-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 29 Jul 2026 03:53:35 +0200 Source: libraw Architecture: source Version: 0.21.4-2+deb13u1 Distribution: trixie Urgency: high Maintainer: Debian PhotoTools Maintainers <[email protected]> Changed-By: Guilhem Moulin <[email protected]> Closes: 1132655 1133845 Changes: libraw (0.21.4-2+deb13u1) trixie; urgency=high . * Non-maintainer upload. * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read due to missing buffer and dimension validation (closes: #1132655). * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability (closes: #1133845). * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow vulnerability (closes: #1133845). * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow vulnerability (closes: #1133845). * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow vulnerability (closes: #1133845). * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow vulnerability (closes: #1133845). * Add d/salsa-ci.yml for Salsa CI. Checksums-Sha1: 1c9ef790f1218f1fc7e8936d5d22c643fe854276 2219 libraw_0.21.4-2+deb13u1.dsc 2aa6cee2f1c98dc4c7b297a46326b9171423516e 31200 libraw_0.21.4-2+deb13u1.debian.tar.xz 7710b8d6ce9f6db1fa895a915b4ccbb4c048ef8c 5906 libraw_0.21.4-2+deb13u1_source.buildinfo Checksums-Sha256: d03f78115e0223fc7cf27bc3473808b5249dad29270c455bcde49e551f5a2a0d 2219 libraw_0.21.4-2+deb13u1.dsc 3ed25dc1ae9cd3e244c53d185dd2eaa547cbc6c25cb926b6be97c546847463fc 31200 libraw_0.21.4-2+deb13u1.debian.tar.xz 4b0c8aef68bd36df69d4d5c10c5e8e73b02cf40a628292c325e04651f6990c83 5906 libraw_0.21.4-2+deb13u1_source.buildinfo Files: b114be5be11db5d7fea278dae60fa1e5 2219 libs optional libraw_0.21.4-2+deb13u1.dsc 58dbb23187b97b0924721dd339df9ae1 31200 libs optional libraw_0.21.4-2+deb13u1.debian.tar.xz f0276d489f583304e0d1360bbc612e3f 5906 libs optional libraw_0.21.4-2+deb13u1_source.buildinfo
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmqasB0ACgkQ05pJnDwh pVKymQ/9FPAv5lTyWfdAvHZhiV2lZ6xGNHP+qimqpItt6vANLaNzuU1KZCAq6fwd O75iEuUl24WLiu4kkukwaME6cYeVrtO+hHV5LFocUxghSuCGp/XE4esjr5KoFD4t PZsIpat/78746W/OkKEDf1OVf1gIZ9B1UUe2jJkRQK0bobJZ+eisrpO/qZs7HE4Y CQGiGV8by6RTxzwg1GsiEZbAT65Y7sb6RgoAzrinfA41etkUjmhyD2VVzXLe7ITo zT58iyGT5PouZL+z2iZpMDt6qK6IZF4a7aVIUEL9QHrF+EU5mEeAfhfN1UbsLl2A wGiT/dW+W25TNLa393qqVyXF8eoGiqxRnV4ap1LdRi031G5OYrLH3R671JUO6Z/T hSbrdY1u1E1ooPxB78Va8DXnC7Fs4BogS+5Ev7NGn4VjbkSWa/kIaUcZe2Z+bL15 0xuOM1VakXSt19bjMSGuNFlZsUAwmzSb8iAzdDVlwGlZmElM+FMy3q4pFfwjDN4u vwE6IDw4B/SGghhCWy0ge4knb1MwHlSucJucwwHVZIakP5cpYkSm5cF5fZpm4Hqy qYIIdZ3treO14lJat1nm0z/Cxg3zEZbxw9Wl/9QJ3pioYyUgEXw7uIaxq6o7vJ98 nPHX8Rb2s4iKtoCmWosAN67az0FSJuUjciz2YKj2pNC3TvsKHRQ= =y1b9 -----END PGP SIGNATURE-----
pgpTDUAUKMWkl.pgp
Description: PGP signature
