-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 16 Feb 2026 18:58:09 +0100 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: arm64 Version: 1.6.39-2+deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-02) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1127566 Changes: libpng1.6 (1.6.39-2+deb12u3) bookworm-security; urgency=medium . * Security upload targeting boowkorm. * Backport fix for CVE-2026-25646 - Heap buffer overflow (Closes: #1127566) Checksums-Sha1: b07f0b314b438667b527c350ab79ea121c86163a 355064 libpng-dev_1.6.39-2+deb12u3_arm64.deb 808ec81128bc3d67f3fbe8670691a75ae2329b62 49424 libpng-tools-dbgsym_1.6.39-2+deb12u3_arm64.deb a9f462f7c0a252efbff55f0570c423ea3086839a 126348 libpng-tools_1.6.39-2+deb12u3_arm64.deb a430e0f550b1e2e34e77d83fe62a667be33c255e 7535 libpng1.6_1.6.39-2+deb12u3_arm64-buildd.buildinfo 71a98113db0bf96370f9170c31cd6ccfb550e9fa 256340 libpng16-16-dbgsym_1.6.39-2+deb12u3_arm64.deb a8ff6c6bcb9ecc75addd998e64c63bd50dafa31b 87140 libpng16-16-udeb_1.6.39-2+deb12u3_arm64.udeb 757a08bd5f27319745545e539b8551a645d9c8b0 270024 libpng16-16_1.6.39-2+deb12u3_arm64.deb Checksums-Sha256: b80c9ca4243d195788d6eb17fb5e8943b811064084e7c7102c1fe4d4f4fed378 355064 libpng-dev_1.6.39-2+deb12u3_arm64.deb 57a22ebc6a2540c57be768d926125484f6158833cd3822245c0e446f4b3d4467 49424 libpng-tools-dbgsym_1.6.39-2+deb12u3_arm64.deb e76ef0f3f985ad3f567ba8d61345ba041438eda470f7363ab594fe821a6fd75d 126348 libpng-tools_1.6.39-2+deb12u3_arm64.deb a1b1bc747e6e2e1eb932e5b9b418d0598a07461c72dd9c9330a2fc9b26522535 7535 libpng1.6_1.6.39-2+deb12u3_arm64-buildd.buildinfo 885af5dbd6b5b91886c4cba6939fde8c121720b687b095d495815b8718c2eb8e 256340 libpng16-16-dbgsym_1.6.39-2+deb12u3_arm64.deb 90d26a5462f33782731097bc10e641993b0e4d1dd6abce8a01d335b4a64d76bb 87140 libpng16-16-udeb_1.6.39-2+deb12u3_arm64.udeb 21739138f6d67d8276609054469d1e3adf6f72aa2903ebddb62927af7df18d39 270024 libpng16-16_1.6.39-2+deb12u3_arm64.deb Files: 4f241722d7b10efd94fe99d1b4a90270 355064 libdevel optional libpng-dev_1.6.39-2+deb12u3_arm64.deb f66415f0e3a4cdd69a6b16fff3450c4b 49424 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u3_arm64.deb 09b3904bcf100873fb5df1460377ad95 126348 libdevel optional libpng-tools_1.6.39-2+deb12u3_arm64.deb 43de73fbc0a0b8213fb902461c2853ea 7535 libs optional libpng1.6_1.6.39-2+deb12u3_arm64-buildd.buildinfo 8ee6b6077c70a2903a64a35d137257aa 256340 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u3_arm64.deb fde928661c02b7b0eef63620bf78bd73 87140 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u3_arm64.udeb c087fb03665d2fc2e51020b0d7c712fd 270024 libs optional libpng16-16_1.6.39-2+deb12u3_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEWHj9K9pO9l4btbD1OQKMdMnEH5MFAmmUNMsACgkQOQKMdMnE H5O2DxAArfdpEEu2Yf8x2P2sb4sNSH2ECk0UYzKOYJTDnCiF2m60fkFs53ehejYb UarumjqCzEVmLWPkWMJCHHWa0vu4bdsSXT8ij8Dq9Z0PUylFEqNPhYjy84fIjNWw lnI98G5JimgnwMatYwFAog9v2Byd1eYyqFq7eYvQtkrlbJvzr4pByAYkSWBKOdWs 8o0vYUj9vRrc79snmUTdph83MHUqi7QUAnwSQdJJG61S2x/VZKnVGy9m3+JSQ7GT j4wNtKX837+8uTRwqCaz8oWY73JbB12BjwW+RzOeyge0IA0+TDaUaq/8+PAYs4nr LUKDeUAMkvqM7vlGge3igyl0ArvM2sdMSzbCYyrJe45FdQfp1ZOlNgs1Qy7UazwZ sY9UoWy1bnahp9/WB5r//O/tSfwEts2dF6rnI96A30saYIP+iTIpeiScYBLbwCll 0lWyWNyuP69lNZqxmR6xqcwa7B6v10H8ticF8s0BvGoVdONc9kmtXHAK90OwVQed JDvQoDFFG6VDKYYVp6YCXsxnytwAm5BIOt52JplMNCb2SJTo1oG+BY0b3kXv8KTp 3ahOzL28RAOGJCgrmzgfUdJP2jlY/0vaRkUmMv/PO/sZclcLZOGRfAEZWec0U4kQ fUdIwDnKfUgV0KvsI3AlE8XYkTC4AqkHKdGI5DfR+wF/5eHdp0Y= =MRPN -----END PGP SIGNATURE-----