Packages / Debian 13 (Trixie) / libdevel / libvips-dev

Package: libvips-dev (8.16.1-1+deb13u1)

image processing system good for very large ones (dev)

Other Packages Related to libvips-dev:

  • dep: [libvips42t64] (= 8.16.1-1+deb13u1)

    image processing system good for very large ones

  • dep: [gir1.2-vips-8.0] (= 8.16.1-1+deb13u1)

    GObject introspection data for VIPS

  • dep: [libjpeg-dev]

    Development files for the JPEG library [dummy package]

  • dep: [libtiff-dev]

    Tag Image File Format library (TIFF), development files

  • dep: [zlib1g-dev]

    compression library - development

  • dep: [libfftw3-dev]

    Library for computing Fast Fourier Transforms - development

  • dep: fftw3-dev

    Package not available

  • dep: [liblcms2-dev]

    Little CMS 2 color management library development headers

  • dep: [libspng-dev]

    simple, modern libpng alternative - development

  • dep: [libmagickcore-dev]

    low-level image manipulation library -- dummy package

  • dep: [libmagickwand-dev]

    image manipulation library -- dummy package

  • dep: [libfreetype-dev]

    FreeType 2 font engine, development files

  • dep: [libpango1.0-dev]

    Development files for the Pango

  • dep: [libfontconfig-dev]

    generic font configuration library - development

  • dep: [libglib2.0-dev]

    Development metapackage for the GLib family of libraries

  • dep: [libice-dev]

    X11 Inter-Client Exchange library (development headers)

  • dep: [gettext]

    GNU Internationalization utilities

  • dep: [pkgconf]

    manage compile and link flags for libraries

  • dep: [libhwy-dev]

    Efficient and performance-portable SIMD wrapper (developer files)

  • dep: [libopenexr-dev]

    development files for the OpenEXR image library

  • dep: [libmatio-dev]

    MATLAB MAT File I/O Library - development files

  • dep: [libexpat1-dev]

    XML parsing C library - development kit

  • dep: [libcfitsio-dev]

    library for I/O with FITS format data files (development files)

  • dep: [libopenslide-dev]

    Development files for the OpenSlide library

  • dep: [libwebp-dev]

    Lossy compression of digital photographic images (development files)

  • dep: [libarchive-dev]

    Multi-format archive and compression library (development files)

  • dep: [libcgif-dev]

    GIF encoder written in C (development files)

  • dep: [libpoppler-glib-dev]

    PDF rendering library -- development files (GLib interface)

  • dep: [librsvg2-dev]

    SAX-based renderer library for SVG files (development)

  • dep: [libjxl-dev]

    JPEG XL Image Coding System - "JXL" (development files)

  • dep: [libimagequant-dev]

    palette quantization library (development files)

  • dep: [libheif-dev]

    HEIF and AVIF file format decoder and encoder - development files

  • rec: [libvips-doc]

    image processing system good for very large ones (doc)

  • rec: [libvips-tools]

    image processing system good for very large ones (tools)

  • sug: [nip2]

    spreadsheet-like graphical image manipulation tool

Download libvips-dev

ArchitecturePackage sizeInstalled sizeFilesPackage
amd64272 KiB2.4 MiBlist of filesDownload
arm64272 KiB2.4 MiBlist of filesDownload

Package file paths (72)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/include/vips/almostdeprecated.h
  • /usr/include/vips/arithmetic.h
  • /usr/include/vips/basic.h
  • /usr/include/vips/buf.h
  • /usr/include/vips/colour.h
  • /usr/include/vips/connection.h
  • /usr/include/vips/conversion.h
  • /usr/include/vips/convolution.h
  • /usr/include/vips/create.h
  • /usr/include/vips/dbuf.h
  • /usr/include/vips/debug.h
  • /usr/include/vips/deprecated.h
  • /usr/include/vips/dispatch.h
  • /usr/include/vips/draw.h
  • /usr/include/vips/enumtypes.h
  • /usr/include/vips/error.h
  • /usr/include/vips/foreign.h
  • /usr/include/vips/format.h
  • /usr/include/vips/freqfilt.h
  • /usr/include/vips/gate.h
  • /usr/include/vips/generate.h
  • /usr/include/vips/header.h
  • /usr/include/vips/histogram.h
  • /usr/include/vips/image.h
  • /usr/include/vips/interpolate.h
  • /usr/include/vips/intl.h
  • /usr/include/vips/mask.h
  • /usr/include/vips/memory.h
  • /usr/include/vips/morphology.h
  • /usr/include/vips/mosaicing.h
  • /usr/include/vips/object.h
  • /usr/include/vips/operation.h
  • /usr/include/vips/private.h
  • /usr/include/vips/rect.h
  • /usr/include/vips/region.h
  • /usr/include/vips/resample.h
  • /usr/include/vips/sbuf.h
  • /usr/include/vips/semaphore.h
  • /usr/include/vips/thread.h
  • /usr/include/vips/threadpool.h
  • /usr/include/vips/transform.h
  • /usr/include/vips/type.h
  • /usr/include/vips/util.h
  • /usr/include/vips/VConnection8.h
  • /usr/include/vips/vector.h
  • /usr/include/vips/VError8.h
  • /usr/include/vips/version.h
  • /usr/include/vips/video.h
  • /usr/include/vips/VImage8.h
  • /usr/include/vips/VInterpolate8.h
  • /usr/include/vips/vips7compat.h
  • /usr/include/vips/vips8
  • /usr/include/vips/vips.h
  • /usr/include/vips/VRegion8.h
  • /usr/lib/aarch64-linux-gnu/libvips-cpp.so
  • /usr/lib/aarch64-linux-gnu/libvips.so
  • /usr/lib/aarch64-linux-gnu/pkgconfig/vips-cpp.pc
  • /usr/lib/aarch64-linux-gnu/pkgconfig/vips.pc
  • /usr/lib/x86_64-linux-gnu/libvips-cpp.so
  • /usr/lib/x86_64-linux-gnu/libvips.so
  • /usr/lib/x86_64-linux-gnu/pkgconfig/vips-cpp.pc
  • /usr/lib/x86_64-linux-gnu/pkgconfig/vips.pc
  • /usr/share/doc/libvips-dev/changelog.Debian.gz
  • /usr/share/doc/libvips-dev/changelog.gz
  • /usr/share/doc/libvips-dev/copyright
  • /usr/share/doc/libvips-dev/examples/annotate-animated.c
  • /usr/share/doc/libvips-dev/examples/meson.build
  • /usr/share/doc/libvips-dev/examples/my-add.c
  • /usr/share/doc/libvips-dev/examples/new-from-buffer.c
  • /usr/share/doc/libvips-dev/examples/progress-cancel.c
  • /usr/share/doc/libvips-dev/examples/use-vips-func.c
  • /usr/share/gir-1.0/Vips-8.0.gir

