Accepted libpng1.6 1.6.54-1 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Jan 2026 08:49:40 +0100
Source: libpng1.6
Built-For-Profiles: noudeb
Architecture: source
Version: 1.6.54-1
Distribution: unstable
Urgency: medium
Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1125443 1125444
Changes:
 libpng1.6 (1.6.54-1) unstable; urgency=medium
 .
   * New upstream version 1.6.54.
     - CVE-2026-22695 - Heap buffer overread. Closes: #1125443
     - CVE-2026-22801 - Heap buffer overread. Closes: #1125444
   * Bump d/copyright years.
Checksums-Sha1:
 86a67f0b84a5b94cde57cbddc62695f032a484a8 2254 libpng1.6_1.6.54-1.dsc
 98c659b0f57cb409de4f9c09b0a48440d18c8060 1585700 libpng1.6_1.6.54.orig.tar.gz
 9c087ad4dac8d214a3ade02e29877fc1f2bbaea1 33516 libpng1.6_1.6.54-1.debian.tar.xz
 b2f474e0f95525e7d8db2c0dc21cbd51466507c6 7911 libpng1.6_1.6.54-1_source.buildinfo
Checksums-Sha256:
 dff12a8ad32ced0b8b0c51522806da7c592d41ecb59977239fcdb25d47431890 2254 libpng1.6_1.6.54-1.dsc
 ba7efce137409079989df4667706c339bebfbb10e9f413474718012a13c8cd4c 1585700 libpng1.6_1.6.54.orig.tar.gz
 12290f527b91445e7fae947333bbc22b17463cc93c8b7be03dcccf203bfef5a0 33516 libpng1.6_1.6.54-1.debian.tar.xz
 503c58b806e99285ac81cfa784639f5c2180363ad12fc5b699d48f96678eaced 7911 libpng1.6_1.6.54-1_source.buildinfo
Files:
 d6831e7bfc04f2b78a75da3d5f1d2099 2254 libs optional libpng1.6_1.6.54-1.dsc
 fbad637cfd2eeef6b35e5ec3af97621c 1585700 libs optional libpng1.6_1.6.54.orig.tar.gz
 59b4210c8d7cf86aad381f891ddb9ca6 33516 libs optional libpng1.6_1.6.54-1.debian.tar.xz
 c1129e52222311964701e5050191538f 7911 libs optional libpng1.6_1.6.54-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Vz/q
-----END PGP SIGNATURE-----