-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 04 Apr 2026 22:42:18 +0200
Source: gdk-pixbuf
Architecture: source
Version: 2.42.12+dfsg-4+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1132501
Changes:
 gdk-pixbuf (2.42.12+dfsg-4+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * jpeg: Reject unsupported number of components (CVE-2026-5201)
     (Closes: #1132501)
Checksums-Sha1:
 c89714b2c4689b51838be5aa20244570a544cae8 3334 gdk-pixbuf_2.42.12+dfsg-4+deb13u1.dsc
 aba2ae5adf39345bf8a808db1bea62fb25fd3915 6443656 gdk-pixbuf_2.42.12+dfsg.orig.tar.xz
 213ca7e2a298b36621775fbe783809a11f5bc558 23524 gdk-pixbuf_2.42.12+dfsg-4+deb13u1.debian.tar.xz
 94aab6258956e6e3b3af0cc39ee6408f43c0752a 6358 gdk-pixbuf_2.42.12+dfsg-4+deb13u1_source.buildinfo
Checksums-Sha256:
 2c9ece90468e0273717906b4d57111639be478d300bb41656189366152c429ad 3334 gdk-pixbuf_2.42.12+dfsg-4+deb13u1.dsc
 2fab7a828f1a017a235cd800cf0b47d83733037bade493337c46ed79e7ef3678 6443656 gdk-pixbuf_2.42.12+dfsg.orig.tar.xz
 427732b792fdcab09f7ef8928fe7039df982f5004e1dba70bd58a69c8c03ece7 23524 gdk-pixbuf_2.42.12+dfsg-4+deb13u1.debian.tar.xz
 b8342923c065167d4ec80f550d020428c592570c7e66219e163beb6aece10cea 6358 gdk-pixbuf_2.42.12+dfsg-4+deb13u1_source.buildinfo
Files:
 7b14f12f8f939cb36b997087a196906b 3334 libs optional gdk-pixbuf_2.42.12+dfsg-4+deb13u1.dsc
 346ccfe90f473634cca1d3dee72ed03b 6443656 libs optional gdk-pixbuf_2.42.12+dfsg.orig.tar.xz
 4830c8811e898d6bf582cec71cbfdcec 23524 libs optional gdk-pixbuf_2.42.12+dfsg-4+deb13u1.debian.tar.xz
 d2e98034dc4208d9c66b46fc7ba83ccf 6358 libs optional gdk-pixbuf_2.42.12+dfsg-4+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=zDdy
-----END PGP SIGNATURE-----