-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Aug 2026 14:44:26 +0100 Source: libsdl3-image Binary: libsdl3-image-doc Architecture: all Version: 3.2.4+ds-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: all Build Daemon (x86-csail-02) Changed-By: Simon McVittie Description: libsdl3-image-doc - Image loading library for Simple DirectMedia Layer 3 - documentat Changes: libsdl3-image (3.2.4+ds-1+deb13u1) trixie; urgency=medium . * d/control, d/gbp.conf: Branch for trixie * d/patches: Add a malformed-image parser robustness fix from 3.4.2: - d/p/Fixed-out-of-bounds-read-in-XCF-image-loader-thanks-Sebas.patch: Avoid an out-of-bounds read when loading invalid XCF images (CVE-2026-35444, same issue as #1133010 in libsdl2-image) * d/patches: Add selected upstream malformed-image parser robustness fixes from 3.4.4: - d/p/xpm-Remove-QUICK_COLORHASH-replace-it-with-inline-code-th.patch: Check XPM colour hash entries before use - d/p/Fix-heap-buffer-overflow-WRITE-in-LBM-palette-CWE-122.patch Avoid an out-of-bounds write when parsing LBM images - d/p/Fix-heap-underflow-WRITE-in-XCF-read_string-CWE-787.patch Avoid an out-of-bounds write if XCF files contain a zero-length string - d/p/Fix-heap-buffer-overflow-READ-in-XCF-do_layer_surface-CWE.patch, d/p/xcf-Added-an-SDL_SetError-when-rejecting-out-of-bounds-ti.patch: Avoid an out-of-bounds read when parsing XCF file tile data, and report the resulting error correctly - d/p/Fix-heap-buffer-overflow-READ-in-XCF-RLE-decoder-CWE-122.patch: Avoid an out-of-bounds read when parsing XCF files with RLE encoding - d/p/xcf-fix-null-pointer-dereference-when-read_xcf_hierarchy-.patch: Check XCF hierarchy read failures before dereferencing - d/p/tga-reject-images-with-zero-width-or-height.patch: Reject zero-sized TGA images as invalid - d/p/Fixed-out-of-bound-read-in-GIF-decoder.patch: Avoid out-of-bounds reads in the GIF decoder * d/patches: Add an additional parser robustness fix from upstream git: - d/p/IMG_xcf.c-read_string-add-back-the-positive-string-size-c.patch Harden XCF parsing against extremely long strings * Thanks to Aquila Macedo Costa Checksums-Sha1: 8cfb556e80257bc49076d8188682839aebd8755b 61880 libsdl3-image-doc_3.2.4+ds-1+deb13u1_all.deb 36f88dd64bc15acff1b71b6dae8b491bcc0ca934 12936 libsdl3-image_3.2.4+ds-1+deb13u1_all-buildd.buildinfo Checksums-Sha256: 665816a5c710b0c03c77a7d35f915b1271b0139d5b723a5c052f383c53be8354 61880 libsdl3-image-doc_3.2.4+ds-1+deb13u1_all.deb 75ae8fd4d8650a419f6b2a9d4e27205d79504fd43d28f1aee8015323e9deb52d 12936 libsdl3-image_3.2.4+ds-1+deb13u1_all-buildd.buildinfo Files: 27498001414327eac6516943d4a36dd7 61880 doc optional libsdl3-image-doc_3.2.4+ds-1+deb13u1_all.deb 8fd5a48dc1bf751cbb6c17d80b4f6cdd 12936 libs optional libsdl3-image_3.2.4+ds-1+deb13u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXLxUpUHQBQBTDtd4aBVi67oXtfkFAmqamcwACgkQaBVi67oX tfnXnA/+McZeb+2MLKuzqWxTx7NJVa2xptYgW2NvDy+rza7OTdHCknqppzIin1aL t03bViJXomu3omzGGZct4lsXPmxMQE0E0MJgmBX1H0mYNiodxXYpqf8NEwxanNb6 GBn7VP2lMONNwxba3YlCanDmvE/VkCvuJq3DzlPmksExxjWenj+GEMxRzKMbsFH3 Y4qi1Ith7FMTOJl7YTVTFdKrL7z/WmKDLkAB2xhx7a4yytG0alb9bmml37F8DKkM RyL2prAToSNNXV2/yMQcc6DBxXz3Cf4CDD52hCXJ/vyi740rVrGiZ5f8og7RyW23 NfL6krOZ6+wKuQkO2kbMECM5tGarX7End2TxxRnbJC+XXQ+LvgCYTDI17F36Pq/C PrrpKT5uP6f3zYzb/Uk25qrSsk8p9qCEsAFiWTsDFeqXEpgZI2nKffZfT2Abfexj S+FR/XcVno66mGA5MK4/Oet1n3P58i4QgFyYPl3H7/yD6go3WzKntv4n3/DHWCoN ZsbpdKygXt7rjywvzspf6aWz2VdwzEL4cS+GGGFK/vTLr7ikRTZTSvVtU56UyiG6 v0MVkO0Cby9OpWqb0mxpC5m3zJkQqs+d22mmRfgoAbpw2PFLPuiDb6oq1mx+VT9c orxCb2h12PMPkB2xi5cCII9jzdsTEiBy/4Ke5QrU1tSHLXhIGvs= =bchZ -----END PGP SIGNATURE-----