-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 04 Apr 2026 22:47:31 +0200
Source: gdk-pixbuf
Architecture: source
Version: 2.42.10+dfsg-1+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Closes: 1132501
Changes:
 gdk-pixbuf (2.42.10+dfsg-1+deb12u4) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * jpeg: Reject unsupported number of components (CVE-2026-5201)
     (Closes: #1132501)
Checksums-Sha1:
 fccf4ec3dc5278c848ffbc3d5bb01fa389244869 3384 gdk-pixbuf_2.42.10+dfsg-1+deb12u4.dsc
 fc20b1ef19a8c45114c158f40d4a8842f20a3b63 24248 gdk-pixbuf_2.42.10+dfsg-1+deb12u4.debian.tar.xz
 73d49177f634f5f70f3cf311d26a506f2e441d85 6358 gdk-pixbuf_2.42.10+dfsg-1+deb12u4_source.buildinfo
Checksums-Sha256:
 e39334b0b64cc6544da8d07df2ea88f8d7b6e9ac8a85559584b27228ffc397d6 3384 gdk-pixbuf_2.42.10+dfsg-1+deb12u4.dsc
 aa48a01389f4f22ac38a389c598f23db37b6ef82c9cfc7316f4dcc440d3aa916 24248 gdk-pixbuf_2.42.10+dfsg-1+deb12u4.debian.tar.xz
 0348087320c895d8ece65f0391b652e6a29830302bacd23bc5de5fe2c0c10276 6358 gdk-pixbuf_2.42.10+dfsg-1+deb12u4_source.buildinfo
Files:
 7e187a57e9b5bf9fac7e789948f41d53 3384 libs optional gdk-pixbuf_2.42.10+dfsg-1+deb12u4.dsc
 ff3e30fdd222c5e507f295f3038e2648 24248 libs optional gdk-pixbuf_2.42.10+dfsg-1+deb12u4.debian.tar.xz
 f2cec67e422b5070e7ad123edfa91d65 6358 libs optional gdk-pixbuf_2.42.10+dfsg-1+deb12u4_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmnSRPpfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk
ZWJpYW4ub3JnAAoJEAVMuPMTQ89EBX8P/06Hl7uJYf8VKZ46mw8VAYyvZi4r4GR5
h8g2669xXYhgcksFwl0iPCw5/EYKA+gIEi1FfTnZ0Tq4F43UK5aAkPNMvF8UpmPu
iBUdqrgjTzRePHQY2zC0AwZ6IMOh8TtpEOXLFucNnqShJqtd8TEJr2kdk3lE73L4
xTBuzjRUCwI4pmTkMa49TaPVp06mRUVpB0nLhqJ6IySIOMlnb/okzd77KtTic9Ag
PRl9OwVKx5cFd7AaSF/crSeMhgDenSdKGK++omC6lelBhCqfDjzNbt1yNYWWdBYq
Yxvr7xuxcpEEslRP/YxTn+68CAgVDwkorbWBvdD19Csjv6cNgxHAJ2IrULlFnDHk
jUo5WqebqBnqnKegUn68N0yngCtQ/kRpFbmaMR/Iot8+A8C/vI+OeemCpL1nW9F7
RP8lOqIgcA8GLUzaEUrk50VLBPiCHt+7KySWK4BNLO/glvm3AcHJkfMB9e0fsdsk
1t99aKn4NvRfTD/huwMGmRsiXpBjsFQdvu5Gf+cg7DNPOsog4uOMVDPqpBCtkEXA
YrbvuKAIhaK9CwW1sgWPGK2OloUsTcu0E/31ybsgzvKFlqLGKNwi5OCRgo1Trbwe
7YtMEippa6Vn7YpGzUwwWbeQ1UApRqltDYbSBD1gAlrYOl93laWluLnyCmThpU4W
nxjb23lOerIf
=cjRJ
-----END PGP SIGNATURE-----