Format: 1.8
Date: Wed, 07 Oct 2026 21:01:07 +0200
Source: opencolorio
Binary: libopencolorio-dev libopencolorio2.6 libopencolorio2.6-dbgsym opencolorio-tools python3-pyopencolorio
Architecture: source
Version: 2.6.0+dfsg-1
Distribution: experimental
Urgency: medium
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Matteo F. Vescovi <mfv@debian.org>
Description:
 libopencolorio-dev - complete color management solution - development
 libopencolorio2.6 - complete color management solution - runtime
 opencolorio-tools - complete color management solution - utilities
 python3-pyopencolorio - complete color management solution - Python bindings
Closes: 1141498
Changes:
 opencolorio (2.6.0+dfsg-1) experimental; urgency=medium
 .
   * New upstream release (Closes: #1141498)
     This release fixes CVE-2026-42450:
     | OpenColorIO is a color management framework for visual effects and
     | animation. Prior to version 2.5.2, `FileFormatSpi3D.cpp:163` uses
     | `sscanf` with `%s` into 64-byte stack buffers when parsing LUT data
     | lines. Input comes from `lineBuffer[4096]`, so a crafted .spi3d file
     | can overflow by ~4000 bytes on non-Windows.
   * debian/: SONAME bump 2.5 -> 2.6
   * debian/control: debhelper bump 13 -> 14
   * debian/control: S-V bump 4.7.3 -> 4.7.4 (no changes needed)
Checksums-Sha1:
 aefdfc26d442b91f73646a2604a47d9b16b5e5ef 1945 opencolorio_2.6.0+dfsg-1.dsc
 ef31b8bc33e62e245788b71d07076e1d7cceafb9 10227756 opencolorio_2.6.0+dfsg.orig.tar.xz
 5fc67ae2e6820bf116a2d5615fa105f58fc147ef 18492 opencolorio_2.6.0+dfsg-1.debian.tar.xz
 fdf77b30c04107cb3a256bf37d076393c96b540a 16244 opencolorio_2.6.0+dfsg-1_amd64.buildinfo
Checksums-Sha256:
 c4bbd2f2e55ba666605458068fabbc93ef60850374dde61c55ddc43f27bc9a2f 1945 opencolorio_2.6.0+dfsg-1.dsc
 655b6d8ce11424fc64d6cd58f6d3f598aacc79d375d46b67cce77084b665850b 10227756 opencolorio_2.6.0+dfsg.orig.tar.xz
 c47aaaaf7c71f600d6f35fe207eaea7fc15eed9c2c252880ef920703e1ae7417 18492 opencolorio_2.6.0+dfsg-1.debian.tar.xz
 7582999a33d7b7d40079b754e0f3d8f72d1c53fc52b0c252b0a4fa8f13888b54 16244 opencolorio_2.6.0+dfsg-1_amd64.buildinfo
Files:
 27c1d39a44adf42f26292196ec7332ba 1945 libs optional opencolorio_2.6.0+dfsg-1.dsc
 2129f8ccf5f21638a900bf354833cdb9 10227756 libs optional opencolorio_2.6.0+dfsg.orig.tar.xz
 2ead9b0dc1a5100cd33dd656e4d01316 18492 libs optional opencolorio_2.6.0+dfsg-1.debian.tar.xz
 8898753fb28545c4f996292f22e60479 16244 libs optional opencolorio_2.6.0+dfsg-1_amd64.buildinfo