SECURITY UPDATE: division-by-zero during image loading resulting in reliable
denial-of-service
debian/patches/CVE-2026-25799.patch: Fix sampling-factor validation by
replacing && with || so invalid horizontal or vertical factors trigger an
error; cause: incorrect boolean expression required both factors to be
invalid
CVE-2026-25799
SECURITY UPDATE: Null pointer dereference in ClonePixelCacheRepository
resulting in denial-of-service
debian/patches/CVE-2026-25798.patch: Add overflow sanity check in
OpenPixelCache and reset cache storage class and length before throwing
on allocation failure
CVE-2026-25798
SECURITY UPDATE: memory leak in ReadSTEGANOImage that can be exploited for
denial-of-service
debian/patches/CVE-2026-25796.patch: free watermark object on three
early-return paths
CVE-2026-25796
SECURITY UPDATE: a crafted profile contain invalid IPTC data may cause an
infinite loop when writing it with IPTCTEXT
debian/patches/CVE-2026-26066.patch: replace c=0 with
c=ReadBlobByte(ifile) in formatIPTC so the loop advances past an
unrecognised tag instead of spinning forever