-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 30 Mar 2026 20:59:03 +0200
Source: libpng1.6
Architecture: source
Version: 1.6.39-2+deb12u4
Distribution: bookworm-security
Urgency: medium
Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1132012 1132013
Changes:
 libpng1.6 (1.6.39-2+deb12u4) bookworm-security; urgency=medium
 .
   * Security upload targeting bookworm.
   * Backporting upstream fixes for:
     - CVE-2026-33416 - Use-after-free (Closes: #1132012)
     - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013)
Checksums-Sha1:
 de0ade71ebf2f0b355a7b6a53754a05a2a925b46 2273 libpng1.6_1.6.39-2+deb12u4.dsc
 9729ac1261f0296c0d3ba0fe870b35f0ea7605d2 43828 libpng1.6_1.6.39-2+deb12u4.debian.tar.xz
 a6e30b57fd0a892807e74d1e06770e76d75b6530 7758 libpng1.6_1.6.39-2+deb12u4_amd64.buildinfo
Checksums-Sha256:
 791697954364ff0f47ae987c8184f715c913a768d15c46e84dea0d1863e68f03 2273 libpng1.6_1.6.39-2+deb12u4.dsc
 5cd2cc6e94aa3a876a1890b9ddfefb266f7a51dd644bebf0c387d3e57181d573 43828 libpng1.6_1.6.39-2+deb12u4.debian.tar.xz
 21a77b576160273c7ecda3405cf0a47987350cd4e20ab3d5e6f9db0abc5551ce 7758 libpng1.6_1.6.39-2+deb12u4_amd64.buildinfo
Files:
 76d24a47d1f508792d4bc702a78683a5 2273 libs optional libpng1.6_1.6.39-2+deb12u4.dsc
 ce82e30fa252c7a8ff44fb8e3364eca3 43828 libs optional libpng1.6_1.6.39-2+deb12u4.debian.tar.xz
 c43f402d54eb3830ccaecced711f420f 7758 libs optional libpng1.6_1.6.39-2+deb12u4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmnL8isACgkQkWT6HRe9
XTaJtw//TWFmN4nXoDkJCeD9oFgZMyMbBZQI9Ts//olwBewxZuyo66RD52F0kYrQ
Qh6uV56DY6WoQwx7XwfTyxtRejfQIj+dFMRrrNbWPztpZuc9Kq3hHfp/iYN7PcH4
C9cAOiNlkrvjzR/gCFY22gFOyj+jwaHZWfJjWTCEDkQxTJFJHhCScTUQoerzgv9G
CK8WE3oI+ZHIFrBxqNIJZnetk4fRw8NOXmFDOUf7CkdeIQiC4U7Q/UnE1N9tVqxP
nuAGHJKzc9XW6Snsnm9j59mjY5Pdbh7kO0Sb5yS9Sh3b3yzPQXOXWMvI1mcMsICo
bcuz7y+Nw13fkepSpEpES1RQIfMBtQizBDAXRjZxyke8XXLiAhtpoBcKytuJ2lKo
MWHvGLbNBn+IeJFL6PYZGRy/nFvtXsMcElaFGoA+b37woS2ZK+wxreJ9y2k48xDe
v5dTz5IXdQ4Aiq1nMP9ko+LfdgUmTr+GWH7rnOoGnx/+4ByhwHinpl9vo7Y+X5S8
EzaG3OzFzZHu5BrhxMrBmcBV6eePRrpptb+UIxUyHd9e+uBgKHWUQL7gVov7oMXq
FToyVyCVb4uauOEiGe4Go/KaBjDbf2ngcpasJmjmI8+m/gySm14tqPbdUf114FZD
Mz7veNSc+2yi45oj8G7yCK8quc+AwwoBLe9F/OP9Fnlm+JmdxDc=
=aNbV
-----END PGP SIGNATURE-----