-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 08 May 2026 14:19:08 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym Architecture: ppc64el Version: 1.6.48-1+deb13u5 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) libpng16-16t64 - PNG library - runtime (version 1.6) Closes: 1133051 Changes: libpng1.6 (1.6.48-1+deb13u5) trixie-security; urgency=high . * Security upload targeting trixie. * CVE-2026-34757 - Use after free. (Closes: #1133051) * Cherry-pick upstream regression fix for previously fixed CVE 2026-33416. Checksums-Sha1: 76b6722a515539e9b07c0027bbf321c9e69e8db0 379704 libpng-dev_1.6.48-1+deb13u5_ppc64el.deb 11aa4ebbc65d5ddbddc34e327a9dc0adbfa694c7 51980 libpng-tools-dbgsym_1.6.48-1+deb13u5_ppc64el.deb bfe1d1340bd5e2dbfda330878805635a3573e8f4 132240 libpng-tools_1.6.48-1+deb13u5_ppc64el.deb 438ac10f2b4027e5871a8de55e45ed656c378381 8186 libpng1.6_1.6.48-1+deb13u5_ppc64el-buildd.buildinfo ad32d028511afb032074bb4f86f502869131b13d 106088 libpng16-16-udeb_1.6.48-1+deb13u5_ppc64el.udeb e1d46a0fe98efdf3b75f5f1bd24f013c9b312067 266448 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_ppc64el.deb d446a03ee957a178936c5098ed24ce3ca7f044c2 293852 libpng16-16t64_1.6.48-1+deb13u5_ppc64el.deb Checksums-Sha256: d89c6d67394837863d4c016aad6d845d7ddd46060a74161e05a5c6c2a0eec85d 379704 libpng-dev_1.6.48-1+deb13u5_ppc64el.deb d3d889e3027686bed96db39315159446b028745f89df147bb99f942e9aa4fff1 51980 libpng-tools-dbgsym_1.6.48-1+deb13u5_ppc64el.deb 6738b1aeb2f86bb64cdc18c72d8ac1ba171d365868c079b61fe7ef1161cc750d 132240 libpng-tools_1.6.48-1+deb13u5_ppc64el.deb fa245655151e99106594106d29a040706a61506914890ce11cc87bf3c8d98e4a 8186 libpng1.6_1.6.48-1+deb13u5_ppc64el-buildd.buildinfo e3f4bca0df2df8cfffcdde038ebdfe0a5619ac924fb7cb7acaaaedbe248e5e97 106088 libpng16-16-udeb_1.6.48-1+deb13u5_ppc64el.udeb f068493be6a1f475344662217cc69bdc3c25831e4f686cf47fbe4738e20c4777 266448 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_ppc64el.deb ccad7c95f58d6e6ba8285ae74431aedb2b940e9c9296b29ac160cba7755a1c92 293852 libpng16-16t64_1.6.48-1+deb13u5_ppc64el.deb Files: b8758d1a5647981dff8e42108a17e1b3 379704 libdevel optional libpng-dev_1.6.48-1+deb13u5_ppc64el.deb 23fa1f07060458383fabf6b5fcbff5ae 51980 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u5_ppc64el.deb bb89b03bc2cfcd0743bc49930b7fe346 132240 libdevel optional libpng-tools_1.6.48-1+deb13u5_ppc64el.deb 79cd6ab4c58683fa64156496b80897aa 8186 libs optional libpng1.6_1.6.48-1+deb13u5_ppc64el-buildd.buildinfo 39dbefe453eb31a0b667cdfd849c148f 106088 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u5_ppc64el.udeb 75f01340e4b481428e128f8398bb1579 266448 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u5_ppc64el.deb f2c1488fff11983cbbad855b5e33077b 293852 libs optional libpng16-16t64_1.6.48-1+deb13u5_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE9ibmwdV9gdKNbK7oV8ucRsMTpuMFAmn+D0AACgkQV8ucRsMT puPziw/+PdFhzC9Vh8UGxh3ESO4MZrav/IBP+3BFjj0HTP9MH9AZhb92kKWKuHBe E7T2iXvL9qthkVcp1IU+Vj/9Ge22h4+r9guX/PudvHgLX6j8gtgeYj6K+8B20C8G pjldRZOaHo+qiAty/jlHRSeIwpdgBe9rbU4WkaiTecPKbLQKV/U+zXtk0ft+e4Xj umpU2kXJ0wGSJ8LBa2VQFXZ/q1YcTrjmVR3Txev2lW1fP6qaaP0W9oFfNJWBxjix TqLQFxdResaEv/788s9sUKZBYTNzKKA5g/fxcCb/metXSTOCS5Rf4NnlFhgPcA/8 9Gs065GRxuXxCAxXAnh+AjdQj9oiAEidFfPWLRwbNvLHsLYfNO+kqnt4VqMqCvgf OyrJtXeLGCKnA/Wic89wuo8RxBkToe8XD7CeGUiAogobrA6nE6srGrCbNOXikW7i lwp2pSm1wIjTg4AMgZDbIBhLFoSnlEcYL9xv2jTuVhYUQq6uWW6NsdxNiXGMhqC9 FtlQg3M71qSX2wKC+qaSKTxb8lztJCPzwcK3NElwJqfHoEatops26NTeC+Set/Ve kAsZlScDZBKdwLLbRX4Id0X1g9fkXZ128Krj2W1T2NMB6mBBEgNpYy9tabhe8LM1 /dz+i5pDA+/9cEe/U3n/Bnb3ESE7jntBaympBMaT93IRN7hKW5o= =RFJp -----END PGP SIGNATURE-----