[Git][security-tracker-team/security-tracker][master] Reserve DLA-4824-1 for libpng1.6

Utkarsh Gupta (@utkarsh) utkarsh at debian.org
Mon Oct 5 23:13:25 BST 2026



Utkarsh Gupta pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a99cda08 by Utkarsh Gupta at 2026-10-06T03:43:18+05:30
Reserve DLA-4824-1 for libpng1.6

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[06 Oct 2026] DLA-4824-1 libpng1.6 - security update
+	{CVE-2026-46675}
+	[bookworm] - libpng1.6 1.6.39-2+deb12u6
 [05 Oct 2026] DLA-4823-1 roundcube - security update
 	[bookworm] - roundcube 1.6.5+dfsg-1+deb12u12
 [05 Oct 2026] DLA-4822-1 ruby-oauth2 - security update


=====================================
data/dla-needed.txt
=====================================
@@ -353,11 +353,6 @@ libnet-idn-encode-perl
   NOTE: 20261002: 2.500; CVE-2026-74766 is a heap use-after-free on decoding
   NOTE: 20261002: an xn-- label. (utkarsh/front-desk)
 --
-libpng1.6 (Utkarsh)
-  NOTE: 20261002: Added by Front-Desk (utkarsh)
-  NOTE: 20261002: CVE-2026-46675, fixed for trixie in DSA-6537-1. Upstream
-  NOTE: 20261002: aa77ef38 applies to 1.6.39 as-is. (utkarsh/front-desk)
---
 libreoffice (santiago)
   NOTE: 20260927: Added by Front-Desk (ta)
 --



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a99cda0875b97562f29aec440161a8ca96093861

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a99cda0875b97562f29aec440161a8ca96093861
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261005/9d1921f5/attachment.htm>


More information about the debian-security-tracker-commits mailing list