{"id":"ROOT-OS-DEBIAN-bookworm-CVE-2025-64506","summary":"CVE-2025-64506 in rootio-libpng1.6 - Patched by Root","details":"Root has patched CVE-2025-64506 in the rootio-libpng1.6 package for Root:Debian:bookworm. Multiple fixed versions available.","aliases":["CVE-2025-64506","GHSA-qpr4-xm66-hww6","ROOT-OS-DEBIAN-12-CVE-2025-64506","ROOT-OS-DEBIAN-13-CVE-2025-64506","ROOT-OS-DEBIAN-trixie-CVE-2025-64506"],"modified":"2026-02-25T09:00:22.511279Z","published":"2026-01-07T08:29:37Z","withdrawn":"2026-02-25T09:00:22.511279Z","database_specific":{"source":"Root","distro_version":"bookworm","distro":"debian"},"affected":[{"package":{"name":"rootio-libpng1.6","ecosystem":"Root:Debian:bookworm","purl":"pkg:generic/root/rootio-libpng1.6@1.6.39-2.root.io.10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.39-2.root.io.10"}]}],"database_specific":{"root_patch_version":"root.io.10","root_patched":true,"source":"https://api.root.io/external/osv/ROOT-OS-DEBIAN-bookworm-CVE-2025-64506.json","total_fixed_versions":1,"upstream_version":"1.6.39-2","all_fixed_versions":["1.6.39-2.root.io.10"]}}],"schema_version":"1.7.3"}