-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 17:20:35 +0800
Source: vips
Binary: gir1.2-vips-8.0 libvips-dev libvips-tools libvips-tools-dbgsym libvips42t64 libvips42t64-dbgsym
Architecture: i386
Version: 8.16.1-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) <buildd_amd64-x86-grnet-03@buildd.debian.org>
Changed-By: Tianyu Chen <billchenchina2001@gmail.com>
Description:
 gir1.2-vips-8.0 - GObject introspection data for VIPS
 libvips-dev - image processing system good for very large ones (dev)
 libvips-tools - image processing system good for very large ones (tools)
 libvips42t64 - image processing system good for very large ones
Changes:
 vips (8.16.1-1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Debian Security Team.
   * Fix vulnerabilities:
     - CVE-2025-59933: validate image dimensions returned by the PDF and SVG loaders.
     - CVE-2026-33327: prevent integer overflow when allocating GIF images.
     - CVE-2026-33328: guard against image dimension overflows.
     - CVE-2026-35591: validate JPEG and JPEG 2000 components in the TIFF loader.
     - CVE-2026-35590: validate EXIF IFD indices.
     - CVE-2026-69242: ensure scanlines fit in INT_MAX.
     - CVE-2026-70654: fix maximum read size handling in vipsource.
     - CVE-2026-70653: avoid unsafe processing of legacy Radiance RLE data.
     - CVE-2026-70651: check the final image height of ImageMagick animations.
Checksums-Sha1:
 6a7c6d31ecdba8fc2246965ff3fb32ed59870c11 82408 gir1.2-vips-8.0_8.16.1-1+deb13u2_i386.deb
 fd17b14f0b0165a68d6198c90b1255c8e5cb8dea 278368 libvips-dev_8.16.1-1+deb13u2_i386.deb
 1cc66d65c0e6f244ad90081af49f817425edd08f 46468 libvips-tools-dbgsym_8.16.1-1+deb13u2_i386.deb
 720c737d582c1075acff93cf1e95537ef0a55c01 86808 libvips-tools_8.16.1-1+deb13u2_i386.deb
 150343bb662550c49b008f01eee4f95148cd9636 2761920 libvips42t64-dbgsym_8.16.1-1+deb13u2_i386.deb
 d55c5235423f002990e232a6a913fd27a93b5e97 1296860 libvips42t64_8.16.1-1+deb13u2_i386.deb
 75efe8b3058e259b0aad225b786673b12fc4cd5c 19289 vips_8.16.1-1+deb13u2_i386-buildd.buildinfo
Checksums-Sha256:
 8bf560019a01f2d7b8ddb1285bba60f05ce672ffcbf91601741dda7be4a2e4e8 82408 gir1.2-vips-8.0_8.16.1-1+deb13u2_i386.deb
 4045dec0246ce7ac18100a6c559b6888247d1a406bdf4a0c8768cc1155224807 278368 libvips-dev_8.16.1-1+deb13u2_i386.deb
 f47f06d3eb6be1c8c91dd6c80315c08447f1fbf883e53d696e131964d59d1cef 46468 libvips-tools-dbgsym_8.16.1-1+deb13u2_i386.deb
 f13d3f3900db2b236ae60641c4c93b9a591328c492afedac59e8e57a5433c762 86808 libvips-tools_8.16.1-1+deb13u2_i386.deb
 a90cbad4d316ad2ce6bb2efc8a412c0bff08e6cb0a53775756f92b864d5c0fbc 2761920 libvips42t64-dbgsym_8.16.1-1+deb13u2_i386.deb
 08a5d78f81f4cffca6e4a433f7ec1b309172d947d8a4e8904f412c7d29dc98a6 1296860 libvips42t64_8.16.1-1+deb13u2_i386.deb
 e6d016ff98d76009c40c74de667e1717e99effccec214912a9031bfae4db7c1d 19289 vips_8.16.1-1+deb13u2_i386-buildd.buildinfo
Files:
 4e3d990f6d84ddc668b25fc947950998 82408 introspection optional gir1.2-vips-8.0_8.16.1-1+deb13u2_i386.deb
 91e4a8707ac7e4cbbea37a587b2e8e5e 278368 libdevel optional libvips-dev_8.16.1-1+deb13u2_i386.deb
 2edcab9d2bf5c74f45de20021a69fde1 46468 debug optional libvips-tools-dbgsym_8.16.1-1+deb13u2_i386.deb
 e3c17ff1afb2b06e7ddf42fb085b7443 86808 graphics optional libvips-tools_8.16.1-1+deb13u2_i386.deb
 857210effcd494952afe3e1e8116f546 2761920 debug optional libvips42t64-dbgsym_8.16.1-1+deb13u2_i386.deb
 7e965a98ee30b94f6a086ccf0ce827fb 1296860 libs optional libvips42t64_8.16.1-1+deb13u2_i386.deb
 ad3a43c6ae952076db812068c0eb1a50 19289 libs optional vips_8.16.1-1+deb13u2_i386-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=EJBu
-----END PGP SIGNATURE-----