[rpms/perl-Imager] f43: 1.035 bump (rhbz#2519477)

[rpms/perl-Imager] f43: 1.035 bump (rhbz#2519477)

[Jitka Plesnikova]

            A new commit has been pushed.

            Repo   : rpms/perl-Imager
            Branch : f43
            Commit : 61245db3e607c80e87a147cf93c88df5cd9d0721
            Author : Jitka Plesnikova <jplesnik@redhat.com>
            Date   : 2026-08-19T13:27:30+02:00
            Stats  : +8/-99 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/perl-Imager/c/61245db3e607c80e87a147cf93c88df5cd9d0721?branch=f43

            Log:
            1.035 bump (rhbz#2519477)

Fix CVE-2026-73639 (PNG buffer overflow)
Fix CVE-2026-73638 (EXIF decoding issues)

---
diff --git a/.gitignore b/.gitignore
index 4f3bfe4..02eaab0 100644
--- a/.gitignore
+++ b/.gitignore
@@ -34,3 +34,4 @@
 /Imager-1.034.tar.gz
 /exifbadifdstart2.bin
 /exifbadifdstart.bin
+/Imager-1.035.tar.gz

diff --git a/Imager-1.034-EXIF-add-missing-checks-for-the-start-of-an-ifd-entr.patch b/Imager-1.034-EXIF-add-missing-checks-for-the-start-of-an-ifd-entr.patch
deleted file mode 100644
index b64e27e..0000000
--- a/Imager-1.034-EXIF-add-missing-checks-for-the-start-of-an-ifd-entr.patch
+++ /dev/null
@@ -1,88 +0,0 @@
-From 48ba8ac0749f89466b6e6681fb88cbdb51086ebd Mon Sep 17 00:00:00 2001
-From: Tony Cook <tony@develop-help.com>
-Date: Sat, 8 Aug 2026 16:02:49 +1000
-Subject: [PATCH] EXIF: add missing checks for the start of an ifd entry offset
-
-These was caught by a different check on 64-bit systems, but this
-wasn't caught on 32-bit systems.
-
-Fixes #568
----
- MANIFEST               | 2 ++
- imexif.c               | 6 ++++--
- t/450-api/100-inline.t | 9 ++++++++-
- 3 files changed, 14 insertions(+), 3 deletions(-)
-
-diff --git a/MANIFEST b/MANIFEST
-index c060c156..d3c314bb 100644
---- a/MANIFEST
-+++ b/MANIFEST
-@@ -396,6 +396,8 @@ t/data/exifbadascoff.bin	EXIF block with bad ASCII field offset
- t/data/exifbadderoff.bin	EXIF with (U32)-1 DE offset
- t/data/exifbadifdoff1.bin	EXIF with (U32)-1 DE offset
- t/data/exifbadifdoff2.bin	EXIF with (U32)-1 DE offset
-+t/data/exifbadifdstart.bin
-+t/data/exifbadifdstart2.bin
- t/data/exifbadoff.bin		EXIF with bad directory entry offset
- t/data/exifgood.bin		Good EXIF data block
- t/GoodTestFont.pm		A dummy (hardly implemented) font driver.
-diff --git a/imexif.c b/imexif.c
-index 9ab8eb7c..62b9c061 100644
---- a/imexif.c
-+++ b/imexif.c
-@@ -936,7 +936,8 @@ tiff_load_ifd(imtiff *tiff, unsigned long offset) {
-   tiff_clear_ifd(tiff);
- 
-   /* rough check count + 1 entry + next offset */
--  if (offset + (2+12+4) > tiff->size) {
-+  if (offset >= tiff->size
-+      || offset + (2+12+4) > tiff->size) {
-     mm_log((2, "Exif: IFD start offset %lu beyond end of Exif block", offset));
-     return 0;
-   }
-@@ -972,7 +973,8 @@ tiff_load_ifd(imtiff *tiff, unsigned long offset) {
-       }
-       else {
- 	entry->offset = tiff_get32(tiff, base+8);
--	if (entry->offset + entry->size > tiff->size) {
-+	if (entry->offset >= tiff->size
-+            || entry->offset + entry->size > tiff->size) {
- 	  mm_log((2, "Invalid data offset processing IFD\n"));
- 	  myfree(entries);
- 	  return 0;
-diff --git a/t/450-api/100-inline.t b/t/450-api/100-inline.t
-index fd99a46d..dc05da9e 100644
---- a/t/450-api/100-inline.t
-+++ b/t/450-api/100-inline.t
-@@ -779,6 +779,12 @@ ok(test_slots(), "call slot APIs");
-     ($im, $ok) = do_one_exif("t/data/exifbadifdoff1.bin");
-     ok(!$ok, "fail to load exif with bad exif ifd offset");
- 
-+    ($im, $ok) = do_one_exif("t/data/exifbadifdstart.bin");
-+    ok(!$ok, "fail to load exif with bad exif ifd0 start offset");
-+
-+    ($im, $ok) = do_one_exif("t/data/exifbadifdstart2.bin");
-+    ok(!$ok, "fail to load exif with bad exif exififd start offset");
-+
-     ($im, $ok) = do_one_exif("t/data/exifbad0ascii.bin");
-     ok($ok, "load exif with zero length ascii")
-         or diag(Imager->_error_as_msg);
-@@ -798,13 +804,14 @@ ok(test_slots(), "call slot APIs");
- 
- sub do_one_exif {
-     my ($exif_name) = @_;
--    
-+
-     open my $exif_fh, "<", $exif_name
-         or die "Cannot open $exif_name: $!";
-     binmode $exif_fh;
-     my $exif_data = do { local $/; <$exif_fh> };
-     close $exif_fh;
-     $im = Imager->new(xsize => 1, ysize => 1);
-+    Imager::i_log_entry("Testing $exif_name", 2);
-     my $ok = decode_exif($im, $exif_data);
-     
-     return ($im, $ok);
--- 
-2.55.0
-

