Red Hat Product Errata RHSA-2026:29900 - Security Advisory Issued: 2026-06-25 Updated: 2026-06-25 RHSA-2026:29900 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64 Red Hat Enterprise Linux Server - TUS 8.8 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64 Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 SRPM libpng-1.6.34-8.el8_8.3.src.rpm SHA-256: cddaa74f8683ba403291eab10465a4e06457bc14828ea57dd7029fb7287fb1b7 x86_64 libpng-1.6.34-8.el8_8.3.i686.rpm SHA-256: a83b76afcbd2d9323de8f6ca22642eef4cc8c2e4f24e0341875778f548938b85 libpng-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: da542cc63d5cf79c733bda1820100a947dff96c579c72e680fe21ef6554319a9 libpng-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: 3a23284ccf1ed04b3546f740b09aa4d2d5775fb9e41ae8f75266f4e179dbcda9 libpng-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 3805c22483e43ac111b181019cc98b73e2947f1bfc7a8c929c3e00c2f6ad731e libpng-debugsource-1.6.34-8.el8_8.3.i686.rpm SHA-256: 2cb49f4dd0f0c01ee83b6fb8d8a905d636f0083963421b371390a0542a9c2c80 libpng-debugsource-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 473b1f456030ca257264320183d05aaaf78b055f8f957bf2a6291210b4d74fb1 libpng-devel-1.6.34-8.el8_8.3.i686.rpm SHA-256: ffc36146e3241c117f83bd1e29fadf4b8c7c6f293d32b531cf01780a6763c5ba libpng-devel-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 2cda6b133fa882b0edb86600d1c489271774a510403d372c72cb31002a5f3528 libpng-devel-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: 0fca6b0ec1aeee10a027f0a43ae43990d68b72aa4079835cb228c642112d8bcc libpng-devel-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: e0e64dd985a836248fca56a728db9e19f486cec6b24129f3f632c69eabf850ec libpng-tools-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: c19bd56d50f5b0be80b632442bb5b955e20d993b1d696466fa24334adf6844a4 libpng-tools-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: e65eccfcbb5352578906b70d3184106ce97627039b337825dc873282f2a95cf7 Red Hat Enterprise Linux Server - TUS 8.8 SRPM libpng-1.6.34-8.el8_8.3.src.rpm SHA-256: cddaa74f8683ba403291eab10465a4e06457bc14828ea57dd7029fb7287fb1b7 x86_64 libpng-1.6.34-8.el8_8.3.i686.rpm SHA-256: a83b76afcbd2d9323de8f6ca22642eef4cc8c2e4f24e0341875778f548938b85 libpng-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: da542cc63d5cf79c733bda1820100a947dff96c579c72e680fe21ef6554319a9 libpng-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: 3a23284ccf1ed04b3546f740b09aa4d2d5775fb9e41ae8f75266f4e179dbcda9 libpng-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 3805c22483e43ac111b181019cc98b73e2947f1bfc7a8c929c3e00c2f6ad731e libpng-debugsource-1.6.34-8.el8_8.3.i686.rpm SHA-256: 2cb49f4dd0f0c01ee83b6fb8d8a905d636f0083963421b371390a0542a9c2c80 libpng-debugsource-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 473b1f456030ca257264320183d05aaaf78b055f8f957bf2a6291210b4d74fb1 libpng-devel-1.6.34-8.el8_8.3.i686.rpm SHA-256: ffc36146e3241c117f83bd1e29fadf4b8c7c6f293d32b531cf01780a6763c5ba libpng-devel-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 2cda6b133fa882b0edb86600d1c489271774a510403d372c72cb31002a5f3528 libpng-devel-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: 0fca6b0ec1aeee10a027f0a43ae43990d68b72aa4079835cb228c642112d8bcc libpng-devel-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: e0e64dd985a836248fca56a728db9e19f486cec6b24129f3f632c69eabf850ec libpng-tools-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: c19bd56d50f5b0be80b632442bb5b955e20d993b1d696466fa24334adf6844a4 libpng-tools-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: e65eccfcbb5352578906b70d3184106ce97627039b337825dc873282f2a95cf7 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 SRPM libpng-1.6.34-8.el8_8.3.src.rpm SHA-256: cddaa74f8683ba403291eab10465a4e06457bc14828ea57dd7029fb7287fb1b7 ppc64le libpng-1.6.34-8.el8_8.3.ppc64le.rpm SHA-256: a4998e884ad4a7356abc3bf1b46e50d1d20b21a89474f4e245e6cbbabd9b6bcc libpng-debuginfo-1.6.34-8.el8_8.3.ppc64le.rpm SHA-256: 020b54da2ecaaca41fe0c535f4ec7e545eac97a17033ce7337c32fc5c1c6a0e0 libpng-debugsource-1.6.34-8.el8_8.3.ppc64le.rpm SHA-256: cd3befb814f1272e51afbdff05624ea939f9734f8fa6adc5aa6b960f37a1db76 libpng-devel-1.6.34-8.el8_8.3.ppc64le.rpm SHA-256: 7aa6011692daada716b55e98006a38a839b979c81c0bbb647dd46bfba91e81a2 libpng-devel-debuginfo-1.6.34-8.el8_8.3.ppc64le.rpm SHA-256: 494dcec06ae5674956e64f0ff1bbfa8783b65a51adad8248aec83461fd6ac551 libpng-tools-debuginfo-1.6.34-8.el8_8.3.ppc64le.rpm SHA-256: 162c625cab72cb53b6461985705f3e3b3865d944ec748b2d633106a523b759fc Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 SRPM libpng-1.6.34-8.el8_8.3.src.rpm SHA-256: cddaa74f8683ba403291eab10465a4e06457bc14828ea57dd7029fb7287fb1b7 x86_64 libpng-1.6.34-8.el8_8.3.i686.rpm SHA-256: a83b76afcbd2d9323de8f6ca22642eef4cc8c2e4f24e0341875778f548938b85 libpng-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: da542cc63d5cf79c733bda1820100a947dff96c579c72e680fe21ef6554319a9 libpng-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: 3a23284ccf1ed04b3546f740b09aa4d2d5775fb9e41ae8f75266f4e179dbcda9 libpng-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 3805c22483e43ac111b181019cc98b73e2947f1bfc7a8c929c3e00c2f6ad731e libpng-debugsource-1.6.34-8.el8_8.3.i686.rpm SHA-256: 2cb49f4dd0f0c01ee83b6fb8d8a905d636f0083963421b371390a0542a9c2c80 libpng-debugsource-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 473b1f456030ca257264320183d05aaaf78b055f8f957bf2a6291210b4d74fb1 libpng-devel-1.6.34-8.el8_8.3.i686.rpm SHA-256: ffc36146e3241c117f83bd1e29fadf4b8c7c6f293d32b531cf01780a6763c5ba libpng-devel-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: 2cda6b133fa882b0edb86600d1c489271774a510403d372c72cb31002a5f3528 libpng-devel-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: 0fca6b0ec1aeee10a027f0a43ae43990d68b72aa4079835cb228c642112d8bcc libpng-devel-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: e0e64dd985a836248fca56a728db9e19f486cec6b24129f3f632c69eabf850ec libpng-tools-debuginfo-1.6.34-8.el8_8.3.i686.rpm SHA-256: c19bd56d50f5b0be80b632442bb5b955e20d993b1d696466fa24334adf6844a4 libpng-tools-debuginfo-1.6.34-8.el8_8.3.x86_64.rpm SHA-256: e65eccfcbb5352578906b70d3184106ce97627039b337825dc873282f2a95cf7 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .