#libpng — Public Fediverse posts

37 Debian LTS advisories were released in February fixing 145 CVEs across various packages. These include security fixes for bind9, firefox-esr, imagemagick, libpng, mbedtls, openssh, packagekit, perl, postgresql-13, python3.9, systemd and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm), Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-04/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #imagemagick #libpng #openssh #packagekit #perl #systemd

37 Debian LTS advisories were released in February fixing 145 CVEs across various packages. These include security fixes for bind9, firefox-esr, imagemagick, libpng, mbedtls, openssh, packagekit, perl, postgresql-13, python3.9, systemd and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm), Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-04/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #imagemagick #libpng #openssh #packagekit #perl #systemd

37 Debian LTS advisories were released in February fixing 145 CVEs across various packages. These include security fixes for bind9, firefox-esr, imagemagick, libpng, mbedtls, openssh, packagekit, perl, postgresql-13, python3.9, systemd and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm), Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-04/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #imagemagick #libpng #openssh #packagekit #perl #systemd

37 Debian LTS advisories were released in February fixing 145 CVEs across various packages. These include security fixes for bind9, firefox-esr, imagemagick, libpng, mbedtls, openssh, packagekit, perl, postgresql-13, python3.9, systemd and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm), Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-04/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #imagemagick #libpng #openssh #packagekit #perl #systemd

37 Debian LTS advisories were released in February fixing 145 CVEs across various packages. These include security fixes for bind9, firefox-esr, imagemagick, libpng, mbedtls, openssh, packagekit, perl, postgresql-13, python3.9, systemd and many more.

Debian LTS contributors also prepared updates for more recent releases, Debian 12 (#bookworm), Debian 13 (#trixie) and Debian unstable.

Read the full report: https://www.freexian.com/blog/debian-lts-report-2026-04/?utm_source=mastodon&utm_medium=social

This work is funded by Freexian's Debian LTS offering. Become a sponsor of Debian LTS (https://www.freexian.com/lts/debian/?utm_source=mastodon&utm_medium=social) and enjoy the benefits (https://www.freexian.com/lts/debian/details/#benefits).

#debian #debianlts #freexian #imagemagick #libpng #openssh #packagekit #perl #systemd

#libpng 1.6.56 fixes two high-severity vulnerabilities: CVE-2026-33416 and CVE-2026-33636.

Out of these CVE-2026-33416: Use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE is particularly serious as arbitrary code execution has been demonstrated. Applications that call png_free_data() to release memory between png_read_info() and png_read_update_info() are affected.

https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j

The second vulnerability CVE-2026-33636: Out-of-bounds read/write in the palette expansion on ARM Neon is of more limited concern as only crashes has been demonstrated. More serious impacts have not been ruled out, however.

https://github.com/pnggroup/libpng/security/advisories/GHSA-wjr5-c57x-95m2

#infosec #cybersecurity #CVE_2026_33416 #CVE_2026_33636

Make_map sliced in PNG format now, and MapEdit can handle PNG tileset, using APNG specifications (since libpng 1.8.0) to store all tiles in 1 only file.

Also crashy bugs found. Thanks to the German people, my MagicOnLinux/mac is convenient enough for bugbusters sessions

#atarist #gamedev #libpng #v4sa

Hay para todos. En https://www.cisa.gov/news-events/bulletins/sb25-342 #Cisa publican semanalmente un listado de #vulnerabilidades #CVE 📉 . #Avast #GitLab #IBMInformix #NVIDIA #LIBPNG #RedHat #Samsung #SynologyDSM #Vim , plugins de #WP. Estos son los que más me suenan entre los de #HighVulnerabilites . Recordad las actualizaciones son ✋ importantes.

Hay para todos. En https://www.cisa.gov/news-events/bulletins/sb25-342 #Cisa publican semanalmente un listado de #vulnerabilidades #CVE 📉 . #Avast #GitLab #IBMInformix #NVIDIA #LIBPNG #RedHat #Samsung #SynologyDSM #Vim , plugins de #WP. Estos son los que más me suenan entre los de #HighVulnerabilites . Recordad las actualizaciones son ✋ importantes.

My new pngdec.ldg works, except for last transformation RGBA to ARGB for the TC32 screen (harsh vro_cpyfm on the screen for testing). Has to LPEEK and ROR(RGBA, 8) in my GFA code to fix...

Incidentally, my GIF slicer will become a PNG slicer too.

#atarist #v4sa #libpng

libpng 1.6.0 through 1.6.51 out-of-bounds read vulnerability CVE-2025-66293 may lead to information disclosure (or denial of service). Due to a bug processing a PNG image may lead to read of 1012 bytes past the end of an array. Depending on the contents of the memory beyond this array, some confidential information may be leaked.

The conditions for the issue to trigger require the image to processed through the simplified API with an output format without alpha and no explicit background color. This means that not every application processing PNG images is leaking information. Also a limiting factor is that the affected system would need to return the decoded image data for the information leak to happen in the first place. Finally the information would need to cross a security context (for example from server to client, from privileged process to unprivileged or from user to another user) for the leak to have a security impact.

Interestingly the images resulting in the leak are in fact fully PNG spec compliant.

libpng 1.6.0 through 1.6.51 are affected. The vulnerability is fixed in libpng 1.6.52.

source: https://www.openwall.com/lists/oss-security/2025/12/03/5

#libpng #CVE_2025_66293 #infosec #cybersecurity

- Updated #tiff to 4.7.1

- Updated pl_mpeg

- Updated #nanoSVG

- Updated #libpng to 1.6.50

- Updated #jasper to 4.2.8

- Updated #AnimatedGIF to 2.2.0

- Moved mbedTLS config out of the source tree

- Added more examples/tests

- Added my #VCFe talk slides from May, 2025

#MSDOS #DOSGaming #retrocomputing #JavaScript #FreeDOS #creativecoding #p5js #retrodev #retrodevelopment #3dfx #OpenGL #Processing
3/

#libpng 1.6.50 has been released (#PNG / #PortableNetworkGraphics / #LosslessBitmapImageFormat) https://libpng.sourceforge.io/

#libpng 1.6.48 has been released (#PNG / #PortableNetworkGraphics / #LosslessBitmapImageFormat) https://libpng.sourceforge.io/

If you're getting inexplicable "libpng warning: iCCP: known incorrect sRGB profile" messages from your Raspberry Pi code, it's not your fault!

It looks like the fault is with some of the Raspberry Pi PiXflat theme icons. They have bad colour profile data embedded in them. libpng complains every time system apps that use the icons are called. So if you view a JPEG in OpenCV, you'll get several warnings about PNGs you didn't open.

Git hub issue: https://github.com/RPi-Distro/repo/issues/387

#RaspberryPi #libpng

#libpng 1.6.46 has been released (#PNG / #PortableNetworkGraphics) https://libpng.sourceforge.io/

Well I did it. I got a Swift wrapper around a homebrew install of libpng working. "Hello PNG" works for both reading and writing RGBA data

Next step is to get jmpdef to translate to a function that throws in a more Swifty way.

Pretty extensive README.md and META.md for those who'd want to duplicate.

https://github.com/carlynorama/SwiftLIBPNG

#SwiftLang #C #SwiftWithC #libpng