-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 20 Apr 2026 07:42:42 -0300 Source: libexif Binary: libexif-dev libexif12 libexif12-dbgsym Architecture: ppc64el Version: 0.6.24-1+deb12u1 Distribution: bookworm Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Emmanuel Arias Description: libexif-dev - library to parse EXIF files (development files) libexif12 - library to parse EXIF files Closes: 1131116 1133922 1133923 Changes: libexif (0.6.24-1+deb12u1) bookworm; urgency=medium . * Team upload. * d/patches/CVE-2026-40386.patch Add patch for CVE-2026-40386. - An integer underflow in size checking for Fuji and Olympus MakerNote decoding could be used by attackers to crash or leak information out of libexif-using programs (Closes: #1133923). * d/patches/CVE-2026-40385.patch: Add patch for CVE-2026-40385. - An unsigned 32bit integer overflow in Nikon MakerNote handling could be used by local attackers to cause crashes or information leaks. (Closes: #1133922). * d/patches/CVE-2026-32775.patch: Add patch for CVE-2026-32775.patch. - If the exif_mnote_data_get_value function in MakerNotes gets passed in a 0 size, the passed in-buffer would be overwritten due to an integer underflow (Closes: #1131116). Checksums-Sha1: e024b9e8ed92d2f06519bda527e581c37d9fa487 106224 libexif-dev_0.6.24-1+deb12u1_ppc64el.deb 2ac04958de194543b8c815d6cd02e5c507ac7959 135952 libexif12-dbgsym_0.6.24-1+deb12u1_ppc64el.deb e8100bab93e5e7181053db50342feacf8457c72b 398940 libexif12_0.6.24-1+deb12u1_ppc64el.deb a434c627f9dc7d1b26c7ceca905bdcbd5bd7ad06 8786 libexif_0.6.24-1+deb12u1_ppc64el-buildd.buildinfo Checksums-Sha256: 63fbd72594c42f3394dfdcff9ef9d7f45bea737c1e47c83b284bf4ddb644e5bc 106224 libexif-dev_0.6.24-1+deb12u1_ppc64el.deb dce05c403b0f03d4ae2b92d7fde6011291c25f80f29f292a0e6162aea21ff255 135952 libexif12-dbgsym_0.6.24-1+deb12u1_ppc64el.deb 6e88876d521869d44f9b663393affaed277f725936f3703c0234030ee349ecb1 398940 libexif12_0.6.24-1+deb12u1_ppc64el.deb 1266070031d1dfc561e38d7329365043874350fc7d89d90c2c83f8bf72bce86a 8786 libexif_0.6.24-1+deb12u1_ppc64el-buildd.buildinfo Files: f5dda255eceed7cef97508078bcb7f2a 106224 libdevel optional libexif-dev_0.6.24-1+deb12u1_ppc64el.deb e087a3349475f2ef7f2bf4328d58fc5d 135952 debug optional libexif12-dbgsym_0.6.24-1+deb12u1_ppc64el.deb 8c3966ba033d62e1177918f58d9a93e6 398940 libs optional libexif12_0.6.24-1+deb12u1_ppc64el.deb e48a5cdbd1ce1c892af3ff7f15bc4b92 8786 libs optional libexif_0.6.24-1+deb12u1_ppc64el-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmn/HcwACgkQ2FRWNm40 e2bcDQ//e7/LVf+8Q4IMF71HCr6Mevw/MMODt1xezorhzpRBnUGEdZEWJ/tKjMEA ZBFnKK/wP109+fw1WZ2P+dBM6ra0F31YB2R3kJVjX+BbiEMMyJ+GK5SXUYZ96pi5 eUcQ5Ws6NTZuvuDp1R+Z1rLRnE8x+3cxH9a3kpp2BDwHZvKL7Q6lJArAJQwbqgyD /CpA80x7amtN/sVi8pDIUJqO7A01epuNc9UR9uwOQTNT2Ku+4j4uPREz97c46Xwe rpVDwvYujadYlc7NcL41E2VEeBiRxl5EQ4TLFWS5J69S6BWVDnJIdipkV660Acuk UfQk/FngfKBaSAe6dTne0qYUu6vbN1RA+BseHzJnjj/nUD619aL+7+WhhK72kmdp uxBsOYMB3LH6GLohSRzvceMJQ2VMt0u2nx2MDXSyFIDBMxbYAyjaxriOble1PpYU SYM30F6GaKf/3m+syCsTZ9NmeZ47g1L3drmaJHuyoUkbOe/8V+Yj43ZRApZzHPqK Z+pHtxGJaq0dIEU8UAtW7FM0QmGAWoYJFBBY4uJ5tvDu+fxT+zhiEu2A6sQ2v/7X 3Mn+Zk/MxXApZCj4fQv4Nt9r3HsAcaWNZDDm9eVwxFmwPavXk4HbCDbdjFBuRbkF 4/WphvPiLVFr+tE0OVNpUetVVXl8oEsanP8S9Z8bIViZRIvHmMU= =vZ/e -----END PGP SIGNATURE-----