-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 06 Dec 2025 11:10:16 +0100 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym Architecture: s390x Version: 1.6.48-1+deb13u1 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zandonai) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) libpng16-16t64 - PNG library - runtime (version 1.6) Closes: 1121216 1121217 1121218 1121219 1121877 Changes: libpng1.6 (1.6.48-1+deb13u1) trixie-security; urgency=high . * Security upload targeting trixie. * Backport fixes for: - CVE-2025-64505 - Heap buffer over-read (Closes: #1121219) - CVE-2025-64506 - Heap buffer over-read (Closes: #1121218) - CVE-2025-64720 - Heap buffer overflow (Closes: #1121217) - CVE-2025-65018 - Heap buffer overflow (Closes: #1121216) - CVE-2025-66293 - Out-of-bounds read (Closes: #1121877) * Set gbp.conf for trixie and enable salsa CI Checksums-Sha1: 47d7ca54e68d0e257b8cea807b2eecc03637e655 368172 libpng-dev_1.6.48-1+deb13u1_s390x.deb abb6c61456cb8ea91851c3e4ff715566cbb0a68d 51200 libpng-tools-dbgsym_1.6.48-1+deb13u1_s390x.deb 48505e59158f9df06395820dce284befeb74d733 130312 libpng-tools_1.6.48-1+deb13u1_s390x.deb 72404c19c9cf80f2e881beec7536f4af1ec1bc11 7973 libpng1.6_1.6.48-1+deb13u1_s390x-buildd.buildinfo ad1b429a3159a8525cb961f799725d5125b7cbfb 96428 libpng16-16-udeb_1.6.48-1+deb13u1_s390x.udeb 9c7610069c06551ab939d8bbdcf2b5afa60e266e 255268 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_s390x.deb 536985cd46b5d736bcbfc5aa70bebf7e3e0c6750 283928 libpng16-16t64_1.6.48-1+deb13u1_s390x.deb Checksums-Sha256: 5f2409d75b2e8eba5654b7bbbb9a915f890d7b7c194f1c8e819468b16a9bd85a 368172 libpng-dev_1.6.48-1+deb13u1_s390x.deb fc7b7af15adce2c8cbbd3d75f2f2981b981f9b49b0de9512e7e9dd711f695787 51200 libpng-tools-dbgsym_1.6.48-1+deb13u1_s390x.deb 42f966fbaedc3f1ac5eee8d54a2397cb302e89e369be848c9dafedd0fa3649bc 130312 libpng-tools_1.6.48-1+deb13u1_s390x.deb 402d15bc8dacf7cfaa78b12c32eaa415003e31001ddd39b71c92a05c1421b118 7973 libpng1.6_1.6.48-1+deb13u1_s390x-buildd.buildinfo a72f747fd7ece703846a208cd14cce3e10f15a5d31966d54cbc210b5bef10be8 96428 libpng16-16-udeb_1.6.48-1+deb13u1_s390x.udeb 98d2376654048e55dc34e31dce88b47e04aeff7c0c4d9d8e161a4ab2ea2dcb7a 255268 libpng16-16t64-dbgsym_1.6.48-1+deb13u1_s390x.deb b2479b5c28f6619ffa7005531a87b96a2f78522791c173c41d49d8c8837a580b 283928 libpng16-16t64_1.6.48-1+deb13u1_s390x.deb Files: 5c0400f0fc977b1993eea1352aca6201 368172 libdevel optional libpng-dev_1.6.48-1+deb13u1_s390x.deb d6c5e09ec3b4161a4f39f613fe85b4df 51200 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u1_s390x.deb 967adfa9e366d7f141cb00efae302e06 130312 libdevel optional libpng-tools_1.6.48-1+deb13u1_s390x.deb 9a47c47fdee5109ca94a521a01b120d0 7973 libs optional libpng1.6_1.6.48-1+deb13u1_s390x-buildd.buildinfo 744c27f57745e318d4f31616908e5b95 96428 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u1_s390x.udeb 8180588e0d51a7bf42018bedfacc0bb5 255268 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u1_s390x.deb 2b87440c1e35e9b2a6ccd13a5cfe171c 283928 libs optional libpng16-16t64_1.6.48-1+deb13u1_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmk0Wj8ACgkQvVOPI7pY NpjLkhAAmyoVHRdthIUAm65BStco1NFL8fUXXPJszRLZ6bI3AQg2QptYE8IZiAns kWDkfWdPJXJP1GKm7KuMQu0+ihwoKbMNnnfshhBUnqxGVWfSb6BzrVgrWMUcx8Da ZCa+ixsMSCy6dLHd3jJ9XHFhh1tQgWiJ9cVhpVLu2KvcLLvB2JDUZfcmmtlu4BF8 K24qZ6HKWZB+7rZ8PYQOU/p5TIQ7R9ZK0TtRg/5srxCtNWPRueuGWe5LN05pomo4 R1eSK/vVTbHPDNATneG5QXfvsfxVO8whJQcDUQQGm8hTOe+n0KS4NZqacinBtgrX FdbaIdg+2Vc/FoXaeyQOlCtPtNvR9b9OaHDPETy3PMtZ5wJMCp38Q2gShxrPxtun TYjMcSHQhavxq+ljz1kCNpuFVO67nsC0O1ZwOjvBZL3ThuPIQ0C+N2UeBiBpIxBc DYTGVlaz2kFDVfi7vNPzN3LpbFr10O8m6WKYArcOOIn7kB+h9X+zDuB+8xDruHm+ RUVDCNWJ2mg/wuLp6S8RP2rWDtXqIvnlDcBKDBkp+10zvp9D4hh9QeTRs9AjsmKM ADBdn7jgmYW53q+XHk+wFBEmuORGew+dGeJ+qsbyoSCxEVxttvnQkctl9nGZJGS1 RySAtwN0KAFBkVDzzNSEG88NDWsU7Mvo5QSfLzELRpOsuv95alE= =i/yh -----END PGP SIGNATURE-----