-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 07:22:35 +0200 Source: giflib Architecture: source Version: 5.1.9-2+deb11u1 Distribution: bullseye-security Urgency: high Maintainer: David Suárez <david.sephirot@gmail.com> Changed-By: Tobias Frost <tobi@debian.org> Closes: 1130495 1131368 Changes: giflib (5.1.9-2+deb11u1) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * Add gbp.conf and salsa-ci.yml for the LTS workflow. * Backport fixes for: - CVE-2026-23868 - double-free vulnerability (Closes: #1130495) - CVE-2026-26740 - heap OOB write (Closes: #1131368) Checksums-Sha1: 983b0dd231e70528eb8591522b74bffe30516a80 1968 giflib_5.1.9-2+deb11u1.dsc d9fc09e943ee20a765fb8541155fd16956b6a2fc 336304 giflib_5.1.9.orig.tar.bz2 750a09be6a60a97a164979d92b13076713c71784 11148 giflib_5.1.9-2+deb11u1.debian.tar.xz bb39542205c0ca3cb4a226302f153822f64f9c34 6362 giflib_5.1.9-2+deb11u1_source.buildinfo Checksums-Sha256: 057cd8f944a921bdd706e5195e838d4c8194c71cddb6cd06608ec1dfcc3b3eb0 1968 giflib_5.1.9-2+deb11u1.dsc 292b10b86a87cb05f9dcbe1b6c7b99f3187a106132dd14f1ba79c90f561c3295 336304 giflib_5.1.9.orig.tar.bz2 fd4b4c48527ef8fbcc788be1ca02ec1beae4aec23db68b92ec1b6c42d76ec15e 11148 giflib_5.1.9-2+deb11u1.debian.tar.xz ea81e0fe25c5b95ea0dd707ff1e8e8df057f9639cdcb11b0b1ac0ced779857ba 6362 giflib_5.1.9-2+deb11u1_source.buildinfo Files: 8b7fe6caabac25a6384a1c026ae619f8 1968 libs optional giflib_5.1.9-2+deb11u1.dsc c1df79d223b10b92f44ca649ef5f1459 336304 libs optional giflib_5.1.9.orig.tar.bz2 cadc2ec4d30731943c76d2434aae759f 11148 libs optional giflib_5.1.9-2+deb11u1.debian.tar.xz 6a99a8e279d2e5c3770a8245de2d8cb2 6362 libs optional giflib_5.1.9-2+deb11u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmo+EVoACgkQkWT6HRe9 XTZlhA/8DliY6I+zEDvds1dS3ai0Gve6l58B1tsRrzvz7Ch9etNIcSOcstBlAdsa aLf1TrvwuVlMvs6n/n8MWbjTzdMGhU+M9Q5k2+q2Tdc1CgCXrR4qNBhyCqgDG2Ed ZVh/aBmDAztzV1KMfBjbcXzkNkLwj3KPUBi4zc9Ks9nlRdeb76fC6R6EcGirSXYR B3WNnbKzVy27a/iviz9P9RRC3M84vf3EAI+37uycDeKD1+xfF9yU9Z+NtPO870Fd 3pidISKXEfhQVuoq+TqDAhvMI3+YQld+RSPjvG1CtX/HH6E/qfbj+89NrzdQ0i6D ltPDUHlzI3gx2JTq2yu3EFHN45iI8XmREbkdIKuwMZ3harhO5YjR1JIAB9V9NAMk OrXgpwKgdW0geI+HuQ8AYuAn3hH985740XeU0n3E5+q/uS7T1ZTfr6W+XqOYPExG W9OFlZhRYZQ5aD2bFI0irPHuD8WOJB28GtpJhTQgTajslcTD/JC3DfU1uX3uiPTY dQv2gOwDgxPSp0i7+fB5E4D3lc8iQ16HtZom3xkunyLbe9qnnKquyJhaBWNDsZ/4 O4931wd/GMZ1GNz7kt2/DBzyZePODp41YXNjdMdB2SNM9xdjDbM0mhhGpgZzLwyX hIyOxiq5h6FKqLNphVyM8Rl/Cgk0sK/1PJNDQqYAUmFlV/h+fhw= =OvR4 -----END PGP SIGNATURE-----
