# libpng1.6 security updates

Patch Radar has 45 security fixes for libpng1.6, closing 15 CVEs. The newest is DEBIAN-CVE-2026-46675 (1.6.48-1+deb13u6), released October 1, 2026.

- Web page: https://patchblox.com/security/product/linux/libpng1.6
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DEBIAN-CVE-2026-46675](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46675.md) | Oct 1, 2026 | Debian 13.5 (trixie) 1.6.48-1+deb13u6 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46675](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46675.md) | Oct 1, 2026 | Debian 12.15 (bookworm) 1.6.39-2+deb12u6 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-46675](https://patchblox.com/security/data/fix/linux/debian-cve-2026-46675.md) | Oct 1, 2026 | Debian 14 1.6.59-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-40930](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40930.md) | May 27, 2026 | Debian 12.15 (bookworm) 1.6.37-4 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-40930](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40930.md) | May 27, 2026 | Debian 13.5 (trixie) 1.6.37-4 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-40930](https://patchblox.com/security/data/fix/linux/debian-cve-2026-40930.md) | May 27, 2026 | Debian 14 1.6.37-4 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-34757](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34757.md) | Apr 9, 2026 | Debian 12.15 (bookworm) 1.6.39-2+deb12u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-34757](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34757.md) | Apr 9, 2026 | Debian 13.5 (trixie) 1.6.48-1+deb13u5 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-34757](https://patchblox.com/security/data/fix/linux/debian-cve-2026-34757.md) | Apr 9, 2026 | Debian 14 1.6.57-1 | Routine | 1 | 0 |
| [DSA-6189-1](https://patchblox.com/security/data/fix/linux/dsa-6189-1.md) | Mar 31, 2026 | Debian 12.15 (bookworm) 1.6.39-2+deb12u4 | High | 1 | 0 |
| [DSA-6189-1](https://patchblox.com/security/data/fix/linux/dsa-6189-1.md) | Mar 31, 2026 | Debian 13.5 (trixie) 1.6.48-1+deb13u4 | High | 1 | 0 |
| [DEBIAN-CVE-2026-33636](https://patchblox.com/security/data/fix/linux/debian-cve-2026-33636.md) | Mar 26, 2026 | Debian 12.15 (bookworm) 1.6.39-2+deb12u4 | High | 1 | 0 |
| [DEBIAN-CVE-2026-33636](https://patchblox.com/security/data/fix/linux/debian-cve-2026-33636.md) | Mar 26, 2026 | Debian 13.5 (trixie) 1.6.48-1+deb13u4 | High | 1 | 0 |
| [DEBIAN-CVE-2026-33636](https://patchblox.com/security/data/fix/linux/debian-cve-2026-33636.md) | Mar 26, 2026 | Debian 14 1.6.56-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-33416](https://patchblox.com/security/data/fix/linux/debian-cve-2026-33416.md) | Mar 26, 2026 | Debian 14 1.6.56-1 | High | 1 | 0 |
| [DSA-6138-1](https://patchblox.com/security/data/fix/linux/dsa-6138-1.md) | Feb 17, 2026 | Debian 12.15 (bookworm) 1.6.39-2+deb12u3 | High | 1 | 0 |
| [DSA-6138-1](https://patchblox.com/security/data/fix/linux/dsa-6138-1.md) | Feb 17, 2026 | Debian 13.5 (trixie) 1.6.48-1+deb13u3 | High | 1 | 0 |
| [DLA-4481-1](https://patchblox.com/security/data/fix/linux/dla-4481-1.md) | Feb 17, 2026 | Debian 11.6 (bullseye) 1.6.37-3+deb11u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-25646](https://patchblox.com/security/data/fix/linux/debian-cve-2026-25646.md) | Feb 10, 2026 | Debian 14 1.6.55-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-28162](https://patchblox.com/security/data/fix/linux/debian-cve-2025-28162.md) | Jan 27, 2026 | Debian 13.5 (trixie) 1.6.47-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-28162](https://patchblox.com/security/data/fix/linux/debian-cve-2025-28162.md) | Jan 27, 2026 | Debian 14 1.6.47-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-28164](https://patchblox.com/security/data/fix/linux/debian-cve-2025-28164.md) | Jan 27, 2026 | Debian 13.5 (trixie) 1.6.47-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-28164](https://patchblox.com/security/data/fix/linux/debian-cve-2025-28164.md) | Jan 27, 2026 | Debian 14 1.6.47-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2026-22695](https://patchblox.com/security/data/fix/linux/debian-cve-2026-22695.md) | Jan 12, 2026 | Debian 12.15 (bookworm) 1.6.39-2+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-22695](https://patchblox.com/security/data/fix/linux/debian-cve-2026-22695.md) | Jan 12, 2026 | Debian 13.5 (trixie) 1.6.48-1+deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-22695](https://patchblox.com/security/data/fix/linux/debian-cve-2026-22695.md) | Jan 12, 2026 | Debian 14 1.6.54-1 | High | 1 | 0 |
| [DEBIAN-CVE-2026-22801](https://patchblox.com/security/data/fix/linux/debian-cve-2026-22801.md) | Jan 12, 2026 | Debian 12.15 (bookworm) 1.6.39-2+deb12u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-22801](https://patchblox.com/security/data/fix/linux/debian-cve-2026-22801.md) | Jan 12, 2026 | Debian 13.5 (trixie) 1.6.48-1+deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-22801](https://patchblox.com/security/data/fix/linux/debian-cve-2026-22801.md) | Jan 12, 2026 | Debian 14 1.6.54-1 | High | 1 | 0 |
| [DSA-6076-1](https://patchblox.com/security/data/fix/linux/dsa-6076-1.md) | Dec 10, 2025 | Debian 12.15 (bookworm) 1.6.39-2+deb12u1 | Routine | 1 | 0 |
| [DSA-6076-1](https://patchblox.com/security/data/fix/linux/dsa-6076-1.md) | Dec 10, 2025 | Debian 13.5 (trixie) 1.6.48-1+deb13u1 | Routine | 1 | 0 |
| [DLA-4396-1](https://patchblox.com/security/data/fix/linux/dla-4396-1.md) | Dec 7, 2025 | Debian 11.6 (bullseye) 1.6.37-3+deb11u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-66293](https://patchblox.com/security/data/fix/linux/debian-cve-2025-66293.md) | Dec 3, 2025 | Debian 12.15 (bookworm) 1.6.39-2+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-66293](https://patchblox.com/security/data/fix/linux/debian-cve-2025-66293.md) | Dec 3, 2025 | Debian 13.5 (trixie) 1.6.48-1+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-66293](https://patchblox.com/security/data/fix/linux/debian-cve-2025-66293.md) | Dec 3, 2025 | Debian 14 1.6.52-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-64720](https://patchblox.com/security/data/fix/linux/debian-cve-2025-64720.md) | Nov 25, 2025 | Debian 12.15 (bookworm) 1.6.39-2+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-64720](https://patchblox.com/security/data/fix/linux/debian-cve-2025-64720.md) | Nov 25, 2025 | Debian 13.5 (trixie) 1.6.48-1+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-64720](https://patchblox.com/security/data/fix/linux/debian-cve-2025-64720.md) | Nov 25, 2025 | Debian 14 1.6.51-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-65018](https://patchblox.com/security/data/fix/linux/debian-cve-2025-65018.md) | Nov 25, 2025 | Debian 12.15 (bookworm) 1.6.39-2+deb12u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-65018](https://patchblox.com/security/data/fix/linux/debian-cve-2025-65018.md) | Nov 25, 2025 | Debian 13.5 (trixie) 1.6.48-1+deb13u1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-65018](https://patchblox.com/security/data/fix/linux/debian-cve-2025-65018.md) | Nov 25, 2025 | Debian 14 1.6.51-1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-64505](https://patchblox.com/security/data/fix/linux/debian-cve-2025-64505.md) | Nov 25, 2025 | Debian 14 1.6.51-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-64506](https://patchblox.com/security/data/fix/linux/debian-cve-2025-64506.md) | Nov 25, 2025 | Debian 12.15 (bookworm) 1.6.39-2+deb12u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-64506](https://patchblox.com/security/data/fix/linux/debian-cve-2025-64506.md) | Nov 25, 2025 | Debian 13.5 (trixie) 1.6.48-1+deb13u1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2025-64506](https://patchblox.com/security/data/fix/linux/debian-cve-2025-64506.md) | Nov 25, 2025 | Debian 14 1.6.51-1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo