-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 20:59:03 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: ppc64el Version: 1.6.39-2+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-02) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1132012 1132013 Changes: libpng1.6 (1.6.39-2+deb12u4) bookworm-security; urgency=medium . * Security upload targeting bookworm. * Backporting upstream fixes for: - CVE-2026-33416 - Use-after-free (Closes: #1132012) - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013) Checksums-Sha1: c617b8ed0fa839b43f67290c497615abcd2cbfd3 375112 libpng-dev_1.6.39-2+deb12u4_ppc64el.deb fc9d6d68629517da88c9ea7a9e78cbd76f8fd273 50648 libpng-tools-dbgsym_1.6.39-2+deb12u4_ppc64el.deb 7258a2dc5ebe94af42fc14b381c1d3cd41f28399 128596 libpng-tools_1.6.39-2+deb12u4_ppc64el.deb e896cc7c7fd4d295954eb190aa61c69e5966533e 7559 libpng1.6_1.6.39-2+deb12u4_ppc64el-buildd.buildinfo ac495f160d911e287fb6e9a83aaf3c47c69a3091 261284 libpng16-16-dbgsym_1.6.39-2+deb12u4_ppc64el.deb abe1f6a70a5e61f9e1cfc85a18f4c25642c6c368 107292 libpng16-16-udeb_1.6.39-2+deb12u4_ppc64el.udeb 3d9304523f9533956a31c98fa68a51776ed966a1 290340 libpng16-16_1.6.39-2+deb12u4_ppc64el.deb Checksums-Sha256: 41c608a03cf2299246d5053f3aac7655f1734c7f606e38c387b3c38e30a437b5 375112 libpng-dev_1.6.39-2+deb12u4_ppc64el.deb c876636f65380adae556d91c99496ed8bb103eb89d4ee2737e1611b805769b9f 50648 libpng-tools-dbgsym_1.6.39-2+deb12u4_ppc64el.deb c5c4a600c15b19018cfff35e6bb95636c203cc73005f4931f357808fd4d4c183 128596 libpng-tools_1.6.39-2+deb12u4_ppc64el.deb 47aa7b41aba4d5528bde30c67e14ae10f7d1bb67c8014c6a650a7389cdc53752 7559 libpng1.6_1.6.39-2+deb12u4_ppc64el-buildd.buildinfo 8ea3924cf8ebd1b818cdb266604b7ee35f1c4edfcb7673f78844b119751ad88c 261284 libpng16-16-dbgsym_1.6.39-2+deb12u4_ppc64el.deb 2b3598571ba412adcb434944936e5cd3611b7b67ab8a1a94612b8033632427ae 107292 libpng16-16-udeb_1.6.39-2+deb12u4_ppc64el.udeb ace23592627ba1613264db3c97234dad8694fb46c8f944bc32ca904f1723b392 290340 libpng16-16_1.6.39-2+deb12u4_ppc64el.deb Files: 974e6eda74d43cc329a3b505f5b190d0 375112 libdevel optional libpng-dev_1.6.39-2+deb12u4_ppc64el.deb 87a10cb874ffb70939dac3c2b7d2da6f 50648 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u4_ppc64el.deb f09d3e75899cf23e17fd14fa5ecd3094 128596 libdevel optional libpng-tools_1.6.39-2+deb12u4_ppc64el.deb 59e543cbd7732effba41357f0fa00f7b 7559 libs optional libpng1.6_1.6.39-2+deb12u4_ppc64el-buildd.buildinfo 7059e566191a44b3b55e9273d65c0180 261284 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u4_ppc64el.deb 7f8075267c0dc31d5f47b929755a5118 107292 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u4_ppc64el.udeb 0f87a751a3ce148e501c5e81b2199131 290340 libs optional libpng16-16_1.6.39-2+deb12u4_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEySUEQfg5pZeb/U372FRWNm40e2YFAmnL+DcACgkQ2FRWNm40 e2bYMA/8DaAWahSK3eKiUk+ihPS2d3zLq+QM9zhqnY3m3uDpUD4UbawxWibenNSG rAluwiq+oWDv00nX6CbDjKjAIIQ1wdhcBhSZYxk7uL/aSG+kcCFj3opclmhj1K2B M/dUD3S3hDEDJm1FGundnLt66+o0JEzDiiNZDF/Xw7PFZWyYwK/M45b06in7dMhe /DjsCFGi5PVZ23uziwq6oPD3AYzIBXkCdHdgYTcTyNPvA/zzWKo0PGWoRuRVkXzJ etxymgsvzYIxnQrZqgFXEhbpvxZlGBHN6eT41fKodJLryJwz+3nC3XYRdVm/a8fk A31QAHzTC2myOtc21nyV2fXu93JTBKsBo7mEXRHIb777+Kn7t17Y6fz2/Z8lIBKg z3KkimBYhEmVt3NjqF5QWLQ2hJeT/6UxNXettcJfFqTef/7EDPoqwMyBX3a4WW5l Rc2hYIW6uHWY1I8jq4iY1ZbUECSw7qZAAT5ZToypyn/5dsCSLEFt0Qot3OqcqGhl sAdpB5UGHGBXfseIZtVTXzWNrkzwgZKNrQpl4f9E/i5pPup0PivwBKxeD307oVOg wAxCa41xJgYPJ3iYx1CWmKl6XUvh7eqFWyGnR4cM7VvrMR6i8ylhYHHAg6BPFBCO OlJlGDWVq6EMx0vBxPbPN6Anwcy4tlsIzPt6rhDduyGN3lWJS0Y= =7Rpf -----END PGP SIGNATURE-----