-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 18 Sep 2026 13:22:42 +0200
Source: libimager-perl
Architecture: source
Version: 1.036+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Changes:
libimager-perl (1.036+dfsg-1) unstable; urgency=medium
.
* Import upstream version 1.036+dfsg.
- TGA:
don't interpret large color map sizes as negative.
CVE-2026-93019
- paletted images:
- if an out of range color index is written to the image:
- the i_gpix() and i_glin() APIs will return black for such
pixels rather than leaving them uninitialized, or returning an
uninitialized entry from the palette.
CVE-2026-93018
Checksums-Sha1:
e246cc934e88179a161dfc6ad84155ad65a610c1 2684 libimager-perl_1.036+dfsg-1.dsc
007d46ebd71ab0e57240c9e5fa73841ffd0923bf 950096 libimager-perl_1.036+dfsg.orig.tar.xz
783dda8c4861c9a8bdc6674bbf36126333d546b5 13768 libimager-perl_1.036+dfsg-1.debian.tar.xz
ff5580a4e73845a7dfc868c5567b0d6951a7f723 1831508 libimager-perl_1.036+dfsg-1.git.tar.xz
e2283451d3825bc4f7e518177bb1ffc19dc1650f 17770 libimager-perl_1.036+dfsg-1_source.buildinfo
Checksums-Sha256:
41531e511dc2f8364ae487b6ce53704304206fa3bc8e14c96c141fb8bee68eb5 2684 libimager-perl_1.036+dfsg-1.dsc
ab0ba2050fb45e1c16f80c795fe928b3e36ed46e2f71b90289aa6f45e0e527c9 950096 libimager-perl_1.036+dfsg.orig.tar.xz
ff66cd164a8d5e7e2ff82d3cd9373ecc49c08fdccff5ff31ef906dd8a5a511b0 13768 libimager-perl_1.036+dfsg-1.debian.tar.xz
52f56982cf0a3803252b7b1e6c23a377a7c28c4b0dac12add68bda201c0845ff 1831508 libimager-perl_1.036+dfsg-1.git.tar.xz
c0cc45a362362cd8e2fee50b67d27c977a16ae4df742f31814936f54bc393c7b 17770 libimager-perl_1.036+dfsg-1_source.buildinfo
Files:
a1a5ea65717adc788be0a53463dd66b6 2684 perl optional libimager-perl_1.036+dfsg-1.dsc
97d89aa33ca7e701613bfe92fbf3f9db 950096 perl optional libimager-perl_1.036+dfsg.orig.tar.xz
5c78b114b1b88f45d27e80c19dacff22 13768 perl optional libimager-perl_1.036+dfsg-1.debian.tar.xz
49d0306547a577540041551be4a0092d 1831508 perl None libimager-perl_1.036+dfsg-1.git.tar.xz
5e870e5751cc1bec3a656b591323dd6e 17770 perl optional libimager-perl_1.036+dfsg-1_source.buildinfo
Git-Tag-Info: tag=454718825af4ebfde23976c07569f5e47c2fda0c fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa@debian.org>
-----BEGIN PGP SIGNATURE-----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=iK3i
-----END PGP SIGNATURE-----
