-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Aug 2026 14:44:26 +0100 Source: libsdl3-image Binary: libsdl3-image-dev libsdl3-image-tests libsdl3-image-tests-dbgsym libsdl3-image0 libsdl3-image0-dbgsym Architecture: armel Version: 3.2.4+ds-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: armel Build Daemon (arm-conova-02) Changed-By: Simon McVittie Description: libsdl3-image-dev - Image loading library for Simple DirectMedia Layer 3, development libsdl3-image-tests - Image loading library for Simple DirectMedia Layer 3 - tests libsdl3-image0 - Image loading library for Simple DirectMedia Layer 3, libraries Changes: libsdl3-image (3.2.4+ds-1+deb13u1) trixie; urgency=medium . * d/control, d/gbp.conf: Branch for trixie * d/patches: Add a malformed-image parser robustness fix from 3.4.2: - d/p/Fixed-out-of-bounds-read-in-XCF-image-loader-thanks-Sebas.patch: Avoid an out-of-bounds read when loading invalid XCF images (CVE-2026-35444, same issue as #1133010 in libsdl2-image) * d/patches: Add selected upstream malformed-image parser robustness fixes from 3.4.4: - d/p/xpm-Remove-QUICK_COLORHASH-replace-it-with-inline-code-th.patch: Check XPM colour hash entries before use - d/p/Fix-heap-buffer-overflow-WRITE-in-LBM-palette-CWE-122.patch Avoid an out-of-bounds write when parsing LBM images - d/p/Fix-heap-underflow-WRITE-in-XCF-read_string-CWE-787.patch Avoid an out-of-bounds write if XCF files contain a zero-length string - d/p/Fix-heap-buffer-overflow-READ-in-XCF-do_layer_surface-CWE.patch, d/p/xcf-Added-an-SDL_SetError-when-rejecting-out-of-bounds-ti.patch: Avoid an out-of-bounds read when parsing XCF file tile data, and report the resulting error correctly - d/p/Fix-heap-buffer-overflow-READ-in-XCF-RLE-decoder-CWE-122.patch: Avoid an out-of-bounds read when parsing XCF files with RLE encoding - d/p/xcf-fix-null-pointer-dereference-when-read_xcf_hierarchy-.patch: Check XCF hierarchy read failures before dereferencing - d/p/tga-reject-images-with-zero-width-or-height.patch: Reject zero-sized TGA images as invalid - d/p/Fixed-out-of-bound-read-in-GIF-decoder.patch: Avoid out-of-bounds reads in the GIF decoder * d/patches: Add an additional parser robustness fix from upstream git: - d/p/IMG_xcf.c-read_string-add-back-the-positive-string-size-c.patch Harden XCF parsing against extremely long strings * Thanks to Aquila Macedo Costa Checksums-Sha1: 3e174d8143925fb49b746d5b70d4eef6541b4f65 18728 libsdl3-image-dev_3.2.4+ds-1+deb13u1_armel.deb 3626520edbd05d09267606fb855a8deeec803c8b 39316 libsdl3-image-tests-dbgsym_3.2.4+ds-1+deb13u1_armel.deb 