-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 06 Dec 2025 11:15:39 +0100 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: mipsel Version: 1.6.39-2+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1121216 1121217 1121218 1121219 1121877 Changes: libpng1.6 (1.6.39-2+deb12u1) bookworm-security; urgency=high . * Security upload targeting boowkorm. * Backport fixes for: - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219) - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218) - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217) - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216) - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877) * Set gbp.conf for bookworm and enable salsa CI Checksums-Sha1: aa39474193382b9a556433e10412b7b184cd1099 360896 libpng-dev_1.6.39-2+deb12u1_mipsel.deb 1272dbaf668cc59c5d85d8f0604fc5ab04a28312 50180 libpng-tools-dbgsym_1.6.39-2+deb12u1_mipsel.deb 807a2416cb10a854aa359553c523217e55f87cfb 126596 libpng-tools_1.6.39-2+deb12u1_mipsel.deb 9e0d99f0e803a6cdf8105cd437ff1e90d83c016e 7325 libpng1.6_1.6.39-2+deb12u1_mipsel-buildd.buildinfo 7fd495beb0bd816a3df8a46bb428463856537fe1 252420 libpng16-16-dbgsym_1.6.39-2+deb12u1_mipsel.deb 39e52f409ae69cad3ff3be3f5b1af22ff99635f1 84772 libpng16-16-udeb_1.6.39-2+deb12u1_mipsel.udeb ecc175987d202b7965f41fe3c279598fbef9900d 267628 libpng16-16_1.6.39-2+deb12u1_mipsel.deb Checksums-Sha256: 240d1132e984d24786c0c7ecb1422b45831763719a3baf86d6abed13b7951b51 360896 libpng-dev_1.6.39-2+deb12u1_mipsel.deb a4e7a15f929a0ea2ba853aed1f982aef1ecdf0ec1b060d2b7f7ab96e730690a0 50180 libpng-tools-dbgsym_1.6.39-2+deb12u1_mipsel.deb 3879457aebc90f867c03d1130e124245be1f6e534170ab5d0d9b7f78b300976d 126596 libpng-tools_1.6.39-2+deb12u1_mipsel.deb e619cddb29df65f079589c0f845ee8c58d039eb69594a519455bdb044baf9554 7325 libpng1.6_1.6.39-2+deb12u1_mipsel-buildd.buildinfo 0dd40823790b8a848bdb9e125d47399584a90eaf250b0e110cd77fb04a5660ca 252420 libpng16-16-dbgsym_1.6.39-2+deb12u1_mipsel.deb 5d3da59cd4dacec79947a2a205af475348db38d4fda5a29bd62dbb28369328ca 84772 libpng16-16-udeb_1.6.39-2+deb12u1_mipsel.udeb 54c4da8c078d30c745ff3e09103f194f3bfeb832a68cdc9639e8abc98b77e478 267628 libpng16-16_1.6.39-2+deb12u1_mipsel.deb Files: aa46560e2c3f64e717a6d2a0002fb739 360896 libdevel optional libpng-dev_1.6.39-2+deb12u1_mipsel.deb adafc2352e0c4724b6ac67af400ed023 50180 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u1_mipsel.deb 76cec6e83a5105f04dd20154139f9a6e 126596 libdevel optional libpng-tools_1.6.39-2+deb12u1_mipsel.deb 4c9f6fa14ad7acf8cd73c60b22313d4a 7325 libs optional libpng1.6_1.6.39-2+deb12u1_mipsel-buildd.buildinfo 051b6fe1ef26330a9ef53425a9025b2b 252420 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u1_mipsel.deb 4c047c9867ab35ba5da3b271c5a6f2ba 84772 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u1_mipsel.udeb bf47f614ae08c3bade209ad1c7ef6127 267628 libs optional libpng16-16_1.6.39-2+deb12u1_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEYLhEzFkGpb3yYRVHmlVdU6AM9BUFAmk0R1wACgkQmlVdU6AM 9BWdiA//bdUP4F/h0dpanzb72sXhz8uYpHwSw68L5bc+fQsEMXs3vuDp6tezLLjH Jcg3TRhj5wI7XlCrT1CzpXJ8xw/wny/tDdaHw2EgjST9ab40hwfs+LklqlhUrLYW zix+1lXwe5u2C9cRT8g4nrhGat0Ce0H5U+5Bukko+gT02oEXYZtbefq7FewQnhTa g5QSJFYm3KKvtL6ditLI5UJE7s0FliHtvEHdQ+2wz5rDpRdogaXqvVS6h9+vZbEL rgulPwkEWk9JZNWT8c1J/LcTfO+zcuDtJ52QgfM4WP1OJ8mzpaDq5DCs3IuHqLQa 9apLlZdtOez3q59hGc1LhhyqDPwBzkvKgXYKHxYi2+Gt2fR4ibzoJuQqj80nvhnz 1EwNK2pi0SSYkgmzNl2sFxw3xnq8gMua3Y9qTgHIOeSjeDsyCDpSJepW/8XlQQjB aPcDOc3wRTIubfPlxpDeWghDM0PcKq4u25NrcQmZNyaU1DEL/fGOiNPHybaUa7t+ +RVomZjWugnLGiGUglpSC/cldABKD0+ajPLRwBWywzoRrq98MtLkQk644oGxoAM5 oVAogNfl7uChSqP3tAb7EW+9oLY6smaWIhr+k+fH9nDLOVMImGJGagzzg/SiJeKq KnnoZ63kdij10995qdVHfzpFl6F3QFMf3rHozQC42ZMFq3hRf/M= =cjBt -----END PGP SIGNATURE-----