[From nobody Wed May 6 19:07:04 2026 Received: (at 1135778-close) by bugs.debian.org; 6 May 2026 18:05:08 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-104.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, BODY_RFQ,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=no autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 77; hammy, 150; neutral, 165; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:58052) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKgcO-00DZZf-1W for 1135778-close@bugs.debian.org; Wed, 06 May 2026 18:05:08 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wKgcP-005U2a-04 for 1135778-close@bugs.debian.org; Wed, 06 May 2026 18:05:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=QT6x7c3XLfszfFDdyirxN4+CcmL1q3hFFgbJwUlfDqY=; b=jC/ytXwSb8dHwYAtGwVN4gk7/p Bw76QUaAux1U9pFqfQpeoZoc1D2d7bGq+6EPWS3di/QFZLyhQujz0mxHl/OuAILF/MK569EzzklYz lWTVitHRjsmtihSqjOHDXhR/oDQthbermXdX/sI6R9QNpX7Qri5JL6eOcIvAx0JXYFpNePmQtgOyq MTG98zi0R7DIiSNExuBJNXGgx6F9BkTDzkfN70jFyvEPxgbacPSPpYYJjsXxf9KwTwCHKEEzvyabA xQFrFLX3QV/svHUVXceSKaQfIv8qz9Kkk7Z7coaBIth/YZgQvFhYt9me6JWCQsjQ1kovEGCufue1y onoVAUZg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wKgcN-00000009A4e-0vVY; Wed, 06 May 2026 18:05:07 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Santiago Vila <sanvila@debian.org> To: 1135778-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: cimg Debian: DAK Debian-Changes: cimg_3.5.2+dfsg-2_source.changes Debian-Source: cimg Debian-Version: 3.5.2+dfsg-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1135778: fixed in cimg 3.5.2+dfsg-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1678056575291642710==" Message-Id: <E1wKgcN-00000009A4e-0vVY@fasolo.debian.org> Date: Wed, 06 May 2026 18:05:07 +0000 --===============1678056575291642710== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: cimg Source-Version: 3.5.2+dfsg-2 Done: Santiago Vila <sanvila@debian.org> We believe that the bug you reported is fixed in the latest version of cimg, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1135778@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Santiago Vila <sanvila@debian.org> (supplier of updated cimg package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 06 May 2026 19:25:00 +0200 Source: cimg Architecture: source Version: 3.5.2+dfsg-2 Distribution: unstable Urgency: medium Maintainer: Debian Science Maintainers <debian-science-maintainers@lists.alio= th.debian.org> Changed-By: Santiago Vila <sanvila@debian.org> Closes: 1135778 Changes: cimg (3.5.2+dfsg-2) unstable; urgency=3Dmedium . * Team upload. . [ Adrian Bunk ] * Fix CVE-2026-42144 (Integer overflow in PNM size check). * Fix CVE-2026-42146 (OOM on crafted BMP). * Closes: #1135778. . [ Santiago Vila ] * Drop debian/README.source, quilt is standard now. * Drop "Rules-Requires-Root: no" (default). * Drop "Priority: optional" (default). * Update standards-version. * Update Homepage. * Fine-tune salsa-ci.yml. Checksums-Sha1: 61a38d227a602844ac604353d17132e44c166639 2239 cimg_3.5.2+dfsg-2.dsc d85b1b72b215f82f7b4a6bd420360e4a28cd1714 21180 cimg_3.5.2+dfsg-2.debian.tar.= xz 7cacc53df278d2cc157ba945de40e0c622ae47d4 5261 cimg_3.5.2+dfsg-2_source.build= info Checksums-Sha256: c544b26c71aaf6f7bb08b508917ef138feb87fc53fc69a34a69e902847b7143d 2239 cimg_3= .5.2+dfsg-2.dsc c5bb4a9bdcd7841d2e47a17b733640510bfd94369cc603e85b68622821d84e52 21180 cimg_= 3.5.2+dfsg-2.debian.tar.xz c594f0fd91fa68700fc436d67f65763569972bf95f43e2a4e0cf9779c9a15113 5261 cimg_3= .5.2+dfsg-2_source.buildinfo Files: 9b2ae048f159baf8ab5e37de2f3d80ab 2239 math optional cimg_3.5.2+dfsg-2.dsc 687f2b67ee3aaac3dd08b3c0321000a6 21180 math optional cimg_3.5.2+dfsg-2.debia= n.tar.xz 2d1dfc7f3158f3d281d3bfdebc61541c 5261 math optional cimg_3.5.2+dfsg-2_source= .buildinfo -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEE1Uw7+v+wQt44LaXXQc5/C58bizIFAmn7eokACgkQQc5/C58b izLcGAf+L2Uxt/AVvgvPwxyhOIBJ0/2+gH/MLLH3ft8/asTZVjhsZR4EbbmX8Np/ 5CbgLVTvw41h72wDXCoB6RzQW1g10/7v8B20ARFKLH76vioq/6LJ10AmAf7w7gxr rqZPzaTnaIRK4FGYaTs4uuycxqJt699Kok9OPyiQtD/NlZQLd2dokeEl/+IMvmGC eKMViNRfq+w4hrkrZx/GYv+oxkcz1Ge4J6PbuLMI9TnePM/nqQvpspTUhXwCJ5WN /4M3MCh6ktjzS26haQ0NlxQXIwpf6ov4G96PCzG8W3+JDykph/Zd4RBcd3h5TGhu gztFNHJKxgORly6+rsdBs+MB8Rr3dQ=3D=3D =3DfK6X -----END PGP SIGNATURE----- --===============1678056575291642710== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCafuC0wAKCRCb9qggYcy5 IRFLAQD4d4xo+Ujb+EGEo5sUn65UEiGBwGqazswy+GcoTms0PQD+Ii4YE8MR5s0B eLWqKSF72GJ7tHw1Dd5jLYExAZpl9w8= =gEqK -----END PGP SIGNATURE----- --===============1678056575291642710==-- ]