-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 08 May 2026 14:30:14 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: mips64el Version: 1.6.39-2+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1133051 Changes: libpng1.6 (1.6.39-2+deb12u5) bookworm-security; urgency=high . * Security upload targeting bookworm. * CVE-2026-34757 - Use after free. (Closes: #1133051) * Cherry-pick upstream regression fix for previously fixed CVE 2026-33416. Checksums-Sha1: c0597bd491626dd0e5417411e5c55e88c46dcad6 365084 libpng-dev_1.6.39-2+deb12u5_mips64el.deb 7a3008fe4481ae0ef3ed5c2b7db897bb3749f90a 50732 libpng-tools-dbgsym_1.6.39-2+deb12u5_mips64el.deb c5beaa1648532da9a8597daaeb4bbad90a5e6536 127180 libpng-tools_1.6.39-2+deb12u5_mips64el.deb 5268a7361b997c63b151720626acf1b98e393926 7376 libpng1.6_1.6.39-2+deb12u5_mips64el-buildd.buildinfo dd5e7afd6838ae6cae3bce8e36b225b859c790de 253400 libpng16-16-dbgsym_1.6.39-2+deb12u5_mips64el.deb 933ace61a244d0c7bf1e86cffe8deca1ea3c0b90 87240 libpng16-16-udeb_1.6.39-2+deb12u5_mips64el.udeb 1d72c0384864661be661adfc031f43a7fcb3a4f0 270320 libpng16-16_1.6.39-2+deb12u5_mips64el.deb Checksums-Sha256: ec4e501e3b8ffcdfe4ef9981e3e1af3a6fecbd1a164a98141eca8fa268923fa1 365084 libpng-dev_1.6.39-2+deb12u5_mips64el.deb d4dac1d29f839d9614cbdeee2471bef2ddca3ec034f0ddf8b29ec26080304393 50732 libpng-tools-dbgsym_1.6.39-2+deb12u5_mips64el.deb 466fd4dc7cec83ac73f296a318755424e6db5485b593f3b0758b46b1e25d0f92 127180 libpng-tools_1.6.39-2+deb12u5_mips64el.deb bf33a162415e7fe69edd7382d9ffdc7a470b796c659e42787a54946e8273b91e 7376 libpng1.6_1.6.39-2+deb12u5_mips64el-buildd.buildinfo 1650ce23a5301c5e2434bf6140efd029edebf343ff1f5c46d5a37cfbef8ff871 253400 libpng16-16-dbgsym_1.6.39-2+deb12u5_mips64el.deb 0705875ddd43cf1bc2fb0c1520e572bba782cc49523d13a5112a7cf73b6611bd 87240 libpng16-16-udeb_1.6.39-2+deb12u5_mips64el.udeb 4596bbb989195fe8e45542d448cbccd5d9aaed9301fea1a056f245c1a7d239f5 270320 libpng16-16_1.6.39-2+deb12u5_mips64el.deb Files: f8de66ce27ea73e7153e781e18af806a 365084 libdevel optional libpng-dev_1.6.39-2+deb12u5_mips64el.deb 1e7b4e700f15e7d1f78040efa74de003 50732 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u5_mips64el.deb 7b339527c60c7ec7e11620a46c5cdeec 127180 libdevel optional libpng-tools_1.6.39-2+deb12u5_mips64el.deb e77f029fd2e691c0aa2487407c4a0245 7376 libs optional libpng1.6_1.6.39-2+deb12u5_mips64el-buildd.buildinfo a1102df571bef9771005b68faec2a9c8 253400 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u5_mips64el.deb ea2a5829167e81de059ae76996eaba0d 87240 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u5_mips64el.udeb 9a6a722c09e8cd228bfcded95fa6f526 270320 libs optional libpng16-16_1.6.39-2+deb12u5_mips64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmn+FDQACgkQ/qmHKZss fSB+wQ//RcC1bGdbWMT7aj5NN2qn2GKBEENtJ2e+ZY/jOSpJQNFiYuvqsTCiewEa CabXPO6YxeOD5FYsRQaJL99EpADXIfuCIWMTZP41fHsx7grsMThx3VXxdUPhvahV 4UJB+O/V3nhso3PRXGBIpw1TnXA/BgAHqF8aaeXO1JJTenJfe7zPD9psM/tpAvDc Tsgrh+Wp/Pe/B8nLR86S4+xvIhzZq/msF82nAEkIyim/AhK0V1K0mJQ6+XKwFlWF HYClL6dqu8fsoHmf9DuKwDAdRdvGmXmbGlfONUUnDC4ojdpQcMV4Lnlcrzv/z61h 9Se6ueB6jF7e6BymPrTPYrE4QzGA6biJRkjrKlV339mZt5YtSbbYThTbBX+ZNHVW rbNOICvx7U1oSdU07rqOKB82lNqAfvMtWZz55m5Q7hJZqksRjnNx/C0bxJoHyWbO aR/UlOB4toHdGZsfxglhFa35pDjBswR678JVMzG3oijqlKVsEMeT8rmWJqv74XNG gOzRWjuz1gv3CXH1A35O7rJkZd6XQTPP17/qoJOy02T0E2Xo9znlE88FV99qy+x1 IYF3JgAf4QCpXnaNkrpP4Ss3DnQN0vxhZWUHoGH9+7U+qNn4ERr7pK7M6SbOTLUN lHV0/4s9IzZ8PkCLcI8g7ZQeU4OI1kG3ETIJtRQJuTpLsCkKi0U= =EsUh -----END PGP SIGNATURE-----