-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 06 Dec 2025 11:10:16 +0100
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: amd64
Version: 1.6.48-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1121216 1121217 1121218 1121219 1121877
Changes:
 libpng1.6 (1.6.48-1+deb13u1) trixie-security; urgency=high
 .
   * Security upload targeting trixie.
   * Backport fixes for:
     - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219)
     - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218)
     - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217)
     - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216)
     - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877)
   * Set gbp.conf for trixie and enable salsa CI
Checksums-Sha1:
 2af7ae71fee01c9f0f16febc1ba19a8255e4503a 366828 libpng-dev_1.6.48-1+deb13u1_amd64.deb
 cd8f7d037cce0ccacd720999f607e3deb5955b92 51536 libpng-tools-dbgsym_1.6.48-1+deb13u1_amd64.deb
 ab12553e5ba668b3c687048595851cb59f45f010 130040 libpng-tools_1.6.48-1+deb13u1_amd64.deb
 7afd0a2ddb79d946f1a914c70ef920e3acd8b0b7 8111 libpng1.6_1.6.48-1+deb13u1_amd64-buildd.buildinfo
 7987b3b1a54f74aecef3e26fb2e61d8606f75164 95016 libpng16-16-udeb_1.6.48-1+deb13u1_amd64.udeb
 887c560f8e94b12532afb41f80c5fb2b4afbd5c5 260692 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_amd64.deb
 1977af4fe38580cd7244588273049491f65352be 282524 libpng16-16t64_1.6.48-1+deb13u1_amd64.deb
Checksums-Sha256:
 4ceb3359a7be694504cb4df21aa0f55d23894aee73898755ea18029d75ed07c9 366828 libpng-dev_1.6.48-1+deb13u1_amd64.deb
 45fe77319cf4e23f408df2327d8237ad03733a6c636ab5ac0a00f038a846f0d6 51536 libpng-tools-dbgsym_1.6.48-1+deb13u1_amd64.deb
 e36edaecd39ee16926fc61bdbce508f9dec621a3f01b46c92944696f195e6bc3 130040 libpng-tools_1.6.48-1+deb13u1_amd64.deb
 119e70aa80af7f92f30d9d7e5f960378c91ab1e083bae855fbc8b092f8be2d92 8111 libpng1.6_1.6.48-1+deb13u1_amd64-buildd.buildinfo
 1a73e5d073cb1b40a4a1219dcfe6892e6e8a25f0c2a1205c3b3d3ceaa057322c 95016 libpng16-16-udeb_1.6.48-1+deb13u1_amd64.udeb
 251524b6a772d72873da405b8620fbf67de75d4ad786e5af5e0e90cf5703a475 260692 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_amd64.deb
 6100f03bf94d34a7da866d2d6741dd4a68d4c9d5f4b49494bf07fe4c5f785184 282524 libpng16-16t64_1.6.48-1+deb13u1_amd64.deb
Files:
 3cbf944e3f03ce4f91f869bc8ea099c3 366828 libdevel optional libpng-dev_1.6.48-1+deb13u1_amd64.deb
 782d206601c6f2626b0eac916f0ea7f5 51536 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u1_amd64.deb
 70dd6b73e72f394a56d0de5af54ecab9 130040 libdevel optional libpng-tools_1.6.48-1+deb13u1_amd64.deb
 35347b80bdb300c935e803b14430aaff 8111 libs optional libpng1.6_1.6.48-1+deb13u1_amd64-buildd.buildinfo
 3a4cafe5124a596d173c849cd893c653 95016 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u1_amd64.udeb
 6f52268f50e89e711e8588be134ebf98 260692 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u1_amd64.deb
 17c99d19cdb7c665cf111c5cc7122c88 282524 libs optional libpng16-16t64_1.6.48-1+deb13u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=nBOp
-----END PGP SIGNATURE-----