Control: fixed -1 1.6.37-3+deb11u2 ----- Forwarded message from Debian FTP Masters <[email protected]> -----
Date: Tue, 17 Feb 2026 17:50:24 +0000 From: Debian FTP Masters <[email protected]> To: [email protected], [email protected] Subject: Accepted libpng1.6 1.6.37-3+deb11u2 (source) into oldoldstable-security -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 17 Feb 2026 18:01:30 +0100 Source: libpng1.6 Architecture: source Version: 1.6.37-3+deb11u2 Distribution: bullseye-security Urgency: high Maintainer: Maintainers of libpng1.6 packages <[email protected]> Changed-By: Tobias Frost <[email protected]> Closes: 1125443 1125444 1127566 Changes: libpng1.6 (1.6.37-3+deb11u2) bullseye-security; urgency=high . * Maintainer upload by the LTS Security Team. * Backporting from 1.6.54: - CVE-2026-22801 - Heap buffer over-read (Closes: #1125444 - CVE-2026-22695 - Heap buffer over-read (Closes: #1125443) * Backporting from 1.6.55: - CVE-2026-25646 - Heap buffer overflow (Closes: #1127566) Checksums-Sha1: 26aac1cdfe616f6a967dd61b9fb1d4ee1e2c90e2 2257 libpng1.6_1.6.37-3+deb11u2.dsc 1aac0e12aa5b583f736fb6692f47dff7a3efa78b 1508805 libpng1.6_1.6.37.orig.tar.gz 56778e0c8dd443ef74748dac5f2a941c27efb19e 40832 libpng1.6_1.6.37-3+deb11u2.debian.tar.xz 9bbacd084bfb658a0052242a994564e974299c4f 6387 libpng1.6_1.6.37-3+deb11u2_source.buildinfo Checksums-Sha256: d096eb4db55c57c2b4bc36218c767e9aadc9d2bcfa6dbb6e3757dbb2766dd8d4 2257 libpng1.6_1.6.37-3+deb11u2.dsc ca74a0dace179a8422187671aee97dd3892b53e168627145271cad5b5ac81307 1508805 libpng1.6_1.6.37.orig.tar.gz 2da748a9a0aea17d990ee91417f61592ea99f0b0312802d6dfedb9080c3470f3 40832 libpng1.6_1.6.37-3+deb11u2.debian.tar.xz b0db939cdebaaed06dcdf2c94911a6708762e397b2b693ca4cf888e7c3d5a744 6387 libpng1.6_1.6.37-3+deb11u2_source.buildinfo Files: 3da6f27bf839b145f177929f2ebea8ab 2257 libs optional libpng1.6_1.6.37-3+deb11u2.dsc 564aa9f6c678dbb016b07ecfae8b7245 1508805 libs optional libpng1.6_1.6.37.orig.tar.gz a85c148b9312a9b6ae35a14cb524c2b4 40832 libs optional libpng1.6_1.6.37-3+deb11u2.debian.tar.xz 63ec3504439d2863151cc3b9bf3f9472 6387 libs optional libpng1.6_1.6.37-3+deb11u2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE/d0M/zhkJ3YwohhskWT6HRe9XTYFAmmUpo4ACgkQkWT6HRe9 XTZ/2Q/+IXF2xPNRxL3UbDC5AbXN3w5MCNAgoT3ea4Q7NW7pki7WauymcTdSRTtG ia8Qevi7r00LOoG/lW6SBtEAX6hSbCUhPeGT+Adagg4AOdeHUfZVa9/a3AVWMHXh esOTfqgpHVcQjzHFBzgFnsaOTbVV8MLt4DtOc8EB7oOcCczOmHtxFlfLgzIECitl 3QRJwZGcDJTOf/fujlWp1P2AVV69DL8vCgl2r2PA6P2jSUvlw21zXHOzhJ11sHYs e+xhy3BjLB7a8Kf+cddW3u2w4+mZCJn4cURcP3c5oykNT747O3O0HxAo7EI6KwHQ 4MssZd/uydNuHSzD2J6t2iQho7BCMC3blKi4CMi8WCmt/19oYWdfGhZSDJ7zddvF Cq1Fj3gawdd016zI3DV6EWjbdNSHHRvh/V2agkLETtK+UW3q2nXTsRX3VwmwYoIO QXPZqK4oQ2Ogrwzaml9Fy6sb+ZY7hi6oAnq+kGWnbvzddaDhWANanqCwvFsey3bp Eywsxo2fdkNuNFAumsYw45wQe0CnSD/HuKvs7wX3vaApy/INEaQRuMKfBQ7hxY9c STy7QYam4guDtCVqNIrd/39fgLaCPKd5GsT75r8ERm/KNsyZn7KzZD7N+n3JZA3W WBnsR0E5p1TtATzY15r+M3NSNaohNRkEYtCr1LcIKzHGN4DG/eQ= =HfWy -----END PGP SIGNATURE----- ----- End forwarded message -----
