-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 08 May 2026 14:19:08 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym Architecture: s390x Version: 1.6.48-1+deb13u5 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) libpng16-16t64 - PNG library - runtime (version 1.6) Closes: 1133051 Changes: libpng1.6 (1.6.48-1+deb13u5) trixie-security; urgency=high . * Security upload targeting trixie. * CVE-2026-34757 - Use after free. (Closes: #1133051) * Cherry-pick upstream regression fix for previously fixed CVE 2026-33416. Checksums-Sha1: 87cced2497da2f709d3d8415c12d51d68ba0cd8e 368352 libpng-dev_1.6.48-1+deb13u5_s390x.deb a150055f761a3a955f6d00080dcb052d6de429e6 51212 libpng-tools-dbgsym_1.6.48-1+deb13u5_s390x.deb 982c86ce514f56ecd8d5b7e75878efa6c0358237 130532 libpng-tools_1.6.48-1+deb13u5_s390x.deb 01f5740c13456d7504fa236b2599b0d6bc2182d4 8022 libpng1.6_1.6.48-1+deb13u5_s390x-buildd.buildinfo cae2cfd4942feb7c2f267cce85402611e6da0fc3 96620 libpng16-16-udeb_1.6.48-1+deb13u5_s390x.udeb 88742dbe860f62cbc1dcc6818aa63c1e65021e39 256788 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_s390x.deb 6bae417ca8456a9349ae4d6d889d3f9cc0c151aa 284504 libpng16-16t64_1.6.48-1+deb13u5_s390x.deb Checksums-Sha256: b71d641ff3cd9aea11a210eb6a8bdf183642cbb06ab37de7562500ba8125db74 368352 libpng-dev_1.6.48-1+deb13u5_s390x.deb cef3b4e828215e4e378e1cde499e0fe0a50f30a1eac23ccc188d5a1ca5aa3de8 51212 libpng-tools-dbgsym_1.6.48-1+deb13u5_s390x.deb 4696de1220209312195742516756142575e6fe8667a684917cc84941483280b2 130532 libpng-tools_1.6.48-1+deb13u5_s390x.deb 840bc9a411ee22fa9f350016574e4b0d764da72099bea40836023d38564d8340 8022 libpng1.6_1.6.48-1+deb13u5_s390x-buildd.buildinfo 41ea6e4c8ed85748eafd103d2a4ccacb289d6f4744ced72a8c138a3bb4605c5e 96620 libpng16-16-udeb_1.6.48-1+deb13u5_s390x.udeb 4ee696e8d5a562c695d6cc140c6435728d0c650b0d011db1b6809634c53857da 256788 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_s390x.deb cab6290dd40e190e87af81cd417d5202d83422df1117d02050ae08093b156f03 284504 libpng16-16t64_1.6.48-1+deb13u5_s390x.deb Files: 831c6bc9a11ac4061844d68c8041fc6f 368352 libdevel optional libpng-dev_1.6.48-1+deb13u5_s390x.deb 91a48b543ecbb43a0fd5b4f431832a6a 51212 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u5_s390x.deb 65ebab829ecc0e4074ed8575fef7586e 130532 libdevel optional libpng-tools_1.6.48-1+deb13u5_s390x.deb 02bc08562d513137ace4122202af8d0e 8022 libs optional libpng1.6_1.6.48-1+deb13u5_s390x-buildd.buildinfo 8aa0d740c3045152cfbc903375a90568 96620 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u5_s390x.udeb 4d3f18fbc7442b832071ad53f632e083 256788 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u5_s390x.deb bbb08ba3d5c0dd78442b5b189d442249 284504 libs optional libpng16-16t64_1.6.48-1+deb13u5_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmn+EEcACgkQkaCrxAR3 BY3xWxAA2HwPggLxls0v6cVI9sQX0CMa49qEZz3SHch3sMcxPZ/IVieJYqgYZCdr gPpPj7LYirdG0lqqzXIQKkE17Fm200WHzSd9T6seUctN/s99pksESgmdl3fk8uNv rMZfVzin6qP1qNc3Jo31qLpynwlpm/SJHjcBlU3minztDlgAm7bVkk61EJM1E/ME LKghiIjNbz2fvx+6lp0Ws1t+84GaeoPYnDbgxZkvzzWAD/uldTxx+4pt9TDIZJrC 6Pn2IJbLhRQLf+n2VUurP+0doWNp/JkhiTXxSCCN8o5lrUl64QVqkvYclFXLVdl2 xLl9CeYvE2GiodXylVmzic4hfZmbl8YQnzxWLU0q2UoqTh3FlS9SqQ7vRtPownWj nMacIYmPsuB1zd0Dab5zdw7N9Rc7kDqBpWwm6eaSg0PZjlYL3BGaBlngDgdOb/aY vTcov0WkowOUECsggFqZgSM9SQgCbT3mwpLR5hQpVaP/f1wlqNZoKLMTN/3aKSrG 0dspnoIjq5bod+NAb2MwVrgudzcMQNqHr+sL1F02ZQnOu54oQni2U9+J4Z4yFNcO ppA0hj/7QJWnNXXpgS2i8lYQkFluznZDrSrZE2Yb336GjYjebNagnQmMsQ1KehWO gGPlOsnp8QpAThHf0pFCod0hUtL5YQnJWVEiOI4EXOt4DQtjJnw= =hxgL -----END PGP SIGNATURE-----