Debian dla-4396 : libpng-dev - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4396 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4396-1 [email protected]...

Important: libpng

Issue Overview: A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palettelookup array bounds are not validated against externally-supplied image data, allowing an attacker to craf...

[SECURITY] [DLA 4396-1] libpng1.6 security update

Debian LTS Advisory DLA-4396-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost December 07, 2025 https://wiki.debian.org/LTS Package : libpng1.6 Version : 1.6.37-3+deb11u1 CVE ID : CVE-2025-64505 CVE-2025-64506 CVE-2025-64720 CVE-2025-65018 CVE-2025-66293 Debian Bug ...

CVE-2025-66293 affecting package libpng for versions less than 1.6.52-1

CVE-2025-66293 affecting package libpng for versions less than 1.6.52-1. An upgraded version of the package is available that resolves this issue...

ROOT-OS-DEBIAN-13-CVE-2025-66293 CVE-2025-66293 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2025-66293 in the rootio-libpng1.6 package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-66293 CVE-2025-66293 in rootio-libpng1.6 - Patched by Root

Root has patched CVE-2025-66293 in the rootio-libpng1.6 package for Root:Debian:12. Multiple fixed versions available...

CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1

CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1

CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-64505 affecting package libpng for versions less than 1.6.51-1

CVE-2025-64505 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-64720 affecting package libpng for versions less than 1.6.51-1

CVE-2025-64720 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

SUSE CVE-2025-66293

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files. Prior to 1.6.52, an out-of-bounds read vulnerability in libpng's simplified API allows reading up to 1012 bytes beyond the pngsRGBbase512 array when processing...

Slackware: Security Advisory (SSA:2025-338-02)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : png -- Out-of-bounds read (f323f148-d181-11f0-841f-843a4b343614)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f323f148-d181-11f0-841f-843a4b343614 advisory. https://github.com/pnggroup/libpng/security/advisories/GHSA-9mpm-9pxh-mg4f reports: Prior to 1.6.52, an...

libpng12-0-1.2.59-4.1 on GA media (moderate)

libpng12-0-1.2.59-4.1 on GA media Announcement ID: openSUSE-SU-2025:15797-1 Rating: moderate Cross-References: CVE-2025-64505 CVSS scores: CVE-2025-64505 SUSE : 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVE-2025-64505 SUSE : 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA...

CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1

CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1

CVE-2025-64506 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-64505 affecting package libpng for versions less than 1.6.51-1

CVE-2025-64505 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-64720 affecting package libpng for versions less than 1.6.51-1

CVE-2025-64720 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

[slackware-security] libpng

New libpng packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpng-1.6.52-i586-1slack15.0.txz: Upgraded. This update fixes a high severity security issue: Out-of-bounds read in...

Slackware Linux 15.0 / current libpng Vulnerability (SSA:2025-338-02)

The version of libpng installed on the remote host is prior to 1.6.52. It is, therefore, affected by a vulnerability as referenced in the SSA:2025-338-02 advisory. New libpng packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...