-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 17:20:35 +0800
Source: vips
Binary: gir1.2-vips-8.0 libvips-dev libvips-tools libvips-tools-dbgsym libvips42t64 libvips42t64-dbgsym
Architecture: ppc64el
Version: 8.16.1-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: ppc64el Build Daemon (ppc64el-conova-02) <buildd_ppc64el-ppc64el-conova-02@buildd.debian.org>
Changed-By: Tianyu Chen <billchenchina2001@gmail.com>
Description:
 gir1.2-vips-8.0 - GObject introspection data for VIPS
 libvips-dev - image processing system good for very large ones (dev)
 libvips-tools - image processing system good for very large ones (tools)
 libvips42t64 - image processing system good for very large ones
Changes:
 vips (8.16.1-1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Debian Security Team.
   * Fix vulnerabilities:
     - CVE-2025-59933: validate image dimensions returned by the PDF and SVG loaders.
     - CVE-2026-33327: prevent integer overflow when allocating GIF images.
     - CVE-2026-33328: guard against image dimension overflows.
     - CVE-2026-35591: validate JPEG and JPEG 2000 components in the TIFF loader.
     - CVE-2026-35590: validate EXIF IFD indices.
     - CVE-2026-69242: ensure scanlines fit in INT_MAX.
     - CVE-2026-70654: fix maximum read size handling in vipsource.
     - CVE-2026-70653: avoid unsafe processing of legacy Radiance RLE data.
     - CVE-2026-70651: check the final image height of ImageMagick animations.
Checksums-Sha1:
 4b4bef21244c409eca44499c47d583604b3dc02e 82376 gir1.2-vips-8.0_8.16.1-1+deb13u2_ppc64el.deb
 bc59bd148a749763a5a16ea42c5d40b1ceb8dcc0 278372 libvips-dev_8.16.1-1+deb13u2_ppc64el.deb
 daae71637a82bed5deed2a46f430d684b19c06bc 45608 libvips-tools-dbgsym_8.16.1-1+deb13u2_ppc64el.deb
 797145c944e8cba6618f0fdd711eec1b5a5d1ad4 87888 libvips-tools_8.16.1-1+deb13u2_ppc64el.deb
 30160af4460913ac87f37f6fe46eb4b2a1a8dcc8 3112040 libvips42t64-dbgsym_8.16.1-1+deb13u2_ppc64el.deb
 db1c2c43cded283651de659cc661ac746402f26d 1304396 libvips42t64_8.16.1-1+deb13u2_ppc64el.deb
 cda8ca680d32bbfb6ca52260b3bc440207492179 19419 vips_8.16.1-1+deb13u2_ppc64el-buildd.buildinfo
Checksums-Sha256:
 0c18f4b470273c60e90636057411edd80dc9f236e92bcea53bef2082097c4829 82376 gir1.2-vips-8.0_8.16.1-1+deb13u2_ppc64el.deb
 ee6e8a4c5680f203bbae162d7b509135e3a52c08db3f9e73c17f5dd51caccdb4 278372 libvips-dev_8.16.1-1+deb13u2_ppc64el.deb
 b1d540dc0f778e40a0866f5e89e8229208eb98a0e1a2477e69f97ee09eb51e35 45608 libvips-tools-dbgsym_8.16.1-1+deb13u2_ppc64el.deb
 15086fd4d7f559330e6ed44482af038777c78ed92cc6858c26644ab0ad8b6108 87888 libvips-tools_8.16.1-1+deb13u2_ppc64el.deb
 c0620e31a782ed636110e3ab5a4c5ab495f93e062c7492dd89fcaa9ca3f5e3a4 3112040 libvips42t64-dbgsym_8.16.1-1+deb13u2_ppc64el.deb
 416cd2d28a7b9c9729c7e4389f065a8e35a247379ae02719b4b1b6c7555b7a73 1304396 libvips42t64_8.16.1-1+deb13u2_ppc64el.deb
 57b39aac85fee8d2e270caa5feff1b3124d2f43ebdd2385796f1890cf4f11d0b 19419 vips_8.16.1-1+deb13u2_ppc64el-buildd.buildinfo
Files:
 0efea0d0646544f9a02eed88aec88868 82376 introspection optional gir1.2-vips-8.0_8.16.1-1+deb13u2_ppc64el.deb
 83aeb7e3996e2afb31d663eced8f9e55 278372 libdevel optional libvips-dev_8.16.1-1+deb13u2_ppc64el.deb
 fdcb9cfff815578be8a0047e95bc3ee6 45608 debug optional libvips-tools-dbgsym_8.16.1-1+deb13u2_ppc64el.deb
 3da540dad1a7ad5cae64f10d9aa1e079 87888 graphics optional libvips-tools_8.16.1-1+deb13u2_ppc64el.deb
 7f0f8ec183ffc0d922756115241c170e 3112040 debug optional libvips42t64-dbgsym_8.16.1-1+deb13u2_ppc64el.deb
 53a38fea89c8871dc9dd65725fdeb7c9 1304396 libs optional libvips42t64_8.16.1-1+deb13u2_ppc64el.deb
 805d56efdb7afed2cd76afba2ac00884 19419 libs optional vips_8.16.1-1+deb13u2_ppc64el-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmrLB3kACgkQ2FRWNm40
e2ZoXw//aOlanHHJdNRqK5Hfiolm5VUoOfUzaAxcRFAAaTjVTt4nNajCLFpSQ+oS
kujZ31hCEP6XJ09q3EBonwOalBIULiH35eWMyEdZ1ULvkUiOGSdZECafbyXKyS17
kqRQWqIAiMNVhyL/wUsl5jHVPKosCUvE9UNOLqp9hNwOjYNpT8aHgozeGHLb873O
Oz3kdDkTzrhkr81//tMIzbRTScF89kVVgAU1WysZw96w19o9bByzPbv055wtm6Z6
/TxP5NGTWMaaY2AnjtfVKtaMUFc++2qP1Ern7q5E/a7ZoL2aRiaDzGAqH/0FzFcj
EoM/bWt+Nhiny8Y+7RcxYafeZyXKi1S1cbn1o73FHIbqxHWXbA9c/vIAdBOK35Lp
7XWmbw4laHLcp43diQ2vPVAV6hmzExJ42o23yRDr3PMaEKRJCmB7GJso5f71UlOI
h+vu1QqQX1MMbEwuV4UicKEf+GcM8wq1WpCPiGZ+fAPvwL4glNBtbcCe9mYX4oMA
sBK0txtPe1BKs0N5Gbvmjme48C47K6DSAcAdaksG4NxCFkKpTx9botZ/oVsn0Zwx
LbuCrGJlqySZSHRWLapGACurGBk8FNU0b8XC9qhfxf6yZZ1U2MjAFqqa1btU2Pvx
GX2583JvkmpC986d0QmZJ4+2/yTdD+46Y8GGYqBTVSKFeIDyoe4=
=GRDo
-----END PGP SIGNATURE-----