libimager-perl_1.036+dfsg-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 18 Sep 2026 13:22:42 +0200
Source: libimager-perl
Architecture: source
Version: 1.036+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers at lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa at debian.org>
Changes:
 libimager-perl (1.036+dfsg-1) unstable; urgency=medium
 .
   * Import upstream version 1.036+dfsg.
    - TGA:
      don't interpret large color map sizes as negative.
      CVE-2026-93019
    - paletted images:
      - if an out of range color index is written to the image:
        - the i_gpix() and i_glin() APIs will return black for such
          pixels rather than leaving them uninitialized, or returning an
          uninitialized entry from the palette.
          CVE-2026-93018
Checksums-Sha1:
 e246cc934e88179a161dfc6ad84155ad65a610c1 2684 libimager-perl_1.036+dfsg-1.dsc
 007d46ebd71ab0e57240c9e5fa73841ffd0923bf 950096 libimager-perl_1.036+dfsg.orig.tar.xz
 783dda8c4861c9a8bdc6674bbf36126333d546b5 13768 libimager-perl_1.036+dfsg-1.debian.tar.xz
 ff5580a4e73845a7dfc868c5567b0d6951a7f723 1831508 libimager-perl_1.036+dfsg-1.git.tar.xz
 e2283451d3825bc4f7e518177bb1ffc19dc1650f 17770 libimager-perl_1.036+dfsg-1_source.buildinfo
Checksums-Sha256:
 41531e511dc2f8364ae487b6ce53704304206fa3bc8e14c96c141fb8bee68eb5 2684 libimager-perl_1.036+dfsg-1.dsc
 ab0ba2050fb45e1c16f80c795fe928b3e36ed46e2f71b90289aa6f45e0e527c9 950096 libimager-perl_1.036+dfsg.orig.tar.xz
 ff66cd164a8d5e7e2ff82d3cd9373ecc49c08fdccff5ff31ef906dd8a5a511b0 13768 libimager-perl_1.036+dfsg-1.debian.tar.xz
 52f56982cf0a3803252b7b1e6c23a377a7c28c4b0dac12add68bda201c0845ff 1831508 libimager-perl_1.036+dfsg-1.git.tar.xz
 c0cc45a362362cd8e2fee50b67d27c977a16ae4df742f31814936f54bc393c7b 17770 libimager-perl_1.036+dfsg-1_source.buildinfo
Files:
 a1a5ea65717adc788be0a53463dd66b6 2684 perl optional libimager-perl_1.036+dfsg-1.dsc
 97d89aa33ca7e701613bfe92fbf3f9db 950096 perl optional libimager-perl_1.036+dfsg.orig.tar.xz
 5c78b114b1b88f45d27e80c19dacff22 13768 perl optional libimager-perl_1.036+dfsg-1.debian.tar.xz
 49d0306547a577540041551be4a0092d 1831508 perl None libimager-perl_1.036+dfsg-1.git.tar.xz
 5e870e5751cc1bec3a656b591323dd6e 17770 perl optional libimager-perl_1.036+dfsg-1_source.buildinfo
Git-Tag-Info: tag=454718825af4ebfde23976c07569f5e47c2fda0c fp=d1e1316e93a760a8104d85fabb3a68018649aa06
Git-Tag-Tagger: gregor herrmann <gregoa at debian.org>

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmqtIHUACgkQYG0ITkaD
wHk33xAAn0fdibA/BIPxoDSPAa91RwdIJesDXZklc304S1oBFogdllCRoaPyeEBN
emDPfu6Cn8efBoIt4CTIe6hmeTnD+oeLcp4dhmd04xJXjuovaAIKS7FX6/H/3n0Q
rOyHFfxl+3twiLw/Py5y7rfVfK2qUSIutRNlIAQgvwu0ZiHX+btx9CFk2OejNHqy
/cRGgUbRuRqLpfBcJBYYvVthoJkJgA75SveyOvZtERVbUq13TGPKlR61iVMUYq2V
RDU8dn1pO1+EHdbPqZoJTiiMTGsUEuS4AtA8XbzTcnf6ZNmuPPcj50H9r+3tALpx
aeWZB/y2pnD3eVUSdIWTU1iovOSHA6w5l3h20HN01bbCLjZ85k5XH1a+e4zEkVbb
d769OjhOZGCENj9s89iWQEA0+1W7QrbTCu6eNbU9XXjlFxySyXmUdnFNF3TW5PGa
hQvhNDSZqtX45w6gZrxXBQ1AV7y5WG/i5A/QcG3WtKtrWJMiBF2UNKsy3awR+sNO
K4kz4ObTqSFfEQ0dEYf61l/w1Kmo8sE8NRYa+47VA+q7YUYeLPmpSAi3+10sDLCs
VOplP+rF6C7klvigYxewAtVle6xBjdt+bzzobqjOFKebr+/k8vtOW19zveaLuVBU
o0OEps1kObZObgkP15ecN4wSovqczJzB7iIvlTkbkC3pU1Rn8JU=
=iK3i
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20260918/e862bf20/attachment.sig>