-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 30 Sep 2026 17:20:35 +0800
Source: vips
Binary: libvips-doc
Architecture: all
Version: 8.16.1-1+deb13u2
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Tianyu Chen <billchenchina2001@gmail.com>
Description:
 libvips-doc - image processing system good for very large ones (doc)
Changes:
 vips (8.16.1-1+deb13u2) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Debian Security Team.
   * Fix vulnerabilities:
     - CVE-2025-59933: validate image dimensions returned by the PDF and SVG loaders.
     - CVE-2026-33327: prevent integer overflow when allocating GIF images.
     - CVE-2026-33328: guard against image dimension overflows.
     - CVE-2026-35591: validate JPEG and JPEG 2000 components in the TIFF loader.
     - CVE-2026-35590: validate EXIF IFD indices.
     - CVE-2026-69242: ensure scanlines fit in INT_MAX.
     - CVE-2026-70654: fix maximum read size handling in vipsource.
     - CVE-2026-70653: avoid unsafe processing of legacy Radiance RLE data.
     - CVE-2026-70651: check the final image height of ImageMagick animations.
Checksums-Sha1:
 cf3f470664a30b3dcab03f0cb065fc7f2d67b9ef 728660 libvips-doc_8.16.1-1+deb13u2_all.deb
 27c87e6ca7f5763d9cafc5badcb08226d59e01a5 18505 vips_8.16.1-1+deb13u2_all-buildd.buildinfo
Checksums-Sha256:
 5f9f5e40754b1c5eaa683a789719e720b13fb93360b5033e24e9f6a6048df569 728660 libvips-doc_8.16.1-1+deb13u2_all.deb
 ba1b1db6f96afe1f694bfccc84e64e772eeb56f707a955589b53871fef1cc795 18505 vips_8.16.1-1+deb13u2_all-buildd.buildinfo
Files:
 e51f838c5f1a3c439f7da761995f2f4f 728660 doc optional libvips-doc_8.16.1-1+deb13u2_all.deb
 411ed27abfb1e657c99403cfcdcba9f7 18505 libs optional vips_8.16.1-1+deb13u2_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=EKVV
-----END PGP SIGNATURE-----