Field source: Debian 13 (Trixie) main amd64

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
8.16.1-1+deb13u1trixie / mainamd64Debian 13 · main · amd64271 KiB2.4 MiBpool/main/v/vips/libvips-dev_8.16.1-1+deb13u1_amd64.deb
8.16.1-1+deb13u1trixie / mainarm64Debian 13 · main · arm64272 KiB2.4 MiBpool/main/v/vips/libvips-dev_8.16.1-1+deb13u1_arm64.deb
8.16.1-1+deb13u2trixie-security / mainamd64Debian 13 security · main · amd64272 KiB2.4 MiBpool/updates/main/v/vips/libvips-dev_8.16.1-1+deb13u2_amd64.deb

Field source: Debian 13 (Trixie) main amd64

Known vulnerabilities

Matching against OpenFactory catalog package versions is in progress.

CVESeverityVersion impact
[CVE-2026-88360]

Published:

libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader can expose pixel da

High(7.5)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Affected

    nvd · vips · debian · 13

[CVE-2026-70654]

Published:

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, applications that define unusual custom libvips sources and use them to process untrusted uncompressed PPM im

Medium(5.8)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

[CVE-2026-70653]

Published:

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, the old-style Radiance RLE decoder in libvips/foreign/radiance.c can process a repeat marker at the beginning

Medium(4.8)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

[CVE-2026-70651]

Published:

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height whi

Medium(6.9)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

[CVE-2026-69242]

Published:

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, a crafted many-band TIFF processed through VipsForeignLoadTiff can evade scanline validation in libvips/iofun

High(8.4)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

[CVE-2026-35591]

Published:

libvips is a fast image processing library with low memory needs. The `tiffload` operation in libvips versions before and including 8.18.1 could incorrectly determine the number of channels in a JPEG

High(7.3)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

[CVE-2026-35590]

Published:

libvips is a fast image processing library with low memory needs. The EXIF decoder within libvips versions before and including 8.18.1 was not verifying the range of EXIF tag groups before passing dat

Medium(6.8)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

[CVE-2026-33328]

Published:

libvips is a fast image processing library with low memory needs. On 32-bit systems in versions before and including 8.18.0, the `gifload` operation could incorrectly determine dimensions leading to a

Medium(6.8)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

[CVE-2026-33327]

Published:

libvips is a fast image processing library with low memory needs. The `vipsload` operation in versions before and including 8.18.0 could incorrectly determine image dimensions leading to an integer ov

High(7.3)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    nvd · vips · debian · 13

[CVE-2026-6491]

Published:

A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function im_minpos_vec of the file libvips/deprecated/vips7compat.c of the component nip2 Handler. Such

Medium(6.1)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Affected

    nvd · vips · debian · 13

[CVE-2025-59933]

Published:

vips: CVE-2025-59933

Medium(6.8)Affected
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Affected · Fixed: 8.16.1-1+deb13u2

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u2

    dsa · vips · debian · 13

[CVE-2021-27847]

Published:

vips: CVE-2021-27847

MediumUnknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 8.8.3-1

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 8.8.3-1

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.8.3-1

    dsa · vips · debian · 13

[CVE-2020-20739]

Published:

vips: CVE-2020-20739

MediumUnknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 8.9.0-1

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 8.9.0-1

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.9.0-1

    dsa · vips · debian · 13

[CVE-2019-6976]

