Accepted libpng1.6 1.6.37-3+deb11u4 (source) into oldoldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 08 May 2026 21:05:36 +0200
Source: libpng1.6
Architecture: source
Version: 1.6.37-3+deb11u4
Distribution: bullseye-security
Urgency: high
Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1133051
Changes:
 libpng1.6 (1.6.37-3+deb11u4) bullseye-security; urgency=high
 .
   * Maintainer upload by the LTS Security Team.
   * Backport fix CVE-2026-34757 - Use after free. (Closes: #1133051)
   * Cherry-pick upstream regression fix for previously fixed CVE 2026-33416.
Checksums-Sha1:
 a93e3fb77f3fbafb8da0a9d66415c49300f881e8 2257 libpng1.6_1.6.37-3+deb11u4.dsc
 c49c784ba7ffcfea460895579a2674a1ebd28067 50912 libpng1.6_1.6.37-3+deb11u4.debian.tar.xz
 5155f53dc2294a05381de16f3d39d1c232c048b0 6066 libpng1.6_1.6.37-3+deb11u4_source.buildinfo
Checksums-Sha256:
 727ae6af17539990ab9348ca303359a8053cbe731bb85df833212d7cf4af914f 2257 libpng1.6_1.6.37-3+deb11u4.dsc
 0473c969ac62b25c140917cd6d7558812401129b19810b79a2635e1514f9a86a 50912 libpng1.6_1.6.37-3+deb11u4.debian.tar.xz
 d3f199c83a8faff6744997778b8af998a8a6ef7bbcf7625828d30f5c90e47d7e 6066 libpng1.6_1.6.37-3+deb11u4_source.buildinfo
Files:
 24b08d741661837a5155668cb49672eb 2257 libs optional libpng1.6_1.6.37-3+deb11u4.dsc
 87cb8842ef2d79a17cb15bf4e23b9c1c 50912 libs optional libpng1.6_1.6.37-3+deb11u4.debian.tar.xz
 d2052c01aa9c3e52611eaa397dc7372b 6066 libs optional libpng1.6_1.6.37-3+deb11u4_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=who5
-----END PGP SIGNATURE-----