From: tobi@debian.org   
      
   Control: fixed -1 1.6.37-3+deb11u2   
      
   ----- Forwarded message from Debian FTP Masters  -----   
      
   Date: Tue, 17 Feb 2026 17:50:24 +0000   
   From: Debian FTP Masters    
   To: debian-lts-changes@lists.debian.org, dispatch@tracker.debian.org   
   Subject: Accepted libpng1.6 1.6.37-3+deb11u2 (source) into oldol   
   stable-security   
      
   -----BEGIN PGP SIGNED MESSAGE-----   
   Hash: SHA512   
      
   Format: 1.8   
   Date: Tue, 17 Feb 2026 18:01:30 +0100   
   Source: libpng1.6   
   Architecture: source   
   Version: 1.6.37-3+deb11u2   
   Distribution: bullseye-security   
   Urgency: high   
   Maintainer: Maintainers of libpng1.6 packages    
   Changed-By: Tobias Frost    
   Closes: 1125443 1125444 1127566   
   Changes:   
    libpng1.6 (1.6.37-3+deb11u2) bullseye-security; urgency=high   
    .   
      * Maintainer upload by the LTS Security Team.   
      * Backporting from 1.6.54:   
        - CVE-2026-22801 - Heap buffer over-read (Closes: #1125444   
        - CVE-2026-22695 - Heap buffer over-read (Closes: #1125443)   
       * Backporting from 1.6.55:   
        - CVE-2026-25646 - Heap buffer overflow (Closes: #1127566)   
   Checksums-Sha1:   
    26aac1cdfe616f6a967dd61b9fb1d4ee1e2c90e2 2257 libpng1.6_1.6.37-3+deb11u2.dsc   
    1aac0e12aa5b583f736fb6692f47dff7a3efa78b 1508805 libpng1.6_1.6.37.orig.tar.gz   
    56778e0c8dd443ef74748dac5f2a941c27efb19e 40832 libpng1.6_1.6.37   
   3+deb11u2.debian.tar.xz   
    9bbacd084bfb658a0052242a994564e974299c4f 6387 libpng1.6_1.6.37-   
   +deb11u2_source.buildinfo   
   Checksums-Sha256:   
    d096eb4db55c57c2b4bc36218c767e9aadc9d2bcfa6dbb6e3757dbb2766dd8d4 2257   
   libpng1.6_1.6.37-3+deb11u2.dsc   
    ca74a0dace179a8422187671aee97dd3892b53e168627145271cad5b5ac81307 1508805   
   libpng1.6_1.6.37.orig.tar.gz   
    2da748a9a0aea17d990ee91417f61592ea99f0b0312802d6dfedb9080c3470f3 40832   
   libpng1.6_1.6.37-3+deb11u2.debian.tar.xz   
    b0db939cdebaaed06dcdf2c94911a6708762e397b2b693ca4cf888e7c3d5a744 6387   
   libpng1.6_1.6.37-3+deb11u2_source.buildinfo   
   Files:   
    3da6f27bf839b145f177929f2ebea8ab 2257 libs optional libpng1.6_1   
   6.37-3+deb11u2.dsc   
    564aa9f6c678dbb016b07ecfae8b7245 1508805 libs optional libpng1.   
   _1.6.37.orig.tar.gz   
    a85c148b9312a9b6ae35a14cb524c2b4 40832 libs optional libpng1.6_   
   .6.37-3+deb11u2.debian.tar.xz   
    63ec3504439d2863151cc3b9bf3f9472 6387 libs optional libpng1.6_1   
   6.37-3+deb11u2_source.buildinfo   
      
   -----BEGIN PGP SIGNATURE-----   
      
   iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmmUpo4ACgkQkWT6HRe9   
   XTZ/2Q/+IXF2xPNRxL3UbDC5AbXN3w5MCNAgoT3ea4Q7NW7pki7WauymcTdSRTtG   
   ia8Qevi7r00LOoG/lW6SBtEAX6hSbCUhPeGT+Adagg4AOdeHUfZVa9/a3AVWMHXh   
   esOTfqgpHVcQjzHFBzgFnsaOTbVV8MLt4DtOc8EB7oOcCczOmHtxFlfLgzIECitl   
   3QRJwZGcDJTOf/fujlWp1P2AVV69DL8vCgl2r2PA6P2jSUvlw21zXHOzhJ11sHYs   
   e+xhy3BjLB7a8Kf+cddW3u2w4+mZCJn4cURcP3c5oykNT747O3O0HxAo7EI6KwHQ   
   4MssZd/uydNuHSzD2J6t2iQho7BCMC3blKi4CMi8WCmt/19oYWdfGhZSDJ7zddvF   
   Cq1Fj3gawdd016zI3DV6EWjbdNSHHRvh/V2agkLETtK+UW3q2nXTsRX3VwmwYoIO   
   QXPZqK4oQ2Ogrwzaml9Fy6sb+ZY7hi6oAnq+kGWnbvzddaDhWANanqCwvFsey3bp   
   Eywsxo2fdkNuNFAumsYw45wQe0CnSD/HuKvs7wX3vaApy/INEaQRuMKfBQ7hxY9c   
   STy7QYam4guDtCVqNIrd/39fgLaCPKd5GsT75r8ERm/KNsyZn7KzZD7N+n3JZA3W   
   WBnsR0E5p1TtATzY15r+M3NSNaohNRkEYtCr1LcIKzHGN4DG/eQ=   
   =HfWy   
   -----END PGP SIGNATURE-----   
      
      
      
      
   ----- End forwarded message -----   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)