-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 24 Apr 2026 13:26:05 +0200 Source: libxpm Architecture: source Version: 1:3.5.19-1 Distribution: unstable Urgency: medium Maintainer: Debian X Strike Force <debian-x@lists.debian.org> Changed-By: Emilio Pozuelo Monfort <pochu@debian.org> Closes: 1134690 Changes: libxpm (1:3.5.19-1) unstable; urgency=medium . * Team upload. * New upstream release. - CVE-2026-4367: out of bounds read in xpmNextWord (Closes: #1134690) * Update signing key. Checksums-Sha1: d29b5cb712b8b493ede2e8e93acecc73ea9b717d 1998 libxpm_3.5.19-1.dsc bed81b02c802dd6cda54936a657475df605ad220 677868 libxpm_3.5.19.orig.tar.gz a0668101aa6b190933b195adfffa30a30d06ab9a 51325 libxpm_3.5.19-1.diff.gz 0dcf52b2d879575448b321e1d5b0313a8821a1b6 6273 libxpm_3.5.19-1_source.buildinfo Checksums-Sha256: 97556a3414e0b8eddaab939aeec7b0b9b810bfbbeb9413421720c6389d7872e9 1998 libxpm_3.5.19-1.dsc f241f705c607fba1a53338f7e1c12005d6da326b5cb55a11a10847781b4578c0 677868 libxpm_3.5.19.orig.tar.gz 08b874ba3c41aef6002c3e71034ead5c3388027ea1f3ecd4d22d2778ba22b380 51325 libxpm_3.5.19-1.diff.gz f92b59045c096ce73538ba400da1afae5ccb7bb67212a8b1cd76f25c712ebf03 6273 libxpm_3.5.19-1_source.buildinfo Files: 3a1416115d85a3c6763a4b011ceff0f5 1998 x11 optional libxpm_3.5.19-1.dsc c47fdc3a7134bdc22913e657b8a5c42f 677868 x11 optional libxpm_3.5.19.orig.tar.gz 17cb5eff41a393ef301a83bfdf5ad9c9 51325 x11 optional libxpm_3.5.19-1.diff.gz 4d60f1f07240bc7faa20fb30c73926c7 6273 x11 optional libxpm_3.5.19-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcJymx+vmJZxd92Q+nUbEiOQ2gwIFAmnrU2AACgkQnUbEiOQ2 gwLwrg/7Bi3V9YVd56iGElxab27MTpacd461XbssnWPmEwAtdHUz6pR3mfG6cDNm NP+fvuHV9sieKUSHfjcIvD6+PBpZZXyheAsfIdrv9+aIAAAbX+Y44TxBrqxlPYt7 8AowgzJlvliq0MrhkiVfrhtMUexgnQF8axzBe95ilonbiUaLoqhLG74mnIW/LJg+ VovRFUHn2XEJrQg2lAF1hL0I41uj7Kxw+87EXdA39S19clUT5kJtguzVYsDevJ2z iFeTPCwGzUKZcqhxqqJLiwZn5sH40cx96IoS3tGXeSB+EdYYWtX1udUeZQ0s5Rh2 W3Ykra1u5zS9XUYlLoDhevNwjASxxBtPKPq4V+cB5EqYUPt5oIvTLTAY6X5CdBLD BSSD5BJHyM5BfJp7t/LBAkLKe+2WphjL1nhMRIG+y2VyAQUEwrxBcwceqMgTAQOY u8AXJp9AnzEM2+p7DZWCN0asK8M4bZ9OcmNGZd2tku1X35sjhjXwZYovKuFq2tKO MbS1ygexKKP8NYtqUb6Q35XHzwjNraI+7MRdaMKQ7QMiLhyPM/7PkjxqwcGeKyDb YswKr2YkHvH4vbd28+514dzb4iJyQgIDCmrvBX0rvEtZnBuWsMXsLRDgcXBdknFw dZrZGNL313TWi+o5Of885UR7Ea2i79wwravwZhkAPpf9BdtEyW4= =jQuz -----END PGP SIGNATURE-----
