-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 06 Dec 2025 11:10:16 +0100
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: armel
Version: 1.6.48-1+deb13u1
Distribution: trixie-security
Urgency: high
Maintainer: arm Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1121216 1121217 1121218 1121219 1121877
Changes:
 libpng1.6 (1.6.48-1+deb13u1) trixie-security; urgency=high
 .
   * Security upload targeting trixie.
   * Backport fixes for:
     - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219)
     - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218)
     - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217)
     - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216)
     - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877)
   * Set gbp.conf for trixie and enable salsa CI
Checksums-Sha1:
 8e74a3aa60e0fe7a8f364975edcbdf8d88806bea 350764 libpng-dev_1.6.48-1+deb13u1_armel.deb
 92cdcda69b4e271f0c928829989401f2245e09dc 48320 libpng-tools-dbgsym_1.6.48-1+deb13u1_armel.deb
 74fe27df40ccc16150db914fc30c9fb97bdb0bbc 127808 libpng-tools_1.6.48-1+deb13u1_armel.deb
 e4c70dc03407f383946042193f5500fb717c9fa3 7963 libpng1.6_1.6.48-1+deb13u1_armel-buildd.buildinfo
 6e454e5437fa47580e682a042eb1af30b719af4f 79056 libpng16-16-udeb_1.6.48-1+deb13u1_armel.udeb
 de855bfa9e8e0c4e2d21eb8388a0b758bf13a9ce 245352 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_armel.deb
 4c241d5a899f239228155b7538bea2c83c8ed830 266116 libpng16-16t64_1.6.48-1+deb13u1_armel.deb
Checksums-Sha256:
 22f02f08e5cc47628739f99ea648bfba32a76908e4b8033c24c24e2da483c6ae 350764 libpng-dev_1.6.48-1+deb13u1_armel.deb
 590bf1b5adbed90343d44a9cad027dd484d470fac0899d13c70b7292fa1914f5 48320 libpng-tools-dbgsym_1.6.48-1+deb13u1_armel.deb
 921ab791df20f611431dd51cd408f2f18322f5f9286a71aa9c1277e0e86e1851 127808 libpng-tools_1.6.48-1+deb13u1_armel.deb
 293874a4092d8dc89f321acc10e0d7e85c52fcf8dfb490c258b68d106a159d79 7963 libpng1.6_1.6.48-1+deb13u1_armel-buildd.buildinfo
 f8223bbce382583d74724539a26ba1435f565691cb8a2c78ef10db4cefdbe1f3 79056 libpng16-16-udeb_1.6.48-1+deb13u1_armel.udeb
 d6b2509d831ede02eba4bc0a6d31c92622f28de4960fb0a416b7f3d8280a217b 245352 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_armel.deb
 4f73535943c85806cbaefaf279045f70211abcd50c3608dbf8b1574e2e6c90ea 266116 libpng16-16t64_1.6.48-1+deb13u1_armel.deb
Files:
 6ca9d51d7f30c8b54de5159639945c98 350764 libdevel optional libpng-dev_1.6.48-1+deb13u1_armel.deb
 d383bdfb1991d4ac9d6f62cd5b91bc7a 48320 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u1_armel.deb
 61038bc93f6095dd8053f6fdd054740a 127808 libdevel optional libpng-tools_1.6.48-1+deb13u1_armel.deb
 bf44e95b5d26c7bbcb4ce852ab94ae67 7963 libs optional libpng1.6_1.6.48-1+deb13u1_armel-buildd.buildinfo
 69708e6afb7eacc54b317f016eb50792 79056 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u1_armel.udeb
 3fd98e7efa3e949f0f6142eb7685e737 245352 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u1_armel.deb
 001056f8a784e42639a92d179eeee9a3 266116 libs optional libpng16-16t64_1.6.48-1+deb13u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=W0I8
-----END PGP SIGNATURE-----