-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 19 Aug 2026 17:51:38 +0200 Source: libimager-perl Architecture: source Version: 1.035+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian Perl Group <[email protected]> Changed-By: gregor herrmann <[email protected]> Changes: libimager-perl (1.035+dfsg-1) unstable; urgency=medium . * Import upstream version 1.035+dfsg. - PNG: fix mishandling of volatile aliases for parameters. This lead to: - a buffer overflow when reading 8-bit per sample images with a tRNS chunk (CVE-2026-73639) * Drop 0001-EXIF-add-missing-checks-for-the-start-of-an-ifd-entr.patch which was taken from upstream Git. Checksums-Sha1: f6b08ca5778af7c8cae2f4cf6d63541fd51b0d12 2684 libimager-perl_1.035+dfsg-1.dsc 9a98034e97b71a503585de185eccf134405ccebc 948136 libimager-perl_1.035+dfsg.orig.tar.xz e8eabc766ceb2105c6e4af19cea8f195be8ad2d9 13620 libimager-perl_1.035+dfsg-1.debian.tar.xz 7e3efdfe412ee9b0b2b2bd6a4b4bb65166596a0f 1841612 libimager-perl_1.035+dfsg-1.git.tar.xz af637b29ee187a4f865b978738dc36b54364e230 17600 libimager-perl_1.035+dfsg-1_source.buildinfo Checksums-Sha256: 7b01f7a4a8f510a7a2bd410db18ebcce33f8dbb786a46708d1f8ce7afaf013e2 2684 libimager-perl_1.035+dfsg-1.dsc 54ffb1d63d089d42d576d992bb86e85fc671d93fcf098a6d456ca7309fe44acd 948136 libimager-perl_1.035+dfsg.orig.tar.xz bb5ca8db3c130562275beb20dde7752f7faf20e55494779b9b45588064709af4 13620 libimager-perl_1.035+dfsg-1.debian.tar.xz a4d42ec37f126fbe482366cd0060e747280123f068a6ebd14a4921895cf6aa2b 1841612 libimager-perl_1.035+dfsg-1.git.tar.xz dfbd6bb127f75271b33077a8a557ea8a3b20ea30e585453b9ae788be8740ca23 17600 libimager-perl_1.035+dfsg-1_source.buildinfo Files: 8fc2299e52cc0918003d1911521e5cda 2684 perl optional libimager-perl_1.035+dfsg-1.dsc 87fb47d14c220d0483cc99f61426e519 948136 perl optional libimager-perl_1.035+dfsg.orig.tar.xz 11d09f8a71aed00a7c30b98308d34047 13620 perl optional libimager-perl_1.035+dfsg-1.debian.tar.xz 941547d25afe6706dabf46540f5a36ff 1841612 perl None libimager-perl_1.035+dfsg-1.git.tar.xz 9f056dfed478fcad607a9eb1572fa1ed 17600 perl optional libimager-perl_1.035+dfsg-1_source.buildinfo Git-Tag-Info: tag=2718c39bca9e54ee89f5fbc4448d1fd4ab1f4cb2 fp=d1e1316e93a760a8104d85fabb3a68018649aa06 Git-Tag-Tagger: gregor herrmann <[email protected]>
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmqF0kUACgkQYG0ITkaD wHnC1A//bd4SRPDmLcOouPZowRumg/9Hjvqwe+eLkcyem/t4Oxc1QHwDVRPdfJLZ 8V1PXY/CJbkCWG/SnQge3N5eeCwUYBiz0zManGy3wiEPFww0OVsxQTaeAkJJUSFR Heicf8lZPhLEo8AZMsBYyrqYlR6frTJEJ9oh910FCvKDVcCHS04FhX5HNHk5J/dk /V6lgbu4ukp17EquT4OA/RuBe/0vxQ9w2BCYzOvWiJJ0I6YvXMSFzo69qlBU2rNC du3SiVLws2AtL28fSY3+1mdkYOxvztr9fQvsVZbK/Qpgu8NJzgkE0tbdA1TpB/g+ rLz7hWZaioS0rx4dJrEdb2mobv+zbeat6swxcFiyVvg9StRdmnRDOl9nB9+qQIw0 d0lYVApgV18HC9YINcAe/0FYPweFl9a/MG1yXuNAtSUd3+4RZU/hwjb1vzTEneKa QkArWTdbzZCW0N2F+EGVtcWz/ugK5h3SPl3Bfb1LAc1WSpGDdZsdjiGKwz5PyB+X VLQuQFrviD4Ps1wNdWg7Fo9h3D4hETYCb4p8/UD55xKPcISX8mM8gmIgj1RhQOpi tnGKktcMWvY+WtgICTXHQgID44RC42HnGIRPYqGBKgkwl8hxZzcnVEzxdTeF/4G1 RT1lB+2CfHHQgwquYhrrn/HA+brqtum+ZpiFKRVIGsbgKasGiyE= =et2O -----END PGP SIGNATURE-----
pgpp0KmubtN0a.pgp
Description: PGP signature
