-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 20:59:03 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: mips64el Version: 1.6.39-2+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: mipsel Build Daemon (mipsel-osuosl-04) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1132012 1132013 Changes: libpng1.6 (1.6.39-2+deb12u4) bookworm-security; urgency=medium . * Security upload targeting bookworm. * Backporting upstream fixes for: - CVE-2026-33416 - Use-after-free (Closes: #1132012) - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013) Checksums-Sha1: 4ebd253227ab5b57c76757fa7ed4babde265cc0e 364736 libpng-dev_1.6.39-2+deb12u4_mips64el.deb 4ee4a53e8ffba4ec097e348aa38c7a53d7554d69 50740 libpng-tools-dbgsym_1.6.39-2+deb12u4_mips64el.deb ddd811a73a4369c6ee33d29eb1901770c3fc09fa 127088 libpng-tools_1.6.39-2+deb12u4_mips64el.deb 43b9250317947d90cc76fd512844e2ac9a80541d 7376 libpng1.6_1.6.39-2+deb12u4_mips64el-buildd.buildinfo 93fc16d67c7b29a4a1a7431394adad035e53205f 252864 libpng16-16-dbgsym_1.6.39-2+deb12u4_mips64el.deb a285392fa41583d1299b991bc373925655cecc3d 87076 libpng16-16-udeb_1.6.39-2+deb12u4_mips64el.udeb bd36a7ff5beac0207f953848d179eb2f01223eea 270024 libpng16-16_1.6.39-2+deb12u4_mips64el.deb Checksums-Sha256: 428cfbf9aec870b389e225d99b737cd5a3cc2b69e83dee5c55ffa73ed432e3d1 364736 libpng-dev_1.6.39-2+deb12u4_mips64el.deb 39a82838a615fa1ee33927ab1bacd01f91d01100b8f0a8ab3e7337ec6007cf93 50740 libpng-tools-dbgsym_1.6.39-2+deb12u4_mips64el.deb 35eee769a3ba95c77cd257f7a4942c1bca753e97967f71b662967e8234ad9d68 127088 libpng-tools_1.6.39-2+deb12u4_mips64el.deb 15026b3eabe41fed31dc665637d2bd3e614c89b9d3c5d9fd8deabe21eff6f3ac 7376 libpng1.6_1.6.39-2+deb12u4_mips64el-buildd.buildinfo 3d03a9e5fd4d64947ce19d1413251ee3b67a234259d9fe2d5f6256bab59ad08e 252864 libpng16-16-dbgsym_1.6.39-2+deb12u4_mips64el.deb b86473e5833c4723a81c842d6e179edac020f4859a7e6c3205371377af119e4d 87076 libpng16-16-udeb_1.6.39-2+deb12u4_mips64el.udeb 076c60b308bd0cc37c28580f43ce32428a322ae4e2042c080e02f8db569e0af9 270024 libpng16-16_1.6.39-2+deb12u4_mips64el.deb Files: a411e2f8fc716154ad1f7ff4c49350e8 364736 libdevel optional libpng-dev_1.6.39-2+deb12u4_mips64el.deb 5a4f57faf96831d2d8a93079a7b77362 50740 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u4_mips64el.deb 527fa4daa45f40550a8be7e1bf2acfe6 127088 libdevel optional libpng-tools_1.6.39-2+deb12u4_mips64el.deb 3ec40cc21cacd80e402d5a2d3b36cef2 7376 libs optional libpng1.6_1.6.39-2+deb12u4_mips64el-buildd.buildinfo 0806b98531465c2796aa2d17729e417a 252864 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u4_mips64el.deb 70f01f3ef4adf12b0ee01cada8d4f077 87076 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u4_mips64el.udeb 339367d150b164538e850de143bee121 270024 libs optional libpng16-16_1.6.39-2+deb12u4_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEyYUQCyzsgu940OiVpwP2OD8jZaoFAmnL+VEACgkQpwP2OD8j ZaoOERAAlmEAXQR2AspOXGSIzbTmjZ6iRQSPAnqHMpjye22OY8FAClSWVTYHEkE0 MRnY0iBeWyJFE7N13E2/XTZB70O7AvsDhrtn/pTkg9oSvWOyAV3nJEzbeFpef6eU KAz0ltAWhI8icndL5dS+RdnnODyOy+SyXOwmwVkT0sfG78hIe4ZnNcrvGeTokFhu FX9+4IhPTwwOPvrRl+8UahNy1ZxugmKo524fQqmM1QJbmUVhapr0HmSCqhBTdq/P BkHe1tXSI7Fn/UDMzpALnd/vEuxzxJ9v9cYBOXSnc2APsOsiFn2wG63SkYrJXZmJ 12xqoZeKGScB380bprWhyn0QPcg5UUooBOr2qNUXZrYwua+o0KNxJiOeykTKgphp sFXkSbJEm1wzd+9As8e0PU3qaNP3CVwZtoHx0/p2WXScEK3W74WMZykoNhx3L3jL 1by2FoT0J7VAG6EIseJElf+kSBUjfAghH3FsOVd+OPfHM9tw2MTmEyn0N9oHrOGW Ej8U0W1SzXis+5PQka1KSjSKa1qikhsp7D3h+CFkgH6ljCbi+gzznJqIE12ioSPn bkLy6j8NtX6iEi8e3UMCfkuJhmbnhfAx5gONYn44D3gpITVPU8dbZlZVTyhfGyq5 BP6nTt/TLYQDbcyJ7r4Ti5Q/rQq+cOHvv4cID5Kzjspfj/yXdZg= =ntK8 -----END PGP SIGNATURE-----