-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 17:20:35 +0800
Source: vips
Binary: gir1.2-vips-8.0 libvips-dev libvips-tools libvips-tools-dbgsym libvips42t64 libvips42t64-dbgsym
Architecture: riscv64
Version: 8.16.1-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-04) <buildd_riscv64-rv-manda-04@buildd.debian.org>
Changed-By: Tianyu Chen <billchenchina2001@gmail.com>
Description:
 gir1.2-vips-8.0 - GObject introspection data for VIPS
 libvips-dev - image processing system good for very large ones (dev)
 libvips-tools - image processing system good for very large ones (tools)
 libvips42t64 - image processing system good for very large ones
Changes:
 vips (8.16.1-1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Debian Security Team.
   * Fix vulnerabilities:
     - CVE-2025-59933: validate image dimensions returned by the PDF and SVG loaders.
     - CVE-2026-33327: prevent integer overflow when allocating GIF images.
     - CVE-2026-33328: guard against image dimension overflows.
     - CVE-2026-35591: validate JPEG and JPEG 2000 components in the TIFF loader.
     - CVE-2026-35590: validate EXIF IFD indices.
     - CVE-2026-69242: ensure scanlines fit in INT_MAX.
     - CVE-2026-70654: fix maximum read size handling in vipsource.
     - CVE-2026-70653: avoid unsafe processing of legacy Radiance RLE data.
     - CVE-2026-70651: check the final image height of ImageMagick animations.
Checksums-Sha1:
 ceb1947ea112f6f77bff696f297cb5db2823b804 82384 gir1.2-vips-8.0_8.16.1-1+deb13u2_riscv64.deb
 848ff6183743a9e76695648a0df143e4b36b74eb 278396 libvips-dev_8.16.1-1+deb13u2_riscv64.deb
 e9ed45f2adad6709664a125951e150141a43fcae 50048 libvips-tools-dbgsym_8.16.1-1+deb13u2_riscv64.deb
 833b7758feddae2be690558282d4f988dc6c577f 86036 libvips-tools_8.16.1-1+deb13u2_riscv64.deb
 b8f5451b381ed223f55ee2ee6163710f89dd3a61 2714356 libvips42t64-dbgsym_8.16.1-1+deb13u2_riscv64.deb
 9116df04641a9535b182ae1a3056fa4c5cda434d 1251368 libvips42t64_8.16.1-1+deb13u2_riscv64.deb
 9b5236e383bd0fb86f85cce6661bf89b45dfb21b 19364 vips_8.16.1-1+deb13u2_riscv64-buildd.buildinfo
Checksums-Sha256:
 0defc0c36eb3738d4cc2f35a5df5561a6665eaaf77297d97617b7ba0bc57d394 82384 gir1.2-vips-8.0_8.16.1-1+deb13u2_riscv64.deb
 1972092108ec0ec51ec2255fb7464c3d30a746718ff86cbebc5860501744a03d 278396 libvips-dev_8.16.1-1+deb13u2_riscv64.deb
 fceb8be4dd3d286bc2f0fbc4f3d7c70dd5ef69a25227b59c3500a1b9e790fc8f 50048 libvips-tools-dbgsym_8.16.1-1+deb13u2_riscv64.deb
 3837d6cd666bbcb382b562a5f08cf7b051067e55d024cfbe28ca6ee463bb5052 86036 libvips-tools_8.16.1-1+deb13u2_riscv64.deb
 da839dd0068416ee4889d466215b0e34e6630a603480e9f107ade7f6088f7040 2714356 libvips42t64-dbgsym_8.16.1-1+deb13u2_riscv64.deb
 6054fc36f8fbb11d4b2abc78fce1ffa1eeb495c06724b87297129f6351e9def8 1251368 libvips42t64_8.16.1-1+deb13u2_riscv64.deb
 f6cba4af4c8bb54d4247766b5c74ba3484dfe758708903bb04b23a2796e96a59 19364 vips_8.16.1-1+deb13u2_riscv64-buildd.buildinfo
Files:
 f6e873763c040d983cac5451f4729a6d 82384 introspection optional gir1.2-vips-8.0_8.16.1-1+deb13u2_riscv64.deb
 0eb67491ca4b0bc76742c86fd9458a6f 278396 libdevel optional libvips-dev_8.16.1-1+deb13u2_riscv64.deb
 77608a6ed77f34fe3a973dd178621c9d 50048 debug optional libvips-tools-dbgsym_8.16.1-1+deb13u2_riscv64.deb
 ead911432e8394c1181309d6c24988d9 86036 graphics optional libvips-tools_8.16.1-1+deb13u2_riscv64.deb
 cc4c75b88fd44f5f67264c04824f0a2f 2714356 debug optional libvips42t64-dbgsym_8.16.1-1+deb13u2_riscv64.deb
 6cfa1af4aea93a54cacc71dacd6f3f33 1251368 libs optional libvips42t64_8.16.1-1+deb13u2_riscv64.deb
 43dbfac7bc2dab6502f387cfeddfabc0 19364 libs optional vips_8.16.1-1+deb13u2_riscv64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=w1X4
-----END PGP SIGNATURE-----