-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 18 Apr 2019 22:12:35 +0200
Source: libpng1.6
Binary: libpng16-16 libpng-dev libpng-tools libpng16-16-udeb
Architecture: amd64
Version: 1.6.28-1+deb9u1
Distribution: stretch-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16 - PNG library - runtime (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
Closes: 921355
Changes:
 libpng1.6 (1.6.28-1+deb9u1) stretch-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Call png_image_free_function without guarding it with png_safe_execute
     (CVE-2019-7317) (Closes: #921355)
Checksums-Sha1:
 b0ffd86c65e3c266699015b1d3322903396f4304 250444 libpng-dev_1.6.28-1+deb9u1_amd64.deb
 18a19bc20cf9c939fc20a6e51366c05ab239f530 37442 libpng-tools-dbgsym_1.6.28-1+deb9u1_amd64.deb
 552e341e122b6ceb0df2153012830872ed702874 132782 libpng-tools_1.6.28-1+deb9u1_amd64.deb
 8048ffadf0fffeafa31fbc364cc0b92cce847039 7060 libpng1.6_1.6.28-1+deb9u1_amd64.buildinfo
 90433f27d8b137e5702781b2526aa4dfae301fc2 226598 libpng16-16-dbgsym_1.6.28-1+deb9u1_amd64.deb
 ae47444277e0ba7287b873177cdb6b7e346ad655 89036 libpng16-16-udeb_1.6.28-1+deb9u1_amd64.udeb
 435e72b9409d59ef45f982a7c901872404ede39e 279842 libpng16-16_1.6.28-1+deb9u1_amd64.deb
Checksums-Sha256:
 e9fbe5c7b445057e07108178c2edf112ce6bddaecd5103d1f2c4112879aefa28 250444 libpng-dev_1.6.28-1+deb9u1_amd64.deb
 1630846f6274c82db78b1b0905bb37851f6eca0857f1215f8ea564ec018e8e0c 37442 libpng-tools-dbgsym_1.6.28-1+deb9u1_amd64.deb
 798229bfaa73ca93f29d39590d20f85d21ff4da789d95c477cedd9189d70743b 132782 libpng-tools_1.6.28-1+deb9u1_amd64.deb
 97e58486204cd4aa5d762feaead7019340d9deabf89107dc16e38be9b284151e 7060 libpng1.6_1.6.28-1+deb9u1_amd64.buildinfo
 9b13d5db505011c9909308076f13c28d4133f33906cdd15d4159bee97aee4f79 226598 libpng16-16-dbgsym_1.6.28-1+deb9u1_amd64.deb
 089b27137b4c76d6db1964617cb8e582c428d8985ebdeb8a79a7006112a71103 89036 libpng16-16-udeb_1.6.28-1+deb9u1_amd64.udeb
 1d0b8014cba18f84ce77398da9db9c71e1a8ce53fd8157cd7bf9ccf1d56a42f4 279842 libpng16-16_1.6.28-1+deb9u1_amd64.deb
Files:
 1661bdd141f47e81f44939f62afedd13 250444 libdevel optional libpng-dev_1.6.28-1+deb9u1_amd64.deb
 ffddcb293cf6078b0ac8edf1d1c02751 37442 debug extra libpng-tools-dbgsym_1.6.28-1+deb9u1_amd64.deb
 1de0309cdfaeaee5d3d5cce4b1caf696 132782 libdevel optional libpng-tools_1.6.28-1+deb9u1_amd64.deb
 695b3959289b3d890baf08f18db5c5ff 7060 libs optional libpng1.6_1.6.28-1+deb9u1_amd64.buildinfo
 953838d76c159ab94423f5526d211e7b 226598 debug extra libpng16-16-dbgsym_1.6.28-1+deb9u1_amd64.deb
 c4d274911081bf98b1d928b82284beb7 89036 debian-installer extra libpng16-16-udeb_1.6.28-1+deb9u1_amd64.udeb
 0a8c72b2e707a5c34aea317c999342c8 279842 libs optional libpng16-16_1.6.28-1+deb9u1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=sr3p
-----END PGP SIGNATURE-----