-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 02 Oct 2026 15:06:05 +0200 Source: libimager-perl Architecture: source Version: 1.037+dfsg-1 Distribution: experimental Urgency: medium Maintainer: Debian Perl Group <[email protected]> Changed-By: gregor herrmann <[email protected]> Changes: libimager-perl (1.037+dfsg-1) experimental; urgency=medium . * Import upstream version 1.037+dfsg. - RAW: - check raw line buffer calculation for overflow CVE-2026-102504 - getsamples() with type "float" on a paletted image fetching more than one channel would allocate too small a block. Code calling this on an untrusted image could have an attacker controlled buffer overflow. CVE-2026-102505 - The Imager C API major version has changed, any modules that depend on the Imager C API will need to be rebuilt. * debian/rules: set IMAGERAPI_VERSION to 6 following the API change. * Upload to experimental because of the API version change. Checksums-Sha1: 262d793ea59ace075c4c1fc5053f72311006a38d 2684 libimager-perl_1.037+dfsg-1.dsc 9648a1122d6a6b278d72cbbe3cf354d19f821b08 953184 libimager-perl_1.037+dfsg.orig.tar.xz c1ed0d1f5a62f904f10bd047a282bc98124eb5fd 14000 libimager-perl_1.037+dfsg-1.debian.tar.xz f3431e96fa57310ecb8f25df71222021f95194a4 2002116 libimager-perl_1.037+dfsg-1.git.tar.xz 02d9cab3095573b992554954e3399f6f1e889e39 17772 libimager-perl_1.037+dfsg-1_source.buildinfo Checksums-Sha256: 16046a2106d577ecde4e76e6b24e4661bcdc1468ddfa8be20dff5d401a23e53c 2684 libimager-perl_1.037+dfsg-1.dsc e82a3dacab2d684baecb3cdbdc8bcb3bb7592031bb24c1acf03ef4265067f856 953184 libimager-perl_1.037+dfsg.orig.tar.xz 96249887552985e76c9ce514bed10f1116d90171c1c877c66050f607a8d7a36a 14000 libimager-perl_1.037+dfsg-1.debian.tar.xz d00ec710a18dc972cc588059f367b157da898879fb2be55baa3ae89eb179bc4c 2002116 libimager-perl_1.037+dfsg-1.git.tar.xz 1478f7ee13212ba064149574795991754a10d214d89fe488b5271434ae1c2709 17772 libimager-perl_1.037+dfsg-1_source.buildinfo Files: 767160be57be8ed8d29f8ae6f955e6c3 2684 perl optional libimager-perl_1.037+dfsg-1.dsc 1f988a5f3e2a041a59c497509c3244f0 953184 perl optional libimager-perl_1.037+dfsg.orig.tar.xz ca6c2acc4a77f15f376c3c0684e57d62 14000 perl optional libimager-perl_1.037+dfsg-1.debian.tar.xz 8af21fd0109663d89407e93cf7e267d5 2002116 perl None libimager-perl_1.037+dfsg-1.git.tar.xz fc45d11e104259b1ae607b8b1b039a7b 17772 perl optional libimager-perl_1.037+dfsg-1_source.buildinfo Git-Tag-Info: tag=e4ac39076c3331f99caba9b4a564149cd8218c06 fp=d1e1316e93a760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <[email protected]>
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmq/rg0ACgkQYG0ITkaD wHmC6w/+NfNgdkWWlLYAqkWP5WOBhf0Z83xVl4+pgOUOynIiRXCq2PYcxvMkKjqF 49qG3J/GX2wRwQxA9dnuGN17oobzlOvw4oO0q6YBEBvOKQ8mmzzfebHFuTeDcNeV T4nMRuFJLS3IQA40xCZ6XFL2bb4w3K3lT99iL7+3vdMqwV8F90t2ljHTpCMAlXex oyHMtpOzyICy7fkrMeNkuqyuarM1q3AvOW9f8Ai2DpIXhFDFCE3sVlkWZnj+GB10 9gAvVoIvVLOuj+lgVOj0YZM18xRvWPhEwpYGxyR9rv8K735fNKxbr/6xF89uJuwe NUXW6gmF/QmXJRfytGjHkdAGfpS8uVW6Gpd1FanONX+uwSVctAi5r9EQy+NKts1z akZS2sPudDG8OGKgg8FpCtsUobOE5/XPZogfaPnBo5jt2UzKAB02AGduD8lXAoO8 KxUF9f0p2G8Fr1lZUBY1aWuKnKEZtwaX+Uj/NYrZOrAcHYaCTCVJCPhLIkc5PnRr lsWlqGGBPaV4YPOIlGLoQMvKUstirwJZlcWDcioOT0o/CfL1zOCg53ghEKK42o1J N3LHid4lkPg/clLPFGQQll6f1tyIQwcCcJtfAypB6bSPHbyY2VsILZ2AExWZCayU sB0GwEE/exd+1hymKhsZx/pnIK9Hwo1eEleRZFOjUOIiFWfuPXI= =goUO -----END PGP SIGNATURE-----
pgponoVkjUQ9e.pgp
Description: PGP signature
