[CLSA-2026:1785774324] libpng: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-19 14:12:24 UTC
Description:
- CVE-2025-64506: fix heap buffer over-read in png_write_image_8bit when 8-bit input is written with the convert_to_8bit flag set
CVEs fixed:
Updated packages:
  • libpng-1.6.37-12.el9_2.tuxcare.els9.aarch64.rpm
    sha:9e5f93b83540e46dd9d474b3d0bbd785943f4df3c93f51143a3d4b8881e27cd6
  • libpng-1.6.37-12.el9_2.tuxcare.els9.i686.rpm
    sha:b59c329260b8e988ecbb66f9517be0e5ee4f00fce7081e5f275efdbe0a9a584b
  • libpng-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm
    sha:30db26800b25db89ce881c29be6312b0fbd6c69ec19e915c40b70e3bf12e52d7
  • libpng-devel-1.6.37-12.el9_2.tuxcare.els9.aarch64.rpm
    sha:e212bec0db9a930eef361cb9619da5c0853394ddb58deaa4e7002889e6fb3cba
  • libpng-devel-1.6.37-12.el9_2.tuxcare.els9.i686.rpm
    sha:f57afb6e8f60db6f18d2795fd128f05e1e3a88cd708abc55d696d2aca9588ef1
  • libpng-devel-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm
    sha:03562e9bf377467d2e7007b1e6033943dc94bed173e650965dfa9ba173bde3fd
  • libpng-static-1.6.37-12.el9_2.tuxcare.els9.aarch64.rpm
    sha:d63f8b413479aad37fa14e047cbb148ad7bd7f322085e351aeaaf55e868d40c7
  • libpng-static-1.6.37-12.el9_2.tuxcare.els9.i686.rpm
    sha:7f2276f109294735d1011b051c11bc1e0a8f4070d97f8f1569c8075aaa679d4d
  • libpng-static-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm
    sha:6981f249b1f4a54ffca60b5b5b7b948f4f1cb4bc1b9662eae338e7e2f9c3f7e1
  • libpng-tools-1.6.37-12.el9_2.tuxcare.els9.aarch64.rpm
    sha:f8f4c48db90a2948a5d7f77cfb06dbaf9390179dba598f67b26be8c87221a075
  • libpng-tools-1.6.37-12.el9_2.tuxcare.els9.i686.rpm
    sha:cd70fa4f4a75d701e6e381d15b94491bdb5c7bf1de0022c99d3cf5981b361cc6
  • libpng-tools-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm
    sha:48d5e34df6a21ba2566d0fb868ac932d8693bb13c75b5dbb632265478aad0fd6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.