-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 17:20:35 +0800
Source: vips
Binary: gir1.2-vips-8.0 libvips-dev libvips-tools libvips-tools-dbgsym libvips42t64 libvips42t64-dbgsym
Architecture: amd64
Version: 8.16.1-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Tianyu Chen <billchenchina2001@gmail.com>
Description:
 gir1.2-vips-8.0 - GObject introspection data for VIPS
 libvips-dev - image processing system good for very large ones (dev)
 libvips-tools - image processing system good for very large ones (tools)
 libvips42t64 - image processing system good for very large ones
Changes:
 vips (8.16.1-1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Debian Security Team.
   * Fix vulnerabilities:
     - CVE-2025-59933: validate image dimensions returned by the PDF and SVG loaders.
     - CVE-2026-33327: prevent integer overflow when allocating GIF images.
     - CVE-2026-33328: guard against image dimension overflows.
     - CVE-2026-35591: validate JPEG and JPEG 2000 components in the TIFF loader.
     - CVE-2026-35590: validate EXIF IFD indices.
     - CVE-2026-69242: ensure scanlines fit in INT_MAX.
     - CVE-2026-70654: fix maximum read size handling in vipsource.
     - CVE-2026-70653: avoid unsafe processing of legacy Radiance RLE data.
     - CVE-2026-70651: check the final image height of ImageMagick animations.
Checksums-Sha1:
 9889043dbb1320117298d91743cce76edf72a344 82388 gir1.2-vips-8.0_8.16.1-1+deb13u2_amd64.deb
 b1fdd17c716ce910c09065fa1f1775175b46780e 278384 libvips-dev_8.16.1-1+deb13u2_amd64.deb
 5e74aec311aec79ca17f710e5355b7a137b965a2 50372 libvips-tools-dbgsym_8.16.1-1+deb13u2_amd64.deb
 8dc1577929900f24a3ba1305578404dcb871c9a3 86824 libvips-tools_8.16.1-1+deb13u2_amd64.deb
 3522e7657b3d427d2396b6ecfa23e006de6f3dea 3156312 libvips42t64-dbgsym_8.16.1-1+deb13u2_amd64.deb
 b60420c75c4f3fa33ee1b6b266152a408689bebd 1265136 libvips42t64_8.16.1-1+deb13u2_amd64.deb
 5e5d373579e4d4fbf1337390c282277d579afe39 19429 vips_8.16.1-1+deb13u2_amd64-buildd.buildinfo
Checksums-Sha256:
 b1f4e22a0d3a69d9a71a92bc36a3ca5dda5c726ca02445de7c6b4769beb8e93e 82388 gir1.2-vips-8.0_8.16.1-1+deb13u2_amd64.deb
 ba91e3c2b830264de0a8e7497d7046f437b50f9cc13eab97971110c039364e7f 278384 libvips-dev_8.16.1-1+deb13u2_amd64.deb
 349280b6353271e1698879e3697b0c65df5997b86dca06d1ea682f066bf87449 50372 libvips-tools-dbgsym_8.16.1-1+deb13u2_amd64.deb
 97a4c149979d7dbd5ac2db7fca88ce686ca544d01bc794445a5547d0ddff64d7 86824 libvips-tools_8.16.1-1+deb13u2_amd64.deb
 b7aafd34122e6c4ff85c0ff6b315cbe90dd6cd6177fe3e31f0f88f9aa92d7fe1 3156312 libvips42t64-dbgsym_8.16.1-1+deb13u2_amd64.deb
 89d33e9f791624c0b8014a7c5d5094e604d25ac44f85a2643b6fe7a40c1e0d66 1265136 libvips42t64_8.16.1-1+deb13u2_amd64.deb
 54cfbff3c69918f4b9be52590ea54d4e750385731008c6e001be3b904099dfb9 19429 vips_8.16.1-1+deb13u2_amd64-buildd.buildinfo
Files:
 bf24c8361f628b44ac2eb1ad1a7f2cf1 82388 introspection optional gir1.2-vips-8.0_8.16.1-1+deb13u2_amd64.deb
 31420278ae4d0843446d4f6be300f494 278384 libdevel optional libvips-dev_8.16.1-1+deb13u2_amd64.deb
 2a0f83c2d17adef7d8a1945ad3c83194 50372 debug optional libvips-tools-dbgsym_8.16.1-1+deb13u2_amd64.deb
 a9093b04e7f562a498ac25b8c55e373b 86824 graphics optional libvips-tools_8.16.1-1+deb13u2_amd64.deb
 b05ed9030f55ea655ebedb716db2c8dc 3156312 debug optional libvips42t64-dbgsym_8.16.1-1+deb13u2_amd64.deb
 5286b84409e2ccb1ee4b07a804dc539d 1265136 libs optional libvips42t64_8.16.1-1+deb13u2_amd64.deb
 0453c451b79c5c9c84b4f4d5e8136cf6 19429 libs optional vips_8.16.1-1+deb13u2_amd64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=YFm5
-----END PGP SIGNATURE-----