-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 05 Oct 2026 21:08:46 +0200
Source: libimager-perl
Architecture: source
Version: 1.037+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Changes:
libimager-perl (1.037+dfsg-2) unstable; urgency=medium
.
* Upload to unstable.
.
libimager-perl (1.037+dfsg-1) experimental; urgency=medium
.
* Import upstream version 1.037+dfsg.
- RAW:
- check raw line buffer calculation for overflow
CVE-2026-102504
- getsamples() with type "float" on a paletted image fetching more than one
channel would allocate too small a block. Code calling this on an
untrusted image could have an attacker controlled buffer overflow.
CVE-2026-102505
- The Imager C API major version has changed, any modules that depend on
the Imager C API will need to be rebuilt.
* debian/rules: set IMAGERAPI_VERSION to 6 following the API change.
* Upload to experimental because of the API version change.
Checksums-Sha1:
5b9b54cf1190f86ea95692fa731f3904d9680d87 2684 libimager-perl_1.037+dfsg-2.dsc
482a762bae5845169943a1e9eca44ea49d9ebfd1 14020 libimager-perl_1.037+dfsg-2.debian.tar.xz
b3bc87e4560d1e631fb9465024f65a6b1b57dd37 2003420 libimager-perl_1.037+dfsg-2.git.tar.xz
acb46bac29676b19fd5c49276be23f79094c8186 17772 libimager-perl_1.037+dfsg-2_source.buildinfo
Checksums-Sha256:
054d7574fb7f923d08cf918c9f7101ca842e3173fb985728da22e069e66813b9 2684 libimager-perl_1.037+dfsg-2.dsc
1de00213d0b6bcb0be1e1fe4e2d46fa699a878008d9e514490e72986d7bad1b6 14020 libimager-perl_1.037+dfsg-2.debian.tar.xz
1e0d3b653a25dcbee07bdc0556b8a87e5b92cce25fe15f8f5b5fe36060c0d06a 2003420 libimager-perl_1.037+dfsg-2.git.tar.xz
31fd325682fb47d50df128f205337e66145bc2998f3da605a44eea84a61d72cf 17772 libimager-perl_1.037+dfsg-2_source.buildinfo
Files:
45d0de503a417dcdf546783f2490f9a6 2684 perl optional libimager-perl_1.037+dfsg-2.dsc
56104b5eba82c938cbd38cb0a4ac0bf1 14020 perl optional libimager-perl_1.037+dfsg-2.debian.tar.xz
7a34afee51e93f6c8907e69a175dbf8d 2003420 perl None libimager-perl_1.037+dfsg-2.git.tar.xz
a407f69889666448f286f06aa55eb213 17772 perl optional libimager-perl_1.037+dfsg-2_source.buildinfo
Git-Tag-Info: tag=6f6c8c9425f39f9135bdc90c4d158c8901eb6cb0 fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa@debian.org>
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrD9xgACgkQYG0ITkaD
wHlu9hAAvJKmdTF66KFEQ2vP0khTMK9vfdLN0Rn8vm12DEzgt1EOQL8c9rEzL0l/
rtqd+mj8qz+ulDW2UkIhnJSIm1+Pw5X2aoOwh/QdywCngDqvAkDjzjxK4yTbjeSj
Q7jB2qxE3a/0KK83v9DzQ12Eb70tNs5dQ9gECgOtZUeFUNWTYqVXCL6cOx7YHaNO
mD5LSxUcfXeHX0A9Y5VyEaj/2rsb8kWcdgwyv+4+VvJ+G4UtxfC1kygYfl10t4gk
PYfFliI3ROBAA4yZxXnVrl9SVYwoh9NXl1E9e+5FYh1TRbLgAoP+H1i5fPr56WWI
/pvQS/LptrpceYoWiaHlLSOjnX/+KogFAi64Gi+pvys5YIfShPITUooQtk+6RY94
wbSp/oOD85Eeb613b51zbkvlRdb84sfOvZo+hcDarWRQB8J1bJXPaLh38eh3dDYL
5pDrsJAnLzv3nJki2kc/+aVPIf6lIIa5rIaribBu/OykTcWOIxHbPzcWc4oAZNZT
rLf16Gizr1nOrTeeceuOBGIUsWjfhGEpXt+thG/S2zoPPHYoNDtpQl+tgGH+mCkx
DaLdWNIAIo6P4MT9A+bVxY94FXwQ3cljHKumjB3FcY2ZK1O0E0xVx3B7Z2NxJPEq
LHZfGQ9GGUi9Vo/TgWcUcf+MPmD/j35xl0ETxWSfSn0Y6b9YfDc=
=3ZTb
-----END PGP SIGNATURE-----
