-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 23 Aug 2026 14:44:26 +0100 Source: libsdl3-image Binary: libsdl3-image-dev libsdl3-image-tests libsdl3-image-tests-dbgsym libsdl3-image0 libsdl3-image0-dbgsym Architecture: ppc64el Version: 3.2.4+ds-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Simon McVittie Description: libsdl3-image-dev - Image loading library for Simple DirectMedia Layer 3, development libsdl3-image-tests - Image loading library for Simple DirectMedia Layer 3 - tests libsdl3-image0 - Image loading library for Simple DirectMedia Layer 3, libraries Changes: libsdl3-image (3.2.4+ds-1+deb13u1) trixie; urgency=medium . * d/control, d/gbp.conf: Branch for trixie * d/patches: Add a malformed-image parser robustness fix from 3.4.2: - d/p/Fixed-out-of-bounds-read-in-XCF-image-loader-thanks-Sebas.patch: Avoid an out-of-bounds read when loading invalid XCF images (CVE-2026-35444, same issue as #1133010 in libsdl2-image) * d/patches: Add selected upstream malformed-image parser robustness fixes from 3.4.4: - d/p/xpm-Remove-QUICK_COLORHASH-replace-it-with-inline-code-th.patch: Check XPM colour hash entries before use - d/p/Fix-heap-buffer-overflow-WRITE-in-LBM-palette-CWE-122.patch Avoid an out-of-bounds write when parsing LBM images - d/p/Fix-heap-underflow-WRITE-in-XCF-read_string-CWE-787.patch Avoid an out-of-bounds write if XCF files contain a zero-length string - d/p/Fix-heap-buffer-overflow-READ-in-XCF-do_layer_surface-CWE.patch, d/p/xcf-Added-an-SDL_SetError-when-rejecting-out-of-bounds-ti.patch: Avoid an out-of-bounds read when parsing XCF file tile data, and report the resulting error correctly - d/p/Fix-heap-buffer-overflow-READ-in-XCF-RLE-decoder-CWE-122.patch: Avoid an out-of-bounds read when parsing XCF files with RLE encoding - d/p/xcf-fix-null-pointer-dereference-when-read_xcf_hierarchy-.patch: Check XCF hierarchy read failures before dereferencing - d/p/tga-reject-images-with-zero-width-or-height.patch: Reject zero-sized TGA images as invalid - d/p/Fixed-out-of-bound-read-in-GIF-decoder.patch: Avoid out-of-bounds reads in the GIF decoder * d/patches: Add an additional parser robustness fix from upstream git: - d/p/IMG_xcf.c-read_string-add-back-the-positive-string-size-c.patch Harden XCF parsing against extremely long strings * Thanks to Aquila Macedo Costa Checksums-Sha1: 459b1faaae9274bf1defed44d47feb23b61ee06e 18744 libsdl3-image-dev_3.2.4+ds-1+deb13u1_ppc64el.deb 836126bc866527ed84cf4d939dff8a7ffeac7b7e 39896 libsdl3-image-tests-dbgsym_3.2.4+ds-1+deb13u1_ppc64el.deb 