-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 06 Dec 2025 11:15:39 +0100
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb
Architecture: armel
Version: 1.6.39-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: arm Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16 - PNG library - runtime (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
Closes: 1121216 1121217 1121218 1121219 1121877
Changes:
 libpng1.6 (1.6.39-2+deb12u1) bookworm-security; urgency=high
 .
   * Security upload targeting boowkorm.
   * Backport fixes for:
     - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219)
     - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218)
     - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217)
     - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216)
     - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877)
   * Set gbp.conf for bookworm and enable salsa CI
Checksums-Sha1:
 192f24d5b1ca2ff4d2f1c1e624adc297210df0be 344288 libpng-dev_1.6.39-2+deb12u1_armel.deb
 2298c501f3243cd3f79c8e3b41919938d9451991 47616 libpng-tools-dbgsym_1.6.39-2+deb12u1_armel.deb
 f1936f77be8636a0fe521f9669088fb82056e154 124796 libpng-tools_1.6.39-2+deb12u1_armel.deb
 5cd1066370430567d692304366255c30788b81aa 7373 libpng1.6_1.6.39-2+deb12u1_armel-buildd.buildinfo
 293288e30e9c2d38ed796b2018d71a99a32f559d 243704 libpng16-16-dbgsym_1.6.39-2+deb12u1_armel.deb
 f8267dfbe4b732563abee39a0ca86459d731fa0d 78856 libpng16-16-udeb_1.6.39-2+deb12u1_armel.udeb
 a34482e238a665f8a16bf6f390e8674c16d63a2e 261892 libpng16-16_1.6.39-2+deb12u1_armel.deb
Checksums-Sha256:
 f6c5cd42595496ca0ecb7fa2778f7dfe7e4aa7bc4af526780d1fce66feb6f675 344288 libpng-dev_1.6.39-2+deb12u1_armel.deb
 95ad9b5ef9e94589f286bf9d2cdc6a17d74eb387173f7c159bf037516e3c14aa 47616 libpng-tools-dbgsym_1.6.39-2+deb12u1_armel.deb
 68db3124eb6641f51c3dfcc3d4096927f30b76f2e6aebcceb8b00196c6a2414c 124796 libpng-tools_1.6.39-2+deb12u1_armel.deb
 135c57eabc12a4a78c69c7e80cca9b606476c8c26c4b3bec4e8ebb3238c18d83 7373 libpng1.6_1.6.39-2+deb12u1_armel-buildd.buildinfo
 faf0731ac1523471f635a16cd717575367b2edf1220319316d959eb3ac536470 243704 libpng16-16-dbgsym_1.6.39-2+deb12u1_armel.deb
 b6d9e55cdf39b99081330bcb1892df2115d136dc0aa46d899559239d2b8deb32 78856 libpng16-16-udeb_1.6.39-2+deb12u1_armel.udeb
 3cb6a8f6e220f184fdbdc8c2325c323cba9320d98db0f660e676b1bc4b4fda3d 261892 libpng16-16_1.6.39-2+deb12u1_armel.deb
Files:
 27864516f5003ba8b104dbffd641b96d 344288 libdevel optional libpng-dev_1.6.39-2+deb12u1_armel.deb
 138337db314b5fd2483346fd753b25ce 47616 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u1_armel.deb
 cdd003a40012723eb1d5812cb414cc2f 124796 libdevel optional libpng-tools_1.6.39-2+deb12u1_armel.deb
 d2ac2ce743351bf312b71b98db912727 7373 libs optional libpng1.6_1.6.39-2+deb12u1_armel-buildd.buildinfo
 6bbb8b5fbb335619abe42eec6858c2fd 243704 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u1_armel.deb
 d509317c70ff832180de9a50ffe7595c 78856 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u1_armel.udeb
 4d8b4e5bf24a60f844cae8e4fecdda62 261892 libs optional libpng16-16_1.6.39-2+deb12u1_armel.deb

-----BEGIN PGP SIGNATURE-----
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=p6FS
-----END PGP SIGNATURE-----