-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 20:59:03 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb Architecture: s390x Version: 1.6.39-2+deb12u4 Distribution: bookworm-security Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16 - PNG library - runtime (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) Closes: 1132012 1132013 Changes: libpng1.6 (1.6.39-2+deb12u4) bookworm-security; urgency=medium . * Security upload targeting bookworm. * Backporting upstream fixes for: - CVE-2026-33416 - Use-after-free (Closes: #1132012) - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013) Checksums-Sha1: 476da85e6f813e80a1fb82d3284d1201840a7d35 352416 libpng-dev_1.6.39-2+deb12u4_s390x.deb bf0b2c78719db94e23694d4dd30331ba8504bea0 48916 libpng-tools-dbgsym_1.6.39-2+deb12u4_s390x.deb cfe65745c77ea66388465a7c7d37cb5b9b10436b 126508 libpng-tools_1.6.39-2+deb12u4_s390x.deb 5fed7e64630e9dcc79ac0410fac987c1023f1702 7407 libpng1.6_1.6.39-2+deb12u4_s390x-buildd.buildinfo 6a29fe6fa869729b518c425ee8ba3e59470d75db 244272 libpng16-16-dbgsym_1.6.39-2+deb12u4_s390x.deb 0661c7386eedb8bac8af7dd3e473b602569f0d95 87208 libpng16-16-udeb_1.6.39-2+deb12u4_s390x.udeb 675579257c5f01198cdf5ec3d33cefe64e99cc07 270224 libpng16-16_1.6.39-2+deb12u4_s390x.deb Checksums-Sha256: 323195b3473ee6a8c3f9601ad2cf332fcc69aa8bf69555918c32bb628a4486a2 352416 libpng-dev_1.6.39-2+deb12u4_s390x.deb b0a6f830e26cee9e0f176dcb7f2b6876d390c5c1e41ce47c8516e1dbf4e62d3a 48916 libpng-tools-dbgsym_1.6.39-2+deb12u4_s390x.deb da1ed848b7cb465285d144fdb34bd333ee9d4961c90e5de512ff07b0d03b08d6 126508 libpng-tools_1.6.39-2+deb12u4_s390x.deb c6f115b1bef48af8d7715bea95f19b0ecc958b4d3b7a926fdecb2477734fa9b3 7407 libpng1.6_1.6.39-2+deb12u4_s390x-buildd.buildinfo 6f2810497e6622804101ef2023b662a7c80e2c1259a301bc770a1157c8eac51e 244272 libpng16-16-dbgsym_1.6.39-2+deb12u4_s390x.deb a875eaef5f8f95392b5a8ae77923915a8cbca18c0a52126d208abc0fdeb14bcd 87208 libpng16-16-udeb_1.6.39-2+deb12u4_s390x.udeb c5dc1f71f203d1f3d45ef5aa37d27640345034909e850f7fb010f9fb75359dc1 270224 libpng16-16_1.6.39-2+deb12u4_s390x.deb Files: 43a99576b28ebac8a4aa60932206efa6 352416 libdevel optional libpng-dev_1.6.39-2+deb12u4_s390x.deb 67cee04dc204aba7a3233cb0ca063421 48916 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u4_s390x.deb a6c2a83dc926d67fade237eb00a72fcf 126508 libdevel optional libpng-tools_1.6.39-2+deb12u4_s390x.deb caf97a49d65dbfa17874aac2f84740fd 7407 libs optional libpng1.6_1.6.39-2+deb12u4_s390x-buildd.buildinfo 299b6ca5885296131fc548cd6c01c3ba 244272 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u4_s390x.deb 11a15e0e060b2ab520ec232bf8965f09 87208 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u4_s390x.udeb 5be0cbf655974c28dcdbeeb76ba89fb1 270224 libs optional libpng16-16_1.6.39-2+deb12u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmnL+DsACgkQvVOPI7pY Npiw4BAAk6H017L14LYPZPNgJ3hylxM2cNtZ++Dn6rFFrGSiCR2prCT7t9LurOa4 dkhy0QJVrQ9kE5mPhSynR7ZQYmW4M8e6+DIkgVRiUlLullfUWeSXHCyy/wLsdYuy K2W9xzor4S4Hfi2P8bgU4lxKKYJjYplV9esvA9uSZu8cyeqPmt3prs7TkM7PCwgb iyNDGh/KmD8HY4K2MOTWaUvP2aOZO4P7Vthf7dDhzlpg8HRB6D3mfM4JYkvztf5p 6ZcdTShlQjZAUq8vKGtT7c4oyU9zLCc/Q0X2o0Wrlee2Ghuygwp2QIgTjWMEGX64 CtrxABSFDJ3DjotQVFL14RFr4z5hg9yv7hQbsS47S7SHp6WtVNM3qB9FOa8Kdl3v qowvBCZ68lGsklWjGE1ODCrOTHJ+opjR3NpBt1xLnBXDKJl3jsk0mB8p+cmGQy2v FrtVc7J18P1OU4s+E5u8bIJbwrtzId6ljyAhKOKxm/5KRct+lR8uwtInOrWfEUfB 3oI5b6peq7mG1Jf/i8CW+u1y9TjnHo9XVWHQ9CB7uBGZlmRDOrRXXWEn3kSxQJn+ MBKLeLdd49tTDQU0ByfhMwGb0uDKAFr4YLG9dTCRvd5davAKXKeOuuCRvs+LVOZK VhXfper4OcAHnzn0RDWt+G+sXAMsyrKus884C1toWrbG2gQzupk= =oXPB -----END PGP SIGNATURE-----