-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 16 Feb 2026 18:58:09 +0100 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: armhf Version: 1.6.39-2+deb12u3 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-06) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1127566 Changes: libpng1.6 (1.6.39-2+deb12u3) bookworm-security; urgency=medium . * Security upload targeting boowkorm. * Backport fix for CVE-2026-25646 - Heap buffer overflow (Closes: #1127566) Checksums-Sha1: 8bae00c32a6917518ca16cdd44978926ee26182e 343512 libpng-dev_1.6.39-2+deb12u3_armhf.deb 3159be8c5fb623ad3c3cfcd9b6b95464ff3f167e 48116 libpng-tools-dbgsym_1.6.39-2+deb12u3_armhf.deb 397666f2cb95fb429572fd675855ed9d1ce5ac15 124692 libpng-tools_1.6.39-2+deb12u3_armhf.deb 3392a15333fb56e03496058b773a59b9cade3d65 7379 libpng1.6_1.6.39-2+deb12u3_armhf-buildd.buildinfo 43f8b259f2a57f7c4e8340116aee257d67aad90f 246940 libpng16-16-dbgsym_1.6.39-2+deb12u3_armhf.deb fbff137fc5428763fb19f8855da3d3171313a153 76436 libpng16-16-udeb_1.6.39-2+deb12u3_armhf.udeb fbe29cc2c3972b94a1e97643d7173a75ff626798 260176 libpng16-16_1.6.39-2+deb12u3_armhf.deb Checksums-Sha256: 95fb556b0b78009c52185a943b07c81dbed6f1cb8e47925096dd607cf3eaf44b 343512 libpng-dev_1.6.39-2+deb12u3_armhf.deb c685cc7f360c7402965a23374ea3703c60b475ef6b27623763dcd8bebea1169c 48116 libpng-tools-dbgsym_1.6.39-2+deb12u3_armhf.deb 698f7ffc9d9d5cde03277f77afe815adf6a429658cb2671c17f8744603f113e3 124692 libpng-tools_1.6.39-2+deb12u3_armhf.deb dbb6f985b1182ddefbfe7a87ca15c480cb4bca597688c7c92e11dc1049e6b729 7379 libpng1.6_1.6.39-2+deb12u3_armhf-buildd.buildinfo 5e9fd6e8ba0bf586ba8a5d647249c5148b87ac5e21ea5b3201ce278b88c5f17d 246940 libpng16-16-dbgsym_1.6.39-2+deb12u3_armhf.deb 98f4ee2af8bf2820da9654ffc9324bc1ff6e6d76843b636f9e9dc38224c2be24 76436 libpng16-16-udeb_1.6.39-2+deb12u3_armhf.udeb 62972a11236a2e2de246693cb6b9479ff262ce2a36fd942504630c136b68ac05 260176 libpng16-16_1.6.39-2+deb12u3_armhf.deb Files: 281bb5d1cdf0db7fd584060f31c90507 343512 libdevel optional libpng-dev_1.6.39-2+deb12u3_armhf.deb b178102dd777e5758b96fd95b0c8b78f 48116 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u3_armhf.deb cfb8844154d5fd5bd144d0c90f9278a1 124692 libdevel optional libpng-tools_1.6.39-2+deb12u3_armhf.deb aa23af4b01bf96ae3910de65a179a923 7379 libs optional libpng1.6_1.6.39-2+deb12u3_armhf-buildd.buildinfo 37190957dba01b2c47e469e312a26297 246940 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u3_armhf.deb 14deb601395228d600268aec458641f7 76436 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u3_armhf.udeb 9168176f6a1c3726e29a7f859ed0e072 260176 libs optional libpng16-16_1.6.39-2+deb12u3_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpxWVfktWxVoKRwGgJ7tNDw2WyRsFAmmUNKgACgkQJ7tNDw2W yRuETQ//TAprWM5uH/IAYOT3ubQ3P10qO17+2SiXLzvxKZFDXzcH8GGm7/swgQtz macgscPMWFNACOFR5L+vtFUy8Fr5cT1rRDmm7eDm3af5auOYvidkJui5DXsC+qaz tM2vvLUeTQLGW+12d7pFD5PWX8UmniTkE+QkgBIwwzh+ddsUxYe324abpLI/Pm9u fkJaurWRYlC6Uht0Kr0sztqnQVP//g6FN3Znx9G6MM7x9aWee/6cQjZsSqZpSosT bOTwuT/2i6ZilkU32JvSoIzb6165gZJVOps8uzJV3RNPjJ3h+FDyZpAFlMjDXOvf B8805dCSyLqsdKJGoFecXXrc5PqRfUEHOCmM1OBaOFABoYo3UwTEU7A/4lS0LEPi GmUjIFRmEkKB8N+XoRtu1r+P7vBv4NZMg68cU3lWtNeP30IwHMHz/xGgBots8cGO B3B/r5wd1+F4biDIpf9T/oRAhO/wRa/0bryHqeH4MMnfsTuPE+Fv7IoweAZsE2mt 7H6D4YSC1+KLuGtc/9t6Y9L3mtsdBlqb1QCxZdMFQUbobA47qPd2Mb4n2pB8aFmK oKP5QoDjoc3yJFYxluy1CRXAbH/CdTBvZ20bxaBzANKFTxOZLgPseo9bw37KSeHK +Hn3GmMXJwhKC/y8O6XXIIHk+QNX2RQ1m13SZ9Vj++uLngoBGo8= =cG3k -----END PGP SIGNATURE-----