-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 30 Mar 2026 20:56:49 +0200
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: arm64
Version: 1.6.48-1+deb13u4
Distribution: trixie-security
Urgency: medium
Maintainer: arm Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1132012 1132013
Changes:
 libpng1.6 (1.6.48-1+deb13u4) trixie-security; urgency=medium
 .
   * Security upload targeting trixie.
     - CVE-2026-33416 - Use-after-free (Closes: #1132012)
     - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013)
Checksums-Sha1:
 abc4baac29f1454e492d5fddf2092708e1026be9 360392 libpng-dev_1.6.48-1+deb13u4_arm64.deb
 224e23b103a3ddea700d0e4478d31e7687b8ad1c 49388 libpng-tools-dbgsym_1.6.48-1+deb13u4_arm64.deb
 750793a426b4e616a1ed75e0c5248236408c398f 129248 libpng-tools_1.6.48-1+deb13u4_arm64.deb
 4a9f39b42113218a1b068213e31499164ca23b6e 8147 libpng1.6_1.6.48-1+deb13u4_arm64-buildd.buildinfo
 03fd95a2a308f737b4322eab2e9ad4031be5ff1f 87460 libpng16-16-udeb_1.6.48-1+deb13u4_arm64.udeb
 5dcfe6dcd3f1d13aebe6230d9bb7df74e45da53d 257616 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_arm64.deb
 decc2d4c007b5bbb1dbe2251a0c9af021bdea695 275164 libpng16-16t64_1.6.48-1+deb13u4_arm64.deb
Checksums-Sha256:
 8cbf22933960bb9b504cf3515709ef57a5d03bc887d3ff8a9a684ccdc979f334 360392 libpng-dev_1.6.48-1+deb13u4_arm64.deb
 b1392736ed75de7aa5102715a25acdb44fbe67531fff48df7ee6a81797add7c8 49388 libpng-tools-dbgsym_1.6.48-1+deb13u4_arm64.deb
 d210512c8a6d41598a5473d6d54c5638f6128c55b1a9e7ee03782a82497fe103 129248 libpng-tools_1.6.48-1+deb13u4_arm64.deb
 736af01ce0141a9a71734859f065518cf4eb36de3fed7981663fca0fb336a6f3 8147 libpng1.6_1.6.48-1+deb13u4_arm64-buildd.buildinfo
 520480c37759b76067762ddad721a79af647275ce8e69157c4db4f681ea2ce2d 87460 libpng16-16-udeb_1.6.48-1+deb13u4_arm64.udeb
 9ebf84a94ac14d1a081c4d4637089a332dde249045886b4e93118fed05715b1d 257616 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_arm64.deb
 cd815d564dd9204f0fe75102d3e288607dcab757a27e413762dd13e8d2853da9 275164 libpng16-16t64_1.6.48-1+deb13u4_arm64.deb
Files:
 cad430778eefc8f2f5b677ff9dbe7d09 360392 libdevel optional libpng-dev_1.6.48-1+deb13u4_arm64.deb
 7f160b9a8fd86caa8b1e9ba25e3471de 49388 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u4_arm64.deb
 c5563008415e1517b7e548318f311572 129248 libdevel optional libpng-tools_1.6.48-1+deb13u4_arm64.deb
 cdb580399d8f9d9f125dc834a8c22991 8147 libs optional libpng1.6_1.6.48-1+deb13u4_arm64-buildd.buildinfo
 b1cc7361e3b9108e57cec54a2dd2b9cb 87460 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u4_arm64.udeb
 c1e79b578004e53425e343b1e4d51c46 257616 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u4_arm64.deb
 9fabc9edd76cab3fd6bb3c281fd61df0 275164 libs optional libpng16-16t64_1.6.48-1+deb13u4_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=5yp1
-----END PGP SIGNATURE-----