-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 14:19:08 +0200
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: armel
Version: 1.6.48-1+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-03) <buildd_arm64-arm-ubc-03@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1133051
Changes:
 libpng1.6 (1.6.48-1+deb13u5) trixie-security; urgency=high
 .
   * Security upload targeting trixie.
   * CVE-2026-34757 - Use after free. (Closes: #1133051)
   * Cherry-pick upstream regression fix for previously fixed CVE 2026-33416.
Checksums-Sha1:
 745e5453dfd10df702823c0832e5149edcfb77d1 351336 libpng-dev_1.6.48-1+deb13u5_armel.deb
 accb252f3323e3a60bbf0091f4e47dd9b0bb9a60 48328 libpng-tools-dbgsym_1.6.48-1+deb13u5_armel.deb
 32d0ddf3e3bd3fb125afd7b56dfbb8158b754cce 128044 libpng-tools_1.6.48-1+deb13u5_armel.deb
 261d621824469827d69ee4bd9bd20fc7615e8a38 8012 libpng1.6_1.6.48-1+deb13u5_armel-buildd.buildinfo
 c4275d9771f815673e4b89f94462c2eb1cc7f7c1 78964 libpng16-16-udeb_1.6.48-1+deb13u5_armel.udeb
 32ebc0ae687ce7e66a93bf8fb6cfc675b8b82ada 246716 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_armel.deb
 273de65c4e49f805b23304b393b862a8c6dce3ac 266668 libpng16-16t64_1.6.48-1+deb13u5_armel.deb
Checksums-Sha256:
 a1069e4cd8133f18a53a5919595fccdc50afad975a2fe26769a7e9809242c300 351336 libpng-dev_1.6.48-1+deb13u5_armel.deb
 f4df21bb3860e85427e76a6df37e52f1786d905d42e38cb591b5e95ec70e905e 48328 libpng-tools-dbgsym_1.6.48-1+deb13u5_armel.deb
 bd99d82fbba98f8017f5df6c11f1167febbf44a6978928907ecf3c71d5818888 128044 libpng-tools_1.6.48-1+deb13u5_armel.deb
 79cf0f354d294c91dab34b20901e07e9559dc2511693dfa75140f6a955476306 8012 libpng1.6_1.6.48-1+deb13u5_armel-buildd.buildinfo
 9d20baf6fea8796e80989c10d25e25d1486f60f36d0ee971a0d409dd32835b7a 78964 libpng16-16-udeb_1.6.48-1+deb13u5_armel.udeb
 f12c666226ae02896c681529f92b25ab82a0538b2f683af574668a91ebdde6dc 246716 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_armel.deb
 74b5f921536dc6f705732ae291f76d3e986c7aebe55c09e3842468aad227fe5e 266668 libpng16-16t64_1.6.48-1+deb13u5_armel.deb
Files:
 844d303829e3caa472ba879655244426 351336 libdevel optional libpng-dev_1.6.48-1+deb13u5_armel.deb
 26ff57155e61f28df19b1d81a7eb9240 48328 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u5_armel.deb
 4c3128218ea694df9f3691d494b28f44 128044 libdevel optional libpng-tools_1.6.48-1+deb13u5_armel.deb
 a2de27485d2f0e84f4a0690010af0472 8012 libs optional libpng1.6_1.6.48-1+deb13u5_armel-buildd.buildinfo
 5f3a7e4ca85d5a137e3b3bf9c16dc8ae 78964 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u5_armel.udeb
 30b0bf568bf9d533dea4ad2784ad5af4 246716 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u5_armel.deb
 c498ab9ca8ceb460c03b3cbfb1a8dc28 266668 libs optional libpng16-16t64_1.6.48-1+deb13u5_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmn+D9cACgkQvzDqKQSG
l8Ww8w/9FYE92LLcaVWhI1gfLyxsIVVpGJgm02/4tuDTu/ckCmlzMu5Eyr0Auf+d
VBFaS0GXoB/0dyit51LqGLcPZWGRT8PcFV2ix3xO1X4d/MmMVLFcdN2pzxD1H949
0oTXfxD90/omcoTnuxlNs6dRcp2hKYazhnCT5eUrglwbPjA8l6hQ1pXebDzvlo5C
9sg0FKLmS0wHL5RNaHmeC8rv1PkkWKFzkPNDp0lyqKYht14veb0ybI23guuhMb/u
ctUQ6lMnZuzBsB+RqbDPF1HfezvfVE59Cj3NnfM4pQxrGzheG4x7GdhhL/bqIwx6
JTtcdApvlZNIr/nEVwh4KFb03AHBBdqYMbDvr8/S1DY8AgDYWUQbGeK8ZoYvF1jX
73rkqdGnsDiNFFWXU8hbIwpiCM6OdLDkB1OSHyvGWKBR7KDH2JR1RG12qyIHWjuy
SdwAXzINFWhCVGysx5TXb3PjoFeT7a0ORWozzhXQkxHC2QlVcmnUqcBCjOKYbS02
pWQxsq3LkabwvvmJN6NsiPXfL/WU2AzK2fHKbIbDKNWwBKLZI6uZjRrgssQ9AzAo
eqaa+84QZ1iG6BKq6gEvsSA50daAWtf7XjORG+CK+UmsyaF+bk56Iqk3JCMTcukV
aFOl34PRbmT5f3PUgy7l2YaB0O33fY2KnJM7655U/tKvEIAMnBc=
=lSnQ
-----END PGP SIGNATURE-----