-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 10 Aug 2026 20:36:29 +0200 Source: libgd2 Architecture: source Version: 2.3.3-9+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: GD Team <team+gd@tracker.debian.org> Changed-By: Guilhem Moulin <guilhem@debian.org> Closes: 1143152 Changes: libgd2 (2.3.3-9+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the LTS Team. * Fix CVE-2026-9672: Processing of malicious GIF files may lead to crash or arbitrary code execution. (Closes: #1143152) Checksums-Sha1: 712e99da158770d166ccc4f33e414bdfe32311df 2274 libgd2_2.3.3-9+deb12u1.dsc a275344fb56161df6a06679bf0bf29c30930d8eb 3593182 libgd2_2.3.3.orig.tar.gz ff0c32dab347b822bf4d088fb318058c7c1723cb 33076 libgd2_2.3.3-9+deb12u1.debian.tar.xz 121a3a84c8466fcb81d856eeacfe0f9bce48ae3c 7117 libgd2_2.3.3-9+deb12u1_source.buildinfo Checksums-Sha256: 065a44aa277bc26308ae02e75775929ee2f6ebed35d2dffc3e952ae5ae2e99f8 2274 libgd2_2.3.3-9+deb12u1.dsc dd3f1f0bb016edcc0b2d082e8229c822ad1d02223511997c80461481759b1ed2 3593182 libgd2_2.3.3.orig.tar.gz 96622aafdb4df34c21c9740a2c4150a93669aa342f2a50231e6b29d60ef4966f 33076 libgd2_2.3.3-9+deb12u1.debian.tar.xz 9f8965045897f65e640e68575a79f5980b7aa52f805ff5936153c8d09e1b6b14 7117 libgd2_2.3.3-9+deb12u1_source.buildinfo Files: 1c5001060f572b8358a97d123d423fd0 2274 graphics optional libgd2_2.3.3-9+deb12u1.dsc bf6d41ecb3148a6238a3058eb3d6224a 3593182 graphics optional libgd2_2.3.3.orig.tar.gz dc418ad9fb0d65eb87f25e3cb824f703 33076 graphics optional libgd2_2.3.3-9+deb12u1.debian.tar.xz e38adefd882a42dd9839f0ab4b271ce8 7117 graphics optional libgd2_2.3.3-9+deb12u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERpy6p3b9sfzUdbME05pJnDwhpVIFAmp7dn8ACgkQ05pJnDwh pVICmhAAo59te+76w16xwVkfXPHRQHI41SUqIqlvhPfWfzeeHKyvxvdhRPFeySQZ PJT2nROmbK+VXB6mDLRvNNTzi7BkZ/7yP8xOoNLeMTEHNjxyfqgjRfLXYJGgLuDO 7Jmq0M/aaoZW9UF88T2FPwfWAd1T4FVXgyk0ctAhNoREZO1y8w4n1/wnh38JFF0U hibaBFjMs413Fdj2D1+5w7GiBjTgt8k4Qdq2kbg+7GAdksVrhfm0WZE4oOEAMy8h 3Et2Jl64jaIgz0QBREYkSFGFcHTkCeIokYaMb9RwkLpuycxfTGwBGC9/uPonj1jO uQC8FTshcMh5ftN8ABaRrZ5nCpJlWjfVldBA7yuaxlQKaatxp5TL5RmVgs/Kd+QX VCXX/+paRV07UEz9nEoxIuzH1Ku3D3oYdZqqSvrl+avloZ39suP49/p7yX8hFBfW QMS2CDppDZcyHgmjYL0QVMvpDWVvWA4RTm48RUvrxtLr656bzCW7csX7sQFVO2V7 LPgAGH0Po5EI53VhOrW1cWp6HycNe364xYWwWAJJxhS5b/oDs8vsPrkWIsiNR97t flXpbbe0QKsmlFvEiwdB5sFesmsje2eqlBmDdRO0u7c799AmgxHGSqpljUBANjMl Pb4aaDjrpyjVNHOftZCySkmxsvkIzg9LmCSAK0zueyvi3HWZj1Y= =yLdj -----END PGP SIGNATURE-----