-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 20 Oct 2026 17:39:24 +0200
Source: pillow
Architecture: source
Version: 13.0.0-1
Distribution: unstable
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Matthias Klose <doko@debian.org>
Changes:
pillow (13.0.0-1) unstable; urgency=medium
.
* New upstream version.
- Addresses CVE-2026-112901, CVE-2026-112900, CVE-2026-112898,
CVE-2026-112897, CVE-2026-112896, CVE-2026-112895, CVE-2026-112894,
CVE-2026-112893, CVE-2026-112892, CVE-2026-112891, CVE-2026-112406,
CVE-2026-112405, CVE-2026-112404, CVE-2026-112403, CVE-2026-112402,
CVE-2026-112401, CVE-2026-112400, CVE-2026-112399, CVE-2026-112398,
CVE-2026-112397, CVE-2026-112396, CVE-2026-112395, CVE-2026-112394,
CVE-2026-112393, CVE-2026-112392, CVE-2026-112391, CVE-2026-112390.
* Also build-depend on libavif-dev on Ubuntu.
Checksums-Sha1:
d6b89623c988a42202d5d12d63165edaab55ce4c 2437 pillow_13.0.0-1.dsc
785b59d4c4f8ed9515a943483fc34aa6cdbff8b7 37296856 pillow_13.0.0.orig.tar.xz
80b36361041aa9d79ae364077554873631cbafa5 20784 pillow_13.0.0-1.debian.tar.xz
89848e134cee6456fd74f1858404157f83703429 11384 pillow_13.0.0-1_source.buildinfo
Checksums-Sha256:
c5ef85858bab450539c15f7e62806f8bff197671d891ba7e028028cdc5450129 2437 pillow_13.0.0-1.dsc
c12f66c399d08fd988dcc39cd4b0de2f035a8a93eab9f89608444a4f31a40036 37296856 pillow_13.0.0.orig.tar.xz
4d913e0da707ec9819ed12ef74c8ccfc49ca467749b6b51481bd753689b34d11 20784 pillow_13.0.0-1.debian.tar.xz
9f615017c56e373cbabb6aaf3752686c0922c711d234820d0684c28f9f2dc24f 11384 pillow_13.0.0-1_source.buildinfo
Files:
974242b5f93d0ab6ae2bb67d30915fab 2437 python optional pillow_13.0.0-1.dsc
67390539e215d5b4b4b3883d07b35ae5 37296856 python optional pillow_13.0.0.orig.tar.xz
41afafab1c7cc9f08a63068027877021 20784 python optional pillow_13.0.0-1.debian.tar.xz
c5548d0a876f725fa70aab4e19724de9 11384 python optional pillow_13.0.0-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=QO1H
-----END PGP SIGNATURE-----
