-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 20:56:49 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym Architecture: riscv64 Version: 1.6.48-1+deb13u4 Distribution: trixie-security Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-03) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) libpng16-16t64 - PNG library - runtime (version 1.6) Closes: 1132012 1132013 Changes: libpng1.6 (1.6.48-1+deb13u4) trixie-security; urgency=medium . * Security upload targeting trixie. - CVE-2026-33416 - Use-after-free (Closes: #1132012) - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013) Checksums-Sha1: f458042503c7fdc9d84e7854c42640a14b3fd2f5 513484 libpng-dev_1.6.48-1+deb13u4_riscv64.deb 07ac3f6ab71b37aa1c716c15652d80df91047fc4 48372 libpng-tools-dbgsym_1.6.48-1+deb13u4_riscv64.deb 7b58f0ad18f01b663e3e0174617d922f04985bc4 130568 libpng-tools_1.6.48-1+deb13u4_riscv64.deb 64a9d3e1bfabe38b6b3e9d7717259d428d5ebdd7 8128 libpng1.6_1.6.48-1+deb13u4_riscv64-buildd.buildinfo 019de1d9aa2e27ad145d023666d871dc613c16fb 98860 libpng16-16-udeb_1.6.48-1+deb13u4_riscv64.udeb 3252f94b803be095e8765b5c217f482e57c6f56d 239784 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_riscv64.deb eef19a7135b6af92f2fd4641d8497e5abda0959a 286448 libpng16-16t64_1.6.48-1+deb13u4_riscv64.deb Checksums-Sha256: 50e6988ec0268b4e453268e4345f43bf03206fb96dfa116d75f025c6689d329a 513484 libpng-dev_1.6.48-1+deb13u4_riscv64.deb ffb9e821f1bae6fe20532e31be95984024e3f9c9df03dfada57fdbad370b7f79 48372 libpng-tools-dbgsym_1.6.48-1+deb13u4_riscv64.deb a88ea5109a16a8ed650b89378a7bd3fa69295d561c68a0e76bb7c67c59681654 130568 libpng-tools_1.6.48-1+deb13u4_riscv64.deb c880d1228f24c6a987f93789797e05f9ca002f91c0f990d069b6b4cae79532bd 8128 libpng1.6_1.6.48-1+deb13u4_riscv64-buildd.buildinfo 849b0d3c5bd0f94bb8064483f026ec5aa17f37f74d4b830338c461e2fe43d1e4 98860 libpng16-16-udeb_1.6.48-1+deb13u4_riscv64.udeb 6d9d8f2e7052d3a8900c8b017783b53c9967867b5865d6e58c8589a40044d086 239784 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_riscv64.deb 81fb28aa4de4417b55217d0f1f90eec39cfa65a8897bf1547b2ce42a7937b3c1 286448 libpng16-16t64_1.6.48-1+deb13u4_riscv64.deb Files: 110debb1452a32e9fa6000e3abb23278 513484 libdevel optional libpng-dev_1.6.48-1+deb13u4_riscv64.deb 92ae8cee146c34f3e4bdec50401b29f0 48372 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u4_riscv64.deb 19eeb9378db0408f66948839d0fb3ab4 130568 libdevel optional libpng-tools_1.6.48-1+deb13u4_riscv64.deb 6dfb8749967d314f9ba23652335dc06d 8128 libs optional libpng1.6_1.6.48-1+deb13u4_riscv64-buildd.buildinfo 47412c4b5240a0d0b7cd680655a90630 98860 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u4_riscv64.udeb d84f5bae7b16230fb2618be047079cfe 239784 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u4_riscv64.deb b99b0b0bfecca118ee2c189793f2ac0b 286448 libs optional libpng16-16t64_1.6.48-1+deb13u4_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEXZ9jHPkg/vETgMJZlJNduPxUf2oFAmnMBBgACgkQlJNduPxU f2of6xAAsgGB71H+JXzOOWVSsIumBK+hfc8yAdkyV6qSs2nl4BQrFbLLrvpS+zXb ZCtOainQXiH8DxdAOT613ZND++zcYNJYwsJwT8jgGKHns18c/CL/SHpm26wctGQ5 tRwlhe4tVFkxw4TbwxIEYTU9Yn7MqwbloJd6a7sgS9B2ZTHaJlojr4dHnctAMSx4 P41uPsyaf9gV6dk9J5pi2db7nTleHXpZ4nivmMtCpMrqdh2AuUo636doQT0liFq5 dVheAmC+NArrAxelZcUPGHd+3bFbM7tAcE6bHTAfI0HhcY0c9oWRrdN27hjZrq3Z LQGIJQpIopUuBSTGtIeOOpLhrUdREte21gY6eldo/1gDf9LkDbBTfVcicyXqIwV/ UZLgILcPcNMce1KRdeYZPdLxi6ewADHKtjFzUNQD5cL15Dfg5e+52Z25sa+ERIg3 zcVFneAIYvgtqXgj7LdNapcWNYEwbBHjPFjVADDQtxvMuLD1zmerPpf0Li9QZ851 l4RTJMWs60Ttw1DhB/FNswHwqktgLgoTyAn3VBw6llo+XkPwsiQ/QU50GPFInS2G q4VUYsuWHXYC/BnxHxxQ4vVPaNbpVINMVEl/buWPp71XN5NP3RLKjiEofTAxC42u aWoONi45tAluWBThcRY9hbbZzkyWxUFa2bNd8anV9T+MMRsC6+0= =+G/H -----END PGP SIGNATURE-----