-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 08 May 2026 14:47:35 +0300 Source: cimg Binary: cimg-dev cimg-doc cimg-examples Architecture: all Version: 3.5.2+dfsg-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Adrian Bunk Description: cimg-dev - powerful image processing library cimg-doc - documentation of cimg-dev imaging library cimg-examples - examples for cimg-dev imaging library Closes: 1135778 Changes: cimg (3.5.2+dfsg-1+deb13u1) trixie; urgency=medium . * Non-maintainer upload. * CVE-2026-42144: Integer overflow in PNM size check * CVE-2026-42146: OOM on crafted BMP * (Closes: #1135778) Checksums-Sha1: f033e923980b02672aa5a2bcb2ce2ad63f690b2a 507252 cimg-dev_3.5.2+dfsg-1+deb13u1_all.deb f7f70cc0f499113ca0b0089f417bcaf1ca033391 7964060 cimg-doc_3.5.2+dfsg-1+deb13u1_all.deb 582456cca6cc3543ea9c534f4d9e0ce94ea9ca19 1982684 cimg-examples_3.5.2+dfsg-1+deb13u1_all.deb 6d1ca25783283b4d6e850e7034963bf1bcf54eee 23360 cimg_3.5.2+dfsg-1+deb13u1_all-buildd.buildinfo Checksums-Sha256: c6bbf97a4e679fdda33ef81f86bd0095517b71e6bb34b6234312a26a5c258844 507252 cimg-dev_3.5.2+dfsg-1+deb13u1_all.deb d466781367579bd7fefdd3dcbc74860c925855b996b0e93c873d67764a0649ea 7964060 cimg-doc_3.5.2+dfsg-1+deb13u1_all.deb 0bd45505f39b87c32c2345ac752dc8eceaadd93de33e47ad0861798d27bc2584 1982684 cimg-examples_3.5.2+dfsg-1+deb13u1_all.deb e48f6892fe74ca8b5cad0ad85d3a5d3cea75669bed8d6a1807a298f5d18354d3 23360 cimg_3.5.2+dfsg-1+deb13u1_all-buildd.buildinfo Files: 68a7c96828c87ec66694b78e1ca2aa97 507252 math optional cimg-dev_3.5.2+dfsg-1+deb13u1_all.deb bf4c3a70bb111c0520653fcc5e5f885a 7964060 doc optional cimg-doc_3.5.2+dfsg-1+deb13u1_all.deb acd56e49c78114ff5ca1079776477d33 1982684 doc optional cimg-examples_3.5.2+dfsg-1+deb13u1_all.deb 935c12d9127b468cfd40ef6c77ce3da8 23360 math optional cimg_3.5.2+dfsg-1+deb13u1_all-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmoAY1kACgkQGNGWmfrq ILFygg/+M31vu/2xWNq1wofkpP74nKBkuL8QdqbmpX+hVZHwrUhdcf2SptN6/sqL 5D6HQV5igI067vzvTgADeEMA+uvK2gg4CpoIJs+8ZTZCujXWuMytuycnLdO2o9QH jyFcbBmv7rvx3HaGwbvXpetNjc0SncnV/WKARCtxdHkRsYJ/e58K8b1cnMrY5Vtr PTVlydtsvwFB1SIfnQxDG2jHeCaWd8pioiZsqzU6vQPSSeJmjHirNiNi6JyspDqp C1nNZGZDYsDoen0q/ajVz4+zcT3/osBGVrhZ7065IKWg+Nvp+mHDu9HctSqNr11/ lrgDWCrrqwRdGPYmmbHgabYcVxg5XfNNk+sUq+mydi5YXD8HuG2N+rbWvoHCP+me ji9aGJkUO1+nrb93y1llxzCXkMHeqLmESMedepZNr0tJGlE4IsXXmcMMYvtq1aCE KUwJJH87u/STo7kBIPzWXuWSa89dNw91cPGqkRVgu1Zfgt4DK2LWskANrfi2NVdC ZUKEUPnY+9vJBmmEtcm6hmXAG60miWLdp+ABo06JE7Gn48dL1QEgGrlXTHSRc2yh 57z5jetaA8hfnlVw8Bu2lbAZjHf5G3lF8WAppgUQ8AVMy4hxJlWTrvE3DfH3Kaow Vnh83k7/xBj2N24oYfcCL0Yf3wqRzIQaGKcUap1F4Uq20567toc= =5zj4 -----END PGP SIGNATURE-----