Accepted libpng1.6 1.6.56-1 (source) into unstable

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 29 Mar 2026 08:36:13 +0200
Source: libpng1.6
Architecture: source
Version: 1.6.56-1
Distribution: unstable
Urgency: high
Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1132012 1132013
Changes:
 libpng1.6 (1.6.56-1) unstable; urgency=high
 .
   * New upstream release 1.6.56
     - .CVE-2026-33416 - Use after free (Closes: #1132012)
     -  CVE-2026-33636 - OOB read/write (Closes: #1132013)
Checksums-Sha1:
 c9d10553502681786009e14548a4974cfecf1607 2273 libpng1.6_1.6.56-1.dsc
 dee52516426834e512a11aa094bf64491fd21f9d 1590073 libpng1.6_1.6.56.orig.tar.gz
 cc1dbcc86ecb16e7512c4988edf3377986ee1213 33696 libpng1.6_1.6.56-1.debian.tar.xz
 b4ae5d401d9dfb5792a4872b82f287557dbe5356 8337 libpng1.6_1.6.56-1_amd64.buildinfo
Checksums-Sha256:
 e5edd482d1dfd2a9fee1c744807f29ae80cab2f18ffeac16f913b0902dfb71cd 2273 libpng1.6_1.6.56-1.dsc
 41d74ffe235cb7e8bab40bcad2167f7bb25edbf2231dcfff57ccf4305dc0bfae 1590073 libpng1.6_1.6.56.orig.tar.gz
 58ae26e6422cc2f0934b1b6cbacdd8744a2e8a52f9042a91b66ba5ee503e5cdc 33696 libpng1.6_1.6.56-1.debian.tar.xz
 128aff5b9186ed1df6cb4880d82ed92bd0e776334807eb6761909ac84841ac36 8337 libpng1.6_1.6.56-1_amd64.buildinfo
Files:
 42410c93af6e30f3700db039eaa660db 2273 libs optional libpng1.6_1.6.56-1.dsc
 b4293a47e5a59fffc1c0ad196bb78ea2 1590073 libs optional libpng1.6_1.6.56.orig.tar.gz
 ccc263b2ff2039690a6fac1d9aaaac0e 33696 libs optional libpng1.6_1.6.56-1.debian.tar.xz
 41d50b09e58128f57630767319f4d9f0 8337 libs optional libpng1.6_1.6.56-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=mWQP
-----END PGP SIGNATURE-----