-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 17:20:35 +0800
Source: vips
Binary: gir1.2-vips-8.0 libvips-dev libvips-tools libvips-tools-dbgsym libvips42t64 libvips42t64-dbgsym
Architecture: armel
Version: 8.16.1-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Tianyu Chen <billchenchina2001@gmail.com>
Description:
 gir1.2-vips-8.0 - GObject introspection data for VIPS
 libvips-dev - image processing system good for very large ones (dev)
 libvips-tools - image processing system good for very large ones (tools)
 libvips42t64 - image processing system good for very large ones
Changes:
 vips (8.16.1-1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Debian Security Team.
   * Fix vulnerabilities:
     - CVE-2025-59933: validate image dimensions returned by the PDF and SVG loaders.
     - CVE-2026-33327: prevent integer overflow when allocating GIF images.
     - CVE-2026-33328: guard against image dimension overflows.
     - CVE-2026-35591: validate JPEG and JPEG 2000 components in the TIFF loader.
     - CVE-2026-35590: validate EXIF IFD indices.
     - CVE-2026-69242: ensure scanlines fit in INT_MAX.
     - CVE-2026-70654: fix maximum read size handling in vipsource.
     - CVE-2026-70653: avoid unsafe processing of legacy Radiance RLE data.
     - CVE-2026-70651: check the final image height of ImageMagick animations.
Checksums-Sha1:
 a567dd8b2c026026013975711c3d1c2b2f2de347 82316 gir1.2-vips-8.0_8.16.1-1+deb13u2_armel.deb
 385b0717112486371b7df338564441bf0d6e34a4 278340 libvips-dev_8.16.1-1+deb13u2_armel.deb
 23da83734ae23cd4ab495b2b212a927abdc4d373 43264 libvips-tools-dbgsym_8.16.1-1+deb13u2_armel.deb
 a77d6dfd13c0b7dc6e04ca15ed8735bcf8c4f3ea 85060 libvips-tools_8.16.1-1+deb13u2_armel.deb
 becded420af9973bf2f11de51f4e68e8ac9458e7 3007352 libvips42t64-dbgsym_8.16.1-1+deb13u2_armel.deb
 6d2b76952d39a345f815f38144f92d2fcca78f3a 1145808 libvips42t64_8.16.1-1+deb13u2_armel.deb
 b50709aab509c0bde15e9c6c3bf70ea5eb83cab8 19186 vips_8.16.1-1+deb13u2_armel-buildd.buildinfo
Checksums-Sha256:
 ceec9f2728877cdfcbea84df2d08ee598362ae817ff28cc409bd0e92c5f4c687 82316 gir1.2-vips-8.0_8.16.1-1+deb13u2_armel.deb
 47c49c4ebbd5fe90f9524d7ec397ffcc2c836f80d3c3dffef3a77a58df4f6a1f 278340 libvips-dev_8.16.1-1+deb13u2_armel.deb
 f7eadb060b7b5f5ca924c4a922c50ce7aecbf50621b948f159ef334ef47287ad 43264 libvips-tools-dbgsym_8.16.1-1+deb13u2_armel.deb
 e8c2b004c48819764e173b3cb9e06922f51d0bc5522d0320747ff09ca97bcd74 85060 libvips-tools_8.16.1-1+deb13u2_armel.deb
 15a5bbc000298912d4471016559f8eabd5ef54786e1d206fb3133a9fd48f3bbc 3007352 libvips42t64-dbgsym_8.16.1-1+deb13u2_armel.deb
 6ab53d843118cd1cb322ad3865a11f193b697ad769393b7bbb267697c24751cd 1145808 libvips42t64_8.16.1-1+deb13u2_armel.deb
 4fa18220473be9d6cd32750aafc0e8e4057751c2a51a6fed408312b51b9dc2a4 19186 vips_8.16.1-1+deb13u2_armel-buildd.buildinfo
Files:
 49db80b6b31e71d77b94837a217a2130 82316 introspection optional gir1.2-vips-8.0_8.16.1-1+deb13u2_armel.deb
 1b74af7c9f4c21634a275fd166807737 278340 libdevel optional libvips-dev_8.16.1-1+deb13u2_armel.deb
 584666d7dd0f2c851963c00a054cb7b6 43264 debug optional libvips-tools-dbgsym_8.16.1-1+deb13u2_armel.deb
 11058099e4486b6f363205868e90eb7f 85060 graphics optional libvips-tools_8.16.1-1+deb13u2_armel.deb
 cc91e0b4bc0e0d7124f5934a472682a4 3007352 debug optional libvips42t64-dbgsym_8.16.1-1+deb13u2_armel.deb
 182fb8958b28e2687f89cdb5bd9dcf4a 1145808 libs optional libvips42t64_8.16.1-1+deb13u2_armel.deb
 5bc8e5607d2c7e14a42d4be7497754a2 19186 libs optional vips_8.16.1-1+deb13u2_armel-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=lWYo
-----END PGP SIGNATURE-----