Vulnerabilitymedium
Re: libpng 1.6.59: Use-after-free vulnerability fixed: CVE-2026-46675
AI summary · grok-4.7Summaries by Vani AI
Follow-up asks where the official libpng 1.6.59 tarball is after the CVE-2026-46675 fix.
An oss-security reply discusses distribution of libpng 1.6.59, which the thread title says fixes use-after-free CVE-2026-46675. The poster reports that the SourceForge libpng16 files area and the download site linked from the README do not offer a 1.6.59 tarball. They ask whether an official tarball is planned or whether GitHub autogenerated archives will be used.
Key facts
- libpng 1.6.59 is said to fix use-after-free CVE-2026-46675.
- The SourceForge libpng16 listing has no 1.6.59 release.
- The poster asks about official tarballs versus GitHub-generated archives.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-46675 | — | — | — |
From the original article
Posted by Sam James on Sep 29 Cosmin Truta writes: https://sourceforge. net/projects/libpng/files/libpng16/ has no 1. 6.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.