[From nobody Sat Apr 18 18:05:05 2026
Received: (at 1132501-close) by bugs.debian.org; 18 Apr 2026 17:03:00 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD,
 HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,
 SPF_HELO_PASS,SPF_NONE,USER_IN_DKIM_WELCOMELIST autolearn=ham
 autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 77; hammy, 150; neutral, 145; spammy,
 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK,
 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--UD:debian.tar.xz,
 0.000-+--H*r:sk:fasolo., 0.000-+--H*MI:fasolo
Return-path: &lt;envelope@ftp-master.debian.org&gt;
Received: from mitropoulos.debian.org
 ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:54412)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wE94O-00HCz0-2O for 1132501-close@bugs.debian.org;
 Sat, 18 Apr 2026 17:03:00 +0000
Received: via submission
 from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA,
 CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified)
 by mitropoulos.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wE94N-008TgW-0G for 1132501-close@bugs.debian.org;
 Sat, 18 Apr 2026 17:02:59 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type:
 Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID
 :Content-Description:In-Reply-To:References;
 bh=O3o0Yt7hVyAqPpclf3wgzdn0g5nDiDrjjqc4/eFfegE=; b=cU32fHpsrPuvb+gJAPTHzZy61x
 gvJe2UrOtzLiPyAW3nbmOE+lCrIQKDgiRoikCW3crUefA4cXJ/aeL1B7qkjZ5MklPZezqN5vJ/5aH
 8CNTnqQ4U8aLIAiXzoka/WjdSYKredbZxQuXDfDgHcW/KhPXYrgcB37ydFm41H7+nYRcIgfgAYh73
 xlTYEkXlyyg1YkIwI/1UKj6tzf5oPXshsd+OmtoUZcEXPbyTEDDkiVKq2ijS1UquXIxWqWBsO7ZT3
 Nvg+aQBWuvXDGtnOpaQxs/+UrbrUgDEBD0nSncqJc7dBioaxCLtVS42U5J2Fpud+lPAX0Jb/i7qB2
 Tu4yC+Wg==;
Received: from dak by fasolo.debian.org with local (Exim 4.98.2)
 (envelope-from &lt;envelope@ftp-master.debian.org&gt;)
 id 1wE94L-0000000Gobo-3aXV; Sat, 18 Apr 2026 17:02:57 +0000
From: Debian FTP Masters &lt;ftpmaster@ftp-master.debian.org&gt;
Reply-To: Salvatore Bonaccorso &lt;carnil@debian.org&gt;
To: 1132501-close@bugs.debian.org
X-DAK: dak process-policy
X-Debian: DAK
X-Debian-Package: gdk-pixbuf
Debian: DAK
Debian-Changes: gdk-pixbuf_2.42.10+dfsg-1+deb12u4_source.changes
Debian-Source: gdk-pixbuf
Debian-Version: 2.42.10+dfsg-1+deb12u4
Debian-Architecture: source
Debian-Suite: oldstable-proposed-updates
Debian-Archive-Action: accept
MIME-Version: 1.0
Subject: Bug#1132501: fixed in gdk-pixbuf 2.42.10+dfsg-1+deb12u4
Content-Type: multipart/signed; micalg=&quot;pgp-sha256&quot;;
 protocol=&quot;application/pgp-signature&quot;;
 boundary=&quot;===============6602603300574991133==&quot;
Message-Id: &lt;E1wE94L-0000000Gobo-3aXV@fasolo.debian.org&gt;
Date: Sat, 18 Apr 2026 17:02:57 +0000

--===============6602603300574991133==
Content-Type: text/plain; charset=&quot;utf-8&quot;
Content-Transfer-Encoding: quoted-printable

Source: gdk-pixbuf
Source-Version: 2.42.10+dfsg-1+deb12u4
Done: Salvatore Bonaccorso &lt;carnil@debian.org&gt;

We believe that the bug you reported is fixed in the latest version of
gdk-pixbuf, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1132501@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Salvatore Bonaccorso &lt;carnil@debian.org&gt; (supplier of updated gdk-pixbuf pack=
age)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 04 Apr 2026 22:47:31 +0200
Source: gdk-pixbuf
Architecture: source
Version: 2.42.10+dfsg-1+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: Debian GNOME Maintainers &lt;pkg-gnome-maintainers@lists.alioth.debi=
an.org&gt;
Changed-By: Salvatore Bonaccorso &lt;carnil@debian.org&gt;
Closes: 1132501
Changes:
 gdk-pixbuf (2.42.10+dfsg-1+deb12u4) bookworm-security; urgency=3Dhigh
 .
   * Non-maintainer upload by the Security Team.
   * jpeg: Reject unsupported number of components (CVE-2026-5201)
     (Closes: #1132501)
Checksums-Sha1:
 fccf4ec3dc5278c848ffbc3d5bb01fa389244869 3384 gdk-pixbuf_2.42.10+dfsg-1+deb1=
2u4.dsc
 fc20b1ef19a8c45114c158f40d4a8842f20a3b63 24248 gdk-pixbuf_2.42.10+dfsg-1+deb=
12u4.debian.tar.xz
 73d49177f634f5f70f3cf311d26a506f2e441d85 6358 gdk-pixbuf_2.42.10+dfsg-1+deb1=
2u4_source.buildinfo
Checksums-Sha256:
 e39334b0b64cc6544da8d07df2ea88f8d7b6e9ac8a85559584b27228ffc397d6 3384 gdk-pi=
xbuf_2.42.10+dfsg-1+deb12u4.dsc
 aa48a01389f4f22ac38a389c598f23db37b6ef82c9cfc7316f4dcc440d3aa916 24248 gdk-p=
ixbuf_2.42.10+dfsg-1+deb12u4.debian.tar.xz
 0348087320c895d8ece65f0391b652e6a29830302bacd23bc5de5fe2c0c10276 6358 gdk-pi=
xbuf_2.42.10+dfsg-1+deb12u4_source.buildinfo
Files:
 7e187a57e9b5bf9fac7e789948f41d53 3384 libs optional gdk-pixbuf_2.42.10+dfsg-=
1+deb12u4.dsc
 ff3e30fdd222c5e507f295f3038e2648 24248 libs optional gdk-pixbuf_2.42.10+dfsg=
-1+deb12u4.debian.tar.xz
 f2cec67e422b5070e7ad123edfa91d65 6358 libs optional gdk-pixbuf_2.42.10+dfsg-=
1+deb12u4_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=3DcjRJ
-----END PGP SIGNATURE-----


--===============6602603300574991133==
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaeO5QQAKCRCb9qggYcy5
IcKeAQCZA7SNz3nTq66o0rRKSUfETbEToOD95JOlLIn3vpYsVAEA4eOsvwpSweMA
TU8yHXqhuzjZYzPFkeckOavaGFMCTA0=
=5sBz
-----END PGP SIGNATURE-----

--===============6602603300574991133==--
]