-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 06 Aug 2026 18:48:46 +0800
Source: libheif
Architecture: source
Version: 1.19.8-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: Aron Xu <aron@debian.org>
Changes:
 libheif (1.19.8-1+deb13u1) trixie-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Fixed issues:
     CVE-2025-68431, CVE-2026-32882, CVE-2026-32740, CVE-2026-47247,
     CVE-2026-32741, CVE-2026-47709, CVE-2026-49271, CVE-2026-62292,
     CVE-2026-47714, CVE-2026-48029, CVE-2026-62289 and GHSA-2h34-fcv6-jqvh
   * Mitigated CVE-2026-47178: rejected files affected by the issue with
     heif_error_Unsupported_feature instead of being decoded.
Checksums-Sha1:
 4577bf3c5f15f314178584007945a3b1ef839567 3289 libheif_1.19.8-1+deb13u1.dsc
 75da1da1b62d015e6afba8669b29e0f7ab967ec9 1718218 libheif_1.19.8.orig.tar.gz
 3b1557480e4c6a5728ad1130dffe64cecaa0aa92 26196 libheif_1.19.8-1+deb13u1.debian.tar.xz
 27a0fd227226d88e572dd91d0bb17be965881a76 7506 libheif_1.19.8-1+deb13u1_source.buildinfo
Checksums-Sha256:
 906a8840e79669856631707990f50d92d7adc25516206199342b17e30271eec6 3289 libheif_1.19.8-1+deb13u1.dsc
 6c4a5b08e6eae66d199977468859dea3b5e059081db8928f7c7c16e53836c906 1718218 libheif_1.19.8.orig.tar.gz
 acb2f40072ef11a679fa100c64c51f29a5fedd0359e5a426e5d5f66377bf6f43 26196 libheif_1.19.8-1+deb13u1.debian.tar.xz
 c7bf877e5996315988f0d8febb1a41540dc46f0c90c7ea1dcb3e3b647338b042 7506 libheif_1.19.8-1+deb13u1_source.buildinfo
Files:
 4587afa578e5bf74c8ac8cb3627d0749 3289 libs optional libheif_1.19.8-1+deb13u1.dsc
 91d2d2f0ffda76180eebe30ee6e9709d 1718218 libs optional libheif_1.19.8.orig.tar.gz
 f57ad3fe091fc715e572d588deddb7c0 26196 libs optional libheif_1.19.8-1+deb13u1.debian.tar.xz
 796e2c92951fecf532647e777df6ef0e 7506 libs optional libheif_1.19.8-1+deb13u1_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEExq6D0hxncEPaPayX+GQ1dHE8m64FAmp12RoACgkQ+GQ1dHE8
m66xygf9GnBm67uuL7i/2wvk3LDOWWJwCh8oR/0ltsbiQDVEl1MCcOljk3HXEWA6
BrjTv+iwWb+fb81Sz8IORdOFpYBXXJDNeNq1+5w7+8zwN3tHZb0PoG7zAiBjbN3J
OHzDM/16Vbx+FCegS0M3TAZuFy6uJU3BnNyiNe0uRMLw5Xy0MexGY2GuC47ERO9w
eckC4CoWnNQ2oBmNGTdcLvISOOdZZxY64jumlGj9t5Ws6WLCSzCCzDNczJYaIMJx
6sczmfzvhP8Kg1kEmjp/qFbprQ3ntbiyurVoyzhU6gIEq9XhN80bQ+13btwu4CMO
SwHbVA0WkTvxvIc8pJ3UgsM1I+Amfg==
=iTww
-----END PGP SIGNATURE-----