-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 25 May 2025 17:51:18 +0200 Source: libavif Binary: libavif-bin libavif-bin-dbgsym libavif-dev libavif-gdk-pixbuf libavif-gdk-pixbuf-dbgsym libavif15 libavif15-dbgsym Architecture: s390x Version: 0.11.1-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Salvatore Bonaccorso Description: libavif-bin - Library for handling .avif files (utilities) libavif-dev - Library for handling .avif files (development files) libavif-gdk-pixbuf - Library for handling .avif files (GDK pixbuf plugin) libavif15 - Library for handling .avif files Closes: 1105883 1105885 Changes: libavif (0.11.1-1+deb12u1) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Add integer overflow checks to makeRoom (CVE-2025-48174) (Closes: #1105885) * Avoid integer overflow in (32-bit) int or unsigned int arithmetic operations (CVE-2025-48175) (Closes: #1105883) Checksums-Sha1: 0e25c564296fd1bd6249dd99f83b66b399e57e79 116248 libavif-bin-dbgsym_0.11.1-1+deb12u1_s390x.deb feb3d8f0ea9ad269363064aebf735e714e17ac32 56620 libavif-bin_0.11.1-1+deb12u1_s390x.deb effec04d8513b6d77fbb2a1936cbd540d691a7e1 41872 libavif-dev_0.11.1-1+deb12u1_s390x.deb 9d394705c2e8bdc5342222ff8cbc753900b1cef3 16188 libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_s390x.deb 309ce38f548093b4d3d68f7cba050c5171648236 27272 libavif-gdk-pixbuf_0.11.1-1+deb12u1_s390x.deb b9cf798b55a2b9b5fcc9f4944a552f9d1f067a29 223020 libavif15-dbgsym_0.11.1-1+deb12u1_s390x.deb 61d4935a05c2d0ea35ccc7180b1e094a7c53b220 89376 libavif15_0.11.1-1+deb12u1_s390x.deb 5b2cbd21f195cc11aee5ab2f44eebf92f5c0cc47 11608 libavif_0.11.1-1+deb12u1_s390x-buildd.buildinfo Checksums-Sha256: 6cb285d7ae611b44829afd22e899299dc8c5196d33aa8fccd3b8ba2e03fd48b7 116248 libavif-bin-dbgsym_0.11.1-1+deb12u1_s390x.deb 41c172a352b45120c7b436577704d8ca6409e39e2fdbe5d8b896832c85529824 56620 libavif-bin_0.11.1-1+deb12u1_s390x.deb b5751fc54ef53efcc0d7d7a0d072ac27bd958806c227780765846cbd8ba3173a 41872 libavif-dev_0.11.1-1+deb12u1_s390x.deb 5651a4eb2e0805baba04a9cdedcf975bc9f7ab4211d5f93ea9a5968135a1b7d7 16188 libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_s390x.deb 440dd71ba1198f029d394db7f1a000c016a04645e7ba6ae21b3677c89bea511a 27272 libavif-gdk-pixbuf_0.11.1-1+deb12u1_s390x.deb 0abd2c39023a9717f262b0ac3bcca231515fbd1c45bbb88d353dce22208bc5be 223020 libavif15-dbgsym_0.11.1-1+deb12u1_s390x.deb 4f5791fd0499206aebf79ccd0fe17b882c8b7a3bfd25a09bef3051e61764dd93 89376 libavif15_0.11.1-1+deb12u1_s390x.deb ae42e55fecd86bf1b80b75c2a4b0aeba4faf4b1b81cf95ec975164d3ea6db980 11608 libavif_0.11.1-1+deb12u1_s390x-buildd.buildinfo Files: 9c6a2f0f6cd360d9244750e47594895f 116248 debug optional libavif-bin-dbgsym_0.11.1-1+deb12u1_s390x.deb 19a72f5a7d78349b67a89551db3899cf 56620 utils optional libavif-bin_0.11.1-1+deb12u1_s390x.deb 51c12019f3de65f963fd9d15cfa97284 41872 libdevel optional libavif-dev_0.11.1-1+deb12u1_s390x.deb 86e55de8e9fa7d92968108acaef25140 16188 debug optional libavif-gdk-pixbuf-dbgsym_0.11.1-1+deb12u1_s390x.deb c2566e35f8ba25f24c4e5f7f09ae9069 27272 libs optional libavif-gdk-pixbuf_0.11.1-1+deb12u1_s390x.deb 6c71a5818956bb8b06ef312f8c841b9c 223020 debug optional libavif15-dbgsym_0.11.1-1+deb12u1_s390x.deb e42f8ce9c9bc4db688c15ec05ddcd738 89376 libs optional libavif15_0.11.1-1+deb12u1_s390x.deb 1bb069b521d988104ab5483f3295aa48 11608 libs optional libavif_0.11.1-1+deb12u1_s390x-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEu0D/YpnnSxv8epH9AKOyQzsWVasFAmgzQocACgkQAKOyQzsW VasnwBAAi5hkh5VZ/ErcyNU4RXbwlBUYPJRln01fIOMUbhMv0LwM81fBO6m8vWbc JxXg+i/wlVRmg/D+A+5ev29FRKujemc31o0snB2WQmeNF2Ir1V4kvyctlkD2vG3E XkKc4MHdCKOn0E/vnUWkNAQWOy56dMn2dqfgBi6T1vdXvlAstFSpa4QKMJ4bqsp+ YroBs+n80C2T+tWvK0SgA8Wf0RzzlRED+wdoWQrTdE9J0dxRlVbNhURWl7bdQIbE zbuPjBd0QwJ7/WnmkHr4VDlJ1plp5rh+kjwWdLfn3TUnQntsBL2tI/Q8BCUaRCgV ICSZF6E5ctFtIJcv5L0zmVud/meCdw8ja55iJZCdtpHWBzEOJPxV594jMk1vkGaW pJkSax8tpDoNBaVIDwNhxqxj8bjElq2mfWoE8s9Zar/B+2ekcm7In/F0r9Z+qO8c NUGWOgJNsF/p9JcSMJ6x7z9i/SrsSP/dsAD/V7OsSIW+ZeGmJzZquSLDr4cdVPwf F+Gp/HfmeaVGiF0jPpdtrN9dZT7Cqa3nAwTNhux+G3aGmmUVHhnDZ+pMqaJ02/bP AQXDTMuzMoW269jDODSdYplqbuiAJnX6XOMZM7MSYd58QRlhtGM2r0aFTAaWs4Fn GAyEDj6zQI5HJJrFnxVzY4N5zn7SpUlLJAH3ynpHXBbzd1TXEB8= =k0f2 -----END PGP SIGNATURE-----