-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 06 Dec 2025 11:15:39 +0100 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: mips64el Version: 1.6.39-2+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1121216 1121217 1121218 1121219 1121877 Changes: libpng1.6 (1.6.39-2+deb12u1) bookworm-security; urgency=high . * Security upload targeting boowkorm. * Backport fixes for: - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219) - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218) - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217) - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216) - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877) * Set gbp.conf for bookworm and enable salsa CI Checksums-Sha1: 11ac9489ffedb4fc0c4013df4cb5f6a4e0f9d13f 364308 libpng-dev_1.6.39-2+deb12u1_mips64el.deb fc5dee576016cc405d8a140f4286447a4eb105d8 50752 libpng-tools-dbgsym_1.6.39-2+deb12u1_mips64el.deb 13094d938a36e8e667841f7eb2709beb2c712665 126904 libpng-tools_1.6.39-2+deb12u1_mips64el.deb 0b974062b06be107a27f091b5c017292e6697931 7372 libpng1.6_1.6.39-2+deb12u1_mips64el-buildd.buildinfo e2039a9608a49f79fe806a3562d4f166e66929b0 252236 libpng16-16-dbgsym_1.6.39-2+deb12u1_mips64el.deb 27ac42edb4028c3d079b9cb2ce8514b05cbcd26b 86944 libpng16-16-udeb_1.6.39-2+deb12u1_mips64el.udeb 784170d55b6253b9dd4df8ae4fd2d6fe2b38ab0d 269736 libpng16-16_1.6.39-2+deb12u1_mips64el.deb Checksums-Sha256: 63b400a6f86b8c03ab263917de6335acb747671a50f3515c53c95e724c524135 364308 libpng-dev_1.6.39-2+deb12u1_mips64el.deb 58ee0014021ee95124b2621a425af928d17a337ccbf83ed5847a3e98859d5873 50752 libpng-tools-dbgsym_1.6.39-2+deb12u1_mips64el.deb 4a8390e9b4bd01f82ee1eecc6f12e9cf430f47c54bcb27c0a3d872a3e13e2a57 126904 libpng-tools_1.6.39-2+deb12u1_mips64el.deb 9d2afeb674d8735ca1bc0dd607dca6ba736f48cdca3870bdf8965876dac42c21 7372 libpng1.6_1.6.39-2+deb12u1_mips64el-buildd.buildinfo 399d8616ff15862dca05d385c9e03e22915e25ba77b7490bf9402b48577c4ec2 252236 libpng16-16-dbgsym_1.6.39-2+deb12u1_mips64el.deb 8dba6ccf67d85cbc9635e3baa8f5e7f4b0a908faceff7cd0317a2a34b2e5d935 86944 libpng16-16-udeb_1.6.39-2+deb12u1_mips64el.udeb 3158c43ec46a3dbf1d25992a0df50f4774e05a632c05827ef70c6ce4e9f12933 269736 libpng16-16_1.6.39-2+deb12u1_mips64el.deb Files: a273d485d037634365c8ec01e192ef74 364308 libdevel optional libpng-dev_1.6.39-2+deb12u1_mips64el.deb 44246502b2c44a4fb28ba6f1c16eb3af 50752 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u1_mips64el.deb 57d1e49574dbc0a854352e0bb48d46af 126904 libdevel optional libpng-tools_1.6.39-2+deb12u1_mips64el.deb 7d9a1526ba5dc778e872e94feccccbb7 7372 libs optional libpng1.6_1.6.39-2+deb12u1_mips64el-buildd.buildinfo 3177f418d3a60e926efab8eb4ceb9991 252236 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u1_mips64el.deb be0d575000ca296bc7da66ae35220779 86944 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u1_mips64el.udeb 42449ceeaf92983ab129208d06c58d8f 269736 libs optional libpng16-16_1.6.39-2+deb12u1_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyYUQCyzsgu940OiVpwP2OD8jZaoFAmk0SBYACgkQpwP2OD8j ZapQtw//WhhiqOmTGTI6vcQExqTAw634WbGDFLIu8oNiy2KDsd5jcV2e21rIHJPz BeE84M2OMxFUO1U+36z6OY7+FNIS7juPgzyYuJBIUkCP/2UxnXYVtAA1RJZdBuWq MZrf5EGMyHpWlgOgThIjnntU18JPQvwCHjvzh36KeOOoe/6iP0PcRrM5/9prIkpF XqrlTKVyfBnwMERjefXNRisFkKfhpuwISGCou1nVu48ROM9KJswwY6WFKpzas2ow DhSMjPQI7K+wxLBUdE6Gd1gL6XqheDliiuufIpXZnl79/Y7I1djiGUl2FQzTPaRk OKc0C3lVqkKu+sHR60LPD+iAu/+lSvHUmIJWpb3Q0emGdaZ5YhmUwTyTgBkEKUrd 5TnBF5vxBPDoLKxM2hOkPwy/sWvProzqnys/cekF5KLkYeOYq/BwuJMatHJ3sz+f lGDu7bzoJIsgYWt93Dz6VuPpIlPIz0ImFfrxsFIltBPIhycAXdOhFQE+rtwPPoYc p7sIvaWWCu5avr08tN/CW6uyoe1bdr2UT0CVCJkQMF1o4ckEUp3I3M01XqyZQmZJ YK1nyLw6lQ9oNYqTEGGe0rUe7YLW0HVjVk88vQ/atx/v3ISUc50r2vCM7kQSQdKR kUIP7ySQ23tL2ObN4c1nE+3mNavJioIMIDTPfWNOIww0j1UKir8= =sq97 -----END PGP SIGNATURE-----