-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 11 Jun 2026 20:15:43 +0200
Source: jpeg-xl
Architecture: source
Version: 0.11.2-0.1~deb13u2
Distribution: trixie-security
Urgency: medium
Maintainer: Debian PhotoTools Maintainers <pkg-phototools-devel@lists.alioth.debian.org>
Changed-By: Moritz Mühlenhoff <jmm@debian.org>
Closes: 1138575
Changes:
 jpeg-xl (0.11.2-0.1~deb13u2) trixie-security; urgency=medium
 .
   * CVE-2025-70103 (Closes: #1138575)
Checksums-Sha1:
 2bf78fcbfdabbc109272b48f6339972b1f5fa968 3212 jpeg-xl_0.11.2-0.1~deb13u2.dsc
 2acaf75909eea67cc7d861a9a918733d5f630db8 1882762 jpeg-xl_0.11.2.orig.tar.gz
 46f0eac9c10525dea68fb8f650e9ef216dbc5e11 23848 jpeg-xl_0.11.2-0.1~deb13u2.debian.tar.xz
 7892ed6b9fa3e2e9f6eca071ee979e0983db9d7d 18696 jpeg-xl_0.11.2-0.1~deb13u2_amd64.buildinfo
Checksums-Sha256:
 b978be4319975d73759f0737ba6935fad4f4330802835d6d9298a455c2581363 3212 jpeg-xl_0.11.2-0.1~deb13u2.dsc
 ab38928f7f6248e2a98cc184956021acb927b16a0dee71b4d260dc040a4320ea 1882762 jpeg-xl_0.11.2.orig.tar.gz
 54192375c3ff271f395b815a8ea111a5f632f5db8966baeda9dabedbc86ea2d4 23848 jpeg-xl_0.11.2-0.1~deb13u2.debian.tar.xz
 059d6b6c1da2042bff58873b776a006c72b2b5dc60aed33cb043d94b06a74705 18696 jpeg-xl_0.11.2-0.1~deb13u2_amd64.buildinfo
Files:
 da3a6fc6eb6052c7b45cabbe791917ec 3212 graphics optional jpeg-xl_0.11.2-0.1~deb13u2.dsc
 eda39db6e7a58b73be9124381862b9d1 1882762 graphics optional jpeg-xl_0.11.2.orig.tar.gz
 5f72e49457b31a5ef83eb4dc87a52ec3 23848 graphics optional jpeg-xl_0.11.2-0.1~deb13u2.debian.tar.xz
 d724a9a49d08f5b8298298b3d58a560e 18696 graphics optional jpeg-xl_0.11.2-0.1~deb13u2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEtuYvPRKsOElcDakFEMKTtsN8TjYFAmorA24ACgkQEMKTtsN8
TjbzYA/+Npbp9/Fe3ZT9AiugvaZOQxXvRTm5JxX3YgRhU202+LXIYDyQxLTXT7sj
S2vBYezTNM88v3Iku/JzHPndAFUUANvnT8krstaND42cxkIKj5crpGAHr9Yz1u5m
DQSCtvxQ/s+CY/5400iUqeNzP7cMLJERi1IUZ19vD4ej4Gpda6RzKP9kRzj3/7pT
8pm8XmVe0Rkpox6SZjPukoWPXtugvxD23YJSkiaGdKihfv+MstAiXVS/ezhD1RzJ
z2LALgwZauW2+9KJpLB831CNdP7JVIADQV8Q2UzirFM6WW+uodUkUmIgjFNBYpTx
HOvY8jH1LpojV5RrUPL7yBYNTvp+ocHL/CZ/hJm/EYxcREhwMWVMEHw4h/uzzG2u
1s0ewuEpWmacGfmgg53Fly1npwnGVNfC3sxXVJC5tK3JEDjcmWQ40IYcA4z4AGUm
sTBNC3QxEwUDJQW59nIu5y6MCGsJXPHLz2b0rJytkMeolPfab+ilAKocWFbB+2G6
6G4lPFrSYhH1+PjM6AyBnF2daQmhN8DflQHiMnAvY1kLeCINFWyJUnrkM5rSeNrQ
Dv4bISwANpaU2go+sDCqtUkCka3ax3EZo6TmAdN++GirtOZPzuklz7HuTFainhJT
ID92SawSayo7sz5Wd7anAaOcIlS1P6yswkpH2P3IQT/N3hmJ5Bs=
=1Q/G
-----END PGP SIGNATURE-----