-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 18 Feb 2026 15:08:05 +0100 Source: gegl Binary: gegl gegl-dbgsym gir1.2-gegl-0.4 libgegl-0.4-0 libgegl-0.4-0-dbgsym libgegl-dev Architecture: amd64 Version: 1:0.4.42-2+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Salvatore Bonaccorso Description: gegl - Generic Graphics Library Test Program gir1.2-gegl-0.4 - GObject introspection data for the Generic Graphics Library libgegl-0.4-0 - Generic Graphics Library libgegl-dev - Generic Graphics Library (development files) Changes: gegl (1:0.4.42-2+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * ZDI-CAN-28266: guard against buffer overflow (CVE-2026-2049, CVE-2026-2050) Checksums-Sha1: b8ef60e60fe22c0e544d6cdcd02937815e65b362 29424 gegl-dbgsym_0.4.42-2+deb12u2_amd64.deb b6a83adac0a6e6b29909809e71f2a8a7ca908602 19815 gegl_0.4.42-2+deb12u2_amd64-buildd.buildinfo 27c3946e9fee1aa10c6f892ae1ded5d72e9f98ca 34384 gegl_0.4.42-2+deb12u2_amd64.deb ed8d3a656dcfcd24114b4259132fd1421beee9fe 32008 gir1.2-gegl-0.4_0.4.42-2+deb12u2_amd64.deb 4e97d9fb3ee77f96110b5c9fd9c3063344a17da1 8467188 libgegl-0.4-0-dbgsym_0.4.42-2+deb12u2_amd64.deb 90c5df66d147eb7d73199ed2ed72d213c5eabb59 2190316 libgegl-0.4-0_0.4.42-2+deb12u2_amd64.deb 8c94de6d9bb223c5215aa5ae95a35fc3414f31ea 133944 libgegl-dev_0.4.42-2+deb12u2_amd64.deb Checksums-Sha256: ecefc3b8ba8958456a0cea9594ee5c53359fbd4da4f73d39a65f808355e73bd2 29424 gegl-dbgsym_0.4.42-2+deb12u2_amd64.deb e9323c73382f5de82145096c08c6046927d8ae9f91eb30b025ae7c75fbe2d2e5 19815 gegl_0.4.42-2+deb12u2_amd64-buildd.buildinfo 13150733a453f718cf828341f1d7c86845113a4950dd892ebc054dafefcf2f19 34384 gegl_0.4.42-2+deb12u2_amd64.deb 027e7d214819afdb7415a9204d821e28c2fc460ee66976d30f7883a499006c9b 32008 gir1.2-gegl-0.4_0.4.42-2+deb12u2_amd64.deb ef41008300f0ce244ad3433eef424c1e341cdf766552e3ae4af0ea8a2f717d10 8467188 libgegl-0.4-0-dbgsym_0.4.42-2+deb12u2_amd64.deb e704db56d1989a8bd65434b6422e0e1524c49ba84b28ac32bd8ffe932e01e514 2190316 libgegl-0.4-0_0.4.42-2+deb12u2_amd64.deb 47b4e39abfe6a20ad1370ca8d10bdbb1fa52c6efcdaba532e306c3a0356c1b98 133944 libgegl-dev_0.4.42-2+deb12u2_amd64.deb Files: 60839648c5aa97ad4682d4c396d1222d 29424 debug optional gegl-dbgsym_0.4.42-2+deb12u2_amd64.deb d8ee1c80d3c2b8403084f2ed66d9d139 19815 devel optional gegl_0.4.42-2+deb12u2_amd64-buildd.buildinfo 8ec8b23f27398d3e534c3964dbcdcd72 34384 devel optional gegl_0.4.42-2+deb12u2_amd64.deb f4f7977ae8bcb09d2890f52c2d01eda9 32008 introspection optional gir1.2-gegl-0.4_0.4.42-2+deb12u2_amd64.deb 4c0bb6a7b5fe50a0ffe5c95d3f840d6b 8467188 debug optional libgegl-0.4-0-dbgsym_0.4.42-2+deb12u2_amd64.deb 65df20749ac465dd99850e953fc7bfb9 2190316 libs optional libgegl-0.4-0_0.4.42-2+deb12u2_amd64.deb 3d94a0c8c4390f51f4148a2cf0b5071b 133944 libdevel optional libgegl-dev_0.4.42-2+deb12u2_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmmV1qUACgkQIy3Pg040 HrBkfA//V5IQYDv+6B8zYe18T4ZX/I6kbAlQ6l1/lyhVa0KxRWkZxZp6zQTTW+Km dM2VIqUFfz8RArLLgEiHVefl94KyEAFz8LRr64rJIrjvf21hS3cMF2W2S5U9E+cc tiyE8Wlj0ixwXT1i3l58rpbPBKhN3KBl2Lp/Ij3eqgxSdMrAM0GG10RUJzIV1oMr wcxDq1zYT5nv1i3UBu1O+lnWFqUOsdDn7Jga5BrOni54nGaPiRgwzS/JbLYUdnyc xxOaaEsyH6shpEYZo3TOML2WGa3JnwVVXtdIC8MrH/y/Rz0pdRVQRV+XTiOZxH91 JwRk8Fti/rGh1NoRJmbU2tJxvRDTv4vMGyLmqHyNVBOP7xrmPZ4nkdcItjJhhfyE +zAp4mdDO7Vvn9z2he++9/9ZmEH5tzEgMh9K8nDDWvFK0/jQ0dHgk4tYWlC0dQtp nVhqSUfhFCyJ18QA0EzyqqUtNSQTZYbERUSdgX/9NMktE410J3BAQF1s9t3wRvdB 8KGjHYzmFIqfZfvBmTByIhHh5BrDJZobbWHvJBFdwDUiMXflvxGj5Rz2VlE3mPZ9 nRFaC5Q1iz5KLc68eCUxIVGXABYb+E4owG8YNqMVFQ+28GXvraQp/dLle7r6a7M/ gVYx7yF5XygIDdU9s1TwENl4XYlI+YquTpik4tGOi74/ONwkFQI= =v5IN -----END PGP SIGNATURE-----