-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 24 Nov 2025 21:06:25 +0100
Source: libpng1.6
Architecture: source
Version: 1.6.51-1
Distribution: unstable
Urgency: high
Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1121216 1121217 1121218 1121219
Changes:
libpng1.6 (1.6.51-1) unstable; urgency=high
.
* New upstream version 1.6.51.
- CVE-2025-64505 - Heap buffer overflow. Closes: #1121219
- CVE-2025-64506 - Heap buffer overread. Closes: #1121218
- CVE-2025-64720 - Buffer overflow. Closes: #1121217
- CVE-2025-65018 - Heap buffer. Closes: #1121216
* Enable salsa-ci.
* Update d/copyright years, remove unused section.
* udeb: install library into usr/lib
Checksums-Sha1:
ce175e6fbac769cb21be525b52324a6f577eeef4 2254 libpng1.6_1.6.51-1.dsc
1ef0acdf7b4a5bebdff2548025a238a3c7771e98 1579500 libpng1.6_1.6.51.orig.tar.gz
c5b7514c609a0d1db51c080299fe007dd34de12a 33468 libpng1.6_1.6.51-1.debian.tar.xz
431043587d5e7b689558da625869582ec589e8b1 8223 libpng1.6_1.6.51-1_amd64.buildinfo
Checksums-Sha256:
904d8a5bcdeaf9194137f3b6f629ca0f64eeac24fa6969e532fe19c713d44049 2254 libpng1.6_1.6.51-1.dsc
b1872484c1c5c70acc79cbb15fb366df954fa8d5dacbe7f729d858902d17933c 1579500 libpng1.6_1.6.51.orig.tar.gz
d46eb4217f5ed321b25dcd7ded15131c9ff487b6ae4aa69909a64d3d43459832 33468 libpng1.6_1.6.51-1.debian.tar.xz
4ce8587fdbbb41cf77547d81ffa603ae57255b90460144e41260b503668da9c2 8223 libpng1.6_1.6.51-1_amd64.buildinfo
Files:
faa5fb3450125d5bd7c41975c3b141c6 2254 libs optional libpng1.6_1.6.51-1.dsc
825228e441d0d0d5cf48a80b6a52277b 1579500 libs optional libpng1.6_1.6.51.orig.tar.gz
531eecc81aa5cab0f90ba1edd54a1ffd 33468 libs optional libpng1.6_1.6.51-1.debian.tar.xz
1c3dc8b9c2fe87ce9b9e585c325373cf 8223 libs optional libpng1.6_1.6.51-1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=egDw
-----END PGP SIGNATURE-----
Attachment:
pgpwKdRo6VZGm.pgp
Description: PGP signature