-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw23t64 libraw23t64-dbgsym
Architecture: i386
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) <buildd_amd64-x86-conova-02@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libraw-bin - raw image decoder library (tools)
 libraw-dev - raw image decoder library (development files)
 libraw23t64 - raw image decoder library
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 ae7b5809ee633310c403179b996ef5c78451893a 167320 libraw-bin-dbgsym_0.21.4-2+deb13u1_i386.deb
 e0848993acedae759a2c70b4b67c33e0e64aec28 92060 libraw-bin_0.21.4-2+deb13u1_i386.deb
 e684788927dcc2ff05b0f4b125ac23aeb319abdc 468808 libraw-dev_0.21.4-2+deb13u1_i386.deb
 64bb736d82b010ec41958513a05b9b3ce559e309 884148 libraw23t64-dbgsym_0.21.4-2+deb13u1_i386.deb
 ccea44d1aad830cc19a9e0c0a39382710f3d1c0e 409416 libraw23t64_0.21.4-2+deb13u1_i386.deb
 5408570185c882d26e3c31acd43db1cfa2549fbb 6992 libraw_0.21.4-2+deb13u1_i386-buildd.buildinfo
Checksums-Sha256:
 711315c78b5db827dfe676fe7bc24639dabef15abab08332bfb5aba4d953b9b0 167320 libraw-bin-dbgsym_0.21.4-2+deb13u1_i386.deb
 b3a67dd75f6f60d357b7f06916226424f82c4021cfc23118a0750048c7129635 92060 libraw-bin_0.21.4-2+deb13u1_i386.deb
 cafa01e005e1839f66cb656efa420f602c3d52dbf42e6d7c0cb5d41825645dc1 468808 libraw-dev_0.21.4-2+deb13u1_i386.deb
 4829b1a204db243dad99db446e97539441da615cb0a4ba9a5c72272f026d3489 884148 libraw23t64-dbgsym_0.21.4-2+deb13u1_i386.deb
 f5c560303760c1c6356d52953714079146767c74d959fc6b11447f85f1f54995 409416 libraw23t64_0.21.4-2+deb13u1_i386.deb
 546b8ead4eeaa95f71a6ac347df05083298d1cb5bf9139d5969709af7182adc6 6992 libraw_0.21.4-2+deb13u1_i386-buildd.buildinfo
Files:
 98e2463372509ba034556ebac856610a 167320 debug optional libraw-bin-dbgsym_0.21.4-2+deb13u1_i386.deb
 268f6fc7b842933f862d8d4bce8bb515 92060 graphics optional libraw-bin_0.21.4-2+deb13u1_i386.deb
 2bdb9eaa8fa47c50dd94cc012c91ea19 468808 libdevel optional libraw-dev_0.21.4-2+deb13u1_i386.deb
 33cc6a9a9b22e753f79ee4e4f92acb24 884148 debug optional libraw23t64-dbgsym_0.21.4-2+deb13u1_i386.deb
 01a4076590e4feec91803ab75a312f83 409416 libs optional libraw23t64_0.21.4-2+deb13u1_i386.deb
 696f5b887eb47d53acebd1d54cabeb0f 6992 libs optional libraw_0.21.4-2+deb13u1_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=neNK
-----END PGP SIGNATURE-----