-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 25 May 2025 17:51:18 +0200
Source: libavif
Binary: libavif-bin libavif-bin-dbgsym libavif-dev libavif-gdk-pixbuf libavif-gdk-pixbuf-dbgsym libavif15 libavif15-dbgsym
Architecture: arm64
Version: 0.11.1-1+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libavif-bin - Library for handling .avif files (utilities)
 libavif-dev - Library for handling .avif files (development files)
 libavif-gdk-pixbuf - Library for handling .avif files (GDK pixbuf plugin)
 libavif15  - Library for handling .avif files
Closes: 1105883 1105885
Changes:
 libavif (0.11.1-1+deb12u1) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Add integer overflow checks to makeRoom (CVE-2025-48174)
     (Closes: #1105885)
   * Avoid integer overflow in (32-bit) int or unsigned int arithmetic
     operations (CVE-2025-48175) (Closes: #1105883)
Checksums-Sha1:
 69b89c07c71ea08349fc58eb397579d809d2e12f 128232 libavif-bin-dbgsym_0.11.1-1+deb12u1_arm64.deb
 79815cda289742438fdd31076da644796f6a1c26 57232 libavif-bin_0.11.1-1+deb12u1_arm64.deb
 fff0c5048b538a4703de4b042652459cc7c19c2c 41872 libavif-dev_0.11.1-1+deb12u1_arm64.deb
 d5cc16c64b8426eacc47ac83ebcabc9736f70c5b 16376 libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_arm64.deb
 924a0775a6b4a78c7cf4ec8ad7313de13cedcaa1 27460 libavif-gdk-pixbuf_0.11.1-1+deb12u1_arm64.deb
 668c2b9fc8acdb6cb89861f630a81e7dc913d0b9 224116 libavif15-dbgsym_0.11.1-1+deb12u1_arm64.deb
 5a09308aca09f1220a1d63270468dfd81fcb4191 88352 libavif15_0.11.1-1+deb12u1_arm64.deb
 0cbb99fe96869d6b90e75b567a9a6b0e2e8d3f6c 11791 libavif_0.11.1-1+deb12u1_arm64-buildd.buildinfo
Checksums-Sha256:
 16d808da5763a7bb99f0a9a706da95f694776e7ccc2245c4d1bc102e62e521e6 128232 libavif-bin-dbgsym_0.11.1-1+deb12u1_arm64.deb
 e406f778667057d8e3f5c6b25db87a960b5e91262d8febc3dda353a30725a0cc 57232 libavif-bin_0.11.1-1+deb12u1_arm64.deb
 cf442832f3b1e8a182b98c633514b8f025bf8e06464d9b4197938c237ba83fb2 41872 libavif-dev_0.11.1-1+deb12u1_arm64.deb
 957862a7b97e3a706f9f4cf6ab5489a73978083e047870c0c904b6c121286f6e 16376 libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_arm64.deb
 ce279726ef96880be7f123a7fe7136ac88747264c68e646112f04b2f2c889f65 27460 libavif-gdk-pixbuf_0.11.1-1+deb12u1_arm64.deb
 c31d5af89067a55460e7a18f79b84d3f0caec31ce7b595a39a0134d87fa1ed30 224116 libavif15-dbgsym_0.11.1-1+deb12u1_arm64.deb
 0a59a53cad483fa6d032253fd7301c75f0d1017f673f832183be3234f313883e 88352 libavif15_0.11.1-1+deb12u1_arm64.deb
 3d0a5bdba9ca065e37117c58ab422692fae217d6feee05ec9ead8cc4dbcdbacc 11791 libavif_0.11.1-1+deb12u1_arm64-buildd.buildinfo
Files:
 923252d13567b2955228424a92d596ca 128232 debug optional libavif-bin-dbgsym_0.11.1-1+deb12u1_arm64.deb
 c2c719ab6ff19a8718daf0f74da471bb 57232 utils optional libavif-bin_0.11.1-1+deb12u1_arm64.deb
 e0ddae0c859f7e7419e631a7a181c63c 41872 libdevel optional libavif-dev_0.11.1-1+deb12u1_arm64.deb
 fbaf94eeca14032f62fc9a41cad5bff8 16376 debug optional libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_arm64.deb
 1462a0ff4f051429d24b9fc20ce8a4cd 27460 libs optional libavif-gdk-pixbuf_0.11.1-1+deb12u1_arm64.deb
 64e9dad6a127ab3a12534bdcd4877000 224116 debug optional libavif15-dbgsym_0.11.1-1+deb12u1_arm64.deb
 4dc0949b6f40e5e878cd5e2ba69e4b13 88352 libs optional libavif15_0.11.1-1+deb12u1_arm64.deb
 1ba112548f085a86bdf2bca1d0f55e2a 11791 libs optional libavif_0.11.1-1+deb12u1_arm64-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=+emT
-----END PGP SIGNATURE-----