Re: security update for libpng1.6
Hi Tobi,
On Thu, Dec 04, 2025 at 06:18:04AM +0100, Tobias Frost wrote:
> Hi security team
>
> #1121877 has been reported, CVE-2025-66293. [1]
> I'm looking at it right now for unstable, please advice whether you'd
> like to amend the pending upload with a fix for this vulnerability as
> well. Holding LTS/ELTS (which are ready too without the newly discovered
> CVE, plan to add the patch for those as well) until I've get your
> feedback.
Yes please. I will reject the current one on security-master so that
we can include the patch and reuse the same version. But let's fix it
first in unstable.
Thanks for the headsup, we were on X-Debbugs-CC so added it already as
well to the tracker.
Regards,
Salvatore
Reply to: