-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 14:19:08 +0200
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym
Architecture: arm64
Version: 1.6.48-1+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-16t64 - PNG library - runtime (version 1.6)
Closes: 1133051
Changes:
 libpng1.6 (1.6.48-1+deb13u5) trixie-security; urgency=high
 .
   * Security upload targeting trixie.
   * CVE-2026-34757 - Use after free. (Closes: #1133051)
   * Cherry-pick upstream regression fix for previously fixed CVE 2026-33416.
Checksums-Sha1:
 8349589a2071569ac392e7d1d3761b66740420c3 360892 libpng-dev_1.6.48-1+deb13u5_arm64.deb
 833b4e6f88d85da81301e7e03cd6ffb88fd4e189 49384 libpng-tools-dbgsym_1.6.48-1+deb13u5_arm64.deb
 c1250e8c9e3d0583cb3aff8121b6845078a201d3 129312 libpng-tools_1.6.48-1+deb13u5_arm64.deb
 69fb5f64bfc7b7dffa3bf86222dce3df32c45c4d 8147 libpng1.6_1.6.48-1+deb13u5_arm64-buildd.buildinfo
 6562abb89d9741b6c2f91942867a294d97cfd32f 87336 libpng16-16-udeb_1.6.48-1+deb13u5_arm64.udeb
 b2e291b2750f14b4d4261b9a1fba16896d1584f1 258104 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_arm64.deb
 cb76f79eaa8e053872508586ad41688af5b84dc5 275192 libpng16-16t64_1.6.48-1+deb13u5_arm64.deb
Checksums-Sha256:
 a212fde02b2930302edcc959eaa2079bb459def3a92741cc09f6f55c250b8ca0 360892 libpng-dev_1.6.48-1+deb13u5_arm64.deb
 390e86147af1cbdf8abf45b56c8384955bb7d9fafe6df08c36ada21a56629653 49384 libpng-tools-dbgsym_1.6.48-1+deb13u5_arm64.deb
 268b9a96b6ea38a82faebdcc4182e32d3e06f102321e7ee0c554b5b73113f685 129312 libpng-tools_1.6.48-1+deb13u5_arm64.deb
 3b4c1a7ca9d472e14f199b09d1fa77fb7df369b9bf60b4b57c2c3cb009162339 8147 libpng1.6_1.6.48-1+deb13u5_arm64-buildd.buildinfo
 2d16d52813b983aab94dc3a15bd88fa425b98568a9fe2b9fa80f061631dc6605 87336 libpng16-16-udeb_1.6.48-1+deb13u5_arm64.udeb
 7ed01048893b36caca2edd2cedb5b3191e04890867454d2980032e684a18e7ea 258104 libpng16-16t64-dbgsym_1.6.48-1+deb13u5_arm64.deb
 11096ad43504ca24e8044bcc89e922d932a2812ff25568613b28d22235190ba5 275192 libpng16-16t64_1.6.48-1+deb13u5_arm64.deb
Files:
 71a34436d90d3ffebfaf41c49dfd6c87 360892 libdevel optional libpng-dev_1.6.48-1+deb13u5_arm64.deb
 73b806fab9485143ea76f63704bcaf03 49384 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u5_arm64.deb
 19cf8caaaa503c02578d5ac9d9996324 129312 libdevel optional libpng-tools_1.6.48-1+deb13u5_arm64.deb
 f7adea3518d94b7b84faa9c254fa7c04 8147 libs optional libpng1.6_1.6.48-1+deb13u5_arm64-buildd.buildinfo
 68a006b034aae18e37678d4c87e35f91 87336 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u5_arm64.udeb
 baa28c9b744c0e4a6111b774a42da602 258104 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u5_arm64.deb
 c8575c5406ec2b3f6dc05a4e1e0e138d 275192 libs optional libpng16-16t64_1.6.48-1+deb13u5_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=HZ3I
-----END PGP SIGNATURE-----