* SECURITY UPDATE: heap buffer over-read in gif2rgb - debian/patches/CVE-2020-23922.patch: bound each pixel index against the active color table before indexing ColorMap->Colors in DumpScreen2RGB in util/gif2rgb.c. - CVE-2020-23922 * SECURITY UPDATE: memory leak leading to denial of service - debian/patches/CVE-2021-40633.patch: free every ScreenBuffer row, not just the row-pointer array, at the end of GIF2RGB in util/gif2rgb.c. - CVE-2021-40633 * SECURITY UPDATE: double free in GifMakeSavedImage - debian/patches/CVE-2026-23868.patch: null out the heap pointers aliased by the shallow copy of CopyFrom, test the source record when deciding what to deep-copy, and restore ExtensionBlockCount after the extension blocks are copied, in lib/gifalloc.c. - CVE-2026-23868