-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw23t64 libraw23t64-dbgsym
Architecture: ppc64el
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-01) <buildd_ppc64el-ppc64el-conova-01@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libraw-bin - raw image decoder library (tools)
 libraw-dev - raw image decoder library (development files)
 libraw23t64 - raw image decoder library
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 497c38a7abd597410fd438439f3f600a39669617 164332 libraw-bin-dbgsym_0.21.4-2+deb13u1_ppc64el.deb
 b4cce771f5f1ed7ade24526ba1e24fb16d590a79 93488 libraw-bin_0.21.4-2+deb13u1_ppc64el.deb
 2ec2996f91d03b3b00ea03bedc51ee82ad69fbd8 477500 libraw-dev_0.21.4-2+deb13u1_ppc64el.deb
 1fd1b3d5e70e24a3e0427945213d302db0025370 891904 libraw23t64-dbgsym_0.21.4-2+deb13u1_ppc64el.deb
 391f777f55599d889964248b971e812294de0991 419092 libraw23t64_0.21.4-2+deb13u1_ppc64el.deb
 2c85d41ac035cfab79a2a1866fbb0e24652f3c53 7117 libraw_0.21.4-2+deb13u1_ppc64el-buildd.buildinfo
Checksums-Sha256:
 52010db9a9038f90ff32f2c838144fd5df3d089bbbadcea74a3cf32e7ba37b0e 164332 libraw-bin-dbgsym_0.21.4-2+deb13u1_ppc64el.deb
 af0f5cb8c53e69b38f26c8b692d9505e311ee2c917025d10847d590fdbe6b1dc 93488 libraw-bin_0.21.4-2+deb13u1_ppc64el.deb
 bbb1e47deacf9b11b9ab3fe8fc76ba2ceb09aaf91be6cb963e7d5e734aa10ab9 477500 libraw-dev_0.21.4-2+deb13u1_ppc64el.deb
 6e6b711e716fabcdd0b5f23fdfb4fdbb47055aac5b9b7e4d038f898f70885535 891904 libraw23t64-dbgsym_0.21.4-2+deb13u1_ppc64el.deb
 c0a12b84d1618bc1950f5926edcf1a527cd559b0297639671b72146a8a9eb27e 419092 libraw23t64_0.21.4-2+deb13u1_ppc64el.deb
 88576f1e373f0f5730e6fc1e348c6f1e62c8bcd97591f840d01de2d26bafafdc 7117 libraw_0.21.4-2+deb13u1_ppc64el-buildd.buildinfo
Files:
 aa6c6b19b6517f433187f56d4b1cb878 164332 debug optional libraw-bin-dbgsym_0.21.4-2+deb13u1_ppc64el.deb
 6a138d4e39b859ad143d118fc0362601 93488 graphics optional libraw-bin_0.21.4-2+deb13u1_ppc64el.deb
 25215de72ea3360d8f1c66d1e2b3879d 477500 libdevel optional libraw-dev_0.21.4-2+deb13u1_ppc64el.deb
 aa9079b11df43de497ba5a2f2ac50eb5 891904 debug optional libraw23t64-dbgsym_0.21.4-2+deb13u1_ppc64el.deb
 f069caf4094003515ca2c174963e3673 419092 libs optional libraw23t64_0.21.4-2+deb13u1_ppc64el.deb
 7e8cf0de2272f9ab18ab24401ec527fb 7117 libs optional libraw_0.21.4-2+deb13u1_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=193z
-----END PGP SIGNATURE-----