-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 14:47:35 +0300
Source: cimg
Architecture: source
Version: 3.5.2+dfsg-1+deb13u1
Distribution: trixie
Urgency: medium
Maintainer: Debian Science Maintainers <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1135778
Changes:
 cimg (3.5.2+dfsg-1+deb13u1) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-42144: Integer overflow in PNM size check
   * CVE-2026-42146: OOM on crafted BMP
   * (Closes: #1135778)
Checksums-Sha1:
 b6c2644766564ae6245a2b5ed103c5d0fbe2b234 2624 cimg_3.5.2+dfsg-1+deb13u1.dsc
 67cae724ab5d0833bb1676d5bd901b11db6bf511 10677044 cimg_3.5.2+dfsg.orig.tar.xz
 a67dd17810bf8317665cc5302de8daed39e08619 21372 cimg_3.5.2+dfsg-1+deb13u1.debian.tar.xz
Checksums-Sha256:
 96a4a4cc6d0260c70d1cd4f1aade8ad854bde69a28075892967328f91b713da2 2624 cimg_3.5.2+dfsg-1+deb13u1.dsc
 34611e441ce8add59a45a38f81fb2dc1da59ba4edb3f33d6423206c19df97cbb 10677044 cimg_3.5.2+dfsg.orig.tar.xz
 033c3ef73774c27990d54b706a680a8ce09efe51f521fff7e6930f8068508b75 21372 cimg_3.5.2+dfsg-1+deb13u1.debian.tar.xz
Files:
 6fd7ae9c11474f019d3635a1dd35b53a 2624 math optional cimg_3.5.2+dfsg-1+deb13u1.dsc
 ac01c8e09907de481ba2ba53b6e17416 10677044 math optional cimg_3.5.2+dfsg.orig.tar.xz
 3f451fedfef596a5b5db5054699eb359 21372 math optional cimg_3.5.2+dfsg-1+deb13u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=7w48
-----END PGP SIGNATURE-----