-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw23t64 libraw23t64-dbgsym
Architecture: arm64
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-02) <buildd_arm64-arm-ubc-02@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libraw-bin - raw image decoder library (tools)
 libraw-dev - raw image decoder library (development files)
 libraw23t64 - raw image decoder library
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 24adf3ae3420421de82a78d75ff42b2bd16cbda7 176756 libraw-bin-dbgsym_0.21.4-2+deb13u1_arm64.deb
 1f72dcc0c227ad682cc9e186cb5cc938f28cb785 89412 libraw-bin_0.21.4-2+deb13u1_arm64.deb
 f9c7136479032d62d5928388333ca327f54444f3 424864 libraw-dev_0.21.4-2+deb13u1_arm64.deb
 22dbf4750bc5eb2b5eb2ce052a7323834fcbd507 944592 libraw23t64-dbgsym_0.21.4-2+deb13u1_arm64.deb
 833b81eb1798a24cf99f2ca887fec5a9ded2b5a9 371216 libraw23t64_0.21.4-2+deb13u1_arm64.deb
 558fed089d727fea34b16e34546703e9157051de 7084 libraw_0.21.4-2+deb13u1_arm64-buildd.buildinfo
Checksums-Sha256:
 46ccb67fe2848abf3a7dc7b1887ea1d08d63be95f8c5664467ebc8b5f9a58d40 176756 libraw-bin-dbgsym_0.21.4-2+deb13u1_arm64.deb
 2a079af5f2c7e85db1c5f82d6c865ce51c58466906ba52605e3cbf4e75be9031 89412 libraw-bin_0.21.4-2+deb13u1_arm64.deb
 caded7bb3e7f804313200ee9732e32756ba8646c4c2142e4d2cec0fc33a2fb39 424864 libraw-dev_0.21.4-2+deb13u1_arm64.deb
 01b089aa20b6efef4eea9b7f5ec28d4320eacbcdeba3c9c660a58b0750295138 944592 libraw23t64-dbgsym_0.21.4-2+deb13u1_arm64.deb
 4f66673dc192d1bc0d555e463b7ba78aeb608854e0568a79670fd32a5b279f3b 371216 libraw23t64_0.21.4-2+deb13u1_arm64.deb
 2413a95f40cde2002015b5dc49c9f669a7f288dd78886326383341fec4230e83 7084 libraw_0.21.4-2+deb13u1_arm64-buildd.buildinfo
Files:
 ded7227645d37506784a0b5134e32b6d 176756 debug optional libraw-bin-dbgsym_0.21.4-2+deb13u1_arm64.deb
 cfd537537dac246092fb7da51dcadf13 89412 graphics optional libraw-bin_0.21.4-2+deb13u1_arm64.deb
 c028d1d4b5d8bc63161e56e96d448f07 424864 libdevel optional libraw-dev_0.21.4-2+deb13u1_arm64.deb
 49b47e2ae6cc07152279adb917ba3f92 944592 debug optional libraw23t64-dbgsym_0.21.4-2+deb13u1_arm64.deb
 34759e89b95b1fbeca6b1f2eac92c1ed 371216 libs optional libraw23t64_0.21.4-2+deb13u1_arm64.deb
 14162186e42e3f6cbfdea278ab0b0990 7084 libs optional libraw_0.21.4-2+deb13u1_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEJkN0BnKzGWWW6tS+G5VHrWJmwgcFAmqcRd8ACgkQG5VHrWJm
wgdZXQ/+N4uhUNoD4olRQaOaV8jjQShLFr5I4uKp5aS3J4ROpPbuJUNNqzGa4Od4
E4rMfw9NX3WkIDdJgXIJFHmyQYvGpk9nSZIvMn/dNQtLKO+Xtq4HX4m/sPMVakpO
8DYcJMq5H+4CWvHpuXgoBQfWrDRpo0nruOJ6keNguw740BUFmyQuUlR0X3mPn+BM
9QBstT1jJf3rqx5BJ6DSCh4ve+sYGXuH9WVGeXJlXMj6WFIogkDMWGCxx69AtjDX
E6ac9OkI7+O4OG3mfB9+AZFJdhTyY5MOQbVvFO2gR/qVFRr08BvynqtnL8EzaTDz
ioHk+U7z60qAP6gQlj7jkfzLSe7ZQmUMrG/IeBiwY+1A2WrCo3n+444LtAhlNLS9
YFgoXXODUQffgWbsLGAqLG9/QcSNJo2dtd3n/isd1rElZJQbV4jHCSfrqrBarHej
wbtAKtsUbSDALukqtku9QQYb0VOLRluV48AuMT97xLbY6As6yi3yNt6sIaBn8Eo3
Azog8ElWkHmKcp31NuCJNpMCJ8U6rSLyhwrGJBC2DrJknTSLmpP+kSxZc0JUaBNy
Tnzk3ZrjK0bYTNIsxyFc0NNxhZ+Mo8ia2Yz7Bk0O0BtwTr7aBq+/vgrfLFyKaqno
QRYZ9Pbgbr3ASpqJhrtXjnKcHgJZYUIKsVIR63umBTXlTYWrbOM=
=hMHF
-----END PGP SIGNATURE-----