-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Binary: libraw-bin libraw-bin-dbgsym libraw-dev libraw23t64 libraw23t64-dbgsym
Architecture: s390x
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Description:
 libraw-bin - raw image decoder library (tools)
 libraw-dev - raw image decoder library (development files)
 libraw23t64 - raw image decoder library
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 52051a4c2f1b26c2e7b80a1a973caf0eceba038e 159976 libraw-bin-dbgsym_0.21.4-2+deb13u1_s390x.deb
 3cbd699415fa46bed15e4fbe6079b698c678b7a8 90748 libraw-bin_0.21.4-2+deb13u1_s390x.deb
 8ae352287c8e0d7f8f440f0f7cccfec4c8e6e97b 457360 libraw-dev_0.21.4-2+deb13u1_s390x.deb
 d7a2150439bb77f78ae0350bffeb40b6a04a1eeb 898240 libraw23t64-dbgsym_0.21.4-2+deb13u1_s390x.deb
 1180d3e157b735c0fadcb2021109f643b53a1cdb 407840 libraw23t64_0.21.4-2+deb13u1_s390x.deb
 4d1a6ba8a7d4d1eb5c5a05bda75ed279c9d6ba6d 6962 libraw_0.21.4-2+deb13u1_s390x-buildd.buildinfo
Checksums-Sha256:
 c8d020f2c9a412bf55cf3add1deda0165d38ea945ae55545c4931add1b06fc85 159976 libraw-bin-dbgsym_0.21.4-2+deb13u1_s390x.deb
 e0f62417c4e287d96c61a2e39cf5b7d7d5523d2adb6149457dcfb2c034a802a4 90748 libraw-bin_0.21.4-2+deb13u1_s390x.deb
 17907ef195fc5f41534e65b1e5e6ec2d75b751c36951a0de8c860572260eb079 457360 libraw-dev_0.21.4-2+deb13u1_s390x.deb
 54aad50953f2a291208521bad5008b90b535575e7f6389050894ccfe99915f7d 898240 libraw23t64-dbgsym_0.21.4-2+deb13u1_s390x.deb
 941e9187c40762516511a3df2b64744bc57e24c5e1a05623e757359cb6fd8597 407840 libraw23t64_0.21.4-2+deb13u1_s390x.deb
 8e4ea6a428e81478f2cd319888a63cdf3a63ae38fdc53bfd23d9c786e15429d1 6962 libraw_0.21.4-2+deb13u1_s390x-buildd.buildinfo
Files:
 b544774e1958be8e22a56a9d5b9ac2bc 159976 debug optional libraw-bin-dbgsym_0.21.4-2+deb13u1_s390x.deb
 f69b159d666c96f8e3a22d3754f02c58 90748 graphics optional libraw-bin_0.21.4-2+deb13u1_s390x.deb
 6b3365be3991117efcfa864fb043b23d 457360 libdevel optional libraw-dev_0.21.4-2+deb13u1_s390x.deb
 0fa60a42c916d51e8a917ad6951ac00e 898240 debug optional libraw23t64-dbgsym_0.21.4-2+deb13u1_s390x.deb
 64af3a96e698fc71ef05417313697532 407840 libs optional libraw23t64_0.21.4-2+deb13u1_s390x.deb
 c6b2f693f95d9efb61f98eff9eb1a0d3 6962 libs optional libraw_0.21.4-2+deb13u1_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Au4/
-----END PGP SIGNATURE-----