Red Hat Product Errata RHSA-2026:26347 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26347 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng15 security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng15 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM libpng15-1.5.30-9.el8_10.src.rpm SHA-256: 924d4e8e807e7afc9443edc8b2c755884e9dc29c68bae8eb6c9a0cac6aaf83fc x86_64 libpng15-1.5.30-9.el8_10.i686.rpm SHA-256: d7cd75a0ad0421e4de5fe5b3a56d14b5fa3cacc7d3dacf1a3d2503489499f8fc libpng15-1.5.30-9.el8_10.x86_64.rpm SHA-256: 8edca40b24b717c3db15e8ca2f0f90805569586f950799ac50515046f0a7314c libpng15-debuginfo-1.5.30-9.el8_10.i686.rpm SHA-256: 7bf4ae1968d939a11fe1e715bc9a7b0ad5438bde14cf69e0647e54a975585976 libpng15-debuginfo-1.5.30-9.el8_10.x86_64.rpm SHA-256: 3f7c152685cd8e7d2e144ac0a0e29b564677e813a31814be3003f2b5dab927b8 libpng15-debugsource-1.5.30-9.el8_10.i686.rpm SHA-256: 8e6141f78b15da2e7897d4a089a3235b318e740ccc9102a545af7c11844cb447 libpng15-debugsource-1.5.30-9.el8_10.x86_64.rpm SHA-256: 27926314e29587dcd191903c1087c468ea8e624bea5ad8a53f373b9595c0616d Red Hat Enterprise Linux for IBM z Systems 8 SRPM libpng15-1.5.30-9.el8_10.src.rpm SHA-256: 924d4e8e807e7afc9443edc8b2c755884e9dc29c68bae8eb6c9a0cac6aaf83fc s390x libpng15-1.5.30-9.el8_10.s390x.rpm SHA-256: fc1b4d88d0dded10638d57f7e2a8a5d5219dbd64bdd9ff5b0925088150c499f1 libpng15-debuginfo-1.5.30-9.el8_10.s390x.rpm SHA-256: 2145d75425454c444e0e3e322a3ed2f7ec9605e176488196690c05dc45c7bd63 libpng15-debugsource-1.5.30-9.el8_10.s390x.rpm SHA-256: a39ef3967e71b514c10c38915fc329bfd8fffd73e7c94ee4a3bee2d04cbffe9c Red Hat Enterprise Linux for Power, little endian 8 SRPM libpng15-1.5.30-9.el8_10.src.rpm SHA-256: 924d4e8e807e7afc9443edc8b2c755884e9dc29c68bae8eb6c9a0cac6aaf83fc ppc64le libpng15-1.5.30-9.el8_10.ppc64le.rpm SHA-256: 35d5cdd454ef62f769c302824593f53ad43ebbc0f6ef4d7abe5e49f8bc7fa3ea libpng15-debuginfo-1.5.30-9.el8_10.ppc64le.rpm SHA-256: 5b0c5ec4d38cc58aa9bf1f16058b54be6479e7f73bd0d20bd86a79b0ef5d6c33 libpng15-debugsource-1.5.30-9.el8_10.ppc64le.rpm SHA-256: 6fb05e0088f90015de21b7dfd0bee1384097f312f08ce54efc4f6bd95879507c Red Hat Enterprise Linux for ARM 64 8 SRPM libpng15-1.5.30-9.el8_10.src.rpm SHA-256: 924d4e8e807e7afc9443edc8b2c755884e9dc29c68bae8eb6c9a0cac6aaf83fc aarch64 libpng15-1.5.30-9.el8_10.aarch64.rpm SHA-256: c5a1ad57c29c16efb0519c298f9cad4944c59528ae70054d09c01ad362f08ad4 libpng15-debuginfo-1.5.30-9.el8_10.aarch64.rpm SHA-256: a1f73db22454988cfa07defac887ef46447d6e540acbe9647066f7b7dec037ad libpng15-debugsource-1.5.30-9.el8_10.aarch64.rpm