-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 30 Mar 2026 20:56:49 +0200
Source: libpng1.6
Architecture: source
Version: 1.6.48-1+deb13u4
Distribution: trixie-security
Urgency: medium
Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1132012 1132013
Changes:
 libpng1.6 (1.6.48-1+deb13u4) trixie-security; urgency=medium
 .
   * Security upload targeting trixie.
     - CVE-2026-33416 - Use-after-free (Closes: #1132012)
     - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013)
Checksums-Sha1:
 97224220ce22783a407a33be9ffce70196d465ec 2286 libpng1.6_1.6.48-1+deb13u4.dsc
 733c68d3371321f6565b8b82ef250b2afee06f65 46420 libpng1.6_1.6.48-1+deb13u4.debian.tar.xz
 b845d1fb16e578fe54d6b6bc4264fb728161d270 8548 libpng1.6_1.6.48-1+deb13u4_amd64.buildinfo
Checksums-Sha256:
 b220c572561d36d334d755c189390fde61291d833828761d82454b512b2d61bc 2286 libpng1.6_1.6.48-1+deb13u4.dsc
 dd9b025d82ba032d544ba56e301b05601f20104e7d36fcb2006082b104b50a3c 46420 libpng1.6_1.6.48-1+deb13u4.debian.tar.xz
 17e0bb59de9c4c13abb45a6e7812ff18da67246171005335218452db2211ce6b 8548 libpng1.6_1.6.48-1+deb13u4_amd64.buildinfo
Files:
 cfa7ef1bfd363a3967a6051414bf6b0b 2286 libs optional libpng1.6_1.6.48-1+deb13u4.dsc
 5244c1038479af293143a6365cd0ab3b 46420 libs optional libpng1.6_1.6.48-1+deb13u4.debian.tar.xz
 b6cc9d38eac52e4797071c629834f65f 8548 libs optional libpng1.6_1.6.48-1+deb13u4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmnL8y4ACgkQkWT6HRe9
XTYfjRAAru4/KFyTWboNH/gZwZDl2cmytFbaQ93bffjOdHangmSbY7AdgkS42MGN
8Ua9Dp4bGDdEfkEWHUdnbOO5i7Coyl177PyXtBbEuxoxzReVDMSrf0DAuQSPmQ5V
fH/c8xCk4G46D0aIaycx8kPbjpytN8ZsLfPznKLHpnW7Dv8FT4J2z/tu5RwHOPO4
L1ukGMGWNGcrahyrjE9q12+dpj0Z6Dhhez6TMUNFJJNRSJcHjZ0pvPCDR6v9bZKQ
lQx/xHdw7npXe6QcNM8vROE51cPLg8ugurGYR5FZFUAPslUpQ2wt6h0lcftR4r9P
0oj9QSHX+mn0Wy2OGABbcnR5jCq8IPgE5+y+89DvdKwpmw8iVBnen8NDBM1gtt2O
ueeESvJmwnOTrfftSrqUq2YqrGkNQItVco/niDsqWcesClmUfKhJPdcxsZebdU6p
/5PKHl09nOxdOgM8HC4ub0WBvZ+8NCZfXnBpV1dYb6b75o+zWDIodaCrwO7otqtS
FxQdsYAMDMO1H0vqePyfXiTdmmJLupPndtlp41NGeoboS3c17FWrCpalSD85/se2
FBgY+y2nx9sOOXeFsZVb83KLo3pxxAI44eXOa+heMNXICwtHD4DYfO2vXTikDdHI
+b7eCsRuvfiXP9Sphjp5DAF8sEz25hOHlAf13MFP0aToYBfAcYc=
=UU4x
-----END PGP SIGNATURE-----