-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 06 Dec 2025 11:10:16 +0100 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym Architecture: ppc64el Version: 1.6.48-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) libpng16-16t64 - PNG library - runtime (version 1.6) Closes: 1121216 1121217 1121218 1121219 1121877 Changes: libpng1.6 (1.6.48-1+deb13u1) trixie-security; urgency=high . * Security upload targeting trixie. * Backport fixes for: - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219) - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218) - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217) - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216) - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877) * Set gbp.conf for trixie and enable salsa CI Checksums-Sha1: e51b996368c17dddadd1b4f79a54b20539013b7f 379088 libpng-dev_1.6.48-1+deb13u1_ppc64el.deb f389ada044043451eff8ebb5e64c8d2a27c09764 51956 libpng-tools-dbgsym_1.6.48-1+deb13u1_ppc64el.deb 8a7a550ee5a1712c5ec2fa15e691a4d96bf36191 132116 libpng-tools_1.6.48-1+deb13u1_ppc64el.deb 3229593e5c5a410580d4e6edcad862f38d46577a 8137 libpng1.6_1.6.48-1+deb13u1_ppc64el-buildd.buildinfo 17e12b9d83827e2793fb3893cb505a794b190c6c 105688 libpng16-16-udeb_1.6.48-1+deb13u1_ppc64el.udeb 01447ecc76cca7a3dc8ac3acef3faa2df0c926a2 265136 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_ppc64el.deb b80072bbf2c5e8febe40db6d8e88a6c302df6388 293212 libpng16-16t64_1.6.48-1+deb13u1_ppc64el.deb Checksums-Sha256: 3db3c2d909dcc6addeb341f1d27be4eab269497ac940d887af014c1a5c23399d 379088 libpng-dev_1.6.48-1+deb13u1_ppc64el.deb bd0d10dab813476f035464a7c29d3426050c9c50663a28d32d51f9c34a01b8cc 51956 libpng-tools-dbgsym_1.6.48-1+deb13u1_ppc64el.deb eb9d35eeb3ff29ade933ed59e9c5c692fc69dddfc560e3ad43e3bee26c9706ad 132116 libpng-tools_1.6.48-1+deb13u1_ppc64el.deb 78dfe372de8ebcdc20a844d798bd472778f87ebe1524a9e2aa6fba6d5d80e0b2 8137 libpng1.6_1.6.48-1+deb13u1_ppc64el-buildd.buildinfo 742fc6c1c95550891b2342421980e998acf66d192ff91344451f5978e26b9568 105688 libpng16-16-udeb_1.6.48-1+deb13u1_ppc64el.udeb 9de5d8310ff240b1a6d514bb5baaba7f477200b730d2c76a09b549a8f86f91b0 265136 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_ppc64el.deb 9f7ed5e20a390e829e3ab479797b9b491d243c97ae3330021289e04a43870c5a 293212 libpng16-16t64_1.6.48-1+deb13u1_ppc64el.deb Files: 7fe3b1ee9a2637e17fa961024c5a1195 379088 libdevel optional libpng-dev_1.6.48-1+deb13u1_ppc64el.deb 646be92ae451903d2c5662084bbd3655 51956 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u1_ppc64el.deb 99e827dcb18c94c554581179fe3cc8a5 132116 libdevel optional libpng-tools_1.6.48-1+deb13u1_ppc64el.deb 321360b0da8b88ff9c47fc49fd3c4d54 8137 libs optional libpng1.6_1.6.48-1+deb13u1_ppc64el-buildd.buildinfo 05055d07052e8587a4f4aa733339967b 105688 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u1_ppc64el.udeb cfaf28125aa7b8fce2a15ba4fb344ae2 265136 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u1_ppc64el.deb 3170c87ec39edcc082e088cc39369661 293212 libs optional libpng16-16t64_1.6.48-1+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEcgNjDiyOcnJRaE/rxc5dwsVCzVkFAmlY/lsACgkQxc5dwsVC zVlbtQ//TLhEuAgoucexySHPS8RxXtAl2aMr5vLORXWovodgkvleAUWyZCIHS19u 01QIPQeo1hXsVirA7vGgKODKJWyDCmwbfKSI+d3AzYnjV5l0sbZ5JBuxZnv/49lm RY/GDANsuNi2IhI9kxZ2AG4gzIYwi3XLB4Cbm58d4j3CgIfwvx1PJNdBwilWVNT+ I/r+FrpG1LqJeIwFQbnHJDY1yPg2ExJRaM9IgR60/7qqid7NAiApwQD4Na/2c99X 8rCuukdr3F3vbJPVd+WFOX4ENo1w3298rUAnGZ9Z3QnJi+Q2XL02ounTNCxueAr0 KksDBqFYADUeHwj5SNs3Logj7+uZDXygTWxDa1vOJCTBC7wmLr949NnwplVCBqRI QE3PhBOJ/MNo8IwbvEq6Nil6kA7zX3Rkw+XaEg5nHoc0u6Pu+kFsbeRmAfp3Fymm QU8nlE/rVpfK73yYd0DnhrEcxmPgbkJerNogGBdvRgkJ0i+caOK9ch4nWu7KbYo+ InpotnDChbNh2dGlrjhFtEJ4ByG/8fGrCu6wzc53Iq0F72RFuBKW8xj2ejji9slR ZkAkMIfDaNLZoLaPDM+PkVPR5VCdzZrswfqrrOrTgDKPSidhR2wjCJReyprX4Hmy iy3oaR0Kw1N+UMP69tFQBf6BWF31ZPZr/R+ZaxwyXHA7E8lBxxI= =XJGe -----END PGP SIGNATURE-----