libimager-perl_1.037+dfsg-2_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 05 Oct 2026 21:08:46 +0200
Source: libimager-perl
Architecture: source
Version: 1.037+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa at debian.org>
Changes:
 libimager-perl (1.037+dfsg-2) unstable; urgency=medium
 .
   * Upload to unstable.
 .
 libimager-perl (1.037+dfsg-1) experimental; urgency=medium
 .
   * Import upstream version 1.037+dfsg.
     - RAW:
       - check raw line buffer calculation for overflow
         CVE-2026-102504
     - getsamples() with type "float" on a paletted image fetching more than one
       channel would allocate too small a block.  Code calling this on an
       untrusted image could have an attacker controlled buffer overflow.
       CVE-2026-102505
     - The Imager C API major version has changed, any modules that depend on
       the Imager C API will need to be rebuilt.
   * debian/rules: set IMAGERAPI_VERSION to 6 following the API change.
   * Upload to experimental because of the API version change.
Checksums-Sha1:
 5b9b54cf1190f86ea95692fa731f3904d9680d87 2684 libimager-perl_1.037+dfsg-2.dsc
 482a762bae5845169943a1e9eca44ea49d9ebfd1 14020 libimager-perl_1.037+dfsg-2.debian.tar.xz
 b3bc87e4560d1e631fb9465024f65a6b1b57dd37 2003420 libimager-perl_1.037+dfsg-2.git.tar.xz
 acb46bac29676b19fd5c49276be23f79094c8186 17772 libimager-perl_1.037+dfsg-2_source.buildinfo
Checksums-Sha256:
 054d7574fb7f923d08cf918c9f7101ca842e3173fb985728da22e069e66813b9 2684 libimager-perl_1.037+dfsg-2.dsc
 1de00213d0b6bcb0be1e1fe4e2d46fa699a878008d9e514490e72986d7bad1b6 14020 libimager-perl_1.037+dfsg-2.debian.tar.xz
 1e0d3b653a25dcbee07bdc0556b8a87e5b92cce25fe15f8f5b5fe36060c0d06a 2003420 libimager-perl_1.037+dfsg-2.git.tar.xz
 31fd325682fb47d50df128f205337e66145bc2998f3da605a44eea84a61d72cf 17772 libimager-perl_1.037+dfsg-2_source.buildinfo
Files:
 45d0de503a417dcdf546783f2490f9a6 2684 perl optional libimager-perl_1.037+dfsg-2.dsc
 56104b5eba82c938cbd38cb0a4ac0bf1 14020 perl optional libimager-perl_1.037+dfsg-2.debian.tar.xz
 7a34afee51e93f6c8907e69a175dbf8d 2003420 perl None libimager-perl_1.037+dfsg-2.git.tar.xz
 a407f69889666448f286f06aa55eb213 17772 perl optional libimager-perl_1.037+dfsg-2_source.buildinfo
Git-Tag-Info: tag=6f6c8c9425f39f9135bdc90c4d158c8901eb6cb0 fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa at debian.org>

-----BEGIN PGP SIGNATURE-----
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=3ZTb
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20261005/b946d1dc/attachment.sig>