Accepted libpng1.6 1.6.39-2+deb12u6 (source) into oldstable-security

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 05 Oct 2026 10:56:53 +0530
Source: libpng1.6
Built-For-Profiles: noudeb
Architecture: source
Version: 1.6.39-2+deb12u6
Distribution: bookworm-security
Urgency: medium
Maintainer: Maintainers of libpng1.6 packages <libpng1.6@packages.debian.org>
Changed-By: Utkarsh Gupta <utkarsh@debian.org>
Changes:
 libpng1.6 (1.6.39-2+deb12u6) bookworm-security; urgency=medium
 .
   * Non-maintainer upload by the LTS Team.
   * Fix CVE-2026-46675: use-after-free of zlib input in png_read_end()
     after incomplete zTXt, iTXt or iCCP decompression.
Checksums-Sha1:
 c49beffa07f389bc06dad2faedc08e7e50bb1f0d 2302 libpng1.6_1.6.39-2+deb12u6.dsc
 d384c4526a84d213f697108258c490adc99b4cdb 1519415 libpng1.6_1.6.39.orig.tar.gz
 a37fc5c4ade8fc38ef8bcd789dac22e15dfea3b3 51244 libpng1.6_1.6.39-2+deb12u6.debian.tar.xz
 c517cc57b52b744373ed0dc979595cbaed375b0d 6883 libpng1.6_1.6.39-2+deb12u6_source.buildinfo
Checksums-Sha256:
 efd9099f7f74c7bcd4f1540a97be3ce1cb9bc4ff97dfc2062ea66117b17ce686 2302 libpng1.6_1.6.39-2+deb12u6.dsc
 a00e9d2f2f664186e4202db9299397f851aea71b36a35e74910b8820e380d441 1519415 libpng1.6_1.6.39.orig.tar.gz
 bfb66eb5c000c6ce8dc4d6a146c2a81627143b8869f1e9ac9c1e5a286af3dc36 51244 libpng1.6_1.6.39-2+deb12u6.debian.tar.xz
 cdf57376e36dd9851546df25e1d31156d722a57b7beb9b14cb976d85a68660d6 6883 libpng1.6_1.6.39-2+deb12u6_source.buildinfo
Files:
 dff0ec75c233c00bbb3de6947b7c7ca2 2302 libs optional libpng1.6_1.6.39-2+deb12u6.dsc
 a704977d681a40d8223d8b957fd41b29 1519415 libs optional libpng1.6_1.6.39.orig.tar.gz
 f41065b360558dcee2cda8649d991c79 51244 libs optional libpng1.6_1.6.39-2+deb12u6.debian.tar.xz
 564d40b7e73b2b9e4b49f73554ec9b99 6883 libs optional libpng1.6_1.6.39-2+deb12u6_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=d4xf
-----END PGP SIGNATURE-----