-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 17:20:35 +0800
Source: vips
Binary: gir1.2-vips-8.0 libvips-dev libvips-tools libvips-tools-dbgsym libvips42t64 libvips42t64-dbgsym
Architecture: s390x
Version: 8.16.1-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Tianyu Chen <billchenchina2001@gmail.com>
Description:
 gir1.2-vips-8.0 - GObject introspection data for VIPS
 libvips-dev - image processing system good for very large ones (dev)
 libvips-tools - image processing system good for very large ones (tools)
 libvips42t64 - image processing system good for very large ones
Changes:
 vips (8.16.1-1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Debian Security Team.
   * Fix vulnerabilities:
     - CVE-2025-59933: validate image dimensions returned by the PDF and SVG loaders.
     - CVE-2026-33327: prevent integer overflow when allocating GIF images.
     - CVE-2026-33328: guard against image dimension overflows.
     - CVE-2026-35591: validate JPEG and JPEG 2000 components in the TIFF loader.
     - CVE-2026-35590: validate EXIF IFD indices.
     - CVE-2026-69242: ensure scanlines fit in INT_MAX.
     - CVE-2026-70654: fix maximum read size handling in vipsource.
     - CVE-2026-70653: avoid unsafe processing of legacy Radiance RLE data.
     - CVE-2026-70651: check the final image height of ImageMagick animations.
Checksums-Sha1:
 a0a173cffba71b3fddc2d872c371cbb58c020db0 82020 gir1.2-vips-8.0_8.16.1-1+deb13u2_s390x.deb
 c588c5cd9fad0b1a56e5e8aee66e821d061ff360 278412 libvips-dev_8.16.1-1+deb13u2_s390x.deb
 6df1a53a6955821fd77de927e8d62f584b5f9580 43572 libvips-tools-dbgsym_8.16.1-1+deb13u2_s390x.deb
 6a09b4511c8d1befee723f12094e2ac92c912b25 86564 libvips-tools_8.16.1-1+deb13u2_s390x.deb
 fcfce497ecec1b30449a0850e63f1b70f04f740a 3064184 libvips42t64-dbgsym_8.16.1-1+deb13u2_s390x.deb
 480f79872ba2f0ffb87ad5c386cf841a7756fbf2 1324416 libvips42t64_8.16.1-1+deb13u2_s390x.deb
 dfeb5dc4f0b1973f7ab8ae9bdad6f31d8c3173bd 19140 vips_8.16.1-1+deb13u2_s390x-buildd.buildinfo
Checksums-Sha256:
 edaef01e30c967f7b8cd22a643fd73255db0c9298a2618a73510df9d3c398b31 82020 gir1.2-vips-8.0_8.16.1-1+deb13u2_s390x.deb
 4a559bff721c99a297d26a4dbfe1069306cc23af900c6b0ccda5f8889274899f 278412 libvips-dev_8.16.1-1+deb13u2_s390x.deb
 f866869f558420a824794c2bd0461b5a75a22c74a84d765e36cdacc264d1a209 43572 libvips-tools-dbgsym_8.16.1-1+deb13u2_s390x.deb
 8a47e2b7bbfd2c77bf81480a5862f06c5a52bdde61597956f0b1470cf9ca41f1 86564 libvips-tools_8.16.1-1+deb13u2_s390x.deb
 19c64b48c4e8cffcac53fcbc65b0d5097b211035263a7f221a0df23d38120405 3064184 libvips42t64-dbgsym_8.16.1-1+deb13u2_s390x.deb
 79bc2d92a0513af334e3a04676ceaa4d126fac815d82df692d5663189fa8491c 1324416 libvips42t64_8.16.1-1+deb13u2_s390x.deb
 e023aec722a0e99166fea70bff27a360770b144e02ca322f549b0ff38eef74e6 19140 vips_8.16.1-1+deb13u2_s390x-buildd.buildinfo
Files:
 dc3b1d4a102100d0c8f867250ae0d139 82020 introspection optional gir1.2-vips-8.0_8.16.1-1+deb13u2_s390x.deb
 d6f36a942431ff9fa9099e3bb3185bc2 278412 libdevel optional libvips-dev_8.16.1-1+deb13u2_s390x.deb
 9d93285b59424d75f1fe311e56e7156e 43572 debug optional libvips-tools-dbgsym_8.16.1-1+deb13u2_s390x.deb
 34073f1b069a0408c9e4ba251e1102b4 86564 graphics optional libvips-tools_8.16.1-1+deb13u2_s390x.deb
 ad107891564d0ddd5e79e73181ec5799 3064184 debug optional libvips42t64-dbgsym_8.16.1-1+deb13u2_s390x.deb
 9029d0065afabfee99cc2c145dc68380 1324416 libs optional libvips42t64_8.16.1-1+deb13u2_s390x.deb
 fdfd8d21ebb5382b42d39c7d28888283 19140 libs optional vips_8.16.1-1+deb13u2_s390x-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=W5wH
-----END PGP SIGNATURE-----