-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 17 Apr 2026 07:48:04 -0300 Source: libexif Binary: libexif-dev libexif12 libexif12-dbgsym Architecture: armhf Version: 0.6.25-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-05) Changed-By: Emmanuel Arias Description: libexif-dev - library to parse EXIF files (development files) libexif12 - library to parse EXIF files Closes: 1131116 1133922 1133923 Changes: libexif (0.6.25-1+deb13u1) trixie; urgency=medium . * Team upload. * d/patches/CVE-2026-40386.patch Add patch for CVE-2026-40386. - An integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs (Closes: #1133923). * d/patches/CVE-2026-40385.patch: Add patch for CVE-2026-40385. - An unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. (Closes: #1133922). * d/patches/CVE-2026-32775.patch: Add patch for CVE-2026-32775.patch. - If the exif_mnote_data_get_value function in MakerNotes gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow (Closes: #1131116). Checksums-Sha1: f7aabb31d0a3ae933b62d4fc5955b7b89268f1da 92176 libexif-dev_0.6.25-1+deb13u1_armhf.deb 74d12c8783a611d51803afb0a6b88e852cfd4acd 128436 libexif12-dbgsym_0.6.25-1+deb13u1_armhf.deb 45e9274948496118c9e2688a086c78f127e98554 409692 libexif12_0.6.25-1+deb13u1_armhf.deb 64b14cc0f35f831b1a4a8bc0a297b2bf77df08b4 8243 libexif_0.6.25-1+deb13u1_armhf-buildd.buildinfo Checksums-Sha256: 3afb0a1031d3ca62ff2e2ed147bb53756e910d8c6db99be982c032b1987511d5 92176 libexif-dev_0.6.25-1+deb13u1_armhf.deb c7c5bd4c5dd56280cc92316dcdab6888abb275d2aa52bcc01529c9ffb9b71046 128436 libexif12-dbgsym_0.6.25-1+deb13u1_armhf.deb b9a244c94a4777b1e3726be9ade90a2f933f8154da586203222f8e9b21259e52 409692 libexif12_0.6.25-1+deb13u1_armhf.deb 6fe23395b2d59030474ae8d3c2814e337347bd59ec02261545270f58f6e8c549 8243 libexif_0.6.25-1+deb13u1_armhf-buildd.buildinfo Files: e84fe71db510d7b4a9519138eefd1dc7 92176 libdevel optional libexif-dev_0.6.25-1+deb13u1_armhf.deb ac41852ceb007040a7cfd268c979b78b 128436 debug optional libexif12-dbgsym_0.6.25-1+deb13u1_armhf.deb 89a25eef5f81920003b433200a3e462a 409692 libs optional libexif12_0.6.25-1+deb13u1_armhf.deb ebe13e05ca4b1444d1d36e227321fa87 8243 libs optional libexif_0.6.25-1+deb13u1_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7rv+l3KtZdQea77lnwznazfjXToFAmn/GnQACgkQnwznazfj XTq/rA//WCf9v1/InXR24faLtoMZ+95Cp00G0lDOGLvAYEwoU9Nwo79Uryz3MxyO D3yxqOjjIRjkGuruHcdJ0UfWfzwQ//0wJ7daXYKXn3tlA3PCAzIQR/0gXEB5y2ug bsaYs9K4r+m441Ova0U5vEU7sXtA5gkhnUrv+Wxj7vM+/sdn0Q1XlmjhXKr9EV5+ XpdhjDdGxI8d6/bjnNOnQvrYoKCSKy84Y2JqSDj2z2y8SotWuMgUEW0wtEvVVbZh XxqmK5AAOPTjaT5TRbk07mzEG0aLXzLhxzuTTIdQm5dymh4mgy42o6kyCjz24L1g nd06SosuSBWJx1z1o6LMrlET+MEcBgnqQevaQV1wN4o7ZsEGZWrWsHejfTKRTSnN mX6ezLS9oYtuA3FoTlx3pyvfQ4dPipAh7vPG2JdmDVVV7QxUOwz+OiQ+MCaGI9xH PRzhxrzjenW1+P5gS+om9r9qLYvdBcRG2SEV4mSNNnQOP3vxeX8lOHxf2FOiHA2e f9jQrm4Pqu5xdo2Em8vF/hDw7XdlVloMf8tjm6JCig6qyktnbm2SXjpQY/Eprj89 FGVV2dPn5bd8t2UTEvuDvWO5KHj0J8hrqNBA/nLMEaQru/uT0qKxrl/StaY1p0pK Jzr7hv9ZfJ/ZCX8dUTEuoL5BqdYc36VG3g2Jyn7o9PC4dN+G/ec= =Yq9f -----END PGP SIGNATURE-----