-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 19 Jul 2026 13:02:34 +0200 Source: pillow Architecture: source Version: 12.3.0-1 Distribution: unstable Urgency: medium Maintainer: Matthias Klose <doko@debian.org> Changed-By: Matthias Klose <doko@debian.org> Closes: 1142274 Changes: pillow (12.3.0-1) unstable; urgency=medium . * New upstream version. - Addresses CVE-2026-54058, CVE-2026-54059, CVE-2026-54060, CVE-2026-55379, CVE-2026-55380, CVE-2026-59197, CVE-2026-59198, CVE-2026-59199, CVE-2026-59200, CVE-2026-59203, CVE-2026-59204, CVE-2026-59205. Closes: #1142274. Checksums-Sha1: 1f46892fe16a3ce4d1e351e79f5175bcab5e2e2c 2486 pillow_12.3.0-1.dsc 70de178b826bc68af20234d0eb2d59a3e35ad58b 37255276 pillow_12.3.0.orig.tar.xz 9e99ce292f260eb04a2b07cfcb9fbbb4a810d26e 20664 pillow_12.3.0-1.debian.tar.xz 12f8e9b43e360c2a8b4f1adfaf02ce708f1d6229 7290 pillow_12.3.0-1_source.buildinfo Checksums-Sha256: ddfbf3294e55ac0d6ee31582f9d48aeb7bd99df8b136afa96d4326286c530dd2 2486 pillow_12.3.0-1.dsc c8d424981f30379f096a1e7415f0bbaec1ef06f6563392df0de5292aae500a03 37255276 pillow_12.3.0.orig.tar.xz 6ae75be2ec3efa6c65812badf4db08e3f4ff1838e45603f3a1879ae6b706e977 20664 pillow_12.3.0-1.debian.tar.xz 0c276139851813fcfb8848d12d7ad9ac5b4e8726a29abbd8a845e68e87ec88ec 7290 pillow_12.3.0-1_source.buildinfo Files: ff183996e44903fdbe52837486ff9a2b 2486 python optional pillow_12.3.0-1.dsc b17540754d790ac75c1077ea8d3da5cb 37255276 python optional pillow_12.3.0.orig.tar.xz bb627f8ef51c30c3e4eaf498c7d9bca1 20664 python optional pillow_12.3.0-1.debian.tar.xz 4e0c91c588569584704c6742a89c478d 7290 python optional pillow_12.3.0-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEE1WVxuIqLuvFAv2PWvX6qYHePpvUFAmpcsf8QHGRva29AZGVi aWFuLm9yZwAKCRC9fqpgd4+m9c6nEACF7unAsGajx2mjugPPNBMOt929e7FhuEOI U3un/2rri1Q2FoyUbbPdAtugAYZxpqB1DsFMildEPbuWzgmOTQsvLNuvJihgs5nA yLEkr5G9SpqIkErgajNo7z09NwkNNVg5R5EBclaEPQQTT3jUI0WV34JxAKLmyRlX 1a9BpltdIeTgM+UZ/yiKkJuL9i7if5OBIoamnuOH/3CK+V8o8GuRx5aRglFzNIXV q53b2TKupZRCfn3xQiHP07zofsd4n47lPv5Aodz1oHtbsvXFmYU+tQYHpLbcMtPW tHNq3c6wGbxJ0YPOntDD7E4oeZSUKxAP0eui8cq2v4x0EJeXigBa4K7UAJums6Fp V6aZpNtcZb/x+mfXNRLD9Y8RrMKtTc+G61nndJlUI4vDF4Ff3aAsdAiqAf7Q7NTi H87SgQakUpgDLZyh4Yindgct/s6KzL8Oh/NYe8Hnezzsa5zspx9SX23NSyEGRGBF rFO+7YTCNb3ZfTkPPpNzLt5sw9mlf7gsHhhB8HPqBw4cH0AJ+xcrIGg3v3Pv1BbL DBKUnkea4Xvsh9o02UBcSKJvpx9Ni/Dy1vdUqf75xIaY7GQVr5M9fsb3FSWbGylU LtwHaAYg6fzGyvFXV0J10ankQQGczCBnjIcR5ewfTtL/AGf4lRl0pMr5gOa2MkxK fWybKZhREw== =+BvH -----END PGP SIGNATURE-----