-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 07 Oct 2026 00:03:53 +0200
Source: librsvg
Architecture: source
Version: 2.60.0+dfsg-1+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Moritz Mühlenhoff <jmm@debian.org>
Closes: 1148902
Changes:
 librsvg (2.60.0+dfsg-1+deb13u1) trixie-security; urgency=medium
 .
   * CVE-2026-96889 (Closes: #1148902)
Checksums-Sha1:
 202c730587c076f7c93b2c579bc5abf4c05b41cb 3089 librsvg_2.60.0+dfsg-1+deb13u1.dsc
 d5bede0ff479277fc8578bc89f328de79290fbfd 6735208 librsvg_2.60.0+dfsg.orig.tar.xz
 5c20fd47882d4627d52567c3431fc149311a6aeb 10833628 librsvg_2.60.0+dfsg-1+deb13u1.debian.tar.xz
 b606b96d71b6b8a5d036adb7d113318a4fb87f24 16154 librsvg_2.60.0+dfsg-1+deb13u1_amd64.buildinfo
Checksums-Sha256:
 1653a531d1e0374318197cc008c3b9a4286d5e178d34c52a38f2b867d4f56fc2 3089 librsvg_2.60.0+dfsg-1+deb13u1.dsc
 1b9f126ad3115e4126c682f3011023a05dcf19a69e5e878fbffb420ade671b81 6735208 librsvg_2.60.0+dfsg.orig.tar.xz
 8ba361c954a3337a0257ce46960bfc874c99912381b9342a475db6c6422203bf 10833628 librsvg_2.60.0+dfsg-1+deb13u1.debian.tar.xz
 7dbffe4d1142bfea2a908578688bb57f981c0f49b160af3b716c14ab6ba3ae2e 16154 librsvg_2.60.0+dfsg-1+deb13u1_amd64.buildinfo
Files:
 7d08d16f04427f870d116182b24e13ac 3089 libs optional librsvg_2.60.0+dfsg-1+deb13u1.dsc
 81c109a434a07a979ef33b3294d5e447 6735208 libs optional librsvg_2.60.0+dfsg.orig.tar.xz
 794c5ba3e03ddc856fd0ae1c1daebc9c 10833628 libs optional librsvg_2.60.0+dfsg-1+deb13u1.debian.tar.xz
 13247c1cc7be116accfc586e4ee14a05 16154 libs optional librsvg_2.60.0+dfsg-1+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=5cKZ
-----END PGP SIGNATURE-----