diff --git a/perl-Imager.spec b/perl-Imager.spec
index 9d55d56..c278ae8 100644
--- a/perl-Imager.spec
+++ b/perl-Imager.spec
@@ -1,15 +1,10 @@
 Name:           perl-Imager
-Version:        1.034
+Version:        1.035
 Release:        1%{?dist}
 Summary:        Perl extension for Generating 24 bit Images
 License:        GPL-1.0-or-later OR Artistic-1.0-Perl
 URL:            https://metacpan.org/release/Imager
 Source0:        https://cpan.metacpan.org/authors/id/T/TO/TONYC/Imager-%{version}.tar.gz
-# EXIF: add missing checks for the start of an ifd entry offset
-# https://github.com/tonycoz/imager/issues/568
-Source1:        exifbadifdstart.bin
-Source2:        exifbadifdstart2.bin
-Patch0:         Imager-1.034-EXIF-add-missing-checks-for-the-start-of-an-ifd-entr.patch
 BuildRequires:  freetype-devel
 BuildRequires:  giflib-devel
 BuildRequires:  libjpeg-devel
@@ -99,8 +94,6 @@ Summary: perl-Imager's Test module
 
 %prep
 %autosetup -p1 -n Imager-%{version}
-cp %{SOURCE1} t/data/exifbadifdstart.bin
-cp %{SOURCE2} t/data/exifbadifdstart2.bin
 find -executable -type f -exec chmod -x {} \;
 perl -MConfig -pi -e 's|^#!perl|$Config{startperl}|' samples/*
 
@@ -130,6 +123,11 @@ make test
 %{_mandir}/man3/Imager::Test.3pm*
 
 %changelog
+* Wed Aug 19 2026 Jitka Plesnikova <jplesnik@redhat.com> - 1.035-1
+- 1.035 bump (rhbz#2519477)
+- Fix CVE-2026-73639 (PNG buffer overflow)
+- Fix CVE-2026-73638 (EXIF decoding issues)
+
 * Mon Aug 10 2026 Jitka Plesnikova <jplesnik@redhat.com> - 1.034-1
 - 1.034 bump (rhbz#2512510) - Fix CVE-2026-19082
 

diff --git a/sources b/sources
index e5b9f3f..e55195f 100644
--- a/sources
+++ b/sources
@@ -1,3 +1 @@
-SHA512 (Imager-1.034.tar.gz) = aad2065255724ed98db09cd23b0127d7346db835523d9804196bdfd8ef10ca5e21cda0a2e7d4d3ef32fdae86ead3f7be091aa9e332dbd0cdffb13f6a053ffac4
-SHA512 (exifbadifdstart2.bin) = 4ea2bf5ba4bc886ccd011f3b9c60412a2b88897607b99a04ed666fa2deb2b44ba6a9b929ac5143c99eff5e00930a7e74f2d8d188c99f6b794bc608d2f75adcdb
-SHA512 (exifbadifdstart.bin) = ff68c05713af63aca4dfb4768df70abee7395ffaa3ffae3b00bdc1d1dc2f710bc6c9a0b0c747a6a61c24c8a7016e988253885c5919a979a4abd069d5a964d443
+SHA512 (Imager-1.035.tar.gz) = 027306bce7c840c3c37c6e3960839ac2ce22fae1d10e53d4a0174cd98778be4bd5584f12f7fe2dd80bbb6b9816444c8d0046f514b41b0caba77133053d230d76