-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 18 Apr 2019 22:12:35 +0200 Source: libpng1.6 Binary: libpng16-16 libpng-dev libpng-tools libpng16-16-udeb Architecture: i386 Version: 1.6.28-1+deb9u1 Distribution: stretch-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Salvatore Bonaccorso Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 921355 Changes: libpng1.6 (1.6.28-1+deb9u1) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Call png_image_free_function without guarding it with png_safe_execute (CVE-2019-7317) (Closes: #921355) Checksums-Sha1: abb0e639b1a6a7d2bd14328dc5c4a77e0f3e2cc8 259812 libpng-dev_1.6.28-1+deb9u1_i386.deb cbe815e308e3f9446a551f40c9c84c331d47340b 36644 libpng-tools-dbgsym_1.6.28-1+deb9u1_i386.deb ceba53275fed82a309243bcad2174391485d35d9 133476 libpng-tools_1.6.28-1+deb9u1_i386.deb 4d09c70871ef9b7874905b5118d959fd5523d2eb 6978 libpng1.6_1.6.28-1+deb9u1_i386.buildinfo d30a493cd77651cac30a85a2bb57f146360ba591 196856 libpng16-16-dbgsym_1.6.28-1+deb9u1_i386.deb d7649bc034601f2f080bb24c4f39d0326b9717e3 97052 libpng16-16-udeb_1.6.28-1+deb9u1_i386.udeb 3c617890a73e782218b52ed5c010723bf4ae8e00 287988 libpng16-16_1.6.28-1+deb9u1_i386.deb Checksums-Sha256: 7f33a4cd7ecfac6401c81e1c43da68424a6e3146e9dd99efb508dbf7633831dd 259812 libpng-dev_1.6.28-1+deb9u1_i386.deb ad2718eab8d97e09fc4df8c290355d6aabe02ee645ee647b437de91e564d3224 36644 libpng-tools-dbgsym_1.6.28-1+deb9u1_i386.deb af1f9353fe0f63b925a73154cb8600731f253d1204632b57513940bf336a53ed 133476 libpng-tools_1.6.28-1+deb9u1_i386.deb f22fc078bd31d11a54a8d6e2e31d9d2bd1f26c3ac880a870ade82176139354f8 6978 libpng1.6_1.6.28-1+deb9u1_i386.buildinfo 8afacdc86846cddea3965f106e331ba17a1064432c52d5dc88aa3513b812d55e 196856 libpng16-16-dbgsym_1.6.28-1+deb9u1_i386.deb b5c9af1bfc0732009fa0e2f3c47c6c8402bd28bd5cda78a0fea100fc91801a25 97052 libpng16-16-udeb_1.6.28-1+deb9u1_i386.udeb a4e4dc357b6ebe296c6d86fbbbb1791b083b7e145d2d231816d65a73d4ea84d1 287988 libpng16-16_1.6.28-1+deb9u1_i386.deb Files: c166bab01d3aaba40e20681f68f28dbd 259812 libdevel optional libpng-dev_1.6.28-1+deb9u1_i386.deb c54847b9dbb7cb1a3ce588d5fe909c44 36644 debug extra libpng-tools-dbgsym_1.6.28-1+deb9u1_i386.deb c24a79d2fe80de9980cf059cdb41b176 133476 libdevel optional libpng-tools_1.6.28-1+deb9u1_i386.deb 876f9ac321868070d19b294d92cadc4a 6978 libs optional libpng1.6_1.6.28-1+deb9u1_i386.buildinfo 4c6842bdc7af2e7b9b5fd5a54d9d77b3 196856 debug extra libpng16-16-dbgsym_1.6.28-1+deb9u1_i386.deb 44e16670254f9421ac0ff76db7a24b50 97052 debian-installer extra libpng16-16-udeb_1.6.28-1+deb9u1_i386.udeb 8ed8439c1bb0eda8b19d97ef4b631482 287988 libs optional libpng16-16_1.6.28-1+deb9u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc1Y9tvYCx8z2wuljZWBroU7DAFMFAly47QYACgkQZWBroU7D AFPnuA//eaCBZnfsQ8EwramyX/HDsxB4vRTsEDqwNyzsVv2H5ySRTIKHoB7frlsr w1cX8YhJk2kRKBCYVnFu2hkWyvOBW5e0Wx6S1Z3lNJ6w0A/1nMfmVIX+BOxT2TYy e8P8XJM2jV94LIyjdcquoJmfYqlcwerzv2L6z7DKsvQ3mhmOsnFEmUw2u52gbhOC FN4GVFKoN3lZPQanqpPK730/Rkmgf+Ba7vmdhGYGx3k2hkXELj6Uz+kL62k4g/31 mvKRqnU/08qjbpCSZcauCjFDZgVG9E7QMUER+P4jS2oxeeBYiNW3R3yFpLPcoVji ONjALYJVLmVUemhUD0TK+20ILqklnkY489Qw3/nbrAPzxFnkGRoTyfQCOp9fugpx qlxtmj1xv8u7oFkr+in9yd0GQEWOn3QuP/n9vfUQ1Os7Pn39Lrtw6d7lNg8v63O4 hR1mb5FNBOxLTS47d81n+6r2nVbUOj29vRLy9np046zX47lzAhGGDFUjNY/fBSaZ fGrCe1O5p9285QnncrTKvN8ntr9abw2LUN0zHeZ9Mk6duxZCSqUyURaUblicU4p/ AYJE5DzDb3xp7KIVtooBApwBysyVhhRYg9nP45HuIQb8zQ+y3D3N1OMjMeGF+3JW 4DTqHCk82mJnykzkVO6/wzsDcFIJQE1G7r3yHiDYMaV0czm/W3E= =eHsk -----END PGP SIGNATURE-----