-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 30 Apr 2025 20:53:34 +0200 Source: vips Binary: gir1.2-vips-8.0 libvips-dev libvips-tools libvips-tools-dbgsym libvips42 libvips42-dbgsym Architecture: amd64 Version: 8.14.1-3+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Guilhem Moulin Description: gir1.2-vips-8.0 - GObject introspection data for VIPS libvips-dev - image processing system good for very large ones (dev) libvips-tools - image processing system good for very large ones (tools) libvips42 - image processing system good for very large ones Changes: vips (8.14.1-3+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload. * Fix CVE-2025-29769: Potential heap-based buffer overflow when attempting to convert multiband TIFF input to HEIF output. * Add d/salsa-ci.yml for Salsa CI. Checksums-Sha1: 16228eea17b6580b5e06a46d9ba8cd022fb656f6 78236 gir1.2-vips-8.0_8.14.1-3+deb12u2_amd64.deb 8a6c44469c1e2f2b84b0d10127eb150bb044a448 269264 libvips-dev_8.14.1-3+deb12u2_amd64.deb 564d0a6f35948ae70c828269f15b998a83660a99 48812 libvips-tools-dbgsym_8.14.1-3+deb12u2_amd64.deb 376483f4fb2fe6cd9c3daad025492e67cf975fa9 82736 libvips-tools_8.14.1-3+deb12u2_amd64.deb 4a2ca5da3511038a5125a686256aa9ba7896b679 2902456 libvips42-dbgsym_8.14.1-3+deb12u2_amd64.deb 1a2c2cba2832c49d577a7faa622324cabfb1d1d7 1269116 libvips42_8.14.1-3+deb12u2_amd64.deb d41b724efe757ef296a08dd3955370be924c6c02 17255 vips_8.14.1-3+deb12u2_amd64-buildd.buildinfo Checksums-Sha256: c8f5215577016a4cb2c307612b92887f3bc2df7204da410077acf039025a5052 78236 gir1.2-vips-8.0_8.14.1-3+deb12u2_amd64.deb 2cda99fadf18991cf44a3f4f2027f023de0f5f805155a1a6c3895939c6c4843d 269264 libvips-dev_8.14.1-3+deb12u2_amd64.deb f1b161eabfa11fe9ef083ec630860d07fd76672070e7f870acc46d42193e408f 48812 libvips-tools-dbgsym_8.14.1-3+deb12u2_amd64.deb 70532b3e5d482f35ab03ca2944bcd8670ad6dda1bd266f1deb1dfa1c85530103 82736 libvips-tools_8.14.1-3+deb12u2_amd64.deb f2f2541de18bc9e25d889b112d5878d2aa1c92e74cd4bf7754b2e047494058d8 2902456 libvips42-dbgsym_8.14.1-3+deb12u2_amd64.deb 5bdc30dbde7783aa28d9f229ee9eb77477285ce9e9ed2cbc6b95851242af2225 1269116 libvips42_8.14.1-3+deb12u2_amd64.deb d1cb887f4153ac40f7f35f124e97e13d0251094e7882ec82e7d84b38c049648f 17255 vips_8.14.1-3+deb12u2_amd64-buildd.buildinfo Files: 1a1011296304ca528a6072bdea90bab1 78236 introspection optional gir1.2-vips-8.0_8.14.1-3+deb12u2_amd64.deb eda58a20ef426f2368ec109e3e501908 269264 libdevel optional libvips-dev_8.14.1-3+deb12u2_amd64.deb 4b9f6be4635ec0fb5b306b33bdd3689a 48812 debug optional libvips-tools-dbgsym_8.14.1-3+deb12u2_amd64.deb b047c6989307425a11f754806df64c3f 82736 graphics optional libvips-tools_8.14.1-3+deb12u2_amd64.deb 0a04c52a86b2292131a1ef4cc5313cea 2902456 debug optional libvips42-dbgsym_8.14.1-3+deb12u2_amd64.deb c1ba2c7aaef9e48776c2c9c1a66a9cfc 1269116 libs optional libvips42_8.14.1-3+deb12u2_amd64.deb e033210526ccd24ddfc47bae61215027 17255 libs optional vips_8.14.1-3+deb12u2_amd64-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXNeYFUF3FbHcrtSeIy3Pg040HrAFAmgUoTYACgkQIy3Pg040 HrD1oA//WxYdBRpW5dom79Ldm8fsJJYXCt/AvQfTjRrk7iQO5ZyLWZaG8ppAA4Wf 4cZCa9ThAlA5w8ox4X/JBw+kZK9p83gBJ41p0bDznV5bkGFro6GH8vCW7fwOcSVj UyoRu0yX+2B2frlrjWy1KgMyW4TDI1LJmTqrB0hsT8W2+uQSV+VqvF0ag0k8OlZf p6UNsiftjYf2OnXKp/9c1by6kWJId3VvsFHlkgIJb4PDAIoTBuq5J6FJ4yt3c82m bdkto4YYyLQVMBEgL9NY9fiieD7pzqmG9ongngj/UfXeKZrq9yNExiv0pE+/e8A2 y1jflyEnz5EvbFomajmEC2aTe7k3FSmanTFYulrAoVALLhRfeFnkIME7L95ACGiE f2ALgBlKXHCkPQQbgAATq4aB81OWMvK83wZVHEIYwixxyItlfFI4oekZA8iRoQz7 Ay6sAOSpptSYSfaQXWkEFkTxYMO3OEJrfV3AYScybMPV789TecPEHdPsKG1fimxf uBq471kKB9FXUhtUJTgXh1V8QTB4fOI9eJ3J/UfSdgJWNv53tKS24DPg29Y2Qj1s phAwvqknfjieno1d525wH7VNROjLysHclHvU/PcwucttEIItZaLdqnOCyt1qO0tZ xpGxNDVaxv6PwGnZMtYd3AZjwY3QNCChVd+u0w+NpdjZEuiR5yE= =eWcb -----END PGP SIGNATURE-----