-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-5300-1                   security@debian.org
https://www.debian.org/security/                       Moritz Muehlenhoff
December 12, 2022                     https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : pngcheck
CVE ID         : CVE-2020-35511

Multiple security issues were discovered in pngcheck, a tool to verify
the integrity of PNG, JNG and MNG files, which could potentially result
in the execution of arbitrary code.

For the stable distribution (bullseye), this problem has been fixed in
version 3.0.3-1~deb11u1.

We recommend that you upgrade your pngcheck packages.

For the detailed security status of pngcheck please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/pngcheck

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
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ppOy
-----END PGP SIGNATURE-----