-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 14:19:08 +0200
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: armhf
Version: 1.6.48-1+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1133051
Changes:
 libpng1.6 (1.6.48-1+deb13u5) trixie-security; urgency=high
 .
   * Security upload targeting trixie.
   * CVE-2026-34757 - Use after free. (Closes: #1133051)
   * Cherry-pick upstream regression fix for previously fixed CVE 2026-33416.
Checksums-Sha1:
 c47da15bbcfb7b242866d4a8a80d1be8781cab63 350260 libpng-dev_1.6.48-1+deb13u5_armhf.deb
 0f0438ad77fb37d978e83f05f64785f08f6813a1 48548 libpng-tools-dbgsym_1.6.48-1+deb13u5_armhf.deb
 9b6c6c70a8a4db31651a49d8f6d14959be4d35b0 127680 libpng-tools_1.6.48-1+deb13u5_armhf.deb
 fa2a06acc4a1dbb90c1b220cf3fd3bd58b6d40a1 8026 libpng1.6_1.6.48-1+deb13u5_armhf-buildd.buildinfo
 84d401548c92de4936b36cb3ebecd9f8f64bf0f0 76900 libpng16-16-udeb_1.6.48-1+deb13u5_armhf.udeb
 91e4b688fb57db533d2e480e5a45204ffe4f896a 248440 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_armhf.deb
 e6bcc3fb5c231d1c5bf179131c9c7b2f88fe1419 264648 libpng16-16t64_1.6.48-1+deb13u5_armhf.deb
Checksums-Sha256:
 d655d445fad1e16276eb060ed12e3dad01e8c8b58a10803a90d7e3a1a966b504 350260 libpng-dev_1.6.48-1+deb13u5_armhf.deb
 ce4844d5192b885ae4173c798c7bcc1939b5207694d82fc8d4eb99920d762bda 48548 libpng-tools-dbgsym_1.6.48-1+deb13u5_armhf.deb
 35500f364be3c277e7ebfcc5c89683060138143d389b68ebcee08fb36c25b6a6 127680 libpng-tools_1.6.48-1+deb13u5_armhf.deb
 02f6134bb55ce8fbc16b50af84950f57ba31e97f744b47b899e5e931da69d1dd 8026 libpng1.6_1.6.48-1+deb13u5_armhf-buildd.buildinfo
 b98ed8c8a01f1ff95be03c73afb331c0545fbbc376755086726417b6005e84b2 76900 libpng16-16-udeb_1.6.48-1+deb13u5_armhf.udeb
 13282d450be3b9be46eb910d53dad0c44dd47ae9b4d3174fd7df09296a6d6c27 248440 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_armhf.deb
 3e0f4e56e0f220abd50c62ceed692a3c56e5532ed03188bf8b1879656b276d6f 264648 libpng16-16t64_1.6.48-1+deb13u5_armhf.deb
Files:
 2ef9018100bda0bae12a400d1609d90b 350260 libdevel optional libpng-dev_1.6.48-1+deb13u5_armhf.deb
 0a3c38aea95ce1f8f37fda0d2221c670 48548 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u5_armhf.deb
 6a6f15ec1227e18427c1dc7a95f51e4d 127680 libdevel optional libpng-tools_1.6.48-1+deb13u5_armhf.deb
 721ac7178a372b1b9b48203c7363da70 8026 libs optional libpng1.6_1.6.48-1+deb13u5_armhf-buildd.buildinfo
 87686752db8211aff0b2e6de311b0232 76900 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u5_armhf.udeb
 58008f23d31ef44f88e7807f41c70641 248440 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u5_armhf.deb
 21b7047d6457418bc538c46692bd95dd 264648 libs optional libpng16-16t64_1.6.48-1+deb13u5_armhf.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmn+D2YACgkQK1PZBedP
sppcMA/+PDQT0WhwiLqWmHgClMs2Jxl76kVMl2zyFOTFwUWDycjQ5yO5+d3ETpUY
lkNtZwd6Ot+SeclpWgr1jv/Qg/gQuI5CIW62jWp4u9Wu2zRZeDe8kCu/nJ7YnJkA
Gg05ahHZSJ9oUDjNDPQbWnQWVuIcmfKF6fuUPvDniurtlyuxKPyl/LS6Y0YjmdPp
JIvc/psPkTaaAhnAyqxS2XhDD91t7dHt+9zEg/6nWEVLv32z1LZ6vMFxHLiRPc2F
Oyqcb2EINEf+I/nXD7Dhk5egBYyTJC1JR5mEgZWI1jzbEWIAIgN70jFLk0h3oCim
2Q7nhIW+Cawm95m/iJMymqGh8WrDdEJKfrXZe7KZItAKHCX03r/BopDNIZPumcsy
YOXcmvlMSmxCm/FFBe/LC6ej5h8nspnZYnmzAKbLKGlIuUAwOfZf+nTsrNdr9x/q
sLvsv8JNa54/lzMJkmSfEbXLO8UYp3E+J7vw4Si0zXU/ZpspI0CUkzYHcWjkGnYu
oJHtcVcy2hufnSR9HqF9+mJmaC1dReBH7bUzfKxsRr0o7ou2BoerR+c96ULuPuaV
OfmJgjR5VDNsJM22GqEk8pL/uMisG/o7TtKxnfq7GgkfVU0mtthX/YvBI2AJZdU1
F+FVr2VnZacgbKQF9BpCBTlqLUvsd6pkvCbHgRnNynCD/rHFMsc=
=Kdg4
-----END PGP SIGNATURE-----