-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw23t64 libraw23t64-dbgsym
Architecture: riscv64
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-01) <buildd_riscv64-rv-osuosl-01@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libraw-bin - raw image decoder library (tools)
 libraw-dev - raw image decoder library (development files)
 libraw23t64 - raw image decoder library
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 7959f359090b3a31a267cc3bffb725345b8cef79 166660 libraw-bin-dbgsym_0.21.4-2+deb13u1_riscv64.deb
 84f24ecc8f28be8596f8b7cfe8afc67708a1b4d8 90368 libraw-bin_0.21.4-2+deb13u1_riscv64.deb
 fddac1a0e546b5a85ca451eb33482a11789ed59b 925048 libraw-dev_0.21.4-2+deb13u1_riscv64.deb
 0f66149a1ea6fc94b9ef8f5a2ecabab12365d1c8 1550828 libraw23t64-dbgsym_0.21.4-2+deb13u1_riscv64.deb
 a16ae9506fcf7aeb3d9b2f22f775e3cc821e608a 419728 libraw23t64_0.21.4-2+deb13u1_riscv64.deb
 86035d63c01a3b9377287adbf84fb95c0e8eee88 7065 libraw_0.21.4-2+deb13u1_riscv64-buildd.buildinfo
Checksums-Sha256:
 7593ddd6950a96d252c9e5394165f8c5c39641c4b50164a63216b79bda727e2e 166660 libraw-bin-dbgsym_0.21.4-2+deb13u1_riscv64.deb
 ed88f639ba917ec2d05c4fe0a5bdcf83d186237b7b4da7edc2b18ff66406d9f9 90368 libraw-bin_0.21.4-2+deb13u1_riscv64.deb
 8b166aa6a0b9c78d9581b4bed49f3b95a622bbda84b7da464a63bbfe4c49a061 925048 libraw-dev_0.21.4-2+deb13u1_riscv64.deb
 4affadce7bacfdde3194214563df580e8323656df8a0706b85ccea50b584d4e5 1550828 libraw23t64-dbgsym_0.21.4-2+deb13u1_riscv64.deb
 b8857c662950ba40020f4774e64e576d6f8d37990a57108c95cc1bb88fcd983f 419728 libraw23t64_0.21.4-2+deb13u1_riscv64.deb
 973765cf90fd2ee9c877f86ee0d850f6ddfe7c1bfb54c860902dcbaecbcb9fa2 7065 libraw_0.21.4-2+deb13u1_riscv64-buildd.buildinfo
Files:
 5037d1efbedef80ea02ebb7c84ac5bec 166660 debug optional libraw-bin-dbgsym_0.21.4-2+deb13u1_riscv64.deb
 c00ec48f08a26f4dca12aa41c2f1e6cb 90368 graphics optional libraw-bin_0.21.4-2+deb13u1_riscv64.deb
 8292d8e645ff9b54d9ca9b5da6554778 925048 libdevel optional libraw-dev_0.21.4-2+deb13u1_riscv64.deb
 fe920ff1de9d04b83092aab942af7c28 1550828 debug optional libraw23t64-dbgsym_0.21.4-2+deb13u1_riscv64.deb
 595dc93f1806b7c7ea21b6d645956ffb 419728 libs optional libraw23t64_0.21.4-2+deb13u1_riscv64.deb
 eea6024a94777fb6aa9f1749f741f459 7065 libs optional libraw_0.21.4-2+deb13u1_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=0opo
-----END PGP SIGNATURE-----