Alerts This Week
Warning Icon 1 774
Alerts This Week
Warning Icon 1 774

Debian libpng1.6 Critical DDoS Exec Vulnerability DSA-6189-1 Alert

debian
Calendar Grey March 31, 2026
Debian Logo
Two critical vulnerabilities in libpng fixed for Debian distributions, address potential execution risks. Upgrade recommended.
Two security vulnerabilities were discovered in libpng, a library implementing an interface for reading and writing PNG (Portable Network Graphics) files, which could result in den...
Topics%20covered

Topics Covered

security advisory denial of service libpng execution risk bookworm trixie

Summary

For the oldstable distribution (bookworm), these problems have been fixed
in version 1.6.39-2+deb12u4.

For the stable distribution (trixie), these problems have been fixed in
version 1.6.48-1+deb13u4.

We recommend that you upgrade your libpng1.6 packages.

For the detailed security status of libpng1.6 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/libpng1.6

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: libpng1.6
CVE ID: CVE-2026-33416 CVE-2026-33636

Topics%20covered

Topics Covered

security advisory denial of service libpng execution risk bookworm trixie

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here