Red Hat Product Errata RHSA-2026:28255 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28255 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability BZ - 2451819 - CVE-2026-33636 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion CVEs CVE-2026-33416 CVE-2026-33636 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM libpng-1.6.37-15.el9_8.2.src.rpm SHA-256: d988772f7ea5987436ec0b7d0b13ca57a121e39adc542a55332506e1c51453e7 x86_64 libpng-1.6.37-15.el9_8.2.i686.rpm SHA-256: c138479b6c11d6845f53253304c3922a51ce1dac8d700d39084e0211cab5e946 libpng-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: bc8c773c49adc1eb21b434a1ae723580ad887cd794237162338fba7963d0eeda libpng-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: e601f280e69fa72dfabc5e205b35798fc1b65e0ecb4f67a758c2b2347ffffd8e libpng-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: e601f280e69fa72dfabc5e205b35798fc1b65e0ecb4f67a758c2b2347ffffd8e libpng-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ccdbec3e9cd0a9e9a66dcc0bb1a1247694fd8d5c3252e92fa1fae1eba6ce1772 libpng-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ccdbec3e9cd0a9e9a66dcc0bb1a1247694fd8d5c3252e92fa1fae1eba6ce1772 libpng-debugsource-1.6.37-15.el9_8.2.i686.rpm SHA-256: 97db3969e3466b15f35051febf033f7195f03a85ccfeb717ca661249c6146104 libpng-debugsource-1.6.37-15.el9_8.2.i686.rpm SHA-256: 97db3969e3466b15f35051febf033f7195f03a85ccfeb717ca661249c6146104 libpng-debugsource-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ec2dfe80f1e245142fc37288dccd2a6184108cff24e841fcbff248b2b88597a9 libpng-debugsource-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ec2dfe80f1e245142fc37288dccd2a6184108cff24e841fcbff248b2b88597a9 libpng-devel-1.6.37-15.el9_8.2.i686.rpm SHA-256: 33461ef7733cf0ebd186cf34c539cb94123f132ffeafe83ba3d06be0019abb65 libpng-devel-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ce49c51a89b02d7d9ce6e9793d825167e6a88ba9f63c4aa9d843a71d1fd285a8 libpng-devel-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: d4050b83727dbb9da7480e05b2454431dcf675cf8c10c1753b86ac745475980a libpng-devel-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: d4050b83727dbb9da7480e05b2454431dcf675cf8c10c1753b86ac745475980a libpng-devel-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: 130764f2209f89056fbd7887877d3b14b68bcd7d21efd4c568e8f276de6f1613 libpng-devel-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: 130764f2209f89056fbd7887877d3b14b68bcd7d21efd4c568e8f276de6f1613 libpng-tools-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: 4083c2382c2ab340ec0680cb492e15438d83f607c6f418f5835534f5fd8ab624 libpng-tools-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: 4083c2382c2ab340ec0680cb492e15438d83f607c6f418f5835534f5fd8ab624 libpng-tools-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: 6d8aa83c069c786c94035dd0f6abeaabc333e88a35bc86085f9e71b35e9749de libpng-tools-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: 6d8aa83c069c786c94035dd0f6abeaabc333e88a35bc86085f9e71b35e9749de Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM libpng-1.6.37-15.el9_8.2.src.rpm SHA-256: d988772f7ea5987436ec0b7d0b13ca57a121e39adc542a55332506e1c51453e7 x86_64 libpng-1.6.37-15.el9_8.2.i686.rpm SHA-256: c138479b6c11d6845f53253304c3922a51ce1dac8d700d39084e0211cab5e946 libpng-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: bc8c773c49adc1eb21b434a1ae723580ad887cd794237162338fba7963d0eeda libpng-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: e601f280e69fa72dfabc5e205b35798fc1b65e0ecb4f67a758c2b2347ffffd8e libpng-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: e601f280e69fa72dfabc5e205b35798fc1b65e0ecb4f67a758c2b2347ffffd8e libpng-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ccdbec3e9cd0a9e9a66dcc0bb1a1247694fd8d5c3252e92fa1fae1eba6ce1772 libpng-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ccdbec3e9cd0a9e9a66dcc0bb1a1247694fd8d5c3252e92fa1fae1eba6ce1772 libpng-debugsource-1.6.37-15.el9_8.2.i686.rpm SHA-256: 97db3969e3466b15f35051febf033f7195f03a85ccfeb717ca661249c6146104 libpng-debugsource-1.6.37-15.el9_8.2.i686.rpm SHA-256: 97db3969e3466b15f35051febf033f7195f03a85ccfeb717ca661249c6146104 libpng-debugsource-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ec2dfe80f1e245142fc37288dccd2a6184108cff24e841fcbff248b2b88597a9 libpng-debugsource-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ec2dfe80f1e245142fc37288dccd2a6184108cff24e841fcbff248b2b88597a9 libpng-devel-1.6.37-15.el9_8.2.i686.rpm SHA-256: 33461ef7733cf0ebd186cf34c539cb94123f132ffeafe83ba3d06be0019abb65 libpng-devel-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: ce49c51a89b02d7d9ce6e9793d825167e6a88ba9f63c4aa9d843a71d1fd285a8 libpng-devel-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: d4050b83727dbb9da7480e05b2454431dcf675cf8c10c1753b86ac745475980a libpng-devel-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: d4050b83727dbb9da7480e05b2454431dcf675cf8c10c1753b86ac745475980a libpng-devel-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: 130764f2209f89056fbd7887877d3b14b68bcd7d21efd4c568e8f276de6f1613 libpng-devel-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: 130764f2209f89056fbd7887877d3b14b68bcd7d21efd4c568e8f276de6f1613 libpng-tools-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: 4083c2382c2ab340ec0680cb492e15438d83f607c6f418f5835534f5fd8ab624 libpng-tools-debuginfo-1.6.37-15.el9_8.2.i686.rpm SHA-256: 4083c2382c2ab340ec0680cb492e15438d83f607c6f418f5835534f5fd8ab624 libpng-tools-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: 6d8aa83c069c786c94035dd0f6abeaabc333e88a35bc86085f9e71b35e9749de libpng-tools-debuginfo-1.6.37-15.el9_8.2.x86_64.rpm SHA-256: 6d8aa83c069c786c94035dd0f6abeaabc333e88a35bc86085f9e71b35e9749de Red Hat Enterprise Linux for IBM z Systems 9 SRPM s390x libpng-1.6.37-15.el9_8.2.s390x.rpm SHA-256: 256663cb5d5fa82f854ed961c5b4fedadf41c238134f34e2e1cbe6f2986e2151 libpng-debuginfo-1.6.37-15.el9_8.2.s390x.rpm SHA-256: 5561d7457be8a1872bdc0966e5701132d3e63f588808187f9fabb2ead4f3fd3a libpng-debugsource-1.6.37-15.el9_8.2.s390x.rpm SHA-256: 707065239063e26060911c329b1da7b64d56946d2241fd65c7e65aa0e0f4fdba libpng-devel-1.6.37-15.el9_8.2.s390x.rpm SHA-256: 66b348f6577493eff3a9075348607a0f9d2901ae4d3619c3db6dcb571e260033 libpng-devel-debuginfo-1.6.37-15.el9_8.2.s390x.rpm SHA-256: a8895026a788e12a9891607abdbc8d7a31f1f715058bf81911e889985506c2ef libpng-tools-debuginfo-1.6.37-15.el9_8.2.s390x.rpm SHA-256: c01d4041c305bb927c6f06a550243c66c83b2d3e543f5c5ce0df1c845e1abbd8 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM s390x libpng-1.6.37-15.el9_8.2.s390x.rpm SHA-256: 256663cb5d5fa82f854ed961c5b4fedadf41c238134f34e2e1cbe6f2986e2151 libpng-debuginfo-1.6.37-15.el9_8.2.s390x.rpm SHA-256: 5561d7457be8a1872bdc0966e5701132d3e63f588808187f9fabb2ead4f3fd3a libpng-debugsource-1.6.37-15.el9_8.2.s390x.rpm SHA-256: 707065239063e26060911c329b1da7b64d56946d2241fd65c7e65aa0e0f4fdba libpng-devel-1.6.37-15.el9_8.2.s390x.rpm SHA-256: 66b348f6577493eff3a9075348607a0f9d2901ae4d3619c3db6dcb571e260033 libpng-devel-debuginfo-1.6.37-15.el9_8.2.s390x.rpm SHA-256: a8895026a788e12a9891607abdbc8d7a31f1f715058bf81911e889985506c2ef libpng-tools-debuginfo-1.6.37-15.el9_8.2.s390x.rpm SHA-256: c01d4041c305bb927c6f06a550243c66c83b2d3e543f5c5ce0df1c845e1abbd8 Red Hat Enterprise Linux for Power, little endian 9 SRPM libpng-1.6.37-15.el9_8.2.src.rpm SHA-256: d988772f7ea5987436ec0b7d0b13ca57a121e39adc542a55332506e1c51453e7 ppc64le libpng-1.6.37-15.el9_8.2.ppc64le.rpm S