ELSA-2026-14791

ELSA-2026-14791 - libpng security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-05-07

Description

[2:1.6.37-12.3]
- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161291)

Related CVEs

CVE-2026-33636

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	libpng-1.6.37-12.el9_7.3.src.rpm	3fb9baa7efd0e8e4f170533423d82b989b4cb8b5fc3c8f142b425a2f51f0d1c9	-	ol9_aarch64_appstream
	libpng-1.6.37-12.el9_7.3.src.rpm	3fb9baa7efd0e8e4f170533423d82b989b4cb8b5fc3c8f142b425a2f51f0d1c9	-	ol9_aarch64_baseos_latest
	libpng-1.6.37-12.el9_7.3.src.rpm	3fb9baa7efd0e8e4f170533423d82b989b4cb8b5fc3c8f142b425a2f51f0d1c9	-	ol9_aarch64_u7_baseos_patch
	libpng-1.6.37-12.el9_7.3.aarch64.rpm	d99bddc624cdef4ca8ca053a40a7d7809190f014ca21bfeeabbcb3bb76ee1936	-	ol9_aarch64_baseos_latest
	libpng-1.6.37-12.el9_7.3.aarch64.rpm	d99bddc624cdef4ca8ca053a40a7d7809190f014ca21bfeeabbcb3bb76ee1936	-	ol9_aarch64_u7_baseos_patch
	libpng-devel-1.6.37-12.el9_7.3.aarch64.rpm	d66b7f96de1ba094b95bccabdf3e2f1afe6ba3d8a676be031615dab24a4fc05e	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	libpng-1.6.37-12.el9_7.3.src.rpm	3fb9baa7efd0e8e4f170533423d82b989b4cb8b5fc3c8f142b425a2f51f0d1c9	-	ol9_x86_64_appstream
	libpng-1.6.37-12.el9_7.3.src.rpm	3fb9baa7efd0e8e4f170533423d82b989b4cb8b5fc3c8f142b425a2f51f0d1c9	-	ol9_x86_64_baseos_latest
	libpng-1.6.37-12.el9_7.3.src.rpm	3fb9baa7efd0e8e4f170533423d82b989b4cb8b5fc3c8f142b425a2f51f0d1c9	-	ol9_x86_64_u7_baseos_patch
	libpng-1.6.37-12.el9_7.3.i686.rpm	30012627f38372aeba6aa1c3549c7cbdaacd8f0cf9d28bf8a5a80c2211de0b71	-	ol9_x86_64_baseos_latest
	libpng-1.6.37-12.el9_7.3.i686.rpm	30012627f38372aeba6aa1c3549c7cbdaacd8f0cf9d28bf8a5a80c2211de0b71	-	ol9_x86_64_u7_baseos_patch
	libpng-1.6.37-12.el9_7.3.x86_64.rpm	ef5cfa73ac55127f2109119d6e10b307474ddd0f2b8da09736ce5f28a6d8a032	-	ol9_x86_64_baseos_latest
	libpng-1.6.37-12.el9_7.3.x86_64.rpm	ef5cfa73ac55127f2109119d6e10b307474ddd0f2b8da09736ce5f28a6d8a032	-	ol9_x86_64_u7_baseos_patch
	libpng-devel-1.6.37-12.el9_7.3.i686.rpm	0fc6c17f512a677e3e78b5a6ff96ab871d9e4df59453c31b649f12bf4c51157b	-	ol9_x86_64_appstream
	libpng-devel-1.6.37-12.el9_7.3.x86_64.rpm	34eb5299e94adf4f21b207b72a8f7f96587effc5972b86c96c2b11aa39bb435c	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team