Published:

vips: CVE-2019-6976

MediumUnknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 8.7.4-1

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 8.7.4-1

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.7.4-1

    dsa · vips · debian · 13

[CVE-2018-7998]

Published:

vips: CVE-2018-7998

MediumUnknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 8.4.5-2

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 8.4.5-2

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.4.5-2

    dsa · vips · debian · 13

[CVE-2010-3364]

Published:

vips: CVE-2010-3364

LowUnknown

Matching against OpenFactory catalog package versions is in progress. Observed:

Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 7.14.5-2

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 7.14.5-2

    dsa · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 7.14.5-2

    dsa · vips · debian · 13

Fixed and unaffected versions (4)
CVESeverityVersion impact
[CVE-2026-3284]

Published:

A vulnerability was found in libvips 8.19.0. Impacted is the function vips_extract_area_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_area results in integer

Medium(5.5)Fixed
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

[CVE-2026-3283]

Published:

A vulnerability has been found in libvips 8.19.0. This issue affects the function vips_extract_band_build of the file libvips/conversion/extract.c. The manipulation of the argument extract_band leads

Low(3.3)Fixed
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

[CVE-2026-3282]

Published:

A flaw has been found in libvips 8.19.0. This vulnerability affects the function vips_unpremultiply_build of the file libvips/conversion/unpremultiply.c. Executing a manipulation of the argument alpha

Low(3.3)Fixed
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

[CVE-2026-3281]

Published:

A vulnerability was detected in libvips 8.19.0. This affects the function vips_bandrank_build of the file libvips/conversion/bandrank.c. Performing a manipulation of the argument index results in heap

Medium(6.6)Fixed
Details (3)
  • 8.16.1-1+deb13u1 · amd64 · trixie

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u1 · arm64 · trixie

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

  • 8.16.1-1+deb13u2 · amd64 · trixie-security

    Fixed · Fixed: 8.16.1-1+deb13u1

    nvd · vips · debian · 13

[Next results]

Last synced:

[CVE catalog]

Checksums

Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.

8.16.1-1+deb13u1 / amd64Observed Sep 1, 2026sha256 24f6df178beb…4421d7bdSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 24f6df178beb0417f1abf697d2a7f4022174835c15aeeb9d46005fc74421d7bd

Verify download

printf '%s %s\n' '24f6df178beb0417f1abf697d2a7f4022174835c15aeeb9d46005fc74421d7bd' 'libvips-dev_8.16.1-1+deb13u1_amd64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main amd64

8.16.1-1+deb13u1 / arm64Observed Sep 1, 2026sha256 3c02ff4cdf44…a171fe2cSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): 3c02ff4cdf44f5dac7878aa3ceab9de3206e2731fc2342748f9bd126a171fe2c

Verify download

printf '%s %s\n' '3c02ff4cdf44f5dac7878aa3ceab9de3206e2731fc2342748f9bd126a171fe2c' 'libvips-dev_8.16.1-1+deb13u1_arm64.deb' | sha256sum --check --strict -

Field source: Debian 13 (Trixie) main arm64

8.16.1-1+deb13u2 / amd64Observed Oct 11, 2026 – Oct 27, 2026sha256 ba91e3c2b830…39364e7fSource-reported digest

Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported digest (sha256): ba91e3c2b830264de0a8e7497d7046f437b50f9cc13eab97971110c039364e7f

Verify download

printf '%s %s\n' 'ba91e3c2b830264de0a8e7497d7046f437b50f9cc13eab97971110c039364e7f' 'libvips-dev_8.16.1-1+deb13u2_amd64.deb' | sha256sum --check --strict -

Field source: Debian Security

Sources

  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Observed SHA-256
    3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
    Result
    match verified
  • Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908

    Repository-signature verification record
    Signed-object SHA-256
    98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
    Signer fingerprint
    4CB50190207B4758A3F73A796ED0E7B82643E131
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Repository metadata hash linkage
    Path
    main/binary-arm64/Packages.xz
    Expected SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Observed SHA-256
    753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
    Result
    match verified
  • Debian SecurityOct 27, 2026

    Authoritative source; repository metadata signature verified

    Signature evidence

    trixie-security-main-amd64:cbc4bef76e3c37ead4980674b88d8b1cd971e3ef018f45488da6b988f55946f3

    Repository-signature verification record
    Signed-object SHA-256
    e7fa27c6347540f93dc90c68b4361e02148fc15bdd516a816d6f56449c3c3baf
    Signer fingerprint
    B0CAB9266E8C3929798B3EEEBDE6D2B9216EC7A8
    Keyring revision
    debian-archive-keyring.gpg
    SHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
    Tool and policy
    gpgv (GnuPG) 2.4.9
    openfactory-software-catalog-signature-v1
    Verification time
    Oct 28, 2026
    Repository metadata hash linkage
    Path
    main/binary-amd64/Packages.xz
    Expected SHA-256
    cbc4bef76e3c37ead4980674b88d8b1cd971e3ef018f45488da6b988f55946f3
    Observed SHA-256
    cbc4bef76e3c37ead4980674b88d8b1cd971e3ef018f45488da6b988f55946f3
    Result
    match verified