1c9123ec2697458dc8fa8e2fad879cc70a8f6f1a 65268 libsdl3-image-tests_3.2.4+ds-1+deb13u1_armel.deb c382df3304e337ab7b4398b68b5426494fc838fe 191476 libsdl3-image0-dbgsym_3.2.4+ds-1+deb13u1_armel.deb 1f2de82c4d85c744bdac9206b2098de869818cf6 60348 libsdl3-image0_3.2.4+ds-1+deb13u1_armel.deb 3eeb11519a77c08ef815d3781bd280dbb5b7d02d 14217 libsdl3-image_3.2.4+ds-1+deb13u1_armel-buildd.buildinfo Checksums-Sha256: f860ac601f696ef436a9c847c507dbdf91a37457df059e0b17a040da6eabdaf4 18728 libsdl3-image-dev_3.2.4+ds-1+deb13u1_armel.deb 300641d1f716d786dead5cc0de872f0a23ed572c9a772f808d3b7341759f231b 39316 libsdl3-image-tests-dbgsym_3.2.4+ds-1+deb13u1_armel.deb 3ed8321b8c51ad56cf0b28b2b9c15c8600f4a78b1b5fbe054225b2ca426c9688 65268 libsdl3-image-tests_3.2.4+ds-1+deb13u1_armel.deb 9847966be876d92716f8db409686ae217a29bfd9ecd563014d03c78e9ec0f22d 191476 libsdl3-image0-dbgsym_3.2.4+ds-1+deb13u1_armel.deb 1fa4b764daaedecd441ad71ee598e3b8c7a126ac010617922e5d02c7d4e5a5fc 60348 libsdl3-image0_3.2.4+ds-1+deb13u1_armel.deb 129756e1bc884605a07751ee472ef8d4d490c9e71c1e8c4288382e4fff510325 14217 libsdl3-image_3.2.4+ds-1+deb13u1_armel-buildd.buildinfo Files: b40c789293ac9c3c496beea24c99d8a6 18728 libdevel optional libsdl3-image-dev_3.2.4+ds-1+deb13u1_armel.deb 0fed88263f5f260383d3426661876a99 39316 debug optional libsdl3-image-tests-dbgsym_3.2.4+ds-1+deb13u1_armel.deb 30eed40879c281e9f3d449e0f33fa14e 65268 misc optional libsdl3-image-tests_3.2.4+ds-1+deb13u1_armel.deb e1d60ffc6f6a984335540388bccf015b 191476 debug optional libsdl3-image0-dbgsym_3.2.4+ds-1+deb13u1_armel.deb 5e3ab700a1e67219ee82c99f4676cf38 60348 libs optional libsdl3-image0_3.2.4+ds-1+deb13u1_armel.deb 93a7d7ba6b0978435fce6ef3dd34df26 14217 libs optional libsdl3-image_3.2.4+ds-1+deb13u1_armel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEa5s+5E+WDkV2pQjwIyDMsRzdi8EFAmqanYgACgkQIyDMsRzd i8G4jQ//UTx+9YWyK9nliUOMrgmOVXCm/zo5c8zYwjeWXL/k/KVu1a4ljIxQBrvJ m2ZqvwvO1eQJ9U1ROK28oelBA9YvFO+p9vWQbPdOiu6nL62KI/KCf9mt4UHuLESQ UunzMZYcHT/sPFr5Y7gXfhXN4kPp1WXjUk3PGzUmowYU12bXWD9HOeZftBBTDSo2 Syxnu1BhQEtnIl3ZVphp3P6qWldXfMU2JZbOoNsMv4XGj2hyyq/lsjo0NSpZHYwP uTUOMc1llSCU0a35KurDBog1dPdIlVKkMWj+rgbWhs0Fy4KXHT05gwv2oSJqdts0 t1vqPRuXbWvhDgBhadIZMdT+Yx2rIpxqMdmTjSdCZhzKB8joRSaRsDz3KThobO8B otkpsks5VL+ZYui9vHKaUc7kGOzs2rQacQpUXFslzvthdAIyLUVZnLMVKhge/4S8 Wb6sZp/xudi/gZmzFc0/OBG8EnXy4n4tQOQqblBztl8goNb8wxjiWT0PvMlvOczG 1BkWmqlCVzsLiEjsHmlBmro2/dFe3f/UFf8IATSGwblknHEJvM21UxM3uMB5Ahxz VgrvA0IPMUpMrK1gpQAmoRyV9gnTINN6hEugaIv6JqwqWwjdpmP0GoBpRMNt2t34 CE2TBUOGTKCW6tK+ed+Mt+/yltdXsF9U82THxKYl3PRf4V3b2TU= =acz7 -----END PGP SIGNATURE-----