-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 30 Mar 2026 20:56:49 +0200
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: armhf
Version: 1.6.48-1+deb13u4
Distribution: trixie-security
Urgency: medium
Maintainer: arm Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1132012 1132013
Changes:
 libpng1.6 (1.6.48-1+deb13u4) trixie-security; urgency=medium
 .
   * Security upload targeting trixie.
     - CVE-2026-33416 - Use-after-free (Closes: #1132012)
     - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013)
Checksums-Sha1:
 5ba519e91457e7b235f6949b590b3520e875eabb 349980 libpng-dev_1.6.48-1+deb13u4_armhf.deb
 27e2a0054c55148030277e09e57d21ef1b35985a 48544 libpng-tools-dbgsym_1.6.48-1+deb13u4_armhf.deb
 171f66aff3f3722780e5f4b1a1e02b1a781016c3 127612 libpng-tools_1.6.48-1+deb13u4_armhf.deb
 6187b389a22447e3b03c4c2f101401ed76828fbb 8026 libpng1.6_1.6.48-1+deb13u4_armhf-buildd.buildinfo
 8095baacaaa3a720c16b4c5824fef28c2f1d51a3 76756 libpng16-16-udeb_1.6.48-1+deb13u4_armhf.udeb
 31bb623c772ace4227450e9c01ccf647ce3252f5 247744 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_armhf.deb
 e59e1dcdf3e452f00f11fe5c6e57781c97bf274a 264392 libpng16-16t64_1.6.48-1+deb13u4_armhf.deb
Checksums-Sha256:
 f2100d1cb58dfde84d3f43dad5a5918b6c3989fae43a8e8c5161ffd35f5c70ca 349980 libpng-dev_1.6.48-1+deb13u4_armhf.deb
 0e9494756eec082fc9dbcae0ddeef3335272f76226fb5f8a28173a75400a1c80 48544 libpng-tools-dbgsym_1.6.48-1+deb13u4_armhf.deb
 6645fc07f6f9a37726fb6820654cfc2e00b29ddd5b7f76a9d4d6f50b33e952b4 127612 libpng-tools_1.6.48-1+deb13u4_armhf.deb
 a2c03f0f09d5325962b35a83fa700ddc3c701f2634f84c6a58eaf8b535ec3282 8026 libpng1.6_1.6.48-1+deb13u4_armhf-buildd.buildinfo
 629b233d83849db6ef1d84e5c7e8016bef5a3989b62b1d988985dbfebb9c7576 76756 libpng16-16-udeb_1.6.48-1+deb13u4_armhf.udeb
 76a17221b2c4bbad7391d2416061572484a1a0297a7b36a7fb1797ffd0db1af8 247744 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_armhf.deb
 ead73009ea8c4496099492c49fc0e63553e61200662b3e066e79cfe805ddce4c 264392 libpng16-16t64_1.6.48-1+deb13u4_armhf.deb
Files:
 2891190435ed4697c5cba30ff3ac5d76 349980 libdevel optional libpng-dev_1.6.48-1+deb13u4_armhf.deb
 e966ef92bc65c96d93c1d02c45af9e17 48544 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u4_armhf.deb
 2dca8bf4bfbe51df2da14e86d46eb2f1 127612 libdevel optional libpng-tools_1.6.48-1+deb13u4_armhf.deb
 29aa546404056e3e0f1c01035a066324 8026 libs optional libpng1.6_1.6.48-1+deb13u4_armhf-buildd.buildinfo
 bdbecc9ccc69c382bf6bb37c5763b941 76756 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u4_armhf.udeb
 8df12ef10267a3813cd9832268377f06 247744 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u4_armhf.deb
 7528c82c7e08e1386e1a5c2d9023ecf3 264392 libs optional libpng16-16t64_1.6.48-1+deb13u4_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=MXes
-----END PGP SIGNATURE-----