-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 08 May 2026 14:30:14 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: mipsel Version: 1.6.39-2+deb12u5 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-03) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1133051 Changes: libpng1.6 (1.6.39-2+deb12u5) bookworm-security; urgency=high . * Security upload targeting bookworm. * CVE-2026-34757 - Use after free. (Closes: #1133051) * Cherry-pick upstream regression fix for previously fixed CVE 2026-33416. Checksums-Sha1: 98da1e1de6cb39c37391ff7745ef3d77ade8b402 360908 libpng-dev_1.6.39-2+deb12u5_mipsel.deb 849e5b79f9bf19d8181fc3e93ae3f4990f338bfa 50188 libpng-tools-dbgsym_1.6.39-2+deb12u5_mipsel.deb d5ad7b058ae696a3eabbf9755463b99d7f7c3a0f 126772 libpng-tools_1.6.39-2+deb12u5_mipsel.deb 4e1de45865f2e6951bf6975a457d40cf3abdae79 7329 libpng1.6_1.6.39-2+deb12u5_mipsel-buildd.buildinfo c30bf1ddccce28e056124f19bc4aa34bb20961b9 254020 libpng16-16-dbgsym_1.6.39-2+deb12u5_mipsel.deb ec41ff1cefcd04016b18ec67456c6c472ce664b8 85140 libpng16-16-udeb_1.6.39-2+deb12u5_mipsel.udeb 91db228f9d0eb587d8cc12d47aa3c250cc879d9a 268212 libpng16-16_1.6.39-2+deb12u5_mipsel.deb Checksums-Sha256: 2c03d8e6f9ff716ccc5038ee72ef08c7fe0cb620e273159da28791a1b7b3c7a9 360908 libpng-dev_1.6.39-2+deb12u5_mipsel.deb 01d65dd6800f2ee8b853d7def9ef3373b96226a6695c1cbeae0127bd42e1569f 50188 libpng-tools-dbgsym_1.6.39-2+deb12u5_mipsel.deb c70a0cf06d5f88ceee1b0de2944e04b02b178eb64806281b1602dc7cb59f5b60 126772 libpng-tools_1.6.39-2+deb12u5_mipsel.deb 8471f35fb3ad3f11de4484af4dbfba766d788f1063d7445c2707366cf1ebb913 7329 libpng1.6_1.6.39-2+deb12u5_mipsel-buildd.buildinfo bc45e9eca1808e3a69269c4012a20f8d813bc714ae57c1c8cf4849896d69dab8 254020 libpng16-16-dbgsym_1.6.39-2+deb12u5_mipsel.deb eb089128479e54004e4f32ab070ef18035f8cfcd5be5ce3bde32198fd349cc24 85140 libpng16-16-udeb_1.6.39-2+deb12u5_mipsel.udeb 1405d78537e8970d95b2938bbc0584a778c53ab338fc5add7d5476242f48dc9f 268212 libpng16-16_1.6.39-2+deb12u5_mipsel.deb Files: 46b02e2c634a8ea46c9ad82ea104ff01 360908 libdevel optional libpng-dev_1.6.39-2+deb12u5_mipsel.deb 6f7cd2769f242c2b6ba1f666b4a3c284 50188 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u5_mipsel.deb 4db2972e69374b9686600acae8efe9e0 126772 libdevel optional libpng-tools_1.6.39-2+deb12u5_mipsel.deb 41aab45c64b097574c9290236ae51c4f 7329 libs optional libpng1.6_1.6.39-2+deb12u5_mipsel-buildd.buildinfo 61a822c29ea5956da6d52c0c69744b98 254020 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u5_mipsel.deb 1b1df04a6f6899961deb55c458632a50 85140 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u5_mipsel.udeb d3071bd35c45d419399b594522ea8d5c 268212 libs optional libpng16-16_1.6.39-2+deb12u5_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7sd7jtCtE5bBJ1Hx/qmHKZssfSAFAmn+FOkACgkQ/qmHKZss fSAQ4RAAz2Ghkj5jChflyIzVk6twSB41vZXduD4Xqx6GxY44BVq9S8cgEitHeLwQ Rw7tcscIFRLlUQNXAQFwjBo+y/Srfu4CYqB+KZrDZPyNYLe39y3MmY4S1bvJnyLt fX1uh4yD6xHAx5kSH3J0SZb/61Wp3ipDeeZaEucpG98noHUHxdpSypfBSj/2P12X B+FU6P+QEZXrOk4D+Y+4N7wCKfv21JzytVdBYgMuE4wLi3ZtqE1giwCD+f6PTn9o fko1uxLZ1hmzuMfvTN8EghckmDpXRI4x6bBFd6p9ZuxAb2/xi+F3/VkiIDXVePel M6BXevjIJGVzGI42DSpMNTR5CSuQH4WhihQqwCuKK74mXdgsn3ThbUK08yah+pK0 r3Ki/Cj/vh9HSGOt/2nQBFbxL+iQg99HWJkuFBO/ZR/8+9uuBxdYLvOCtuSZw13L BZ+lfAStw/RJ0qzYTUj7q0/ifSd6YPqb/HEipSTgRJb2BrpzjwfA4sAitxYZ2fdl Nv33KPw2vkhtsKbXPBFNzyv3/N+K9Kk3wtbhb4Woh45YYysjmk2BavkGFQowkNrM 5GBl2N96sfTcQNjihFLsrrdKL3fI3HsVDF3a3193GLAHsw9rfYRNXGO1Ptizp8PG 1KVZCRUFszsyTsZqseuOeUMmKVDNGajvkUiNm/at6VlpZR3UY+o= =88JL -----END PGP SIGNATURE-----