It seems the updates of libpng in Debian has ceased, and the version is stuck at 1.2.15~beta5-3. Meanwhile, quite a number of CVEs have been reported at the upstream homepage, where the version is now at 1.2.26. This package should certainly be updated.
** Changed in: libpng (Ubuntu) Importance: Undecided => Wishlist Assignee: Morten Kjeldgaard (mok0) => (unassigned) Status: New => Triaged ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2006-3334 -- Please sponsor libpng 1.2.24 https://bugs.launchpad.net/bugs/185178 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs