-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 17 Apr 2026 07:48:04 -0300
Source: libexif
Binary: libexif-doc
Architecture: all
Version: 0.6.25-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Emmanuel Arias <eamanu@debian.org>
Description:
 libexif-doc - library to parse EXIF files (documentation)
Closes: 1131116 1133922 1133923
Changes:
 libexif (0.6.25-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/patches/CVE-2026-40386.patch Add patch for CVE-2026-40386.
     - An integer underflow in size checking for Fuji and Olympus MakerNote
       decoding could be used by attackers to crash or leak information out
       of libexif-using programs (Closes: #1133923).
   * d/patches/CVE-2026-40385.patch: Add patch for CVE-2026-40385.
     - An unsigned 32bit integer overflow in Nikon MakerNote handling could
       be used by local attackers to cause crashes or information leaks.
       (Closes: #1133922).
   * d/patches/CVE-2026-32775.patch: Add patch for CVE-2026-32775.patch.
     - If the exif_mnote_data_get_value function in MakerNotes gets passed
       in a 0 size, the passed in-buffer would be overwritten due to an
       integer underflow (Closes: #1131116).
Checksums-Sha1:
 a3b3f1dd07674657962ad01615068c7dd2819e59 166268 libexif-doc_0.6.25-1+deb13u1_all.deb
 9987ae30503ab22a3d1248e161e552d3de7ad7c6 7805 libexif_0.6.25-1+deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 5fed5f79d9a4cbdcba2693bb37560a20fb4e079f9601eb3c8949b961980eb9b3 166268 libexif-doc_0.6.25-1+deb13u1_all.deb
 bec3251eb19cc7dbbc456a17815c6c8de58c547c5228da4817130802426604af 7805 libexif_0.6.25-1+deb13u1_all-buildd.buildinfo
Files:
 8812410fb776d5d45fe35d14cddc5319 166268 doc optional libexif-doc_0.6.25-1+deb13u1_all.deb
 22b5b77df4bcdf487e031826d9c6682b 7805 libs optional libexif_0.6.25-1+deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Dikh
-----END PGP SIGNATURE-----