-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw23t64 libraw23t64-dbgsym
Architecture: armhf
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libraw-bin - raw image decoder library (tools)
 libraw-dev - raw image decoder library (development files)
 libraw23t64 - raw image decoder library
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 15d274bce711cc6329c2e988fff347dfa2365901 161992 libraw-bin-dbgsym_0.21.4-2+deb13u1_armhf.deb
 276a432b442d8921fc7492c4fd2997885a384941 88752 libraw-bin_0.21.4-2+deb13u1_armhf.deb
 05e4b7bb16f55d45ea4f9fb52c8542aba9c0758f 412572 libraw-dev_0.21.4-2+deb13u1_armhf.deb
 e5427d704f7212689e887499077558e1c8a0e4dc 895168 libraw23t64-dbgsym_0.21.4-2+deb13u1_armhf.deb
 652d33be153c35631b13cb46a6d45a6d9c883f65 369944 libraw23t64_0.21.4-2+deb13u1_armhf.deb
 12425094abb7ef7b8bdbd34abe53bd6d292b838c 6966 libraw_0.21.4-2+deb13u1_armhf-buildd.buildinfo
Checksums-Sha256:
 93f9f66762fd2ea66f941ef8a0dad2002427b108393085191e738bfb24b3b49c 161992 libraw-bin-dbgsym_0.21.4-2+deb13u1_armhf.deb
 b504e29e6b761eff89e3e6faf9af2be454b2af7304f60e14804eacc71f759b56 88752 libraw-bin_0.21.4-2+deb13u1_armhf.deb
 958bc1b1312d6269d80450b5a024386c908b4afffe0c13641c31cbc2e32120b7 412572 libraw-dev_0.21.4-2+deb13u1_armhf.deb
 79632a1f5b26e5f4a2a8b0e0c20edfa2ae9cfc2938e4d990f661c2d9bf3afe6e 895168 libraw23t64-dbgsym_0.21.4-2+deb13u1_armhf.deb
 d337bf881160932439e1394e9af7e2eb654dd4534cc342b2842f5c12d64498f7 369944 libraw23t64_0.21.4-2+deb13u1_armhf.deb
 82d26c8479dcb8858dc6f2e07ad7857a52c5e77848188b6d2e1c0a5e050e9c52 6966 libraw_0.21.4-2+deb13u1_armhf-buildd.buildinfo
Files:
 62ed3104bfc57ad3d7faca8a91d459a9 161992 debug optional libraw-bin-dbgsym_0.21.4-2+deb13u1_armhf.deb
 9944343a4b1ca151367c9fad78c743dc 88752 graphics optional libraw-bin_0.21.4-2+deb13u1_armhf.deb
 97fc0d5265e7c8538c9b3caaf4241681 412572 libdevel optional libraw-dev_0.21.4-2+deb13u1_armhf.deb
 870bebea5037835de6a66cd8bed1cf2b 895168 debug optional libraw23t64-dbgsym_0.21.4-2+deb13u1_armhf.deb
 a5a629dd3bd488ff2dea794dd85312ff 369944 libs optional libraw23t64_0.21.4-2+deb13u1_armhf.deb
 e94bdcd6da53ef19f5ceac1c03f62831 6966 libs optional libraw_0.21.4-2+deb13u1_armhf-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmqcRiIACgkQ8U6eOZMp
j68anA/+L1FLtl/WDIHo3BfEHEivekHd8mBASJn7U7LfFvKPy9azrmDXXf8Fa0g/
6wXhDD8NSU/EUyDbXJEU+x0eA8rOflFzR74iHnrS2O9oF0q5GCjNxqw5NhHICs0+
nS5SKc4qKbaIjpMtVwOi03eyrJ4dUnDjcjsmn2E4xmDn5OsfmjSBj4lY6YDGUMJj
MRrfZUeIbRgPqQgeAf6syzu2fWKfuWdDBdq8WP8OHNTPL4xejD4Jrc/N1mfhb7ho
eN0oW39KU5P11/FsU0flKnYaWijL4iI7jmd/XwgA3vRd0+Jcsye8gu61Kj1iuV4m
qiAp17EyN1tO4yJ6o4yMZq7PNCwWjkGc1n33cAxGUrB433eEXWDRkJlB1RhDa+QP
kItTzJSFT9stosVHqMKpjFn+Jzp2TmdfIHU0DSbIVqY8RxAhlVbNs3SAoasbEr41
ugLnzvFowTdQroGp8JjcNfo95Gi0BKAC6dNQCxStU+dLnjvmDp/+uFVhp57AvHZS
VdyZceaQzZxGau7a7PJsuFSSfegRs2g0Y85Dx8SWWDI26ySi7Zs09Jq1kgiaxvsE
f+EPQxe6AbEHbA4ugb5J/pH+KJeMFGyqUPiKc1XIYMiWLuFSlV2wk61TprypgYb6
4vstVVPpiwzQk1N6/hDAGjUEnLQW+Q0ugyspYQ6KKGbevIjI11w=
=AcXQ
-----END PGP SIGNATURE-----