-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Apr 2026 07:42:42 -0300 Source: libexif Binary: libexif-dev libexif12 libexif12-dbgsym Architecture: mips64el Version: 0.6.24-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Emmanuel Arias Description: libexif-dev - library to parse EXIF files (development files) libexif12 - library to parse EXIF files Closes: 1131116 1133922 1133923 Changes: libexif (0.6.24-1+deb12u1) bookworm; urgency=medium . * Team upload. * d/patches/CVE-2026-40386.patch Add patch for CVE-2026-40386. - An integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs (Closes: #1133923). * d/patches/CVE-2026-40385.patch: Add patch for CVE-2026-40385. - An unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. (Closes: #1133922). * d/patches/CVE-2026-32775.patch: Add patch for CVE-2026-32775.patch. - If the exif_mnote_data_get_value function in MakerNotes gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow (Closes: #1131116). Checksums-Sha1: 24819353ff1372673d961acb8d52fbbb4ac7fc56 104880 libexif-dev_0.6.24-1+deb12u1_mips64el.deb c89b22ac1519c0413c3aeb09f086c2939d28fdde 137588 libexif12-dbgsym_0.6.24-1+deb12u1_mips64el.deb 287b7a54968112308f3bceb7cbfbcf1a2da6e51f 383948 libexif12_0.6.24-1+deb12u1_mips64el.deb 0f287b9b726384432ca13d7d6624085da21272e7 8552 libexif_0.6.24-1+deb12u1_mips64el-buildd.buildinfo Checksums-Sha256: 0428011d2a322539c008e3c1130cb189d14ccf06838614fc12c7596c0d725256 104880 libexif-dev_0.6.24-1+deb12u1_mips64el.deb a8e6aec07e3a3f7328533ad64739cdbf0e396a23ba5939545480e12f608f0b27 137588 libexif12-dbgsym_0.6.24-1+deb12u1_mips64el.deb 4e92f3fdbba49fff060b39c01193a588b0bc600cb4d84c054f19023a84d1a1a3 383948 libexif12_0.6.24-1+deb12u1_mips64el.deb af460684d49d54a74f0a887d70e2bd7007f4a6df0384558ef4588d27c1202a83 8552 libexif_0.6.24-1+deb12u1_mips64el-buildd.buildinfo Files: 36ec1c2eb2ecb38a510ac01c84ed6b20 104880 libdevel optional libexif-dev_0.6.24-1+deb12u1_mips64el.deb 18e9ab75c86504b6b39f0fa5473dc7d7 137588 debug optional libexif12-dbgsym_0.6.24-1+deb12u1_mips64el.deb 32c4c18c6097c79054535fb5abe0017e 383948 libs optional libexif12_0.6.24-1+deb12u1_mips64el.deb 5d16dec3824c9139c5c239244af946f2 8552 libs optional libexif_0.6.24-1+deb12u1_mips64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmn/IfAACgkQHrk2gTKe WgiUnA//Ud5f9u633HJKem7733vIuGH2fSEpFLLNShZ2t0pT3mm+Ua5zCnh3L/mX HK/Z+8E+loSqEou6NNbPJIbrM2192yd6hhTlbBfp7AOqSz6OVlMmbtbH2TgzAFYw HWn1CTCY4TEESkVCtf9/UwG6kMLwPsrHgXviOfX7XTc0tLPqzYQfALICNlBzF7BG 5f0JGgZMNshBoDxEugmZ8ovc/IYIn1bwc0Ly80tZPhcndMcURWCfoLK5kdbLOXN1 Iouoy+fST3ZzFk+Nbmg6JHGbHADYleaMdbLRfO0BslV9sBhqlLbb8GotU5IQXILq 1Jgn4U/V+/WNe0ElXJuOdXR7tZk4XWgzKLOsDquSjlh284KUzDVxcKnxoiu1aqat 5a4iGFPKIuE3THFKWIDpKXvfQFk8fxZ+BhGafeg/EdD7wthnpocZG8ANR57ulwwY Lfa6gkL2elOOP4vseNpIUOWzDnJAuk6FXkBkOodE5o2L7AV13w41oRSckOXakU1E wUGOcSrzzMLYCRxcEwzKHgnP34CUDU8O20EvOac+f6jsc8L2A7lnZaTochmch7T4 DgPrY8zx9VVrXCjmsD3kk9zrtW3YAarpkUVPwwHTAIrNCGIdm04PzNUF0NMkaIBy 6AmspGHLy3b1QtpCIgg141ABm7+YeAZpQvBMskugxs1wV5k4ebE= =okVL -----END PGP SIGNATURE-----