-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 22 Dec 2025 20:49:20 +0100 Source: openjpeg2 Architecture: source Version: 2.4.0-3+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Bastien Roucariès <rouca@debian.org> Changes: openjpeg2 (2.4.0-3+deb11u2) bullseye-security; urgency=high . * Non-maintainer upload by the LTS team. * Fix CVE-2025-50952: A NULL pointer dereference was found in the component /openjp2/dwt.c. Checksums-Sha1: 1041a5fa243c0d962154a6d5aed6f15488b5ca51 2775 openjpeg2_2.4.0-3+deb11u2.dsc 440a31d8a3dce22a6281946fb3d70aee25e1bd4a 1396964 openjpeg2_2.4.0.orig.tar.xz dacd98100e1d5094ac4b1aebb721e5f899362b4c 22816 openjpeg2_2.4.0-3+deb11u2.debian.tar.xz 96320feb8240d66162ccf07e882221f3abe02bcb 5646 openjpeg2_2.4.0-3+deb11u2_source.buildinfo Checksums-Sha256: bc2db7690db529c9443e8a1f4b26b6aca52ebb67c3b48863f262903d5f1389cc 2775 openjpeg2_2.4.0-3+deb11u2.dsc 4b89da8abea5ea4e8dd5b214f1633a492554d784b5aebc22cb6495a1e5fe681c 1396964 openjpeg2_2.4.0.orig.tar.xz 164e86f860ddfce77913627897bf698aad4271d1b61db90752c09db1931dae83 22816 openjpeg2_2.4.0-3+deb11u2.debian.tar.xz 7bc948ede37457d38f80e4dd3d2ce50b0c529663ab24a90a8b47bbdd2e0f3674 5646 openjpeg2_2.4.0-3+deb11u2_source.buildinfo Files: 7390861ded571dacf530399d851a643d 2775 libs optional openjpeg2_2.4.0-3+deb11u2.dsc 763422d3efd5136c9b2bf7de4bd607b4 1396964 libs optional openjpeg2_2.4.0.orig.tar.xz 213deef2dce696e947bcc9cef623d51b 22816 libs optional openjpeg2_2.4.0-3+deb11u2.debian.tar.xz 574017076e76336f7d6a999b896e7b35 5646 libs optional openjpeg2_2.4.0-3+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmlSR3gACgkQADoaLapB CF9kTg//UKAUFdst6qhl0E66/TsOUqc4E/P9kvRUsOkAWMwD3Uyu5mVzMXOpZ7/O nfgOSuYEfs2xYaNhd/ZNrK61qtgNmOaRDN1/1pJEPVs/yTaTxqLRPdrrOFi4+6dk dsCUgzWZSfZT4nx0xcLk8/0ZFo8Ol7PedO27TOrCWPwVoL3jUOxCmO68MSenQnZ/ aAnKpVe+IVHygxtxfMIWDdUfUMSjLZYVnPBl57jwc9990JKuHbVmtwxrCcA8GSLh HIddeccS6Z4hAB28T5OSyEle9f+RDa567eSPsp+isakahmMAAGJPinuKK1R+LrNU I1oQULcLzti9sCv6/17DE31uywRtk0qaKbiwFLSBr6zx1Clsn7W6/dSEbr63N+Rg 3CZDX6Tg6bW5/47mRC6793f+YRdRiOfV7Jsr1oy3pmvMfAJhTeGXOZ+jUOieMDFE AgUZSFU9V4TlsFPubzoBlbtYtSc6GpBVAisCcg2XyEYRT0F1nQWq82bdv4y51ND8 FDkor1wDBmDga+rra48FpauBF/w354AusKgpdwzZHx7XpJ7eAh5Lxxq77dtXVCQm DrHZ5UD1yTO34AleLbADwxo0GDEjkg4ms4idPWN0f7ZTeRI4/2OlH0M0QD8QaOTP oyAHFAO5LN8fsVf0haavi7xe9XLm5LGMt1Me0uJlJd9Yqi3eyy4= =x5EN -----END PGP SIGNATURE-----