-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 02 Oct 2026 15:06:05 +0200
Source: libimager-perl
Architecture: source
Version: 1.037+dfsg-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Changes:
libimager-perl (1.037+dfsg-1) experimental; urgency=medium
.
* Import upstream version 1.037+dfsg.
- RAW:
- check raw line buffer calculation for overflow
CVE-2026-102504
- getsamples() with type "float" on a paletted image fetching more than one
channel would allocate too small a block. Code calling this on an
untrusted image could have an attacker controlled buffer overflow.
CVE-2026-102505
- The Imager C API major version has changed, any modules that depend on
the Imager C API will need to be rebuilt.
* debian/rules: set IMAGERAPI_VERSION to 6 following the API change.
* Upload to experimental because of the API version change.
Checksums-Sha1:
262d793ea59ace075c4c1fc5053f72311006a38d 2684 libimager-perl_1.037+dfsg-1.dsc
9648a1122d6a6b278d72cbbe3cf354d19f821b08 953184 libimager-perl_1.037+dfsg.orig.tar.xz
c1ed0d1f5a62f904f10bd047a282bc98124eb5fd 14000 libimager-perl_1.037+dfsg-1.debian.tar.xz
f3431e96fa57310ecb8f25df71222021f95194a4 2002116 libimager-perl_1.037+dfsg-1.git.tar.xz
02d9cab3095573b992554954e3399f6f1e889e39 17772 libimager-perl_1.037+dfsg-1_source.buildinfo
Checksums-Sha256:
16046a2106d577ecde4e76e6b24e4661bcdc1468ddfa8be20dff5d401a23e53c 2684 libimager-perl_1.037+dfsg-1.dsc
e82a3dacab2d684baecb3cdbdc8bcb3bb7592031bb24c1acf03ef4265067f856 953184 libimager-perl_1.037+dfsg.orig.tar.xz
96249887552985e76c9ce514bed10f1116d90171c1c877c66050f607a8d7a36a 14000 libimager-perl_1.037+dfsg-1.debian.tar.xz
d00ec710a18dc972cc588059f367b157da898879fb2be55baa3ae89eb179bc4c 2002116 libimager-perl_1.037+dfsg-1.git.tar.xz
1478f7ee13212ba064149574795991754a10d214d89fe488b5271434ae1c2709 17772 libimager-perl_1.037+dfsg-1_source.buildinfo
Files:
767160be57be8ed8d29f8ae6f955e6c3 2684 perl optional libimager-perl_1.037+dfsg-1.dsc
1f988a5f3e2a041a59c497509c3244f0 953184 perl optional libimager-perl_1.037+dfsg.orig.tar.xz
ca6c2acc4a77f15f376c3c0684e57d62 14000 perl optional libimager-perl_1.037+dfsg-1.debian.tar.xz
8af21fd0109663d89407e93cf7e267d5 2002116 perl None libimager-perl_1.037+dfsg-1.git.tar.xz
fc45d11e104259b1ae607b8b1b039a7b 17772 perl optional libimager-perl_1.037+dfsg-1_source.buildinfo
Git-Tag-Info: tag=e4ac39076c3331f99caba9b4a564149cd8218c06 fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa@debian.org>
-----BEGIN PGP SIGNATURE-----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=goUO
-----END PGP SIGNATURE-----
