-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Apr 2026 14:04:10 -0400 Source: gdk-pixbuf Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 2.44.6+dfsg-1 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Jeremy Bícha <jbicha@ubuntu.com> Closes: 1132501 Changes: gdk-pixbuf (2.44.6+dfsg-1) unstable; urgency=high . * New upstream release - CVE-2026-5201 Heap overflow via improper validation of color component counts (Closes: #1132501) * Remove test patch applied in new release * Remove transitional libgdk-pixbuf2.0-0-udeb * Update Standards Version to 4.7.4 Checksums-Sha1: 426fde4be2e276df5cd80de37739d300ad041013 3301 gdk-pixbuf_2.44.6+dfsg-1.dsc 8cb8e4c64bc0f1b2e0c88392854964e5d2bd6b65 5954220 gdk-pixbuf_2.44.6+dfsg.orig.tar.xz 56d099f46c375f3baf8716f2a201604909092f70 24444 gdk-pixbuf_2.44.6+dfsg-1.debian.tar.xz 7fa80ac9110726250ef98ceffd53ffb4db6f586c 11810 gdk-pixbuf_2.44.6+dfsg-1_source.buildinfo Checksums-Sha256: c8035a5958e5900bf4366afa650591e983bccc96439fe13b5ec11a5e777f8125 3301 gdk-pixbuf_2.44.6+dfsg-1.dsc 0f3b38245bbe2605779ee1ee7c140f0e3b866b632d4f39e45f214299351ba1d3 5954220 gdk-pixbuf_2.44.6+dfsg.orig.tar.xz 4deee65113a64353b7b50c00dedee072e0b500864270ba7495ac84170b4c64b6 24444 gdk-pixbuf_2.44.6+dfsg-1.debian.tar.xz f01251e4d77ad93e8e0e35b8f32e3021eaceb87fb0b901094e2d6400a29fbd29 11810 gdk-pixbuf_2.44.6+dfsg-1_source.buildinfo Files: 212d4a0e4fc74c8064906c52695e24ad 3301 libs optional gdk-pixbuf_2.44.6+dfsg-1.dsc 59f6f88c54fe6bb3012045e0354b92f4 5954220 libs optional gdk-pixbuf_2.44.6+dfsg.orig.tar.xz af7051d55ddb80c256630457a9d37072 24444 libs optional gdk-pixbuf_2.44.6+dfsg-1.debian.tar.xz b3d10ed9a710b626eb0280dd78436e6c 11810 libs optional gdk-pixbuf_2.44.6+dfsg-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmnOsI8ACgkQ5mx3Wuv+ bH0hvw/+I9KjDAdZr+mnrLznW36j+xLwZciVGZ5hcBqRMmnID1klqZXi9tPILoSs j+yFP4Ewbc0NzEQyTyFUcq35Bz7u5VKme0vkSkBPIyQR/ao+dHwaNftgCadfZ11o mOKxfEX4bhjxYEd4EPlEDCrEHax52zgcJy8DVMexDPapfCAbtqBjl8bfLBUHOP/e no6U+cRjKSQ1KT8KEKr8bIJff3/9yl8mjQh1c5xub2wlIBBBk40zdDhqK+IQF1Pc Kd8mM0nRFafqB+niii/f69IOMZQHae/Z1bBMMGSr34/T0f68abZnqRKyJHhC3NyL +tXoi5VK0Mu+mniACbqJJKhA32hJMuFeCDBhGOCdwvefOXCfst33fdjDSYOUzLBH xLWtU3fGbdGZVeW4CMAmcnpAnz9KfncFPb9ba7mAVHbQ0M/zOjd0PtoyAbDBRVc2 r3wpNb2wAe76jjU+lkhmOTiixfmOEt4wJ1CZpik4fFp6hqMTylZ5UJy45XA2zNUi 8FVp8N47lIkUJql2daB4/6QT5td59s6kyETfUjNzk4Tcyp1cTcyeUWz2XACah3U3 BGQnmhsCE7Su2APzZfGxg4C+uRxtru5gA4rKODCNnEOY5vQu8yyPNwr1xIZmAiTC Xfzgq0syAW/W3pSumbgBlIRL5v6DmHhdO8HyXMi2DOcHptroSAc= =BEtv -----END PGP SIGNATURE-----