-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 10 Jun 2026 10:56:42 +0300
Source: gimp
Binary: gimp gimp-dbgsym gir1.2-gimp-3.0 libgimp-3.0-0 libgimp-3.0-0-dbgsym libgimp-3.0-bin libgimp-3.0-bin-dbgsym libgimp-3.0-dev
Architecture: amd64
Version: 3.0.4-3+deb13u9
Distribution: trixie
Urgency: medium
Maintainer: amd64 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 gimp       - GNU Image Manipulation Program
 gir1.2-gimp-3.0 - Introspection data for the GIMP library
 libgimp-3.0-0 - Libraries for the GNU Image Manipulation Program
 libgimp-3.0-bin - Development binaries for the GIMP library
 libgimp-3.0-dev - Headers and other files for compiling plugins for GIMP
Changes:
 gimp (3.0.4-3+deb13u9) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-4154: XPM parsing integer overflow
   * CVE-2026-40915: FITS parsing integer overflow
Checksums-Sha1:
 6ea3f3a415b558835b9e099979748cd06de391a1 17834084 gimp-dbgsym_3.0.4-3+deb13u9_amd64.deb
 bd5df66b19203e6ff812cc32ffa52b78dbc7469d 23663 gimp_3.0.4-3+deb13u9_amd64-buildd.buildinfo
 b39c8f197a62090062e4d478b908e7f5f8e3f36d 6555852 gimp_3.0.4-3+deb13u9_amd64.deb
 e44a24939f4f15ec1ee17f7d8a2b42a3dcaff788 93536 gir1.2-gimp-3.0_3.0.4-3+deb13u9_amd64.deb
 5224c69202f59138b84c939e21099db2757aa9b7 2055180 libgimp-3.0-0-dbgsym_3.0.4-3+deb13u9_amd64.deb
 9b49a9187d389b47fe26e2a9da64a6be2937b611 1043188 libgimp-3.0-0_3.0.4-3+deb13u9_amd64.deb
 390f9e8685f2fac4ae4349545dd8cca27bdcf2a8 18212 libgimp-3.0-bin-dbgsym_3.0.4-3+deb13u9_amd64.deb
 b1bb6218235ab61f4067dd4ddcaaab205f62c170 31868 libgimp-3.0-bin_3.0.4-3+deb13u9_amd64.deb
 b82014015d0f856aff69a273a452cc05387acfe7 360260 libgimp-3.0-dev_3.0.4-3+deb13u9_amd64.deb
Checksums-Sha256:
 836cc7b42136db23c7f15f36cd675b63fce895bd786181ebd36dbfa8390eb5a6 17834084 gimp-dbgsym_3.0.4-3+deb13u9_amd64.deb
 41c7869f2908269cb1b609b799846d7c79f2e6c635b0fcf5a8c455bf30397ed7 23663 gimp_3.0.4-3+deb13u9_amd64-buildd.buildinfo
 2cced2e281fa4dceab41e14df163cfd5f4803ee110d65a4f97a9cebb7d7adb0e 6555852 gimp_3.0.4-3+deb13u9_amd64.deb
 59cf55321aa0e5f93846c033239b0c7175c52272fc10d388659d697c5f57c172 93536 gir1.2-gimp-3.0_3.0.4-3+deb13u9_amd64.deb
 bbbbde9ffc8d08d7b4c7774b6e83686dc0d97e137b6014e76dcc36f58d7a92f6 2055180 libgimp-3.0-0-dbgsym_3.0.4-3+deb13u9_amd64.deb
 ab7e3cfad8ea84625a7d23ce6d2f063725cea4e45cadfb328f7725b389ebebf8 1043188 libgimp-3.0-0_3.0.4-3+deb13u9_amd64.deb
 9f027fd7c40637693080758f5f45a88f5403c0fd8b7cabfafdca527e5ccf2460 18212 libgimp-3.0-bin-dbgsym_3.0.4-3+deb13u9_amd64.deb
 5b2d5292bd2e5ae4c139fb2ebef3f452046ae8fd3db7c92ef079920779fb6c50 31868 libgimp-3.0-bin_3.0.4-3+deb13u9_amd64.deb
 612ee099e61b5f85a9c4dfa9716afe71fc873b84fe2c60162d17d8d6c25d1fda 360260 libgimp-3.0-dev_3.0.4-3+deb13u9_amd64.deb
Files:
 1ca82ee0e2140252431fceaaca544725 17834084 debug optional gimp-dbgsym_3.0.4-3+deb13u9_amd64.deb
 51ffdb1c391168b704ee47ad16d94256 23663 graphics optional gimp_3.0.4-3+deb13u9_amd64-buildd.buildinfo
 57ab32e8037e21e2aaa32afa99ba71f4 6555852 graphics optional gimp_3.0.4-3+deb13u9_amd64.deb
 a9f5c6510ed869eab9b60eb7836a8944 93536 introspection optional gir1.2-gimp-3.0_3.0.4-3+deb13u9_amd64.deb
 dba1944e3e2ce78e253dcaf05f8e3632 2055180 debug optional libgimp-3.0-0-dbgsym_3.0.4-3+deb13u9_amd64.deb
 fcf12ccedf9db9f1832e87abd7f7f0c5 1043188 libs optional libgimp-3.0-0_3.0.4-3+deb13u9_amd64.deb
 7898ddff58a5322d7c618767897fca7f 18212 debug optional libgimp-3.0-bin-dbgsym_3.0.4-3+deb13u9_amd64.deb
 1fe02e8e6fb023a0f74a9d6942b2771a 31868 libdevel optional libgimp-3.0-bin_3.0.4-3+deb13u9_amd64.deb
 d275c140bcd4ff4a5fe79a64f707d4ab 360260 libdevel optional libgimp-3.0-dev_3.0.4-3+deb13u9_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=2wMZ
-----END PGP SIGNATURE-----