-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 17 Apr 2026 07:48:04 -0300
Source: libexif
Binary: libexif-dev libexif12 libexif12-dbgsym
Architecture: armel
Version: 0.6.25-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: armel Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Emmanuel Arias <eamanu@debian.org>
Description:
 libexif-dev - library to parse EXIF files (development files)
 libexif12  - library to parse EXIF files
Closes: 1131116 1133922 1133923
Changes:
 libexif (0.6.25-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/patches/CVE-2026-40386.patch Add patch for CVE-2026-40386.
     - An integer underflow in size checking for Fuji and Olympus MakerNote
       decoding could be used by attackers to crash or leak information out
       of libexif-using programs (Closes: #1133923).
   * d/patches/CVE-2026-40385.patch: Add patch for CVE-2026-40385.
     - An unsigned 32bit integer overflow in Nikon MakerNote handling could
       be used by local attackers to cause crashes or information leaks.
       (Closes: #1133922).
   * d/patches/CVE-2026-32775.patch: Add patch for CVE-2026-32775.patch.
     - If the exif_mnote_data_get_value function in MakerNotes gets passed
       in a 0 size, the passed in-buffer would be overwritten due to an
       integer underflow (Closes: #1131116).
Checksums-Sha1:
 f50b7b8a8444e9e830fa93a3e23a85e41e358533 91944 libexif-dev_0.6.25-1+deb13u1_armel.deb
 d001ad74c85e5ede681bbc3c8d83075e9d5e250f 128112 libexif12-dbgsym_0.6.25-1+deb13u1_armel.deb
 b06106804f6245755c9e81f2578705bbc7760ffa 409928 libexif12_0.6.25-1+deb13u1_armel.deb
 2e725c23160a1996f1f8b19eba3b1569775f7272 8229 libexif_0.6.25-1+deb13u1_armel-buildd.buildinfo
Checksums-Sha256:
 56ae9abd14dac85c242b749c9fa493a33d752749228bf777840ab5d3e0858ac9 91944 libexif-dev_0.6.25-1+deb13u1_armel.deb
 7d24016b29571710b26766ffc5c83b24940bc5cca034bf11d4abf8eb61ea49f1 128112 libexif12-dbgsym_0.6.25-1+deb13u1_armel.deb
 9d7c89d300a4baec03ffd1d9cc9dfdb5defd29b57aea80360c8d2e3ebd30b0b3 409928 libexif12_0.6.25-1+deb13u1_armel.deb
 4da79da44b5afbd716403dd3e9d184a5c5d2fa6ee22f1746d2420761dac3587f 8229 libexif_0.6.25-1+deb13u1_armel-buildd.buildinfo
Files:
 d41b78d2dd484a4ce97bf58be8b8b1e7 91944 libdevel optional libexif-dev_0.6.25-1+deb13u1_armel.deb
 86804b07c7644494e7ef4403dcf9a461 128112 debug optional libexif12-dbgsym_0.6.25-1+deb13u1_armel.deb
 503410aaf44aa00546937a72d6de4b03 409928 libs optional libexif12_0.6.25-1+deb13u1_armel.deb
 2dff12b770229e4086715da9e4d1c61b 8229 libs optional libexif_0.6.25-1+deb13u1_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=yB1/
-----END PGP SIGNATURE-----