-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 06 Dec 2025 11:15:39 +0100
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb
Architecture: s390x
Version: 1.6.39-2+deb12u1
Distribution: bookworm-security
Urgency: high
Maintainer: s390x Build Daemon (zandonai) <buildd_s390x-zandonai@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16 - PNG library - runtime (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
Closes: 1121216 1121217 1121218 1121219 1121877
Changes:
 libpng1.6 (1.6.39-2+deb12u1) bookworm-security; urgency=high
 .
   * Security upload targeting boowkorm.
   * Backport fixes for:
     - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219)
     - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218)
     - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217)
     - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216)
     - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877)
   * Set gbp.conf for bookworm and enable salsa CI
Checksums-Sha1:
 0d3bccd8187b6abfd0ecfc6cd0ebcce93160f895 352400 libpng-dev_1.6.39-2+deb12u1_s390x.deb
 2126bd63cb35e0ac209dad649271492b05862d92 48920 libpng-tools-dbgsym_1.6.39-2+deb12u1_s390x.deb
 d95e52f82f25d179c17a37630a03854573fedc40 126316 libpng-tools_1.6.39-2+deb12u1_s390x.deb
 6d9d7122c8211f4ff45680c86df2944e1c186236 7403 libpng1.6_1.6.39-2+deb12u1_s390x-buildd.buildinfo
 6b4ba8eecffa45451bab8a2255a4e11ada2bd2cd 243628 libpng16-16-dbgsym_1.6.39-2+deb12u1_s390x.deb
 64661dae1c7bbc648f1c71c877ecd2445a323347 87064 libpng16-16-udeb_1.6.39-2+deb12u1_s390x.udeb
 d5c286b51a3f7136eb5446d86bb05975ea0464ff 269860 libpng16-16_1.6.39-2+deb12u1_s390x.deb
Checksums-Sha256:
 d48a5476776e1f3e8a5581698e9b16ed6be8d82079d7220546bfa9919fa02869 352400 libpng-dev_1.6.39-2+deb12u1_s390x.deb
 814d4127a666589ebcb7527bee98b98954cb99ff5b177bbf4a44342455966f98 48920 libpng-tools-dbgsym_1.6.39-2+deb12u1_s390x.deb
 df45ba012fec40cdfb8bbc8c31c71cfacd9e3e5dad59bb147c0af9eb64d86bd1 126316 libpng-tools_1.6.39-2+deb12u1_s390x.deb
 feafb1b6604d686f6358d0f208afcf60abf02333290b67aa5209c6c402b49af7 7403 libpng1.6_1.6.39-2+deb12u1_s390x-buildd.buildinfo
 50e9769b227c7a387327a965c9dbd3b25bfe8166364c515558dd1474b927c9b3 243628 libpng16-16-dbgsym_1.6.39-2+deb12u1_s390x.deb
 998ff70932a1290182f80c08d298ed29592cbc573904c7cf41c0ffe5c7244115 87064 libpng16-16-udeb_1.6.39-2+deb12u1_s390x.udeb
 72794f557dff77cf25e6b10b28c0fc413163215bc115d32fe825f24abeb05063 269860 libpng16-16_1.6.39-2+deb12u1_s390x.deb
Files:
 bfaf959538b7097a05292c2a37c347be 352400 libdevel optional libpng-dev_1.6.39-2+deb12u1_s390x.deb
 99ab266085f546115dd34e0cc1553762 48920 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u1_s390x.deb
 90cebf28647b2b5c11165bef1d5ac234 126316 libdevel optional libpng-tools_1.6.39-2+deb12u1_s390x.deb
 f2d343a7d9d53f0c05e3e459fa054b0f 7403 libs optional libpng1.6_1.6.39-2+deb12u1_s390x-buildd.buildinfo
 c54f0fec41e216b1d9933f61d78ecce6 243628 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u1_s390x.deb
 9c9f5c52cb34f7c286b722f3342b677e 87064 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u1_s390x.udeb
 4d652f8cce802b74bcc895fbf7663f28 269860 libs optional libpng16-16_1.6.39-2+deb12u1_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=/olb
-----END PGP SIGNATURE-----