DSA-6189-1

NameDSA-6189-1
Descriptionlibpng1.6 - security update
SourceDebian
ReferencesCVE-2026-33416, CVE-2026-33636

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libpng1.6 (PTS)bookworm1.6.39-2+deb12u1vulnerable
bookworm (security)1.6.39-2+deb12u4fixed
trixie1.6.48-1+deb13u3vulnerable
trixie (security)1.6.48-1+deb13u4fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libpng1.6sourcebookworm1.6.39-2+deb12u4
libpng1.6sourcetrixie1.6.48-1+deb13u4

Search for package or bug name: Reporting problems