[From nobody Fri Apr 10 20:21:06 2026 Received: (at 1133010-close) by bugs.debian.org; 10 Apr 2026 19:19:43 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_NONE, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 101; hammy, 150; neutral, 151; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:40286) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wBHOJ-00Cawx-22 for 1133010-close@bugs.debian.org; Fri, 10 Apr 2026 19:19:43 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wBHOI-000DqM-04 for 1133010-close@bugs.debian.org; Fri, 10 Apr 2026 19:19:42 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=bBWQZKmfEENhuMG6/tNATggKWI9EBjcaZ0M3qtW+KSs=; b=RHXak3P8K7qkwovpyieTKpot+t 22pdy0q4ZuuObA8meLBT266u7eLX/ORiNLyYiPSXpa88L9L45/UcwFfJn8bN4sV4h4IvgtKhmGm5G hgm1L8+k8keOeGPtWvb0ECZ/4f5NdGU0JfeICtriWcxL0LOgUsyhMUV2HonXm3p1bDIlSaQNG+gej l5nQ5xEetiJkTng5dgqvP+VEGYCpPSI2PL+3GQ+bi9LLSO78b9DV6Dt7I9xcsPF0vops/wpD2ALV/ 1B85cad3WqD7/9RIawhmaL6scVjiDJ7QSzMr5T13R/buF6aek8f1m5NQ5oE/LNS13pwJELeeaA2YR 5jkfs0zw==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wBHOG-0000000135C-3Qcc; Fri, 10 Apr 2026 19:19:40 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1133010-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: libsdl2-image Debian: DAK Debian-Changes: libsdl2-image_2.8.10+dfsg-1_source.changes Debian-Source: libsdl2-image Debian-Version: 2.8.10+dfsg-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1133010: fixed in libsdl2-image 2.8.10+dfsg-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============4122868726585058634==" Message-Id: <E1wBHOG-0000000135C-3Qcc@fasolo.debian.org> Date: Fri, 10 Apr 2026 19:19:40 +0000 --===============4122868726585058634== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: libsdl2-image Source-Version: 2.8.10+dfsg-1 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of libsdl2-image, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1133010@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated libsdl2-image package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 10 Apr 2026 19:59:26 +0100 Source: libsdl2-image Architecture: source Version: 2.8.10+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian SDL packages maintainers <pkg-sdl-maintainers@lists.alioth= .debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1133010 Changes: libsdl2-image (2.8.10+dfsg-1) unstable; urgency=3Dmedium . * New upstream release - Fixes an out of bounds read in the XCF image loader (CVE-2026-35444) (Closes: #1133010) * d/patches: Add more fixes for malformed image files, from upstream * d/control: Remove Priority field, no longer needed * d/control: Standards-Version: 4.7.4 (no changes required) Checksums-Sha1: 0388e9b699221733b4671dc132415997f9af2af6 2599 libsdl2-image_2.8.10+dfsg-1.dsc 1531a1be596298a44d6be0536797da16e6530c4c 344378 libsdl2-image_2.8.10+dfsg.or= ig.tar.gz c479ccb213d85d623692152bbec94689f438b40d 16756 libsdl2-image_2.8.10+dfsg-1.d= ebian.tar.xz 2e3f2b402451ec1d5d4491ca5b3a8cac5030976e 11035 libsdl2-image_2.8.10+dfsg-1_s= ource.buildinfo Checksums-Sha256: 871b4b876f419122d5e3ffa2057bf55934507cf243c83c26beb7116d380b751f 2599 libsdl= 2-image_2.8.10+dfsg-1.dsc 43645892f93ff140f2d2f1fa3b14c66dd06509d3598a30cd2974ed047ff7bb33 344378 libs= dl2-image_2.8.10+dfsg.orig.tar.gz ad68b9729ed9b0b1c0a957a7f186bcd3534c65970e445c29a5d0db98f385b068 16756 libsd= l2-image_2.8.10+dfsg-1.debian.tar.xz c06a3899abfab6536d0d80ea8a27668a762d2b1b0cadcb2b71ebe8597034eeaa 11035 libsd= l2-image_2.8.10+dfsg-1_source.buildinfo Files: 4966410d333b4eed47067d694dcab0d1 2599 libs optional libsdl2-image_2.8.10+dfs= g-1.dsc c478a76fc63bd61df3c0f5dc23081266 344378 libs optional libsdl2-image_2.8.10+d= fsg.orig.tar.gz 1f29375dd1dcab0fcb9ae31e57fe1666 16756 libs optional libsdl2-image_2.8.10+df= sg-1.debian.tar.xz 950350dc1862bad8e372ce8975375ddc 11035 libs optional libsdl2-image_2.8.10+df= sg-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEegc60a5pT6Jb/2LlI1wJnT6zMHYFAmnZSmcACgkQI1wJnT6z MHYbwg/+JiuP/LkdtxI7DL1NFgO3SmqEPMerciNArJfDhHHbGlbVMbHVONYfAVBz OTEW2r0r1ehftw6LCO8VP3ZWKCQv7+Z8HBmc3k8WZ03Mqt5FGqs8Od+hXcgF/9lE Ix6p+bxRfLWZSWEAX+/jlXV8XdgRKWxCivqHEWvnbcXIsNrxBpqKEw09pVYca1wP V31UCYyiYaPIhOIca6yWoiOBynOZvzh1Tr1/7ggMjjUBLPa7SLjW6ommWDYXNHmL LJAMr/htrGmGSP1GUbj37M45AtTsCW23nHoUWzDKW6rH7cjsCZgXExbj8VBrJ/EB TtN+vn9I/WD42U4kBng6iu2GJXBEWga/xXaZNqHdEAyByzIQpfj5iyOAezsCijft nxjCD/Vz+Pwjx0yFnNMmFBLLKyAAbXdmxbRsUyRvujTbM2EQdeeLr8aClMUGz64h CVmA7oJZe6HaK6jSDd31PZXOC/QuRaWJnMj6NxoliGeRQN8I6HvV+g/V3SjRXBB6 IiylsHjhZJynwp4iF2FADKJmFs34I+Lf/4jArkAwWmmVyJFxFZ+7VvbWqB1FU/n3 K1yl41wLxt/qVmcwcAN3A25tUewzB8wh+dvU7mcmtxF5GnVNhzGDW1Bk+kDBW6UD F3iiSxQQWvJnv+Jtm/i2hr8IoIcPUF7gwDJNToNoN02z8wiJgvI=3D =3DdyuX -----END PGP SIGNATURE----- --===============4122868726585058634== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCadlNTAAKCRCb9qggYcy5 IaWzAP4hRv3ldoyXAITF34oHX79O93HgtWNzwsnWuwTTOkhHPAD/SN/ocAiMHA34 mcgaf+S53JCakKHgIZZ8rByPwkUZNwo= =82X8 -----END PGP SIGNATURE----- --===============4122868726585058634==-- ]