Red Hat Security Advisory

RHSA-2026:3577

libpng security update

Released 2026-03-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream EUS (v. 10.0) libpng-2:1.6.40-8.el10_0.2, libpng-devel-2:1.6.40-8.el10_0.2
Red Hat Enterprise Linux BaseOS EUS (v. 10.0) libpng-2:1.6.40-8.el10_0.2

TI-2026-20746 CVE-2026-25646

HIGH 69

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.0112 Published 2026-02-10 Partial fix · 1.6.55 CWE-122

TI-2026-18319 CVE-2026-22801

LOW 33

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00134 Published 2026-01-12 Partial fix · 1.6.54 CWE-125

TI-2026-18222 CVE-2026-22695

LOW 31

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00222 Published 2026-01-12 Partial fix · 1.6.54 CWE-125