[From nobody Fri Apr 10 20:21:05 2026 Received: (at 1133011-close) by bugs.debian.org; 10 Apr 2026 19:18:52 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 90; hammy, 150; neutral, 156; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:58162) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wBHNT-00Caqi-31 for 1133011-close@bugs.debian.org; Fri, 10 Apr 2026 19:18:52 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wBHNS-00HJ1q-2w for 1133011-close@bugs.debian.org; Fri, 10 Apr 2026 19:18:51 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=Zzswtvbb5FYPy9UMvmOcxr0o4HTn9GaEBBmmTp3BM9U=; b=rMclTNepj194aY4hRYsyqxwxSg z2NyhoiIHpKn7VNaQIZ4C0O8dpHUKgKu/+nIbM+A7Is60MxodEVfUF94EqQwQQIJmnV0/YGwsV2cq fZB6zdtlEIBom0nkXgmWMn1ROm7N2fXsqesoKJbRXdrPTrvFSH/uYs3g36WlfZQ10ypehdJGjT7hN HOhe45fINIrWTPoHwH1w7wZ8uhYet6z/H2osssBL50ZOWaScdGoSzRnfN2bgGMsL7/0FR9awBjumU 0kZwl1OIVUdd6VJE/swjZIudcL7g2TC6DDMLHZgtwP6M0yO18xboGROmeUDW3IafJfycy4l53g0T6 S+Wc2gGw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wBHNR-000000012sa-0ZMN; Fri, 10 Apr 2026 19:18:49 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1133011-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libsdl3-image Debian: DAK Debian-Changes: libsdl3-image_3.4.2+ds-1_source.changes Debian-Source: libsdl3-image Debian-Version: 3.4.2+ds-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1133011: fixed in libsdl3-image 3.4.2+ds-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2004975179779082195==" Message-Id: <E1wBHNR-000000012sa-0ZMN@fasolo.debian.org> Date: Fri, 10 Apr 2026 19:18:49 +0000 --===============2004975179779082195== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libsdl3-image Source-Version: 3.4.2+ds-1 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of libsdl3-image, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1133011@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated libsdl3-image package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Apr 2026 19:59:22 +0100 Source: libsdl3-image Architecture: source Version: 3.4.2+ds-1 Distribution: unstable Urgency: medium Maintainer: Debian SDL packages maintainers <pkg-sdl-maintainers@lists.alioth= .debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1133011 Changes: libsdl3-image (3.4.2+ds-1) unstable; urgency=3Dmedium . * New upstream stable release - Fixes an out of bounds read in the XCF image loader (CVE-2026-35444) (Closes: #1133011) * d/patches: Add more fixes for malformed image files, from upstream * Normalize formatting (debputy reformat) * d/control: Use substvars to reduce duplication in Description * d/source/lintian-overrides: Remove. This should no longer be needed: the Lintian bug has been fixed. * Standards-Version: 4.7.4 (no changes required) Checksums-Sha1: b3569daef9245bbbcf096df4314b46e8cfad037f 2993 libsdl3-image_3.4.2+ds-1.dsc 74de5e5b7d8a6dd085ce35966bb2d9a61dad232d 305276 libsdl3-image_3.4.2+ds.orig.= tar.xz b3fd4779c5051d18d6275f8f6a10f2a19201b454 18692 libsdl3-image_3.4.2+ds-1.debi= an.tar.xz 032abb1e754762746d960a307d479ca76707b81b 11931 libsdl3-image_3.4.2+ds-1_sour= ce.buildinfo Checksums-Sha256: ac8bc06f5f76d55766c144f63fd3c1763b5f919f4c6fc7e20023784fcd4e985f 2993 libsdl= 3-image_3.4.2+ds-1.dsc 6a3df14cbdce7303a8165bfc3caccccc64df9e726a56204d502172571a3cd78f 305276 libs= dl3-image_3.4.2+ds.orig.tar.xz b46b35a2e093697133c4c1c39ed9cc1c4a271be7cc07801565e99572b86f9a59 18692 libsd= l3-image_3.4.2+ds-1.debian.tar.xz af987da7331387294968c492f9975b86f93817d7bb55b5d6f4c177c715c56e52 11931 libsd= l3-image_3.4.2+ds-1_source.buildinfo Files: 93c91636c82965067383bd93109ef4da 2993 libs optional libsdl3-image_3.4.2+ds-1= .dsc 94bfb1fdaea8e315aebfa36736b50e1e 305276 libs optional libsdl3-image_3.4.2+ds= .orig.tar.xz f44f1e5876574dc1974deced9d27a43e 18692 libs optional libsdl3-image_3.4.2+ds-= 1.debian.tar.xz c1d8af287ffc03b501072540f5b24e41 11931 libs optional libsdl3-image_3.4.2+ds-= 1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegc60a5pT6Jb/2LlI1wJnT6zMHYFAmnZSkIACgkQI1wJnT6z MHZVyg/+JE6YH6L/+MbZtvsUKhkYKQiUTIcZ0gAfdlJCRgFcFSJDVnxjwsyKE03P qom/F8qam37WtasOr44u/jQW4ohZLQ3jeVb23c/lvFcv/r0tCNJPtajE2qiGGr3F wFY1lJEH5MJ/fz/DsETKhf504yrL4wQo5bWcmzRFMSAMeBHJGjZGT/KuG7v2JDxa tBC9UKP/AG1/ZpXjz6K0Z0Gv1FlCmUUIMsPY5Pc8B8YtwMLXnIbdX8AipFrkcfTH bpNdSI+jx8ZWhM8qFHaDP5oWxFgGlyck9fRfElo2SMhyubKc8AnoP7J6GEzc8ALE 2kMsuX/T6QRojlrA6Sm1laYLMkTfHfW3zYa8VORE862jdbaKZhpQTpEMXzjEgbBI dIVzFuCnCBi36rGHByzgwtw8WaNNy7PwA9jhJSrBtfKlc0OFkmHXKpLOazm4dgQ0 djfUm93Sur2NRQV05wGoChqpH7+byiUlFvT5juuLf/gVMSriQRpiPnRBU5yQP/Ml tElawxIYK5ZPVFawYs1nk83stIPOebS+HKdzC61CDSVs8bcPOaEJajDSR4efRC19 RIiMyo/tBTxhsl4t5c/SiZeJii8i0Q1Rjhu2OgsRJTZVXrgn3O0rZckmeAGoZ5Tg UlUbAmrKt6fy4b8QpO8hrUpzKoaHehBruDkKZG6xalN9OvVR0zI=3D =3DSAQA -----END PGP SIGNATURE----- --===============2004975179779082195== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCadlNGQAKCRCb9qggYcy5 IZaPAQDKl8CgWVWQgic+Jn0D/etBRlLZwrW5n0tecmytpuvd2wEArcdlKvUYF33l e/wrDKDI2lD3qNUwZbDS1laF8x18FA8= =Ub5m -----END PGP SIGNATURE----- --===============2004975179779082195==-- ]