public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Jitka Plesnikova <jplesnik@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/perl-Imager] f44: 1.036 bump (rhbz#2536979)
Date: Mon, 21 Sep 2026 10:47:46 GMT	[thread overview]
Message-ID: <178998766647.1.4020290585591592488.rpms-perl-Imager-dbad8e18adc4@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/perl-Imager
            Branch : f44
            Commit : dbad8e18adc42fec3351aebffa6a5263e6c99aac
            Author : Jitka Plesnikova <jplesnik@redhat.com>
            Date   : 2026-09-21T12:47:38+02:00
            Stats  : +9/-2 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/perl-Imager/c/dbad8e18adc42fec3351aebffa6a5263e6c99aac?branch=f44

            Log:
            1.036 bump (rhbz#2536979)

Fix CVE-2026-93019 (TGA large color map size interpreted as negative)
Fix CVE-2026-93018 (paletted images: out-of-range color index returned
  uninitialized palette data)

---
diff --git a/.gitignore b/.gitignore
index c231ca9..857a439 100644
--- a/.gitignore
+++ b/.gitignore
@@ -34,3 +34,4 @@
 /exifbadifdstart2.bin
 /exifbadifdstart.bin
 /Imager-1.035.tar.gz
+/Imager-1.036.tar.gz

diff --git a/perl-Imager.spec b/perl-Imager.spec
index e1990b1..161806a 100644
--- a/perl-Imager.spec
+++ b/perl-Imager.spec
@@ -1,5 +1,5 @@
 Name:           perl-Imager
-Version:        1.035
+Version:        1.036
 Release:        1%{?dist}
 Summary:        Perl extension for Generating 24 bit Images
 License:        GPL-1.0-or-later OR Artistic-1.0-Perl
@@ -123,6 +123,12 @@ make test
 %{_mandir}/man3/Imager::Test.3pm*
 
 %changelog
+* Mon Sep 21 2026 Jitka Plesnikova <jplesnik@redhat.com> - 1.036-1
+- 1.036 bump (rhbz#2536979)
+- Fix CVE-2026-93019 (TGA large color map size interpreted as negative)
+- Fix CVE-2026-93018 (paletted images: out-of-range color index returned
+  uninitialized palette data)
+
 * Wed Aug 19 2026 Jitka Plesnikova <jplesnik@redhat.com> - 1.035-1
 - 1.035 bump (rhbz#2519477)
 - Fix CVE-2026-73639 (PNG buffer overflow)

diff --git a/sources b/sources
index e55195f..2a5b393 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (Imager-1.035.tar.gz) = 027306bce7c840c3c37c6e3960839ac2ce22fae1d10e53d4a0174cd98778be4bd5584f12f7fe2dd80bbb6b9816444c8d0046f514b41b0caba77133053d230d76
+SHA512 (Imager-1.036.tar.gz) = e324ae99c0ad6ae13204829f39e97f545bb0105ff6fa8cfe81bf6a1afad0f7b1e9af783717298daefe57515a0e77a0031a3cda1eca7d602845a5bbae89014004

                 reply	other threads:[~2026-09-21 10:47 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178998766647.1.4020290585591592488.rpms-perl-Imager-dbad8e18adc4@fedoraproject.org \
    --to=jplesnik@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox