-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 16 Feb 2026 18:43:52 +0100
Source: libpng1.6
Architecture: source
Version: 1.6.48-1+deb13u3
Distribution: trixie-security
Urgency: high
Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1127566
Changes:
 libpng1.6 (1.6.48-1+deb13u3) trixie-security; urgency=high
 .
   * Security upload targeting trixie.
     - CVE-2026-25646 - Heap buffer overflow (Closes: #1127566)
Checksums-Sha1:
 aa85a149708e8d8a650b31d973bff2d4284000e0 2305 libpng1.6_1.6.48-1+deb13u3.dsc
 4a0d9412d92e7052f187ba3287875b0220466306 1572923 libpng1.6_1.6.48.orig.tar.gz
 f3603771d5ad68beb6d271bb05c1e25585724702 41976 libpng1.6_1.6.48-1+deb13u3.debian.tar.xz
 21bcd326cd6c8323a630775e53f6d598a112b8b2 7448 libpng1.6_1.6.48-1+deb13u3_source.buildinfo
Checksums-Sha256:
 a65071c790b9c8e5bb5eea8ad9fa93c844045c85cec86ac73f6cc34a57c1b9e5 2305 libpng1.6_1.6.48-1+deb13u3.dsc
 b17e99026055727e8cba99160c3a9a7f9af788e9f786daeadded5a42243f1dd0 1572923 libpng1.6_1.6.48.orig.tar.gz
 44669e466062d3ed1bc4a2b52b6e45899945d9327e380cdfc38d888d5aa8caca 41976 libpng1.6_1.6.48-1+deb13u3.debian.tar.xz
 598d160df9e30797768caaeab1eef7a634bf8109b5e1b9dc61ded1136e6fc9bf 7448 libpng1.6_1.6.48-1+deb13u3_source.buildinfo
Files:
 056fcd170af595d20599454fe2867cbb 2305 libs optional libpng1.6_1.6.48-1+deb13u3.dsc
 be6cc9e411c26115db3b9eab1159a1d9 1572923 libs optional libpng1.6_1.6.48.orig.tar.gz
 93542c72961067354785bdde1a5c1625 41976 libs optional libpng1.6_1.6.48-1+deb13u3.debian.tar.xz
 f11866c0cf46d6f8d7066f8d2e0ec46e 7448 libs optional libpng1.6_1.6.48-1+deb13u3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=/lCV
-----END PGP SIGNATURE-----