Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1271213 > unrolled thread
| Started by | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| First post | 2025-11-22 20:40 +0100 |
| Last post | 2025-11-22 20:40 +0100 |
| Articles | 1 — 1 participant |
Back to article view | Back to linux.debian.bugs.dist
Bug#1121216: libpng1.6: CVE-2025-65018 Salvatore Bonaccorso <carnil@debian.org> - 2025-11-22 20:40 +0100
| From | Salvatore Bonaccorso <carnil@debian.org> |
|---|---|
| Date | 2025-11-22 20:40 +0100 |
| Subject | Bug#1121216: libpng1.6: CVE-2025-65018 |
| Message-ID | <LU1CF-eY5y-3@gated-at.bofh.it> |
Source: libpng1.6
Version: 1.6.50-1
Severity: grave
Tags: security upstream
Forwarded: https://github.com/pnggroup/libpng/issues/755
X-Debbugs-Cc: carnil@debian.org, Debian Security Team <team@security.debian.org>
Hi,
The following vulnerability was published for libpng1.6.
CVE-2025-65018[0]:
| Heap buffer overflow in `png_combine_row` triggered via
| `png_image_finish_read`
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2025-65018
https://www.cve.org/CVERecord?id=CVE-2025-65018
[1] https://github.com/pnggroup/libpng/issues/755
[2] https://github.com/pnggroup/libpng/security/advisories/GHSA-7wv6-48j4-hj3g
[3] https://www.openwall.com/lists/oss-security/2025/11/22/1
Please adjust the affected versions in the BTS as needed.
Regards,
Salvatore
Back to top | Article view | linux.debian.bugs.dist
csiph-web