-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 30 Mar 2026 20:56:49 +0200 Source: libpng1.6 Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16-udeb libpng16-16t64 libpng16-16t64-dbgsym Architecture: s390x Version: 1.6.48-1+deb13u4 Distribution: trixie-security Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Tobias Frost Description: libpng-dev - PNG library - development (version 1.6) libpng-tools - PNG library - tools (version 1.6) libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb) libpng16-16t64 - PNG library - runtime (version 1.6) Closes: 1132012 1132013 Changes: libpng1.6 (1.6.48-1+deb13u4) trixie-security; urgency=medium . * Security upload targeting trixie. - CVE-2026-33416 - Use-after-free (Closes: #1132012) - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013) Checksums-Sha1: 8f3d519618e67d3e6264853d00b73c160996eb10 368296 libpng-dev_1.6.48-1+deb13u4_s390x.deb 8f1a612893a0c679c2df0c91e019dbb9d6e2a38c 51224 libpng-tools-dbgsym_1.6.48-1+deb13u4_s390x.deb 3b9085c0a84ed34dee6915e6ca3f1a772b02c1fc 130484 libpng-tools_1.6.48-1+deb13u4_s390x.deb 560138d9b70e8dc6b5b80f70bd58db08824423e3 8022 libpng1.6_1.6.48-1+deb13u4_s390x-buildd.buildinfo d61561cdbbe3cffb2f8ce7115acc8d00319ae6e4 96576 libpng16-16-udeb_1.6.48-1+deb13u4_s390x.udeb 71b08dd681d0e54010cd85dba0fe99cc35a03076 256048 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_s390x.deb 90be3e9cbbc1e659749d8857d23d0d402fe4c444 284292 libpng16-16t64_1.6.48-1+deb13u4_s390x.deb Checksums-Sha256: 42835be5c283b3ed35104ac8e71cce64b317f76f28fb7f193131ac7ad8f5b8b7 368296 libpng-dev_1.6.48-1+deb13u4_s390x.deb 3321e0a09606d5754c712864dc73c6414d54d095e290d6770f60f8dd91ef13be 51224 libpng-tools-dbgsym_1.6.48-1+deb13u4_s390x.deb 9ae689723a82444a0696e3c98e60341f4a1df9dec140589721532e7e04d39a09 130484 libpng-tools_1.6.48-1+deb13u4_s390x.deb 24e41cbaadec207d5cdf030ef0fac2cba4bab3845a9d13036f4c30164ffcbba1 8022 libpng1.6_1.6.48-1+deb13u4_s390x-buildd.buildinfo 53779b3723e901067569e22b7243eca280299b376992772766a0e493651ec2ac 96576 libpng16-16-udeb_1.6.48-1+deb13u4_s390x.udeb e9e3ca74e4f01fc8b8cb8f33952df402038f6d25c80c015cc7b20e0cf39d5e74 256048 libpng16-16t64-dbgsym_1.6.48-1+deb13u4_s390x.deb 0a720d54ca1a6ce108aa2045f946e12ab3832fb791423c8462e2b5b50beb0ba1 284292 libpng16-16t64_1.6.48-1+deb13u4_s390x.deb Files: 5815d5dd637593416e7e2451bb436ef1 368296 libdevel optional libpng-dev_1.6.48-1+deb13u4_s390x.deb 6146042cc1f239ca7af2c0fbd52304f4 51224 debug optional libpng-tools-dbgsym_1.6.48-1+deb13u4_s390x.deb 51fa22cb7b8dde8374977a83c6274206 130484 libdevel optional libpng-tools_1.6.48-1+deb13u4_s390x.deb fb13e057b6d944ded7ca278ad4237650 8022 libs optional libpng1.6_1.6.48-1+deb13u4_s390x-buildd.buildinfo d182ff5874cab964b5a893fa8482ba12 96576 debian-installer optional libpng16-16-udeb_1.6.48-1+deb13u4_s390x.udeb dc40cb489679e661af3ad101432eb404 256048 debug optional libpng16-16t64-dbgsym_1.6.48-1+deb13u4_s390x.deb a9244db46026e8d89a1f24a405849bcb 284292 libs optional libpng16-16t64_1.6.48-1+deb13u4_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENly2ANlpa4eeqnluvVOPI7pYNpgFAmnL+JoACgkQvVOPI7pY NpiVHhAAppC3g+QHqe9jAa43ObfzuCmM1cFoG9xtgIN5MB287S7bDIK/LP+2hbTS PcPKH99+l4HhvjtcBLErfIpJ7VIxJaVNDrIzuSaP5HfTGfq3g1cvg4+s6iYzkgvb wT0WH2cUHxKdIxP5smGsa32/sK9mNeDldGdw30xB/86qSobGlFOu+IO5/gABhxmG EhoBlPCQq7scrBfaVbV71ZDt025Jdn0X+JoM1PfikdAJggDfoOh5D9jftuc9J2t7 rm42/qZbzUOdgHjQMHMXaayPJJ20BsPgT+eWUnnjkQSu1DCGtRhIVfPjz2ueuiL4 xcmCQ2ukJXolba2wPdWKP9dW37qFRnas52O3lQZ8maOcjk1d1zFUA2VpySBM8vl1 FsAdQ6B0hiVIXwXaxs0yFfzLuTtHAIhRDckl23nR6W4aLs+R5mrbiDYveoShdIv2 I8YHjzb03BFq/jfmhgOPAMnyPgycDti8U3naV6bEMRq5kYI2G5+y4hnEIx8Dexan jNPE4hVEAqwqGr0GJCLR6CIEBOlM9MKLrCaqp+NDt13aDhTmKH+67xNG4dN+WGJh JqVaC6YYwjGr2MQ9o4B5KQVFPnedWHRYfD3zoELhpjAKhZslhNZSPfyc2+LWK1x8 S2Lh48kzmJkoFBbCP9gLFxp3QAKQRNc9o+JeCR8t6/rFeacCYX0= =37oE -----END PGP SIGNATURE-----