-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 29 Jul 2026 02:50:57 +0200 Source: libraw Architecture: source Version: 0.20.2-1+deb11u3 Distribution: bullseye-security Urgency: high Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1132655 1133845 Changes: libraw (0.20.2-1+deb11u3) bullseye-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-5342: Out-of-bounds read in nikon_load_padded_packed_raw() due to missing buffer and dimension validation (closes: #1132655). * Fix CVE-2026-20884: deflate_dng_load_raw() integer overflow vulnerability (closes: #1133845). * Fix CVE-2026-20889: x3f_thumb_loader() heap-based buffer overflow vulnerability (closes: #1133845). * Fix CVE-2026-21413: lossless_jpeg_load_raw() heap-based buffer overflow vulnerability (closes: #1133845). * Fix CVE-2026-24660: x3f_load_huffman() heap-based buffer overflow vulnerability (closes: #1133845). Checksums-Sha1: a36392ad33c431aed3e9e97722aef7a63a7543dc 2216 libraw_0.20.2-1+deb11u3.dsc 0b425d9a5ed873adeeb68ea1b4945745f3ec1507 512176 libraw_0.20.2.orig.tar.gz fbcc28fd6be89cda236ee089f92e5f61622f12f4 31088 libraw_0.20.2-1+deb11u3.debian.tar.xz dad31d1d9b5bebb7ae27a1c3a3dcce5c92c4e143 5906 libraw_0.20.2-1+deb11u3_source.buildinfo Checksums-Sha256: 5e39f85abca1f7620d834494f9238aab2cca2f5a6508b4c41a03162957f41910 2216 libraw_0.20.2-1+deb11u3.dsc 02df7d403b34602b769bb38e5bf7d4258e075eeefbe980b6832e6e1491989d60 512176 libraw_0.20.2.orig.tar.gz 5e61edddcef35e057c0d9cea8806de16646d694fe2e8f36ad53bfec21de93984 31088 libraw_0.20.2-1+deb11u3.debian.tar.xz 5a1e7194c5515842b80b1f3b5d6aae8981bec09643519461826c653258814b03 5906 libraw_0.20.2-1+deb11u3_source.buildinfo Files: 65ca4656dee31c7cd19a6ee1531a35f9 2216 libs optional libraw_0.20.2-1+deb11u3.dsc f92fd7c0f47b771e18607a2198618d15 512176 libs optional libraw_0.20.2.orig.tar.gz f6c89fb4e46d4ad08ce9d5b111b8b6b1 31088 libs optional libraw_0.20.2-1+deb11u3.debian.tar.xz c755e8e4bdc991c0bcbaf2b7d2ad359f 5906 libs optional libraw_0.20.2-1+deb11u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmppUWkACgkQ05pJnDwh pVKuiBAAgXhgWqKsZskagReu05DO5jHuuRHTqoxDBLQsYTvZGDIcgBhfVUl7YaUK X+L+UQob8EJTyO+957aN8pGSOHzQlqTDrw3Abnwc+1oJCTPJf+CyhBOvq+0yb/Ql nM0VNrTuLRJ42s7YaLqDbL3zBYHPWd+cWuL7MTCJ7k3zEr5UYwrPM0W91wcdiE6x 8jKPh4MxPBY+CAtnBKjctKgkaR63mr2TcqI+teVWYpeO+eel7c4TjLkXKt5znkCQ sTW1I3DyZd3QsJmB+ToxZO8/VWiwbru1Eqq3Q/Vifz9lyj9E1krXP8pL4ulE7WjN eixFfSJ0FkLi6iYlxOFjgcaQuLcNMrOgr8oqEy34cRyN5CByCYRJDnNAjBCHhuOL StUGIFgTYatm6NSpS36DXHyAJC3J7PKn4ys1CSP+Ca4zZQ5Xt+KO/ZIubcOZ5KSE ZrAhqHEJO3y86Zg+H6qLRIR7b2og05/CIx5/aa9GuHlY1B+C3T3cN+yl+y6ldmyM DE1CqKPKRGi66xBY3P/u7OCnxkA8gQuUivcTbsmtjuPF1h+fXQJjlTklT0RoivCc yeSW7p8KbQ/cs03RFjIg2unjNj89gzDrxzvi3mQJCT8by6zDRS76g3inx+BIOxln cgJmCY9tnGAJMDVyf1wZGokUXbvCbUjieDTA8iMmlfPFae/nNQs= =IWTi -----END PGP SIGNATURE-----
