-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 08 Aug 2026 16:16:43 +0100
Source: libsdl2-image
Architecture: source
Version: 2.8.12+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian SDL packages maintainers <pkg-sdl-maintainers@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Changes:
libsdl2-image (2.8.12+dfsg-2) unstable; urgency=medium
.
* d/p/IMG_xcf.c-read_string-add-back-the-positive-string-size-c.patch:
Add patch from upstream to harden XCF parsing against extremely
long strings
Checksums-Sha1:
5b2e863b8cfcfaf8148a1280d25958a97c7e94cf 2751 libsdl2-image_2.8.12+dfsg-2.dsc
e9c78e25bf21ddfd8a0477c5c6206121604657c4 14656 libsdl2-image_2.8.12+dfsg-2.debian.tar.xz
659a83fbcd80701c51973b67c372dff62e86142f 566932 libsdl2-image_2.8.12+dfsg-2.git.tar.xz
f6041c93579f40fc0d772af8d875d7963357dcf6 17600 libsdl2-image_2.8.12+dfsg-2_source.buildinfo
Checksums-Sha256:
fa9a4b6086cfba44cbb83d41031b2ceec08ef796941229a87cd3d670fbdb37f0 2751 libsdl2-image_2.8.12+dfsg-2.dsc
3dbc1b2e0dd91afddae6a7a13938e3b504c071f230c715c6d7feb588514b111b 14656 libsdl2-image_2.8.12+dfsg-2.debian.tar.xz
83cf7ec26d6b3ca6fe619895dc683ccf666a4928fdd3112d0fecb542b2412245 566932 libsdl2-image_2.8.12+dfsg-2.git.tar.xz
95ef837baa2b8ba6c1d1e813068824841e3ab7364cc9224bb5a80efa63ba79c5 17600 libsdl2-image_2.8.12+dfsg-2_source.buildinfo
Files:
125d9d6ed4b7867877da46a7677b67f9 2751 libs optional libsdl2-image_2.8.12+dfsg-2.dsc
d2da366b3e4c203ad9a312844f1f612b 14656 libs optional libsdl2-image_2.8.12+dfsg-2.debian.tar.xz
d97f4c18c5df299fc3d960fe41bfb007 566932 libs None libsdl2-image_2.8.12+dfsg-2.git.tar.xz
b74cfac09e75be517fb3f53a59ea4eee 17600 libs optional libsdl2-image_2.8.12+dfsg-2_source.buildinfo
Git-Tag-Info: tag=377f375b1c031499006356dd7999f5715a99e48b fp=7a073ad1ae694fa25bff62e5235c099d3eb33076
Git-Tag-Tagger: Simon McVittie <smcv@debian.org>
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmp4c8UACgkQYG0ITkaD
wHmRMRAA5gwSSyn772oWrnznz5c5GeyDGrTPOPYUXKVYU9gaEowDzAMjdP3hBwM9
gSxQU1VkG2e9ZVohQ7BI2m7UFK2UfEoO3z2lQaFJpp21U1nA6YPdWRUnz9CiRtFo
sJ0/k3WDziMYUm5IRVGGKOAeccKaWAkllk6ANA1SiZzn2iY+NCA08EGtvBZoT83E
DuB4YevA9PBm9J6aSg0iAUH5DRbdvqF8565hd7oOympUU/cNaa559Bg1putm3+fi
qUIvJLI99HEMN0vguDabWn/t9gRRyr56qnGeQHMDzlqTKhVKJ1GfMKdzH5O1VKT7
HgzIyixXj5hTkbYCZw00bU3aThqkS8OiF5yoteW36iNawPt6Qt3ZMzTeLfpcxCJu
i1/r8BHwiHUN2OliaU0hvkB0AAeLRwC5wxT7YXBxgWjS1grzZSZHc3YmSpSsyXkD
SELM4VArdE2QTJEJ3rFFS8axE8e5l+Jhoa16pum8EwwtMS2Y79811uKqVqTDCYH0
TpG2/Oz3FYPSmWOcjgXNxcRFXJPlNdBobplQb4jxzyyLecaE7tFz201JfNTnm0TS
vwCpyJ7nGlTG+1ktD7KH6DIXePpwnMgFQbYWfU7NxK4Srpdnqn/fbbNDzySsIbgR
8qlWNfp5ehoRtNytTayazlXu8HR/K+uVZVjyyQb0HKZ1Ur3hsIM=
=2SzH
-----END PGP SIGNATURE-----
