-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 18 Feb 2026 20:20:45 +0100
Source: pillow
Architecture: source
Version: 11.1.0-5+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Moritz Mühlenhoff <jmm@debian.org>
Closes: 1127925
Changes:
 pillow (11.1.0-5+deb13u1) trixie-security; urgency=medium
 .
   * CVE-2026-25990 (Closes: #1127925)
Checksums-Sha1:
 3da124b3be1b3e5a23d9018fb2677832e069a7c6 2375 pillow_11.1.0-5+deb13u1.dsc
 b25ef3157348ceccfda16c563dbd39e52c175db4 36871396 pillow_11.1.0.orig.tar.xz
 d2d203249472dcc9b3d146745ea7dcb1a553cb3b 17560 pillow_11.1.0-5+deb13u1.debian.tar.xz
 76a4faa0d37000b83b47301be212c5c0cb41f835 13763 pillow_11.1.0-5+deb13u1_amd64.buildinfo
Checksums-Sha256:
 e5e21800fc21bce04cec3600e90f1b7629a269e79d41ef77db8489013773ad8c 2375 pillow_11.1.0-5+deb13u1.dsc
 0fc52818220b9c2208e635d495f6819826607a352c42d0b9524f51f2b8a1a82a 36871396 pillow_11.1.0.orig.tar.xz
 c40afc81a02cc18ac48332ccf55e184f1ad5c5dd44d5fe7e5ec2f183df55cad0 17560 pillow_11.1.0-5+deb13u1.debian.tar.xz
 357d9126a50209132615eb5352c158be73040bc4d8a197afc4581bb0262ef40a 13763 pillow_11.1.0-5+deb13u1_amd64.buildinfo
Files:
 c195970470b27a970f0c14ca98bb859d 2375 python optional pillow_11.1.0-5+deb13u1.dsc
 503adfed07fe5a5647376ecbab208265 36871396 python optional pillow_11.1.0.orig.tar.xz
 6f04d6542a0e7ec51aa5c118f0ce5e16 17560 python optional pillow_11.1.0-5+deb13u1.debian.tar.xz
 5565e55f5a7eeb1eae4f233c07edf636 13763 python optional pillow_11.1.0-5+deb13u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=s/iB
-----END PGP SIGNATURE-----