-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 16 Feb 2026 18:58:09 +0100 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: i386 Version: 1.6.39-2+deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1127566 Changes: libpng1.6 (1.6.39-2+deb12u3) bookworm-security; urgency=medium . * Security upload targeting boowkorm. * Backport fix for CVE-2026-25646 - Heap buffer overflow (Closes: #1127566) Checksums-Sha1: 96fbceb6b49bcfd14c52e878680646db39bb4870 368152 libpng-dev_1.6.39-2+deb12u3_i386.deb d33ad6d77f386933a3a389667c093d976f1a82ca 49300 libpng-tools-dbgsym_1.6.39-2+deb12u3_i386.deb 92aebbfa3da5043c30a2266538b725c273052a7c 127424 libpng-tools_1.6.39-2+deb12u3_i386.deb 8a5c45c4915d3f7a77cc61cca111b1a1c1322492 7467 libpng1.6_1.6.39-2+deb12u3_i386-buildd.buildinfo 97d6c661520471a210f0d76e7913d38469071f7a 214460 libpng16-16-dbgsym_1.6.39-2+deb12u3_i386.deb 2c0c9afc133fbbf078613d846aefe878b10eddc4 101108 libpng16-16-udeb_1.6.39-2+deb12u3_i386.udeb b2ab1928638a2a7d54593b38c19f8df9bfeb271d 284060 libpng16-16_1.6.39-2+deb12u3_i386.deb Checksums-Sha256: 44952b1ce457429933766c4a186a02e90ff9fbb1e31c532ea6317503d7afc5ca 368152 libpng-dev_1.6.39-2+deb12u3_i386.deb 2f64beb40a3fa4a6f1c3f0c6628322d0fdca306baded1a1c8b696c65a95f5b95 49300 libpng-tools-dbgsym_1.6.39-2+deb12u3_i386.deb 02cfb2396389a8c1b8472053c53c0ef8cb5dc3d8685ab052dab1f7f78088b803 127424 libpng-tools_1.6.39-2+deb12u3_i386.deb 297985b3d798a2302685514ec3c307b41ece2320516184ab3bbf26f55636eb33 7467 libpng1.6_1.6.39-2+deb12u3_i386-buildd.buildinfo 40def03f2ea027048ab3e5b96bf294911abf4627bbb2051ab564661cf9558deb 214460 libpng16-16-dbgsym_1.6.39-2+deb12u3_i386.deb 4911f2df68a571d7e0265c81593e3b73cdcc9ee45c280dc841d867b16a35c2ee 101108 libpng16-16-udeb_1.6.39-2+deb12u3_i386.udeb ba890d0e1b883a84f1c1c14a48ee9c8da013dfb9d846f5cde42afd28e4ccbfc6 284060 libpng16-16_1.6.39-2+deb12u3_i386.deb Files: 46f858211bfa04e22ef6f2b882523e58 368152 libdevel optional libpng-dev_1.6.39-2+deb12u3_i386.deb f6bcdb5b570888eccb834bbf1caf607c 49300 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u3_i386.deb c46ec586eabc628e8fbeb9827a2e8d62 127424 libdevel optional libpng-tools_1.6.39-2+deb12u3_i386.deb 0365b103940785627f281a9ef0bedb2b 7467 libs optional libpng1.6_1.6.39-2+deb12u3_i386-buildd.buildinfo 6587c7b50b3d5471cdc6c52a9f991773 214460 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u3_i386.deb 95db6ca2f90f395173b9ac48b839e0bb 101108 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u3_i386.udeb 764d30c7554ebd7ae79457e0cf943219 284060 libs optional libpng16-16_1.6.39-2+deb12u3_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEv2qEY4xQXyY/2dWIvGw9w6VrLCcFAmmUNMMACgkQvGw9w6Vr LCdA4Q/9HFuAmoPznDIvYd7jbCCPkugWxYfIt+kAsBHnDRq3vOl8PpTlLs2Y2ejS Mr7UoFi8Dh14iZUq4aVts+TaCUvPRxkRmPaN+TB7a+ET3psN9ya/GmgWWDNKuEjP JBqcOH8dBWlTe53ALDPn1101fyliz5HF3jMTNXNQ5+4OI7c+pwbQQ0XeDEuli/bQ RX9Pw+nXAqiUTv7pYw1DQsg527myJBhSYTao/ED6IpQH5RlWf728FWAdLhfrotwB aKqINV3ufL6Xgv2p5DnWb6wxaQ/EOk5dlq6DjMkykfDVVTICLdnujkSGXc4hCMQi 1C74P0bpMeTGraUvFjyvpkSOIhcNu2kWNwxR/ivw1jL16gwZFwp0bxF7ASCMQPkO qu07UD15NC6q3bMA81tzXSmVXR4ingRIhhdhUr/+bWow1R/w4TjIGJVUS5EG9xZA XNrnxk9RckJ2ud8WJ0qdyCQcyIjYUxxWaqU2Yu6v/8Mzm9XmXuyqf+0YvgGwtWe8 BZVFCmS8ngjBJBKBWdiqgRUv2lpCcGJU6MNJ3UekRiYyzdx4yTnMeCgJ+P/g4+zk 4FiIstNtzcaEGpGAT/4/ufeQdCO39fRZnUm/xMz/GEkMti6AZEBi2+UsVR2FE4Fc PzxY3wQJiJ3/3+/mQlHH8EWhbmrLtmAOqOTqK6tiUq1gZo1sMsk= =OcGv -----END PGP SIGNATURE-----