Re: Wheezy update of gifsicle?

[Herbert Fortes <terberh@gmail.com>]

Hi Chris Lamb,

> Dear maintainer(s),
> 
> The Debian LTS team would like to fix the security issues which are
> currently open in the Wheezy version of gifsicle:
> https://security-tracker.debian.org/tracker/source-package/gifsicle
> 
> Would you like to take care of this yourself?
> 
> If yes, please follow the workflow we have defined here:
> https://wiki.debian.org/LTS/Development
> 
> If that workflow is a burden to you, feel free to just prepare an
> updated source package and send it to debian-lts@lists.debian.org
> (via a debdiff, or with an URL pointing to the source package,
> or even with a pointer to your packaging repository), and the members
> of the LTS team will take care of the rest. Indicate clearly whether you
> have tested the updated package or not.
> 
> If you don't want to take care of this update, it's not a problem, we
> will do our best with your package. Just let us know whether you would
> like to review and/or test the updated package before it gets released.
> 
> You can also opt-out from receiving future similar emails in your
> answer and then the LTS Team will take care of gifsicle updates
> for the LTS releases.
> 
> Thank you very much.
> 
> Chris Lamb,
>   on behalf of the Debian LTS team.
> 
> PS: A member of the LTS team might start working on this update at
> any point in time. You can verify whether someone is registered
> on this update in this file:
> https://salsa.debian.org/security-tracker-team/security-tracker/raw/master/data/dla-needed.txt
> 

What I did:

 - create a chroot env to have Wheezy.

 - the .c file is very different. Wheezy version - Last version.
   but there is only one call to 'read_image'. I did the patch.

 - the bug report at github does not provide the file used to
   reproduce the bug. The .c file is commented line by line.

 - there are no tests proveded by the upstream.

 - I ran gifsicle to create a gif animation with two .gif files
   and ran gifview to see the animation. Options 'n' and 'b'.
   No problems.

 - No piuparts errors.


Hope that helps. The files are at:

https://people.debian.org/~hpfn/



Regards,
Herbert