Thank you for your contribution to Debian.
Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 09 Nov 2026 18:23:47 +0100 Source: netpbm-free Architecture: source Version: 2:11.16.02+ds-1 Distribution: experimental Urgency: medium Maintainer: Debian PhotoTools Maintainers <[email protected]> Changed-By: Andreas Metzler <[email protected]> Closes: 1140183 Changes: netpbm-free (2:11.16.02+ds-1) experimental; urgency=medium . * New upstream bugfix release. + Fixes heap buffer overflow in pjtoppm. (Closes: #1140183) + Also fixes these issues: CVE-2026-120431 - sgitopnm: buffer overrun when the RLE offset table gives invalidly long data for a line CVE-2026-120432 - winicontopam: arithmetic overflow with large images, leading to out-of-bounds memory access and infinite loops. CVE-2026-120435 - xpmtoppm: buffer overruns with an invalid characters-per-pixel value. CVE-2026-120436 - jbigtopnm: arithmetic overflow / buffer overrun with a very large input image. CVE-2026-120437 - tgatoppm: buffer overrun with corrupted Targa input; invalid color indexes are now rejected * refresh patches * Drop orphaned patch file. * Update symbol file for new upstream. * Try to fix pnmhisteq testsuite error by updating the reference. Checksums-Sha1: fe55a7f8a4fd8b5fc5732be935ba43e1098c8836 2625 netpbm-free_11.16.02+ds-1.dsc 64fe4a18d671af175ec3f14436c12ebaeeee1998 1526228 netpbm-free_11.16.02+ds.orig-userguide.tar.xz e38d75d159b0b72dd188d94c055b96ef1788c50d 2200480 netpbm-free_11.16.02+ds.orig.tar.xz f2559863e30b2c8fe952e4d462cb071f2f18e23b 36776 netpbm-free_11.16.02+ds-1.debian.tar.xz c8bbd1ab12851fe1ad8485ef3467b47045b0669f 8115 netpbm-free_11.16.02+ds-1_source.buildinfo Checksums-Sha256: 909c1365479f4d7414ceac08d5a5a4af2af0b5652ab80626ce11461299c04277 2625 netpbm-free_11.16.02+ds-1.dsc ab5df8819aa4d3b3b118be96660c65e7a01bb9f6d453d706e4921703e043f677 1526228 netpbm-free_11.16.02+ds.orig-userguide.tar.xz 8940db43e4527cc6ce64497a91b280a10f5340bb95ee492442fefc57aff1e0b1 2200480 netpbm-free_11.16.02+ds.orig.tar.xz c9ec334bb170901583a106399549144a7108e357e0cbd97b40f6f0528c3d50bc 36776 netpbm-free_11.16.02+ds-1.debian.tar.xz cc428375e2153185e0849d5d71700026bb7c0eea873f79785610b86c0e6dbfc9 8115 netpbm-free_11.16.02+ds-1_source.buildinfo Files: f05edcae8770c73f77ae97d7688fc087 2625 graphics optional netpbm-free_11.16.02+ds-1.dsc 4c55186d58b8a9b19bb3e1b0a17798a6 1526228 graphics optional netpbm-free_11.16.02+ds.orig-userguide.tar.xz 4b836994209765f47b34afb4847468f2 2200480 graphics optional netpbm-free_11.16.02+ds.orig.tar.xz 11e104217b2cef70551f2d07019025e7 36776 graphics optional netpbm-free_11.16.02+ds-1.debian.tar.xz f9e3eef4b3b9a502f8799032627945a5 8115 graphics optional netpbm-free_11.16.02+ds-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAmryA+MACgkQpU8BhUOC FISmvg/+PPMcgh/mzucU0SZGHb/AQo6FTyEWc+7UeWvPpagIiOSIAM4Exby7rxT9 NPCFpb07pDgQL9+VnTMJc0Ixfs09p8xFbxytYiksaDMelbwbLrFoM4Mj4iFHLu9M 8oXl8T7DPRvll8QgplF2y5fqA4sBNTPb4dT07s0t89Net8p7k/mkZkpqrgNYZHtp qdn+dpF9ZjeZrlJESnAQnz51V1N1lFlTnMuSM+es01+grLjOSWGXG3r3b7FPWsJT F5OcVmW+aHpFoYJbyFbhvlJkgwXCgILGN82PuTUM4+IhCam9VH6v8m9jz19tnnhd gfIGrl3wOL6ZVnq0UobbF97LjkfA1/Ppx0Gsnz42aYG/8nvgHzZpSe1UiFA1O0bP sJtaJxsasrtm1g78iIrD9H0xir/DKbqQs/PyxGfDhsTe7z3Zl5tPjOL66S17po82 GyEiRz+OHrSY+ezkDdedlWAVfq97dsqJNIR/0ubwuo0o3gDoWeuo3fpGsw5+xZ/m 7pQuP56cLiaZehQzjPWXqvhBV7jPXBZWgoBgRnqo812bcKhrHNHx6D3HBJUX6Yy4 E1FrKrIHHk6pB306OOM3OyZnViX6edFC8fRoKLoSJY1hG2lQAizYbbRoNTmeSuBX 2gpD8IoCLavCGNNLrUhe9l8tKLq9RxqdpatxbpuA/0S++8uaiXc= =0Br6 -----END PGP SIGNATURE-----
pgpJyuRvr9lnS.pgp
Description: PGP signature
