-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 24 Nov 2025 21:06:25 +0100 Source: libpng1.6 Architecture: source Version: 1.6.51-1 Distribution: unstable Urgency: high Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org> Changed-By: Tobias Frost <tobi@debian.org> Closes: 1121216 1121217 1121218 1121219 Changes: libpng1.6 (1.6.51-1) unstable; urgency=high . * New upstream version 1.6.51. - CVE-2025-64505 - Heap buffer overflow. Closes: #1121219 - CVE-2025-64506 - Heap buffer overread. Closes: #1121218 - CVE-2025-64720 - Buffer overflow. Closes: #1121217 - CVE-2025-65018 - Heap buffer. Closes: #1121216 * Enable salsa-ci. * Update d/copyright years, remove unused section. * udeb: install library into usr/lib Checksums-Sha1: ce175e6fbac769cb21be525b52324a6f577eeef4 2254 libpng1.6_1.6.51-1.dsc 1ef0acdf7b4a5bebdff2548025a238a3c7771e98 1579500 libpng1.6_1.6.51.orig.tar.gz c5b7514c609a0d1db51c080299fe007dd34de12a 33468 libpng1.6_1.6.51-1.debian.tar.xz 431043587d5e7b689558da625869582ec589e8b1 8223 libpng1.6_1.6.51-1_amd64.buildinfo Checksums-Sha256: 904d8a5bcdeaf9194137f3b6f629ca0f64eeac24fa6969e532fe19c713d44049 2254 libpng1.6_1.6.51-1.dsc b1872484c1c5c70acc79cbb15fb366df954fa8d5dacbe7f729d858902d17933c 1579500 libpng1.6_1.6.51.orig.tar.gz d46eb4217f5ed321b25dcd7ded15131c9ff487b6ae4aa69909a64d3d43459832 33468 libpng1.6_1.6.51-1.debian.tar.xz 4ce8587fdbbb41cf77547d81ffa603ae57255b90460144e41260b503668da9c2 8223 libpng1.6_1.6.51-1_amd64.buildinfo Files: faa5fb3450125d5bd7c41975c3b141c6 2254 libs optional libpng1.6_1.6.51-1.dsc 825228e441d0d0d5cf48a80b6a52277b 1579500 libs optional libpng1.6_1.6.51.orig.tar.gz 531eecc81aa5cab0f90ba1edd54a1ffd 33468 libs optional libpng1.6_1.6.51-1.debian.tar.xz 1c3dc8b9c2fe87ce9b9e585c325373cf 8223 libs optional libpng1.6_1.6.51-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmkkvPcACgkQkWT6HRe9 XTavARAAyywqvZNzznf92LsKhCmMsKwG4ukP3A3ZBQQ1wLz3etH4oDu2BaZSyJ41 NIbWynDevbvM0WALHcXqrJeA/N3tY3zYENISgop05alwQlfsHiWBdz36PXapTMJV SQwlYBgib5zgEQ2rbJdeaFYAF9eP2TAfomTomdo0EG9NW8XApfbm2LSVT7krbZGu nVFDA39y+T7VN+ewzj7B9Lni+gkVbzoh7k8Za/s3H5XWXL2wIPMqfgOgNUVHSUEh MoBYheWJOTfN0nd03kVcxy42JqUkZY9bFT4FI9xnGUQl5veXKbM0a2hg9ehSK5Pe T4fiiXOiwMAX2qYl8WT0C1Zv9TY2ZntPCqqfOvcYZBGtufwDoN9E+kM1C0ayTyWe qwvWmUns2OaUaHRAoHMCe0um7mtZfAPXky/tsq091V0wj5TxMfr2o3nD9hzgmcHv gdc/o6fNxoafBmSHRktRtqMK7qUZu6D/x8kIeoJh4frwtjvxtmAcjVxDI4wqgFzG 6S2lq52k+u4Q/3lWpsBCQ5sJYtbtqogoS/iFiLAYzjwvrCt6rf1uALgGnKA3VAFJ wL8VDwN5bCkgaV2rjAbevXgtJIsVQ/wI/BFp3BeQPH3FDvW1S2Oj3k5laSZ8gLFo S7HuT24dMhr9+OeEoK38iDwP7+oIGeMjvSdeDBU6R4Huf/43D3U= =egDw -----END PGP SIGNATURE-----
