-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 25 May 2025 17:51:18 +0200 Source: libavif Binary: libavif-bin libavif-bin-dbgsym libavif-dev libavif-gdk-pixbuf libavif-gdk-pixbuf-dbgsym libavif15 libavif15-dbgsym Architecture: mipsel Version: 0.11.1-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Salvatore Bonaccorso Description: libavif-bin - Library for handling .avif files (utilities) libavif-dev - Library for handling .avif files (development files) libavif-gdk-pixbuf - Library for handling .avif files (GDK pixbuf plugin) libavif15 - Library for handling .avif files Closes: 1105883 1105885 Changes: libavif (0.11.1-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Add integer overflow checks to makeRoom (CVE-2025-48174) (Closes: #1105885) * Avoid integer overflow in (32-bit) int or unsigned int arithmetic operations (CVE-2025-48175) (Closes: #1105883) Checksums-Sha1: fad47fc38edb8577781db8594805e5758e73aa42 120608 libavif-bin-dbgsym_0.11.1-1+deb12u1_mipsel.deb a85d60d62f15185a5bd4dec98664c991a8ab5df2 58608 libavif-bin_0.11.1-1+deb12u1_mipsel.deb 04360fd4020efd21f60e12b5bbdbbc49b0ce2a11 41864 libavif-dev_0.11.1-1+deb12u1_mipsel.deb a8c56b86f9f0d1d1d1d1298e59098feff2919d8a 16752 libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_mipsel.deb 2a8482735d781693b4ca541a7c025c4e0cf63516 27300 libavif-gdk-pixbuf_0.11.1-1+deb12u1_mipsel.deb 3aa2c907e64545328260a3148abf1890642e48ca 236732 libavif15-dbgsym_0.11.1-1+deb12u1_mipsel.deb d08e5463eb3d5ab0dbb2bce7c763424fe6d86c47 94744 libavif15_0.11.1-1+deb12u1_mipsel.deb c3bd3b7188fabf0d7e44ee2df981047c3bfdcd79 11588 libavif_0.11.1-1+deb12u1_mipsel-buildd.buildinfo Checksums-Sha256: 8f1d2affe553d855dc2c7b7e04e30a43c5cf266e774cebf6976bbf365be14b81 120608 libavif-bin-dbgsym_0.11.1-1+deb12u1_mipsel.deb 527a3ebc40e04b306fa594c11136baddfabd834b8e9fc22d211e2bd5fe3dd183 58608 libavif-bin_0.11.1-1+deb12u1_mipsel.deb 3e4f6ae149790525478476bd1f5c1dbd02096275ee992c4655af024c0aa3767a 41864 libavif-dev_0.11.1-1+deb12u1_mipsel.deb 3f42c78bec3bba3bad99cadc9679f46bb79fd132e01fd1e07b8e79b70ded1606 16752 libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_mipsel.deb a49f05ac1e1863d2c181b63116c7a8aec44c416e85f5ae1857b7dd10164a2300 27300 libavif-gdk-pixbuf_0.11.1-1+deb12u1_mipsel.deb af307f8b1c7bd71bb5b793d6850179e67589628e95a6509dd4b1c52fb07d8f9d 236732 libavif15-dbgsym_0.11.1-1+deb12u1_mipsel.deb 019903f46cb1e577774ecf25e92b94863aa71219716c552d54d8438c3c254f7e 94744 libavif15_0.11.1-1+deb12u1_mipsel.deb 144522c1101d0ee5f78aef7f4999779d555ea7c0e66bc0e9f95e684f0a9439d4 11588 libavif_0.11.1-1+deb12u1_mipsel-buildd.buildinfo Files: fde225af218f9d937e7115427d8bbc26 120608 debug optional libavif-bin-dbgsym_0.11.1-1+deb12u1_mipsel.deb 13fbffa5a474b7ef4b3fd56dc56dceee 58608 utils optional libavif-bin_0.11.1-1+deb12u1_mipsel.deb 0401400846bbf0030dd21de019ee3f49 41864 libdevel optional libavif-dev_0.11.1-1+deb12u1_mipsel.deb ae6c01b033e70e492070f5dd07f7fa92 16752 debug optional libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_mipsel.deb 96dd80abbbb8a859833cc338bd792019 27300 libs optional libavif-gdk-pixbuf_0.11.1-1+deb12u1_mipsel.deb a10a6f1de850b8e3e1b88cb39f0906f2 236732 debug optional libavif15-dbgsym_0.11.1-1+deb12u1_mipsel.deb eb2cccf9ba323cdbc51c9daa15fcf6dd 94744 libs optional libavif15_0.11.1-1+deb12u1_mipsel.deb 5249a4cbfd1190dde8feb7d62524d189 11588 libs optional libavif_0.11.1-1+deb12u1_mipsel-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEERbXMbY9VMQqnSaVEV4aVsMglzVcFAmgzQqgACgkQV4aVsMgl zVdvWQ/+PSr41wGHFdTZsCa/81C3hnEP8q1UvX5nvTFFcX0HE4zuzVFJzAZcCSFE +exI1F8aRfO/cGmScQRxaR3P6rfbp21hLnBPowy24cvxLtTnNAq5rpX0FNu/QK9P +L08UKjpxyRr2DUNHAGc4MYpqZhPTxhbuYHCs2R3i5VJCm9wPTPHwyY6Ccixt+2x AHUvPO4/Glmsp4gCs4SuM9OvbKYzglvlUTbZowUwsg3DNsyJsXhMN+QeeMYMbtEa sdH3LHy8+ArDO4SNhiQWqlcBkCVzgZtuGGCKyWFrpWRgsMTQaHsc5CncJ7ne1udg YxNbo+wgRDxKxLGLYB6I8uaTTnxRdBOxz3IVZMkp68jYKn+j+zJ26uaTvJ6F1M7/ LkR897zrS/C6jvywLSRXMY6KL53nDXhH4qrW77tyFfCOvcnLvOBSHlmZI1EjfEv0 fi8mHduBKx7X1MOdeDYMB7qUaXA42Ig/jFSqGZEEq5a1Eywba079XytGZCJXac4f lvLm2WH1ZgFA9OX/2RPzhcxPSzdaDMoW1t3ZxsosezmsxsFP0xVBBos8T16RDw1n PPecifBdg4pL9TWoZVyRfnvoPckU7z/NFqYNUCYvkaC9zu7jPO3yAVVpMRTLk1je 30/So+3WFQGMh1okeXh+EoMKIblYgaBmjzqZu/w4r2fMGlv4GF4= =WYl7 -----END PGP SIGNATURE-----