-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 20:56:49 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym Architecture: i386 Version: 1.6.48-1+deb13u4 Distribution: trixie-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) libpng16-16t64 - PNG library - runtime (version 1.6) Closes: 1132012 1132013 Changes: libpng1.6 (1.6.48-1+deb13u4) trixie-security; urgency=medium . * Security upload targeting trixie. - CVE-2026-33416 - Use-after-free (Closes: #1132012) - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013) Checksums-Sha1: 6a0b9ca6016de6d0c7ec42c3d3301e994e512637 374048 libpng-dev_1.6.48-1+deb13u4_i386.deb e1894f6f86f03c87f6c8ddb5e66c1b3fea926254 49060 libpng-tools-dbgsym_1.6.48-1+deb13u4_i386.deb 30e6c7084c516325a21024855bac4ab89e33a7df 131032 libpng-tools_1.6.48-1+deb13u4_i386.deb b91192cef18b87a35e9a9bc7a442738825bc62fb 8052 libpng1.6_1.6.48-1+deb13u4_i386-buildd.buildinfo c164d3a765a31648fa23ea83040e2dae4eedaeec 102044 libpng16-16-udeb_1.6.48-1+deb13u4_i386.udeb 14b474b5ea11e96d2ab0ef856142a2e6811720da 217768 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_i386.deb cdc5a8ce37e280bf9045bae6c9260c4c6be072f2 289820 libpng16-16t64_1.6.48-1+deb13u4_i386.deb Checksums-Sha256: 26c6f44ad51d2f5c85b7aa6fbdf8315a875856043a2c67910709d8d9f8add87a 374048 libpng-dev_1.6.48-1+deb13u4_i386.deb fe75d880809aa010a102958eee499133661f830858b4ff46d32937cfd9211071 49060 libpng-tools-dbgsym_1.6.48-1+deb13u4_i386.deb 8d9b54b4ce01904f6f68c2725f4bdd65fe524987021b59528a3edd56da7e3292 131032 libpng-tools_1.6.48-1+deb13u4_i386.deb 4e276ee3560bf07b98d56e8317b9648d57240f63dd28d20368f89eb67e4e6872 8052 libpng1.6_1.6.48-1+deb13u4_i386-buildd.buildinfo e80e5630b9b5a34ba312faf334392b68c99d8d4667c7c5217bd7208d6ed1e8dd 102044 libpng16-16-udeb_1.6.48-1+deb13u4_i386.udeb 949a456bc770a79931e831140c7ec006964b643a9836d55a1764eafa86199c04 217768 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_i386.deb 3e3b3638721b87d472cfb6c4d4c61fd06e06c5694e465fd2fb101d20386ccab2 289820 libpng16-16t64_1.6.48-1+deb13u4_i386.deb Files: 5abdbefc0f35a43cdcedf456f103b209 374048 libdevel optional libpng-dev_1.6.48-1+deb13u4_i386.deb 965adb6391d32f731ea81a865c815e6c 49060 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u4_i386.deb af473bc9bb7369e815633290b4233a37 131032 libdevel optional libpng-tools_1.6.48-1+deb13u4_i386.deb 5568384f2ea8a5e7b06b97a76c2e4114 8052 libs optional libpng1.6_1.6.48-1+deb13u4_i386-buildd.buildinfo 2d3f54d788d102e17b30d40f5e80f26a 102044 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u4_i386.udeb 7d34c7a2c529f7561ee873675702335d 217768 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u4_i386.deb 690cc701ab62cb432333fa1a33157927 289820 libs optional libpng16-16t64_1.6.48-1+deb13u4_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmnL+JMACgkQbheoBegw XLLIPRAAgUxhUzWowCZJClw56cLvoSJdAYk50Tzk13nqm6c6EQkbJOSBOaycsSHO pMn5a7BSDczG36okfFMUipIQIMaB3cJqdwjzrOSm73DAXOZcdARxe1xaOmIW3qLF +3NrG2B3aaEbqf6xDkOo+4662zOpY6CjOxaWBZLUWY9ExomoMQwgpKDxRLHEC+ZP 78WPbox54WE5USYl/OjP6nqzRfszogl8nOcFzRchsRr9j9iSeTdS6Ojax3SxJC4m huhE5+AHy6fsfXKjt8OJcDq8Yp9pe9OMVcNzGY0eWfxdew4EKDruERdL7fri9Yg9 0lEPTY9INWgI56EbPph0RXszzEkPOt1JsPTr/bvUPWLnxEeZzsy7HkBoaW4uJKPa y5NgCWSFXaDidAq5NKsVfOoayRqKVoiONF9bjTsN7d1ypNgBZgOs0vU5wm/NBB9r JoswnDdNnW3W4+E+Wkndv6u4N1VYxKIO0ffq56NOmmUM+ekEa7hjG9J73dmrdIn9 BiDDgosIx7haUmOyrs/1gBuI6tcfpXDAHwPAZylU/AAglVhhxV69nW4fPkIJGVB1 B4ORVT5RyJOQy40Kh27w4TGncXOuWNsAmeSb8sGuJVX4pgyLNIXar0cMOQxNK4Wr KWfOLyClvYuJF8nJqU4WF+3ggE4Mx8KRLj4etv5gDYV09glXc+M= =11j4 -----END PGP SIGNATURE-----