-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 17 Apr 2026 07:48:04 -0300
Source: libexif
Binary: libexif-dev libexif12 libexif12-dbgsym
Architecture: arm64
Version: 0.6.25-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: arm64 Build Daemon (arm-ubc-01) <buildd_arm64-arm-ubc-01@buildd.debian.org>
Changed-By: Emmanuel Arias <eamanu@debian.org>
Description:
 libexif-dev - library to parse EXIF files (development files)
 libexif12  - library to parse EXIF files
Closes: 1131116 1133922 1133923
Changes:
 libexif (0.6.25-1+deb13u1) trixie; urgency=medium
 .
   * Team upload.
   * d/patches/CVE-2026-40386.patch Add patch for CVE-2026-40386.
     - An integer underflow in size checking for Fuji and Olympus MakerNote
       decoding could be used by attackers to crash or leak information out
       of libexif-using programs (Closes: #1133923).
   * d/patches/CVE-2026-40385.patch: Add patch for CVE-2026-40385.
     - An unsigned 32bit integer overflow in Nikon MakerNote handling could
       be used by local attackers to cause crashes or information leaks.
       (Closes: #1133922).
   * d/patches/CVE-2026-32775.patch: Add patch for CVE-2026-32775.patch.
     - If the exif_mnote_data_get_value function in MakerNotes gets passed
       in a 0 size, the passed in-buffer would be overwritten due to an
       integer underflow (Closes: #1131116).
Checksums-Sha1:
 a6ed8d9baf7a988f3710b81a19586d613a9b6ea2 99568 libexif-dev_0.6.25-1+deb13u1_arm64.deb
 fbef0755bd1d3b3cdba67e84e446e8706be16094 131452 libexif12-dbgsym_0.6.25-1+deb13u1_arm64.deb
 855b53d25b8d7e8d4b252ddd9889dd82eb3a35e2 417336 libexif12_0.6.25-1+deb13u1_arm64.deb
 e63a64bca5b69e000aab94c0a1225c8064823cb9 8393 libexif_0.6.25-1+deb13u1_arm64-buildd.buildinfo
Checksums-Sha256:
 a94adfb9b05641117eed6e0d930a24b67f4b35123e20961f0f28cf64b9fac139 99568 libexif-dev_0.6.25-1+deb13u1_arm64.deb
 6c30d93cdcfac00991026f10c1bee7521623715ea839db30748caf1569d3ecfc 131452 libexif12-dbgsym_0.6.25-1+deb13u1_arm64.deb
 722a35cafb4d17b470063c03e989cf0665162a9e74bea5b190151dafb169ca76 417336 libexif12_0.6.25-1+deb13u1_arm64.deb
 17a0175fbfa4ec6dc6bdc4ec9ecf69f5b3d0f08b5bbaf2e3c13f744481b27e41 8393 libexif_0.6.25-1+deb13u1_arm64-buildd.buildinfo
Files:
 2c67009b0cfab2c7b3654be413095bdd 99568 libdevel optional libexif-dev_0.6.25-1+deb13u1_arm64.deb
 682bc3520d7c8e9534c9a2760b39d858 131452 debug optional libexif12-dbgsym_0.6.25-1+deb13u1_arm64.deb
 25de0f9e98459761efcc121fa86af123 417336 libs optional libexif12_0.6.25-1+deb13u1_arm64.deb
 2fc37cd9ab87f4348dcc0d09333e3cab 8393 libs optional libexif_0.6.25-1+deb13u1_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=XGNx
-----END PGP SIGNATURE-----