-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 17:20:35 +0800
Source: vips
Binary: gir1.2-vips-8.0 libvips-dev libvips-tools libvips-tools-dbgsym libvips42t64 libvips42t64-dbgsym
Architecture: arm64
Version: 8.16.1-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Tianyu Chen <billchenchina2001@gmail.com>
Description:
 gir1.2-vips-8.0 - GObject introspection data for VIPS
 libvips-dev - image processing system good for very large ones (dev)
 libvips-tools - image processing system good for very large ones (tools)
 libvips42t64 - image processing system good for very large ones
Changes:
 vips (8.16.1-1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Debian Security Team.
   * Fix vulnerabilities:
     - CVE-2025-59933: validate image dimensions returned by the PDF and SVG loaders.
     - CVE-2026-33327: prevent integer overflow when allocating GIF images.
     - CVE-2026-33328: guard against image dimension overflows.
     - CVE-2026-35591: validate JPEG and JPEG 2000 components in the TIFF loader.
     - CVE-2026-35590: validate EXIF IFD indices.
     - CVE-2026-69242: ensure scanlines fit in INT_MAX.
     - CVE-2026-70654: fix maximum read size handling in vipsource.
     - CVE-2026-70653: avoid unsafe processing of legacy Radiance RLE data.
     - CVE-2026-70651: check the final image height of ImageMagick animations.
Checksums-Sha1:
 0266d8ed487d9eff940eba506069ac2f143dd70f 82412 gir1.2-vips-8.0_8.16.1-1+deb13u2_arm64.deb
 231e3e33b229f008d6d57e26fc617923c52043cb 278392 libvips-dev_8.16.1-1+deb13u2_arm64.deb
 d8b389fbcd525a579728994c47972e880bee35fa 50864 libvips-tools-dbgsym_8.16.1-1+deb13u2_arm64.deb
 3f0b2e8adb102bc56d13aefbe56bfe0217f7974f 86564 libvips-tools_8.16.1-1+deb13u2_arm64.deb
 33cc390d3b394873d9275de876a003c66d54fb59 3115036 libvips42t64-dbgsym_8.16.1-1+deb13u2_arm64.deb
 0a380bcd6a4046194ea4f35e2ca7e43599a4de7e 1170964 libvips42t64_8.16.1-1+deb13u2_arm64.deb
 79f3d26f2cc12493f21e2d57076b31499a0c6fd1 19386 vips_8.16.1-1+deb13u2_arm64-buildd.buildinfo
Checksums-Sha256:
 659d1da97161f6fbac199688d562e090b24579c9281aa1738ba153bd29a4be07 82412 gir1.2-vips-8.0_8.16.1-1+deb13u2_arm64.deb
 7e63e9e2b2d45ba16516ae10f6b9607f1084e640d3e7d36bfc7d1886a42731d7 278392 libvips-dev_8.16.1-1+deb13u2_arm64.deb
 1a185077c63f4d734adbf4dfc26a750e191dcc7ef2c64a55f09399f809b54e97 50864 libvips-tools-dbgsym_8.16.1-1+deb13u2_arm64.deb
 6114c4745ed611cd41f97f43db2e78b79138319121d63f302e7eab3c4e47a5ca 86564 libvips-tools_8.16.1-1+deb13u2_arm64.deb
 5c37ba3e1554f2310425a9c5ae0bb81456ce124d69afe2a94dde31d67a0395b3 3115036 libvips42t64-dbgsym_8.16.1-1+deb13u2_arm64.deb
 5b45d9ff76a27aaf2decfa0c9112f3aba6901c98d267e72027f8bfb0061f2729 1170964 libvips42t64_8.16.1-1+deb13u2_arm64.deb
 47168f1e8d1b88439f9bd2bddccc6a291a6e08ac62446c5decfd91d84bb6354a 19386 vips_8.16.1-1+deb13u2_arm64-buildd.buildinfo
Files:
 39d192cbc48157ded6ac2acd86b97452 82412 introspection optional gir1.2-vips-8.0_8.16.1-1+deb13u2_arm64.deb
 9616f3c25be1e1f4359c7d9344a41fce 278392 libdevel optional libvips-dev_8.16.1-1+deb13u2_arm64.deb
 ef9963356e57d07fc623e433d479addb 50864 debug optional libvips-tools-dbgsym_8.16.1-1+deb13u2_arm64.deb
 31e74ecba1f257c8fef7a43fa90964b5 86564 graphics optional libvips-tools_8.16.1-1+deb13u2_arm64.deb
 f76927f95823c7f9fb2b5616d301d007 3115036 debug optional libvips42t64-dbgsym_8.16.1-1+deb13u2_arm64.deb
 5cd21edf2d9808c7bc3158d7275bfef8 1170964 libs optional libvips42t64_8.16.1-1+deb13u2_arm64.deb
 7a26a437e22135dc0e4a83c136ec0632 19386 libs optional vips_8.16.1-1+deb13u2_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=/IG7
-----END PGP SIGNATURE-----