-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 10 Nov 2026 19:54:15 +0800 Source: cimg Architecture: source Version: 3.5.2+dfsg-1+deb13u2 Distribution: trixie Urgency: medium Maintainer: Debian Science Maintainers <debian-science-maintainers@lists.alioth.debian.org> Changed-By: Aron Xu <aron@debian.org> Closes: 1142677 Changes: cimg (3.5.2+dfsg-1+deb13u2) trixie; urgency=medium . * Non-maintainer upload. * Fix FTBFS with the OpenEXR 3.2.12 security update by linking Iex explicitly when building the OpenEXR-enabled examples. This also fixes the installed examples used by autopkgtest. * CVE-2026-47667: Bound Analyze/NIfTI header allocations and release the header buffer on read errors. (Closes: #1142677) Checksums-Sha1: 09a5da43d5d852d8f0c6f4a252d8af74c2732584 2279 cimg_3.5.2+dfsg-1+deb13u2.dsc b41ffb48bfd29fd9218089f6cb909d14ee192345 22268 cimg_3.5.2+dfsg-1+deb13u2.debian.tar.xz a4d206b52662d771ac836e9ce46d32920d8b711f 5974 cimg_3.5.2+dfsg-1+deb13u2_source.buildinfo Checksums-Sha256: 3945e40f9dd76d190eb6d2b56d5261be1566423b302016d6e4d7bb9cbab50066 2279 cimg_3.5.2+dfsg-1+deb13u2.dsc 25bc52d664ecf1b852e26ceaccb0a8531f4b6a4f62534efbcb9073fa345aa31a 22268 cimg_3.5.2+dfsg-1+deb13u2.debian.tar.xz 558893fec65b0685bb89e7bafd901e3ca8b7a81a1b5ba71d3f703b89144e6a49 5974 cimg_3.5.2+dfsg-1+deb13u2_source.buildinfo Files: 2b3328b9446ed0b3ecda8c0b0f8560c6 2279 math optional cimg_3.5.2+dfsg-1+deb13u2.dsc 49de9d7c20239bdcb4c07273acfd9b89 22268 math optional cimg_3.5.2+dfsg-1+deb13u2.debian.tar.xz 3999d83ea872416a02fabb8112bb0854 5974 math optional cimg_3.5.2+dfsg-1+deb13u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmr1iNAACgkQ+GQ1dHE8 m65qHQf+PW3EivQEWFE5bpYsC8kwZXQjoD/4Y/G+zgcP6sMpKRU7qzUJCjVlo0Pb 7TGQ+knKFM0zN+wjQUFaGLpUeJyImArHj53SVUPi0tccK4x4WygHKCkcq2KetHWI TbOJS5la/jOqaKUWHtyap+fqIiXoUvlbHpDpMWFA1DuO5qmc2+G7UzrmfoMLWFgp sKujqEZtmTAxk9zy/lIGpOC19+zzcOASIDY0eYRwHPmniP7rdU0by+dHZCDbzOAY +FieJXYrDppZmzyh4FjT167GTgZjJJQdhG+zQ/R/M9LYEozBwA/I0ArLhNCBZ947 oh41ILDMG19WpBQTgl7GH+0ltBREMA== =MDBN -----END PGP SIGNATURE-----