-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 10 Jun 2026 10:56:42 +0300
Source: gimp
Binary: gimp gimp-dbgsym gir1.2-gimp-3.0 libgimp-3.0-0 libgimp-3.0-0-dbgsym libgimp-3.0-bin libgimp-3.0-bin-dbgsym libgimp-3.0-dev
Architecture: riscv64
Version: 3.0.4-3+deb13u9
Distribution: trixie
Urgency: medium
Maintainer: riscv64 Build Daemon (rv-osuosl-05) <buildd_riscv64-rv-osuosl-05@buildd.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Description:
 gimp       - GNU Image Manipulation Program
 gir1.2-gimp-3.0 - Introspection data for the GIMP library
 libgimp-3.0-0 - Libraries for the GNU Image Manipulation Program
 libgimp-3.0-bin - Development binaries for the GIMP library
 libgimp-3.0-dev - Headers and other files for compiling plugins for GIMP
Changes:
 gimp (3.0.4-3+deb13u9) trixie; urgency=medium
 .
   * Non-maintainer upload.
   * CVE-2026-4154: XPM parsing integer overflow
   * CVE-2026-40915: FITS parsing integer overflow
Checksums-Sha1:
 63867f7004a5c4ef5a87e1fa59f4d1091058ab78 16927156 gimp-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 2cac5895b350f00c12d26723c6703527763b85bd 23585 gimp_3.0.4-3+deb13u9_riscv64-buildd.buildinfo
 ac2f2634604b3d46a283cf62a68667c91add1c80 6512036 gimp_3.0.4-3+deb13u9_riscv64.deb
 2693e9f4a5e473f443bad058e174ee538f1aa182 93584 gir1.2-gimp-3.0_3.0.4-3+deb13u9_riscv64.deb
 83e0d8d19964628d7809464d7cd0f39be66d2075 1939628 libgimp-3.0-0-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 5c1a6c34889a74b58bb885fbdcfe5db6794bab2d 1037424 libgimp-3.0-0_3.0.4-3+deb13u9_riscv64.deb
 8b16fbfb03288f61ed3ed3c96671f94bf78ddcb5 17444 libgimp-3.0-bin-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 ca6e91d8f25fd358a4c249d74ba4894f9350b926 31756 libgimp-3.0-bin_3.0.4-3+deb13u9_riscv64.deb
 3fc0c0422cc300bde23cc11d19e485f97961ab81 360204 libgimp-3.0-dev_3.0.4-3+deb13u9_riscv64.deb
Checksums-Sha256:
 510e8f0cdf201d56541c920c9ce36677cbe4a01efd88edd79454a2990d6c9e01 16927156 gimp-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 39f600b00a07ad86b668a08e1d54878c89d8a1d45981634cac8aa6ff92da9bef 23585 gimp_3.0.4-3+deb13u9_riscv64-buildd.buildinfo
 e75dc9c88176318465b2d567125d54ba39a74b8a62d34c1c14a2225ca477a537 6512036 gimp_3.0.4-3+deb13u9_riscv64.deb
 4cbd4e695b1c05acf19ee60d5ec5d761a2001e8dc8510ad7484cd096ef003cc9 93584 gir1.2-gimp-3.0_3.0.4-3+deb13u9_riscv64.deb
 baf65853474a128964e56546a08a4bf1861dcbc2094813a3578272997b896b57 1939628 libgimp-3.0-0-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 e58eab8a37b463bfebfa9e768ce31b4201b30984f390f8f446aa68c7607b7a5b 1037424 libgimp-3.0-0_3.0.4-3+deb13u9_riscv64.deb
 4b4671737f15400d4765432966e51adfc486b637d6dcfa7efc8f92a37dfbd3fc 17444 libgimp-3.0-bin-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 96929f77fc68cf0da02801f085af34118492416aa076956642e8b83b26c74b4f 31756 libgimp-3.0-bin_3.0.4-3+deb13u9_riscv64.deb
 18e64ec2bc9e0feadaab0b489b72f2cd5b7f88971ab2bf7b77ec498cd6f2405d 360204 libgimp-3.0-dev_3.0.4-3+deb13u9_riscv64.deb
Files:
 397ed4b68f217e6cddd8db1adf1ebb7a 16927156 debug optional gimp-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 e92fdd8366db8657e9fe95b4526934e1 23585 graphics optional gimp_3.0.4-3+deb13u9_riscv64-buildd.buildinfo
 bd3b3b4874ed7bf9a1aa5c4217280eb4 6512036 graphics optional gimp_3.0.4-3+deb13u9_riscv64.deb
 9b4a364d0ab066ff60b9d1592e3ab7d3 93584 introspection optional gir1.2-gimp-3.0_3.0.4-3+deb13u9_riscv64.deb
 95d2d152fe74ec4ecb4342b87409d64e 1939628 debug optional libgimp-3.0-0-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 45a2bf8caa74f5b8f046f3f2dd2c0e02 1037424 libs optional libgimp-3.0-0_3.0.4-3+deb13u9_riscv64.deb
 36339b82d671553594a73a17984ad8e2 17444 debug optional libgimp-3.0-bin-dbgsym_3.0.4-3+deb13u9_riscv64.deb
 9c180c6ba07a5c75ace4cc1a83ae2a00 31756 libdevel optional libgimp-3.0-bin_3.0.4-3+deb13u9_riscv64.deb
 d2d795196094b417a865f8318a15bbda 360204 libdevel optional libgimp-3.0-dev_3.0.4-3+deb13u9_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=5kN+
-----END PGP SIGNATURE-----