Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 8ab1b0c2 by Salvatore Bonaccorso at 2026-09-29T15:54:26+02:00 Add CVE-2026-46675/libpng1.6 - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,8 @@ +CVE-2026-46675 [Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt or iCCP decompression] + - libpng1.6 <unfixed> + NOTE: https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j + NOTE: https://github.com/pnggroup/libpng/issues/855 + NOTE: Fixed by: https://github.com/pnggroup/libpng/commit/aa77ef38c17ab2fc1b41bec09fb973c6a386641d (v1.6.59) CVE-2026-86843 NOT-FOR-US: Apache Airflow provider CVE-2026-81930 View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ab1b0c22806911aae31b62bce806dafb3d0bcf3 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8ab1b0c22806911aae31b62bce806dafb3d0bcf3 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
