Bug#1131116: libexif: CVE-2026-32775

[Emmanuel Arias]

Hi,

I've prepared a MR[0] to fix this bug. Please consider apply it.

Also I asked for permission in the team to allow a team upload.

I'm planning work in backport the patches in trixie, bookworm, and bullseye.

Let me know if there're objections with that.

[0] 
https://salsa.debian.org/debian-phototools-team/libexif/-/merge_requests/2


-- 
cheers,
         Emmanuel Arias

  ⢀⣴⠾⠻⢶⣦⠀
  ⣾⠁⢠⠒⠀⣿⡁  eamanu at debian.org
  ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: 13796755BBC72BB8ABE2AEB5 FA9DEC5DE11C63F1
  ⠈⠳⣄

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0xFA9DEC5DE11C63F1.asc
Type: application/pgp-keys
Size: 4975 bytes
Desc: OpenPGP public key
URL: <http://alioth-lists.debian.net/pipermail/pkg-phototools-devel/attachments/20260416/19a650d7/attachment-0001.asc>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-phototools-devel/attachments/20260416/19a650d7/attachment-0001.sig>