-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 06 Dec 2025 11:10:16 +0100
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: arm64
Version: 1.6.48-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1121216 1121217 1121218 1121219 1121877
Changes:
 libpng1.6 (1.6.48-1+deb13u1) trixie-security; urgency=high
 .
   * Security upload targeting trixie.
   * Backport fixes for:
     - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219)
     - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218)
     - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217)
     - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216)
     - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877)
   * Set gbp.conf for trixie and enable salsa CI
Checksums-Sha1:
 fe40ad5056d9091a7811ef685b18c62d6ae17361 360124 libpng-dev_1.6.48-1+deb13u1_arm64.deb
 d6f2e20c9918a7c435b197dba4912102a22e61d2 49384 libpng-tools-dbgsym_1.6.48-1+deb13u1_arm64.deb
 0af9f08d701298fa1f6a650bbd6c5de9426cc6e5 129000 libpng-tools_1.6.48-1+deb13u1_arm64.deb
 6dd25e3986af9b969df497bcdbb262d39af6bcb1 8098 libpng1.6_1.6.48-1+deb13u1_arm64-buildd.buildinfo
 a5622b4fba445d5d607ee706b0f46b8220b381be 86964 libpng16-16-udeb_1.6.48-1+deb13u1_arm64.udeb
 8b2238e1b188cae66eefab20f7fa94805a7449aa 257156 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_arm64.deb
 bfe015332e60eef84395172e39cd6ec62a355b38 274844 libpng16-16t64_1.6.48-1+deb13u1_arm64.deb
Checksums-Sha256:
 068d9df516970184cc5d42afba7fda156917ed0d336334a7039b31c4c7729b1c 360124 libpng-dev_1.6.48-1+deb13u1_arm64.deb
 2227e804c993ef67b320665ff4a9760acf4db6c2f3072dda7bf9d0615d0c80a6 49384 libpng-tools-dbgsym_1.6.48-1+deb13u1_arm64.deb
 81598fef4f226e3f69176005732b57d55ca0e9e9019b12298ecb31e8073927fe 129000 libpng-tools_1.6.48-1+deb13u1_arm64.deb
 3c4424459eda764fc212063064262653b04fcaa781246dfebb1fc6d277deadf9 8098 libpng1.6_1.6.48-1+deb13u1_arm64-buildd.buildinfo
 930c522e720f89d34652ca5657de3b73b222ffd6547341563a23486ebc744048 86964 libpng16-16-udeb_1.6.48-1+deb13u1_arm64.udeb
 f40c9d18da76a3160172fbc46c6bf66a19facecf277b63e895ed9034eab370d8 257156 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_arm64.deb
 a41638ff2ab557a9428a32a7c7da4fdd3065278d26e3ddb43994dc990a30d060 274844 libpng16-16t64_1.6.48-1+deb13u1_arm64.deb
Files:
 fe8ebe41d66ee3a29bd798426ca4c9ad 360124 libdevel optional libpng-dev_1.6.48-1+deb13u1_arm64.deb
 5f741c53fc7e5232be95963a4f13738e 49384 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u1_arm64.deb
 757484d9785f94fe6d621db4819ac5fa 129000 libdevel optional libpng-tools_1.6.48-1+deb13u1_arm64.deb
 c20f79f9dc0702c9e0a7b3c2021a54b9 8098 libs optional libpng1.6_1.6.48-1+deb13u1_arm64-buildd.buildinfo
 b7d0c71768c91edfacb7ff3101d8faf8 86964 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u1_arm64.udeb
 4d9d38378f9a20639a8a65951db5e080 257156 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u1_arm64.deb
 78abc5cd93e6bc61d7b213b904eaf902 274844 libs optional libpng16-16t64_1.6.48-1+deb13u1_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=hdpG
-----END PGP SIGNATURE-----