-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw23t64 libraw23t64-dbgsym
Architecture: amd64
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libraw-bin - raw image decoder library (tools)
 libraw-dev - raw image decoder library (development files)
 libraw23t64 - raw image decoder library
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 0e3b0c1cd39133261a8322bd0806e53216c457dd 176280 libraw-bin-dbgsym_0.21.4-2+deb13u1_amd64.deb
 ae7d098bea65ffc1a00dbec66d79f72dfe71e100 91216 libraw-bin_0.21.4-2+deb13u1_amd64.deb
 631eb75e7ae7b6162694d1c0997d3ecf2924f911 442740 libraw-dev_0.21.4-2+deb13u1_amd64.deb
 86d5858f9a2946f2857144f6088363231ba5760c 972504 libraw23t64-dbgsym_0.21.4-2+deb13u1_amd64.deb
 44e0babcbbfdbefeb18ce60fcec9658640da9bc5 390848 libraw23t64_0.21.4-2+deb13u1_amd64.deb
 efbdcb81ce7e18e65dc28b7d70305253b1b4ba3a 7100 libraw_0.21.4-2+deb13u1_amd64-buildd.buildinfo
Checksums-Sha256:
 17d15c6ef8448b1a3bb50e28a4ce83f5bb35935db1a3dab9e423745938b6c705 176280 libraw-bin-dbgsym_0.21.4-2+deb13u1_amd64.deb
 efa116048f85f07b0fa33718cee1f887c09a9f24957781208a8c328ede52ff27 91216 libraw-bin_0.21.4-2+deb13u1_amd64.deb
 97ea8e87714d409d542395dc5fbc9f928adc84d0280fd05ff47814aaa253c7ff 442740 libraw-dev_0.21.4-2+deb13u1_amd64.deb
 b9ea8cffeaf6fcbdf345cd0a1bcce6641643e1fd06c9ebe844f78c3f0ce71457 972504 libraw23t64-dbgsym_0.21.4-2+deb13u1_amd64.deb
 60ee4b595c2304531ff280f9c6f2d4a4371fa23878ba9504d0a15d3271307961 390848 libraw23t64_0.21.4-2+deb13u1_amd64.deb
 461df2d63011040ae798b2a5b20966aa143ce69b1d2d2f1ca63508fbed9d870b 7100 libraw_0.21.4-2+deb13u1_amd64-buildd.buildinfo
Files:
 4d0827b501518476685972515481ebae 176280 debug optional libraw-bin-dbgsym_0.21.4-2+deb13u1_amd64.deb
 34c66e85ea60780adf6c108ba42db27a 91216 graphics optional libraw-bin_0.21.4-2+deb13u1_amd64.deb
 469deeaa49770cfb22b8d1f0a8a18e42 442740 libdevel optional libraw-dev_0.21.4-2+deb13u1_amd64.deb
 87ce0eebb348a49546274f888dad9650 972504 debug optional libraw23t64-dbgsym_0.21.4-2+deb13u1_amd64.deb
 96cda559f984fa7b11e4bf2db9afa086 390848 libs optional libraw23t64_0.21.4-2+deb13u1_amd64.deb
 0f701ad6f00bcedde6e51b764e3de658 7100 libs optional libraw_0.21.4-2+deb13u1_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=FE5E
-----END PGP SIGNATURE-----