SHA-256: d3c44fab1dc43a825c323a2f6949a5e5e70a1e68c8294c785740fc8b5d842c16 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM libpng15-1.5.30-9.el8_10.src.rpm SHA-256: 924d4e8e807e7afc9443edc8b2c755884e9dc29c68bae8eb6c9a0cac6aaf83fc x86_64 libpng15-1.5.30-9.el8_10.i686.rpm SHA-256: d7cd75a0ad0421e4de5fe5b3a56d14b5fa3cacc7d3dacf1a3d2503489499f8fc libpng15-1.5.30-9.el8_10.x86_64.rpm SHA-256: 8edca40b24b717c3db15e8ca2f0f90805569586f950799ac50515046f0a7314c libpng15-debuginfo-1.5.30-9.el8_10.i686.rpm SHA-256: 7bf4ae1968d939a11fe1e715bc9a7b0ad5438bde14cf69e0647e54a975585976 libpng15-debuginfo-1.5.30-9.el8_10.x86_64.rpm SHA-256: 3f7c152685cd8e7d2e144ac0a0e29b564677e813a31814be3003f2b5dab927b8 libpng15-debugsource-1.5.30-9.el8_10.i686.rpm SHA-256: 8e6141f78b15da2e7897d4a089a3235b318e740ccc9102a545af7c11844cb447 libpng15-debugsource-1.5.30-9.el8_10.x86_64.rpm SHA-256: 27926314e29587dcd191903c1087c468ea8e624bea5ad8a53f373b9595c0616d Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM libpng15-1.5.30-9.el8_10.src.rpm SHA-256: 924d4e8e807e7afc9443edc8b2c755884e9dc29c68bae8eb6c9a0cac6aaf83fc aarch64 libpng15-1.5.30-9.el8_10.aarch64.rpm SHA-256: c5a1ad57c29c16efb0519c298f9cad4944c59528ae70054d09c01ad362f08ad4 libpng15-debuginfo-1.5.30-9.el8_10.aarch64.rpm SHA-256: a1f73db22454988cfa07defac887ef46447d6e540acbe9647066f7b7dec037ad libpng15-debugsource-1.5.30-9.el8_10.aarch64.rpm SHA-256: d3c44fab1dc43a825c323a2f6949a5e5e70a1e68c8294c785740fc8b5d842c16 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM libpng15-1.5.30-9.el8_10.src.rpm SHA-256: 924d4e8e807e7afc9443edc8b2c755884e9dc29c68bae8eb6c9a0cac6aaf83fc ppc64le libpng15-1.5.30-9.el8_10.ppc64le.rpm SHA-256: 35d5cdd454ef62f769c302824593f53ad43ebbc0f6ef4d7abe5e49f8bc7fa3ea libpng15-debuginfo-1.5.30-9.el8_10.ppc64le.rpm SHA-256: 5b0c5ec4d38cc58aa9bf1f16058b54be6479e7f73bd0d20bd86a79b0ef5d6c33 libpng15-debugsource-1.5.30-9.el8_10.ppc64le.rpm SHA-256: 6fb05e0088f90015de21b7dfd0bee1384097f312f08ce54efc4f6bd95879507c Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 SRPM libpng15-1.5.30-9.el8_10.src.rpm SHA-256: 924d4e8e807e7afc9443edc8b2c755884e9dc29c68bae8eb6c9a0cac6aaf83fc s390x libpng15-1.5.30-9.el8_10.s390x.rpm SHA-256: fc1b4d88d0dded10638d57f7e2a8a5d5219dbd64bdd9ff5b0925088150c499f1 libpng15-debuginfo-1.5.30-9.el8_10.s390x.rpm SHA-256: 2145d75425454c444e0e3e322a3ed2f7ec9605e176488196690c05dc45c7bd63 libpng15-debugsource-1.5.30-9.el8_10.s390x.rpm SHA-256: a39ef3967e71b514c10c38915fc329bfd8fffd73e7c94ee4a3bee2d04cbffe9c The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .