Red Hat Security Advisory

RHSA-2026:0212

libpng security update

Released 2026-01-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) libpng-2:1.6.40-8.el10_0.1, libpng-devel-2:1.6.40-8.el10_0.1
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) libpng-2:1.6.40-8.el10_0.1

TI-2025-40204 CVE-2025-65018

HIGH 66

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00278 Published 2025-11-24 Partial fix · 1.6.51 CWE-122

TI-2025-40767 CVE-2025-66293

MEDIUM 64

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0038 Published 2025-12-03 Partial fix · 1.6.52 CWE-125

TI-2025-40066 CVE-2025-64720

MEDIUM 64

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00447 Published 2025-11-24 Partial fix · 1.6.51 CWE-125