Thank you for your contribution to Debian. Mapping stable-security to proposed-updates.
Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 08 Nov 2026 01:56:42 +0800 Source: openexr Architecture: source Version: 3.2.12-1~deb13u1 Distribution: trixie-security Urgency: high Maintainer: Debian PhotoTools Maintainers <[email protected]> Changed-By: Aron Xu <[email protected]> Changes: openexr (3.2.12-1~deb13u1) trixie-security; urgency=high . * Non-maintainer upload by the Security Team. * New upstream version 3.2.12, retaining the 3.1.13 ABI, fixes: CVE-2026-68515, CVE-2026-61555, CVE-2026-59985, CVE-2026-59984, CVE-2026-59983, CVE-2026-59982, CVE-2026-59981, CVE-2026-59189, CVE-2026-59186, CVE-2026-59184, CVE-2026-59183, CVE-2026-55373, CVE-2026-55059, CVE-2026-54920, CVE-2026-42217, CVE-2026-42216, CVE-2026-41142, CVE-2026-40250, CVE-2026-40244, CVE-2026-34589, CVE-2026-34588, CVE-2026-34544, CVE-2026-34543, CVE-2026-34380, CVE-2026-34379, CVE-2026-27622. * Preserve 3.1.13 SONAMEs, internal namespaces, RGBA input object layout and exported libstdc++ vector helpers. * Refresh the existing CVE-2024-31047 patch; drop the obsolete gcc14.patch after the upstream compression backend change. * Use libdeflate and retain the openexr_conf.h include name. * Add ABI regression tests using archived 3.1 headers. * Skip the Core DWAA/DWAB compression tests on arm64 for the known numerical mismatch, preserving the existing runtime arithmetic. * Build and install documentation offline with the current upstream documentation layout. Checksums-Sha1: 446cfad0037a36efbd986238869c4d3558bff0a9 2035 openexr_3.2.12-1~deb13u1.dsc 5e6b29f6536c151001b72a52386dedfd419cbe2c 18898638 openexr_3.2.12.orig.tar.gz ce93fd716d0dc0e445d58002ca05d4b2a1989f23 32892 openexr_3.2.12-1~deb13u1.debian.tar.xz 8fcaad433796bf0a8c4f9f37bd2ce66a76babb2d 7159 openexr_3.2.12-1~deb13u1_source.buildinfo Checksums-Sha256: 56f198d9b797a582fc462a6b6da12a53cacf3cadd51687f4e5eb9f40ed630083 2035 openexr_3.2.12-1~deb13u1.dsc 95a6499083fd011cabfb00d1295fe5c71e1bd7ef8749cb87b057d7c2e0205188 18898638 openexr_3.2.12.orig.tar.gz 4c63f0190ac73390e25ad0301a120ea50e5f5a3cde153805836bf0ea563dfc57 32892 openexr_3.2.12-1~deb13u1.debian.tar.xz d8123a792cd0651fdc03bba0e87ae8988a2b70398b5d5f1dd38d7f46380812e0 7159 openexr_3.2.12-1~deb13u1_source.buildinfo Files: 7368627379277615eb03296d9b1aeebf 2035 graphics optional openexr_3.2.12-1~deb13u1.dsc 11db4c3f00223306cd6ce9432c718464 18898638 graphics optional openexr_3.2.12.orig.tar.gz 6ad7c013a87baec6f7eae5da6579845f 32892 graphics optional openexr_3.2.12-1~deb13u1.debian.tar.xz 66d92e1cbb7768d7335175b69f22a56b 7159 graphics optional openexr_3.2.12-1~deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmrwwoIACgkQ+GQ1dHE8 m67NLAgAuVRNnMB45uygmb3J6ZMvCxWNA8tZ47oP5kUICQgzxlZviPkkPaLqnPqI rTwqch56/bqzeKolXFLbjoOMxhjaFN+4R5+cN6UhGhZ53nmNgp/77xBErKCKeUL/ 5uoRWIgPzdErw7/Tz1+mLgWQNGBoPAKs51MHzcylOWA4VQxpbiLzVrPfZ1GPJRPX bGTVq+HkDbL2ifU3HR6RMTgVsjpqR2t60g/f27gZtHL9j4xOr3bRxtRVN2Guz0mx lewy4RXKGTnLtD/uivZsnWiz++BB+fs9d8ZtTUuB8DBTUv9uSMpma4gD203GMxbt p8As5akR1I7O8eeMUpW6dfOP3whzkw== =Xahr -----END PGP SIGNATURE-----
pgp0NPBK18qgN.pgp
Description: PGP signature
