-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 03:53:35 +0200
Source: libraw
Architecture: source
Version: 0.21.4-2+deb13u1
Distribution: trixie
Urgency: high
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 1132655 1133845
Changes:
 libraw (0.21.4-2+deb13u1) trixie; urgency=high
 .
   * Non-maintainer upload.
   * Fix CVE-2026-5342: nikon_load_padded_packed_raw() out-of-bounds read
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24450: uncompressed_fp_dng_load_raw() integer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Add d/salsa-ci.yml for Salsa CI.
Checksums-Sha1:
 1c9ef790f1218f1fc7e8936d5d22c643fe854276 2219 libraw_0.21.4-2+deb13u1.dsc
 2aa6cee2f1c98dc4c7b297a46326b9171423516e 31200 libraw_0.21.4-2+deb13u1.debian.tar.xz
 7710b8d6ce9f6db1fa895a915b4ccbb4c048ef8c 5906 libraw_0.21.4-2+deb13u1_source.buildinfo
Checksums-Sha256:
 d03f78115e0223fc7cf27bc3473808b5249dad29270c455bcde49e551f5a2a0d 2219 libraw_0.21.4-2+deb13u1.dsc
 3ed25dc1ae9cd3e244c53d185dd2eaa547cbc6c25cb926b6be97c546847463fc 31200 libraw_0.21.4-2+deb13u1.debian.tar.xz
 4b0c8aef68bd36df69d4d5c10c5e8e73b02cf40a628292c325e04651f6990c83 5906 libraw_0.21.4-2+deb13u1_source.buildinfo
Files:
 b114be5be11db5d7fea278dae60fa1e5 2219 libs optional libraw_0.21.4-2+deb13u1.dsc
 58dbb23187b97b0924721dd339df9ae1 31200 libs optional libraw_0.21.4-2+deb13u1.debian.tar.xz
 f0276d489f583304e0d1360bbc612e3f 5906 libs optional libraw_0.21.4-2+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=y1b9
-----END PGP SIGNATURE-----