-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 16 Feb 2026 18:58:09 +0100
Source: libpng1.6
Binary: libpng-dev libpng-tools libpng-tools-dbgsym libpng16-16 libpng16-16-dbgsym libpng16-16-udeb
Architecture: amd64
Version: 1.6.39-2+deb12u3
Distribution: bookworm-security
Urgency: medium
Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) <buildd_amd64-x86-ubc-01@buildd.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Description:
 libpng-dev - PNG library - development (version 1.6)
 libpng-tools - PNG library - tools (version 1.6)
 libpng16-16 - PNG library - runtime (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
Closes: 1127566
Changes:
 libpng1.6 (1.6.39-2+deb12u3) bookworm-security; urgency=medium
 .
   * Security upload targeting boowkorm.
   * Backport fix for CVE-2026-25646 - Heap buffer overflow (Closes: #1127566)
Checksums-Sha1:
 08435b387ef121784163b3b6f63569a96f9165f1 359816 libpng-dev_1.6.39-2+deb12u3_amd64.deb
 95d83975ddcc690d62096ccd337dcfea4b03d14c 50220 libpng-tools-dbgsym_1.6.39-2+deb12u3_amd64.deb
 f9921f4165f1d76e73ab0de8aa35a7bf17a2e09c 127300 libpng-tools_1.6.39-2+deb12u3_amd64.deb
 676ca12170586bdb017e5ae70057c90cfbce2757 7536 libpng1.6_1.6.39-2+deb12u3_amd64-buildd.buildinfo
 ca49303d5d13e36eba24590adba0e74ea8c40386 246164 libpng16-16-dbgsym_1.6.39-2+deb12u3_amd64.deb
 ed1bf84b00f809cb8a590e069bc0a586a732ce2b 93300 libpng16-16-udeb_1.6.39-2+deb12u3_amd64.udeb
 db897eb5ffdbeec5ee04a547fccf6d5b8c44ef88 276268 libpng16-16_1.6.39-2+deb12u3_amd64.deb
Checksums-Sha256:
 12c7d7223d4b71bb30e1c3c690627e10ebd36b619ee00d5fbe8b3a88360f2740 359816 libpng-dev_1.6.39-2+deb12u3_amd64.deb
 64fd9ca66336897c95812c7a618517fa02d29957915ae16443bb5a300f26ff03 50220 libpng-tools-dbgsym_1.6.39-2+deb12u3_amd64.deb
 da13ba39126f4144114ad601cfa01bf173e22e7c5b89f0eb5ee7d2fc69fb7462 127300 libpng-tools_1.6.39-2+deb12u3_amd64.deb
 9c39e5ec13b96701a39a673a23d14d910015c3e97643a66e5cc267d9a7627235 7536 libpng1.6_1.6.39-2+deb12u3_amd64-buildd.buildinfo
 b291d78afac9a29b657c6b0216bc43ae00e426191b62ac4c9d5ad1a2d8a3290b 246164 libpng16-16-dbgsym_1.6.39-2+deb12u3_amd64.deb
 a459d49cae0904c2ccf9e2eb35a50b4ecff47f7c6ae6aa03fb5af6d8ce60319f 93300 libpng16-16-udeb_1.6.39-2+deb12u3_amd64.udeb
 dbd5dda0b83bc0d9f73170ffe5539378a3aa1c998b38d98ecb7965cd8e84d814 276268 libpng16-16_1.6.39-2+deb12u3_amd64.deb
Files:
 189205bc1ccb66d5a37687de95ae398a 359816 libdevel optional libpng-dev_1.6.39-2+deb12u3_amd64.deb
 8ba4904155363dd3e30fa80bac7ecd87 50220 debug optional libpng-tools-dbgsym_1.6.39-2+deb12u3_amd64.deb
 990fb3f33c51a2c24e5f889da0e257d5 127300 libdevel optional libpng-tools_1.6.39-2+deb12u3_amd64.deb
 5fbe828b46a55cf3eef4149cfe84f983 7536 libs optional libpng1.6_1.6.39-2+deb12u3_amd64-buildd.buildinfo
 66f72732eb1f9a72ef9cfd2b0046e556 246164 debug optional libpng16-16-dbgsym_1.6.39-2+deb12u3_amd64.deb
 0df19a6c92257ca5302a9c016dc3b713 93300 debian-installer optional libpng16-16-udeb_1.6.39-2+deb12u3_amd64.udeb
 6eced26bca251e6f425497edc9c18564 276268 libs optional libpng16-16_1.6.39-2+deb12u3_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEnw0rdzqckKx6dwRTEbCLukZn24oFAmmUNJkACgkQEbCLukZn
24rn1A/+LyASjFlPbRBN29CYmytVrGG5Iq+8EQHkb/Vzer8jWt3DIMSEDNwmANoy
359naXr1p1ccQLwLm3rH918zGo830u0ggSxP6UrhJmCaVsmT+JAkhhLGkOoCrt03
WzLhfiuPzEpsSkugvbU+745C8Pj01FwzWUOXXRde0hzFzIjlo08EoDIBpXQeKLvP
p64LwRYYgwSk9z0fxy45vhVxbRZm1dVkw+rzbSOa2RrPabzBv0SD6f23UHNhmhwd
QKJrjPQMvcJB80LP526cz1Bg+a7+e0u+sJTboqzQ3NlbCSEyShxQ/Vb78/OCMFdy
qtM+AgLil6TJRYHDtyB/4kRkHcmOiXdkgO0NzBgzNo43VBpdIfMZ79JHcpCaWkEd
8ZIh5RL/IvTc8gkBLqOsedWriEak5EdP6Muhv5hp4HWTHYfG9lR7iWOYhb3S83FO
ca21KsOca2eSCUrN/CE/nScnPAF/KeaEM6Bm5hrtCllqBUMhDycqQefp/rCXnyh6
kW0FB8ITm2A7gPlMHNm5M5UcCgqFqohqGXUB8qe9vnuBnxQo1KvU6QndAKPhgi8P
emW26YEDH06Pzb4QfnUrrjvLoW22W6DPLRz+DI86PSTLOgb8ueblCXiPuuu1Mi2j
oQbe7ZTp7VuEMrqcaLdu17JrADkuwY9UwiR/nq3swFiUWmeH8+g=
=V1AN
-----END PGP SIGNATURE-----