SECURITY UPDATE: denial-of-service via division-by-zero in image loading
debian/patches/CVE-2026-25799.patch: Fix sampling-factor validation by
replacing incorrect AND with OR in horizontal/vertical axis checks and
prevent acceptance of invalid sampling caused by flawed boolean logic.
CVE-2026-25799
SECURITY UPDATE: Null pointer dereference in ClonePixelCacheRepository
resulting in denial-of-service
debian/patches/CVE-2026-25798.patch: Add overflow sanity check in
OpenPixelCache and reset cache storage class and length before throwing
on allocation failure
CVE-2026-25798
SECURITY UPDATE: memory leak in ReadSTEGANOImage that can be exploited for
denial-of-service
debian/patches/CVE-2026-25796.patch: free watermark object on three
early-return paths
CVE-2026-25796
SECURITY UPDATE: a crafted profile contain invalid IPTC data may cause an
infinite loop when writing it with IPTCTEXT
debian/patches/CVE-2026-26066.patch: replace c=0 with
c=ReadBlobByte(ifile) in formatIPTC so the loop advances past an
unrecognised tag instead of spinning forever