-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw23t64 libraw23t64-dbgsym
Architecture: armel
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libraw-bin - raw image decoder library (tools)
 libraw-dev - raw image decoder library (development files)
 libraw23t64 - raw image decoder library
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 753a3fc4b326f40c39410752cb1d6b48c2e53874 161828 libraw-bin-dbgsym_0.21.4-2+deb13u1_armel.deb
 842961d3f53ada89888b22a81a42a3fa9da3d2f0 89084 libraw-bin_0.21.4-2+deb13u1_armel.deb
 aae13871d1b2d73d3a5e58cd1629ff09b28f92a4 419820 libraw-dev_0.21.4-2+deb13u1_armel.deb
 183bed68121a496c5dbe4e6239b5019075a3b69b 886160 libraw23t64-dbgsym_0.21.4-2+deb13u1_armel.deb
 c1552552d3071f9ed1ce37e91b5f722deaf4619b 374660 libraw23t64_0.21.4-2+deb13u1_armel.deb
 a8b3da724e8d6dc14e63cb0e6e2f8818061bcc25 6952 libraw_0.21.4-2+deb13u1_armel-buildd.buildinfo
Checksums-Sha256:
 66e5703bd55277fc2104ee1c961dbc014fa816b156f52bd5782acb6c319be1cb 161828 libraw-bin-dbgsym_0.21.4-2+deb13u1_armel.deb
 360fe57d2d4a14c67271cb08d28bae28983f57e8c65a4349989c033275bcca5b 89084 libraw-bin_0.21.4-2+deb13u1_armel.deb
 ccf91aa7995307276f39c8881a3f44c50ede638bbd5a570172012eb96dddf08a 419820 libraw-dev_0.21.4-2+deb13u1_armel.deb
 21a5ead4e5f483ca412cea55e37eb26ebdfca773d562473587e1850bfe7f0a0b 886160 libraw23t64-dbgsym_0.21.4-2+deb13u1_armel.deb
 09a2767b855cd49441a1b961e7e4604e10af5428477a6c34b1503fa1231d5394 374660 libraw23t64_0.21.4-2+deb13u1_armel.deb
 c816c068b8e2a53d2390eb1cf6665df564cb28eac81373a651a4265d98eeca18 6952 libraw_0.21.4-2+deb13u1_armel-buildd.buildinfo
Files:
 d0bf6a5b617d42558dcb58bdb01c82af 161828 debug optional libraw-bin-dbgsym_0.21.4-2+deb13u1_armel.deb
 c1371a32bb731e5feb86e788fb8416d5 89084 graphics optional libraw-bin_0.21.4-2+deb13u1_armel.deb
 53ff4b3e836d6c470a26112588d084b0 419820 libdevel optional libraw-dev_0.21.4-2+deb13u1_armel.deb
 eaee166a2a3b7abb6d092a8363a6f070 886160 debug optional libraw23t64-dbgsym_0.21.4-2+deb13u1_armel.deb
 3b4bc20bf40b33db5dcb9b97a80f9b9d 374660 libs optional libraw23t64_0.21.4-2+deb13u1_armel.deb
 6cfdc0039f0bb8890384cb87aa6dd878 6952 libs optional libraw_0.21.4-2+deb13u1_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=g8H4
-----END PGP SIGNATURE-----