-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 02 Apr 2026 18:38:42 +0200 Source: libpng1.6 Architecture: source Version: 1.6.37-3+deb11u3 Distribution: bullseye-security Urgency: medium Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org> Changed-By: Tobias Frost <tobi@debian.org> Closes: 1132012 1132013 Changes: libpng1.6 (1.6.37-3+deb11u3) bullseye-security; urgency=medium . * Maintainer upload by the LTS Security Team. * Backporting upstream fixes for: - CVE-2026-33416 - Use-after-free (Closes: #1132012) - CVE-2026-33636 - OOB read/write on ARM plattforms (Closes: #1132013) Checksums-Sha1: c64f4b571289209822a2d6a234ce893e6690701f 2257 libpng1.6_1.6.37-3+deb11u3.dsc 12ba0239b488b6ec06d43026ecb8e8503ccfa287 44908 libpng1.6_1.6.37-3+deb11u3.debian.tar.xz e4aefa01b490fbcf572d46648af67f1126d7d949 7639 libpng1.6_1.6.37-3+deb11u3_amd64.buildinfo Checksums-Sha256: e6d98f927c1998d63737ebfaa6a2abe12bdbe559163ae657dea4b4357c2fe1f1 2257 libpng1.6_1.6.37-3+deb11u3.dsc 362923e895dfd9300cb935a3997e51784b0506cec40b2332e0a726a110c3de31 44908 libpng1.6_1.6.37-3+deb11u3.debian.tar.xz 0c2e558a8f32ce55367164315173271cf67c3bd880fb4d197f540aadfae7d850 7639 libpng1.6_1.6.37-3+deb11u3_amd64.buildinfo Files: 01a2f3e6466ec604263dc8685d277f1a 2257 libs optional libpng1.6_1.6.37-3+deb11u3.dsc 6c5858ee109a0dd425a9426c1916dc2d 44908 libs optional libpng1.6_1.6.37-3+deb11u3.debian.tar.xz 24e0a8a27ebe9217fbdc09eca46cc1f0 7639 libs optional libpng1.6_1.6.37-3+deb11u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmnOnL4ACgkQkWT6HRe9 XTbodw//VlYIZHO7I8QW4R8tLPMe+sn26Mjq9OA/dAZzInNqLDNAmSEwZzkoX03y sG78xupU8BScL8yZn4BlFnmT2i8wi6F+uCyskOP4ZH3tQ7F7i1uNX4mVklJdrX9T jNl7loyeyDaRWGzkII8Gi8XbVEpSEBpAr8CxuaOpTq2W0PqAUAbhPu9y9lly/VM9 8/MPjwTlghfBYetWYw7aM2grHz74WWRNjsiHIVVQlBdJVcU/Giq0PYjaOmh1m1mR hxQ6qpiRBOmLb/KvQoS+dyXFIYzr3thiEQkd268Nv9OviSy4F+wNFtaOeewOiQfh R5irRFNcqGIhyQxPnWa0ddjVnWNuxnv1w+K/X6ULhnvUN0xCXPUthBXqasgqIlcT +bLNfPap4c+EtuSYC4x3FLoJlDAusnEsePYeS8f9RrKflc1Ya80diSCXzl4PeVhb vUji0FkiqVE+NoaKw3vYUtB8RZDhgictQhIMo9DzKMPCwLC5vr5dc2XvNCGBsBUC NsoXanrJAIVX6Z7m5h4ulCRCgnhxZuHvGaiyEH361IeCc+9Xi9nJ9W9cdVxcpuLY GVIe9eIBOaJGAFlAlxDD+b1dMr0C6ooJlj92BT4CHazHGwND+ZMupzI7nvNreX8P DOFp48sJM0KOg9xbQLrWyNicXxlxQeFDCsP/koWT60RODDdP4uw= =frG/ -----END PGP SIGNATURE-----
