{"id":"CLSA-2026-1791824192","summary":"Fix CVE(s): CVE-2026-46675","details":"   * SECURITY UPDATE: use-after-free through stale zstream pointers\n     - debian/patches/CVE-2026-46675.patch: add png_inflate_detach_buffers\n       to clear the zstream input and output pointers and counters, and\n       call it on claim in png_inflate_claim and on release in\n       png_decompress_chunk, png_handle_iCCP and png_read_finish_IDAT\n       (pngrutil.c), so that png_read_end called before row reading no\n       longer inflates through a stale next_in into a freed buffer\n     - CVE-2026-46675","modified":"2026-10-26T09:32:06.357826352Z","published":"2026-10-12T16:56:43Z","upstream":["CVE-2026-46675"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1791824192.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46675"}],"affected":[{"package":{"name":"libpng-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libpng-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.37-2+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791824192.json"}},{"package":{"name":"libpng-tools","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libpng-tools?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.37-2+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791824192.json"}},{"package":{"name":"libpng16-16","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libpng16-16?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.37-2+tuxcare.els6"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1791824192.json"}}],"schema_version":"1.9.0"}