-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 30 Mar 2026 20:56:49 +0200
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: amd64
Version: 1.6.48-1+deb13u4
Distribution: trixie-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1132012 1132013
Changes:
 libpng1.6 (1.6.48-1+deb13u4) trixie-security; urgency=medium
 .
   * Security upload targeting trixie.
     - CVE-2026-33416 - Use-after-free (Closes: #1132012)
     - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013)
Checksums-Sha1:
 fa5f8522d786388a3e62415824d9237b67bbcd8f 366964 libpng-dev_1.6.48-1+deb13u4_amd64.deb
 d03cc5a0d1c7c32e8834131b712df4de5e7a62d7 51572 libpng-tools-dbgsym_1.6.48-1+deb13u4_amd64.deb
 b7107b41d883f29fb4047779cfbc9f0a09ac820b 130200 libpng-tools_1.6.48-1+deb13u4_amd64.deb
 e25aba4314747517629029eb4c71583e21fd0f21 8160 libpng1.6_1.6.48-1+deb13u4_amd64-buildd.buildinfo
 84ba689fc9e36c3ca829b9b86104fdee975e0fbb 95196 libpng16-16-udeb_1.6.48-1+deb13u4_amd64.udeb
 301ca7418a0e26a35812e9290b759d7f2b9a3803 261584 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_amd64.deb
 995ea455759a0fe860366f62989b388d372131df 282860 libpng16-16t64_1.6.48-1+deb13u4_amd64.deb
Checksums-Sha256:
 b27274f04d3ae48044347077ba4a8468f61dfd88f4d0d7b246445c968ed85743 366964 libpng-dev_1.6.48-1+deb13u4_amd64.deb
 daf682d4e880356b3b37928c88df97c2bc6e16b9ace985cfda13cf631520acdd 51572 libpng-tools-dbgsym_1.6.48-1+deb13u4_amd64.deb
 3b8b06fe3aa9bc44921c74d5ee0a237ed5b7d10a0671365b18e55f29711a1b23 130200 libpng-tools_1.6.48-1+deb13u4_amd64.deb
 b3333634992a2778132d5f314f8dce45857bd29ce4d71953bb10aba293c21d5b 8160 libpng1.6_1.6.48-1+deb13u4_amd64-buildd.buildinfo
 754bb94243e5368888b2522f58c0083c1beb55f3aa832bb205b4ea1fdee380cf 95196 libpng16-16-udeb_1.6.48-1+deb13u4_amd64.udeb
 db81ef41e19181ff08443649e77ea95705436bf7685eb2cfb71d5f8b150eec10 261584 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_amd64.deb
 4fc01e2201bd2658511fe1c1f65d3bc20ae875b17945b507c6844c321c2946f5 282860 libpng16-16t64_1.6.48-1+deb13u4_amd64.deb
Files:
 1e540e2e0669e6cd4585de7c9f9a77f6 366964 libdevel optional libpng-dev_1.6.48-1+deb13u4_amd64.deb
 5ae6f2b70d7ab51bdb87cd67da931b39 51572 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u4_amd64.deb
 78ed57c46c10232e10bd31031a43179e 130200 libdevel optional libpng-tools_1.6.48-1+deb13u4_amd64.deb
 2e22dd0d484f3a434615fa1f20166ac4 8160 libs optional libpng1.6_1.6.48-1+deb13u4_amd64-buildd.buildinfo
 10349b45f5cedd7efc046bccfd19c8c5 95196 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u4_amd64.udeb
 9903d9464cf2f546daecb5938312236b 261584 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u4_amd64.deb
 c9a996c7ae6b8987e04257113603df9a 282860 libs optional libpng16-16t64_1.6.48-1+deb13u4_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=RLG1
-----END PGP SIGNATURE-----