-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 17 Apr 2026 07:48:04 -0300 Source: libexif Binary: libexif-dev libexif12 libexif12-dbgsym Architecture: s390x Version: 0.6.25-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (ziehrer) Changed-By: Emmanuel Arias Description: libexif-dev - library to parse EXIF files (development files) libexif12 - library to parse EXIF files Closes: 1131116 1133922 1133923 Changes: libexif (0.6.25-1+deb13u1) trixie; urgency=medium . * Team upload. * d/patches/CVE-2026-40386.patch Add patch for CVE-2026-40386. - An integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs (Closes: #1133923). * d/patches/CVE-2026-40385.patch: Add patch for CVE-2026-40385. - An unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. (Closes: #1133922). * d/patches/CVE-2026-32775.patch: Add patch for CVE-2026-32775.patch. - If the exif_mnote_data_get_value function in MakerNotes gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow (Closes: #1131116). Checksums-Sha1: f3b1dc33729e38224b89e16caaf41cfb2ced2cc6 99380 libexif-dev_0.6.25-1+deb13u1_s390x.deb 81a19db77451d21bbacc8ed18f9cef3d5c2e761a 130192 libexif12-dbgsym_0.6.25-1+deb13u1_s390x.deb 28c2f85c83f4ab29142337883e3e7ce4dc45a3ad 419980 libexif12_0.6.25-1+deb13u1_s390x.deb e09d841eaf5089cdb5a2516d1d15abfb4e12d97b 8179 libexif_0.6.25-1+deb13u1_s390x-buildd.buildinfo Checksums-Sha256: fbb5ea04a0475606598cf4439aab835010d04b52b4729ff881ab4510fb1812fd 99380 libexif-dev_0.6.25-1+deb13u1_s390x.deb 80055eb2701f6235fd58052e1d03c8b202aaf21dd88e00635439580db833a63f 130192 libexif12-dbgsym_0.6.25-1+deb13u1_s390x.deb 610544b45dbd473bd35127f6b562cdd784588566fc6e21e38736577f2a486a32 419980 libexif12_0.6.25-1+deb13u1_s390x.deb 7d43399862471725bbf79335c2fb8a1c2006a362023b9872d5f8e4924a1cf573 8179 libexif_0.6.25-1+deb13u1_s390x-buildd.buildinfo Files: b1b1fa7a9c96d85da62976e02834100f 99380 libdevel optional libexif-dev_0.6.25-1+deb13u1_s390x.deb 384fb8d066fe5d5f406c41e6ea74af69 130192 debug optional libexif12-dbgsym_0.6.25-1+deb13u1_s390x.deb be18faa5b7a8f1126bf67c88f4fdfd2c 419980 libs optional libexif12_0.6.25-1+deb13u1_s390x.deb cf3c3e1e04aed3ae96d9ccd81d94754b 8179 libs optional libexif_0.6.25-1+deb13u1_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmn/Km8ACgkQMWUFebkH noTheA//SFIDTh6wGjdLeHHlK/sOfwebSrYrkSDePDPb6S7nzjSUQuXkAqDTYlPf Uy48lvW/KS5nobUpMxS1xb5PSRdQYzw8gvR/0E3fXvcSrIqn5mMTuS1VCdzJoYGn 64MOhaI52AFEqcoIRev4fjqnCVZjT/6USBgykJ65yAQTTbHyf/UmcPCJbQJ8y9H2 XBnbQFTZTUM9aJbRE1LAJRwL8kxRbjU/N7v1DPWprWFZft8/yCku6xngm1RenZcq vRbaXiWowSag0H3/oPGWLu7hx8e2BVAgjxf51KBQRJZuSC/JE/MKL997E5ZpDcc2 RfhWZbsBt5uywjTeZaQs6V2+V1SCNlKO6Usihx5fRhHFmdkpEHOvDWS6S16IAM0F GooznJOoiwyIdu4Dznuh6fSbt4qA+QAzfFREb5lyLiNQw98DqZJp21Cm41gmIyPn ZP0BLGgEoFSvzPmzSKrgPlaDJ/s/QN7a6tbPvDysYAeXkRzw2t8MKvroKNlU4d+X 0ADeK2ZbXn+8ofu8/ji9/frR5WlzObPpAty1Vur3TWvv3PiW8YgtJ80V0peVfTz4 fqiJM5KykZVarOD1iL/V7fMuXSu07onfEjsvDuTc/r3CaCLdngryPwnw0TYyM4kx hxihw99LRRwIzFrbhDuG/QdwkBxGktSKHdXdLFX3aNbjtxabo6A= =7/ZD -----END PGP SIGNATURE-----