Accepted libraw 0.20.2-2.1+deb12u2 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 29 Jul 2026 00:24:13 +0200
Source: libraw
Architecture: source
Version: 0.20.2-2.1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Guilhem Moulin <guilhem@debian.org>
Closes: 1132655 1133845
Changes:
 libraw (0.20.2-2.1+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * Fix CVE-2026-5342: Out-of-bounds read in nikon_load_padded_packed_raw()
     due to missing buffer and dimension validation (closes: #1132655).
   * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability
     (closes: #1133845).
   * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow
     vulnerability (closes: #1133845).
   * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow
     vulnerability (closes: #1133845).
Checksums-Sha1:
 586208f335c7b969c82d8cd00762951591712dc8 2224 libraw_0.20.2-2.1+deb12u2.dsc
 0b425d9a5ed873adeeb68ea1b4945745f3ec1507 512176 libraw_0.20.2.orig.tar.gz
 f1dc35aab0cff0b7347c40c02ffac09f8c67fa99 30932 libraw_0.20.2-2.1+deb12u2.debian.tar.xz
 141d485cdaf562ba8543ddd2d7fde0c7bcbadad8 5914 libraw_0.20.2-2.1+deb12u2_source.buildinfo
Checksums-Sha256:
 69fd62f86d012c816f03e5b7834313fb0171f202d01593a93e39c10dde740d1f 2224 libraw_0.20.2-2.1+deb12u2.dsc
 02df7d403b34602b769bb38e5bf7d4258e075eeefbe980b6832e6e1491989d60 512176 libraw_0.20.2.orig.tar.gz
 6446b82be62fe9f6410c330b6184e6be319a0718455592372bac9f0d1b70add7 30932 libraw_0.20.2-2.1+deb12u2.debian.tar.xz
 117a67821efde9c79e61a015c1f687d3fd6d7898ebbdd3b5bf3e099d2b7fec4a 5914 libraw_0.20.2-2.1+deb12u2_source.buildinfo
Files:
 acf713dc3f4325b572deaaf97986698a 2224 libs optional libraw_0.20.2-2.1+deb12u2.dsc
 f92fd7c0f47b771e18607a2198618d15 512176 libs optional libraw_0.20.2.orig.tar.gz
 be21f5f87a9f5ff4934c29002299095a 30932 libs optional libraw_0.20.2-2.1+deb12u2.debian.tar.xz
 2253ff508ca15fd1ebdc42af0f096287 5914 libs optional libraw_0.20.2-2.1+deb12u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=1r8P
-----END PGP SIGNATURE-----