From CVE:<p>&gt;and 1.6.x before 1.6.19<p>Unfortunately, the latest version on libpng site [0] is 1.6.18.<p>Why was this CVE announced before the patch and version update was released?<p>[0] <a href="http:&#x2F;&#x2F;www.libpng.org&#x2F;pub&#x2F;png&#x2F;libpng.html" rel="nofollow">http:&#x2F;&#x2F;www.libpng.org&#x2F;pub&#x2F;png&#x2F;libpng.html</a>