It relies on a non-free JPEG that happens to exhibit the bug, which is
excluded from the Debian source package.

tests Mark pixbuf randomly modified as flaky.patch | (download)

tests/meson.build | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 tests: mark pixbuf-randomly-modified as flaky

This is basically a crude fuzzer. It isn't really suitable for
build-time acceptance testing, since it frequently produces images for
which gdk-pixbuf will try to allocate more memory than is available,
but if it does, it isn't straightforward to capture the failing image
from an autobuilder that only records build logs.

Bug: https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/146
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=942124
Signed-off-by: Simon McVittie <smcv@debian.org>

debian_queryloader_dir.patch | (download)

gdk-pixbuf/meson.build | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 use the right gdk-pixbuf-query-loaders directory

Since the .install moves the binary to another location the .pc file
needs to be updated

tests Tolerate either CORRUPT_IMAGE or INSUFFICIENT_MEMOR.patch | (download)

tests/pixbuf-jpeg.c | 7 4 + 3 - 0 !
1 file changed, 4 insertions(+), 3 deletions(-)

 tests: tolerate either corrupt_image or insufficient_memory for
 issue 205

Workaround for https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/215

ANI Reject files with multiple anih chunks.patch | (download)

gdk-pixbuf/io-ani.c | 9 9 + 0 - 0 !
1 file changed, 9 insertions(+)

 ani: reject files with multiple anih chunks
ANI Reject files with multiple INAM or IART chunks.patch | (download)

gdk-pixbuf/io-ani.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 ani: reject files with multiple inam or iart chunks
ANI Validate anih chunk size.patch | (download)

gdk-pixbuf/io-ani.c | 8 8 + 0 - 0 !
1 file changed, 8 insertions(+)

 ani: validate anih chunk size
CVE 2025 6199.patch | (download)

gdk-pixbuf/lzw.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 [patch] lzw: fix reporting of bytes written in decoder

When the LZW decoder encounters an invalid code, it stops
processing the image and returns the whole buffer size.
It should return the amount of bytes written, instead.

Fixes #257