[From nobody Thu Apr 2 19:45:06 2026 Received: (at 1132501-close) by bugs.debian.org; 2 Apr 2026 18:43:56 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,SPF_HELO_PASS,SPF_NONE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 88; hammy, 150; neutral, 164; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:59110) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8N1I-007tmi-2T for 1132501-close@bugs.debian.org; Thu, 02 Apr 2026 18:43:56 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1w8N1H-00AHFB-1Q for 1132501-close@bugs.debian.org; Thu, 02 Apr 2026 18:43:55 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=4AClhxM+0g4cUjDVVxfZOHFqF0j2un1rzqwFtVdZ52A=; b=mOvT7B4r9zigJeDUu7yJjTfkiK qynkO16Xgsdn9acSXKZxM9nqd/FLlv2/kLlri4RWy9uf3UMZxZVpTJ2dHES4D/vw7/8ivFrEj/s3r VJy5pZl3O4jL+C7TFeRYL4Yg0u8VxzQ6j7Bf1Ysp9TdQ1d7q3aZB1zfXHSxXAQcFrR/6Hs+o0epaP 4wb7NLtxKlF+VLr40BHELy/u4yv1UESEa+nclc0ZWsNzylH9O9z+/gIi0URrJgb2Jnoy9r/94hvbF dzdgpM1xDmjKUXUI0HDsmGtoTrw+JlzkOOut2Vj3rlsVWJBkz1+TRE0IwCZwvRJpNz51SrfQJGG/O jm4J0uDg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1w8N1G-00000001dxq-2DeN; Thu, 02 Apr 2026 18:43:54 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Jeremy_B=C3=ADcha?= <jbicha@ubuntu.com> To: 1132501-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: gdk-pixbuf Debian: DAK Debian-Changes: gdk-pixbuf_2.44.6+dfsg-1_source.changes Debian-Source: gdk-pixbuf Debian-Version: 2.44.6+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1132501: fixed in gdk-pixbuf 2.44.6+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1781588756844666580==" Message-Id: <E1w8N1G-00000001dxq-2DeN@fasolo.debian.org> Date: Thu, 02 Apr 2026 18:43:54 +0000 --===============1781588756844666580== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: gdk-pixbuf Source-Version: 2.44.6+dfsg-1 Done: Jeremy B=C3=ADcha <jbicha@ubuntu.com> We believe that the bug you reported is fixed in the latest version of gdk-pixbuf, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1132501@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jeremy B=C3=ADcha <jbicha@ubuntu.com> (supplier of updated gdk-pixbuf package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Apr 2026 14:04:10 -0400 Source: gdk-pixbuf Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 2.44.6+dfsg-1 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Jeremy B=C3=ADcha <jbicha@ubuntu.com> Closes: 1132501 Changes: gdk-pixbuf (2.44.6+dfsg-1) unstable; urgency=3Dhigh . * New upstream release - CVE-2026-5201 Heap overflow via improper validation of color component counts (Closes: #1132501) * Remove test patch applied in new release * Remove transitional libgdk-pixbuf2.0-0-udeb * Update Standards Version to 4.7.4 Checksums-Sha1: 426fde4be2e276df5cd80de37739d300ad041013 3301 gdk-pixbuf_2.44.6+dfsg-1.dsc 8cb8e4c64bc0f1b2e0c88392854964e5d2bd6b65 5954220 gdk-pixbuf_2.44.6+dfsg.orig= .tar.xz 56d099f46c375f3baf8716f2a201604909092f70 24444 gdk-pixbuf_2.44.6+dfsg-1.debi= an.tar.xz 7fa80ac9110726250ef98ceffd53ffb4db6f586c 11810 gdk-pixbuf_2.44.6+dfsg-1_sour= ce.buildinfo Checksums-Sha256: c8035a5958e5900bf4366afa650591e983bccc96439fe13b5ec11a5e777f8125 3301 gdk-pi= xbuf_2.44.6+dfsg-1.dsc 0f3b38245bbe2605779ee1ee7c140f0e3b866b632d4f39e45f214299351ba1d3 5954220 gdk= -pixbuf_2.44.6+dfsg.orig.tar.xz 4deee65113a64353b7b50c00dedee072e0b500864270ba7495ac84170b4c64b6 24444 gdk-p= ixbuf_2.44.6+dfsg-1.debian.tar.xz f01251e4d77ad93e8e0e35b8f32e3021eaceb87fb0b901094e2d6400a29fbd29 11810 gdk-p= ixbuf_2.44.6+dfsg-1_source.buildinfo Files: 212d4a0e4fc74c8064906c52695e24ad 3301 libs optional gdk-pixbuf_2.44.6+dfsg-1= .dsc 59f6f88c54fe6bb3012045e0354b92f4 5954220 libs optional gdk-pixbuf_2.44.6+dfs= g.orig.tar.xz af7051d55ddb80c256630457a9d37072 24444 libs optional gdk-pixbuf_2.44.6+dfsg-= 1.debian.tar.xz b3d10ed9a710b626eb0280dd78436e6c 11810 libs optional gdk-pixbuf_2.44.6+dfsg-= 1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmnOsI8ACgkQ5mx3Wuv+ bH0hvw/+I9KjDAdZr+mnrLznW36j+xLwZciVGZ5hcBqRMmnID1klqZXi9tPILoSs j+yFP4Ewbc0NzEQyTyFUcq35Bz7u5VKme0vkSkBPIyQR/ao+dHwaNftgCadfZ11o mOKxfEX4bhjxYEd4EPlEDCrEHax52zgcJy8DVMexDPapfCAbtqBjl8bfLBUHOP/e no6U+cRjKSQ1KT8KEKr8bIJff3/9yl8mjQh1c5xub2wlIBBBk40zdDhqK+IQF1Pc Kd8mM0nRFafqB+niii/f69IOMZQHae/Z1bBMMGSr34/T0f68abZnqRKyJHhC3NyL +tXoi5VK0Mu+mniACbqJJKhA32hJMuFeCDBhGOCdwvefOXCfst33fdjDSYOUzLBH xLWtU3fGbdGZVeW4CMAmcnpAnz9KfncFPb9ba7mAVHbQ0M/zOjd0PtoyAbDBRVc2 r3wpNb2wAe76jjU+lkhmOTiixfmOEt4wJ1CZpik4fFp6hqMTylZ5UJy45XA2zNUi 8FVp8N47lIkUJql2daB4/6QT5td59s6kyETfUjNzk4Tcyp1cTcyeUWz2XACah3U3 BGQnmhsCE7Su2APzZfGxg4C+uRxtru5gA4rKODCNnEOY5vQu8yyPNwr1xIZmAiTC Xfzgq0syAW/W3pSumbgBlIRL5v6DmHhdO8HyXMi2DOcHptroSAc=3D =3DBEtv -----END PGP SIGNATURE----- --===============1781588756844666580== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCac646gAKCRCb9qggYcy5 IfERAP9OJx63ECKOTIt//jR2jPtfhU/SiaiRpMpFi/UmKswKKwEAyKXtoTRdk/5d br76jDGLDad6QuA5UNjhYcAJgKoj7wo= =xizU -----END PGP SIGNATURE----- --===============1781588756844666580==-- ]