-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 18 Feb 2026 15:08:05 +0100
Source: gegl
Binary: libgegl-common libgegl-doc
Architecture: all
Version: 1:0.4.42-2+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libgegl-common - Generic Graphics Library - common files
 libgegl-doc - Generic Graphics Library (documentation)
Changes:
 gegl (1:0.4.42-2+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * ZDI-CAN-28266: guard against buffer overflow (CVE-2026-2049, CVE-2026-2050)
Checksums-Sha1:
 790c96e939f912be8c60cd6600be64c7415ff31e 19115 gegl_0.4.42-2+deb12u2_all-buildd.buildinfo
 c40211b47d6de909f958332b4d52ced5b9bb2045 743700 libgegl-common_0.4.42-2+deb12u2_all.deb
 fbc678f023c1d660b620d2317a62614fcbd6d839 27190056 libgegl-doc_0.4.42-2+deb12u2_all.deb
Checksums-Sha256:
 25fe3f66a391a4ef85651d953518074bb830fcd47d62d7b9387282c5567fbe65 19115 gegl_0.4.42-2+deb12u2_all-buildd.buildinfo
 011c361e1218f9f11641370aa258f201c9133d301daf97efdc20a8cedf5b48ea 743700 libgegl-common_0.4.42-2+deb12u2_all.deb
 327671c83adb523cb43a715da93877c075c99427bb1ff392c1c52506c2998698 27190056 libgegl-doc_0.4.42-2+deb12u2_all.deb
Files:
 ea24f8a9157a77955db8866834a10221 19115 devel optional gegl_0.4.42-2+deb12u2_all-buildd.buildinfo
 4b1b806a3934e6705c4a35af529f7d87 743700 devel optional libgegl-common_0.4.42-2+deb12u2_all.deb
 64bc66413d313df120ee86f251f77258 27190056 doc optional libgegl-doc_0.4.42-2+deb12u2_all.deb

-----BEGIN PGP SIGNATURE-----
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=HXRO
-----END PGP SIGNATURE-----