3c1c00f81d7389d2ee554979a5c2a7b2c0a4ca18 72048 libsdl3-image-tests_3.2.4+ds-1+deb13u1_ppc64el.deb ee549d033072f0ddeb19cb4770d611b6102cdf70 187308 libsdl3-image0-dbgsym_3.2.4+ds-1+deb13u1_ppc64el.deb 21b33f9dde585b7608d0233d4ef3f6c69b3b5971 71792 libsdl3-image0_3.2.4+ds-1+deb13u1_ppc64el.deb 408c13e14ed686cabfae03f9c69d96c3525765bf 14258 libsdl3-image_3.2.4+ds-1+deb13u1_ppc64el-buildd.buildinfo Checksums-Sha256: 4cc8c0443e9e01c52e540461d6b9219f50fca4cb501139d6f2c710c108c297d6 18744 libsdl3-image-dev_3.2.4+ds-1+deb13u1_ppc64el.deb 5ebe27894a13a77d177d698cc0d561e4778b2d8d31f07a9b08ee99754a72fa79 39896 libsdl3-image-tests-dbgsym_3.2.4+ds-1+deb13u1_ppc64el.deb 10789c84d8060fb5a51ab46dafe56a4a6514fca5443d96cf0c7821121778df5a 72048 libsdl3-image-tests_3.2.4+ds-1+deb13u1_ppc64el.deb a7cac073941a217078ff083d4977f0c62af42167cfc5cafee82e623dbb671856 187308 libsdl3-image0-dbgsym_3.2.4+ds-1+deb13u1_ppc64el.deb 1fc69d01a0ed25c0a1b2c39a91775a929eab325247f0814be3eca742a6b6166a 71792 libsdl3-image0_3.2.4+ds-1+deb13u1_ppc64el.deb ac0ea34ec257b21636cd3e1fac1de2f788f060f32fd0be52dbc586d36d6011ff 14258 libsdl3-image_3.2.4+ds-1+deb13u1_ppc64el-buildd.buildinfo Files: 82e366b741a9291e03edb7dc3526b0dd 18744 libdevel optional libsdl3-image-dev_3.2.4+ds-1+deb13u1_ppc64el.deb 06f591415d1bc1becd12c378dd4999af 39896 debug optional libsdl3-image-tests-dbgsym_3.2.4+ds-1+deb13u1_ppc64el.deb 17178a437551faef381701c91eaf3c4f 72048 misc optional libsdl3-image-tests_3.2.4+ds-1+deb13u1_ppc64el.deb 257d107992c51b96e58ac1c2a52d47d6 187308 debug optional libsdl3-image0-dbgsym_3.2.4+ds-1+deb13u1_ppc64el.deb d5709fb88da9177ed14196060f25f90f 71792 libs optional libsdl3-image0_3.2.4+ds-1+deb13u1_ppc64el.deb ba09a1bdddec29d7d7bb57f6f4612af7 14258 libs optional libsdl3-image_3.2.4+ds-1+deb13u1_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmqamsUACgkQ2FRWNm40 e2bF6Q/+Mc0F/BVKfH6fAN02m1H2Gvd6WsyzRW/Qiicpwn3askUPZrVo+GOjOLNS u8kqWKvr9iGHT2NKAWkEmxe1QoeqO97Xir0Sx6dxaeLba1goFp5UO81tW49M5RfZ 4yYqwvvelsxU2zCDzDT9+z3zJo+FC8rdygxTJKGEly6AJwh0CSQqpYCJ/2xuvhr0 euRy1fI6afPHegZj3mygcxVEj0kuzIXvU+e3MeIjp9Kzx8OvjXoUF8Vyo17LJDLI F14a1pC5rkJZ9r39eURKEr/MsaGzcv7xTTIcwKAJOsQnvrsIw5aTkOWi5tZzBwli JAy8jCetodDZ8HnSAH9DhRBMXuGwo1HrXhTbhyYy1wU0vOiGe0VErVp+4z28B8UQ IkEpFFKbK4OBSTC9vIAUQMYUtl3qV24FIQsJSIeR6zy4dS51ttLW5XuN/SUsdkAp gS/MiSrHN9oIhN7Ni6UivkMw2LIwZ9DhF1Obixo84kW75vKua2HWIU+jZGFMZM6C S+zP/U07jZ1X0fvkJjwGpVpBu5tUY72b9ZM37sSBZG8r7TNhpMZG2uc6p3383z9A FlGlteg5A/mEyvE9iVh16nzFSKon7NGYQIhVzzCrvrbUEflS8r3DSn4cPJ+pwtJj SUMM9cAdAhx1vOLqweeRd68Tn/4e+3DyquNSWPpDUv68BysgAg0= =wSeC -----END PGP SIGNATURE-----