ELSA-2026-29898

ELSA-2026-29898 - libpng security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-06-25

Description

[2:1.6.37-11]
- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161344)

Related CVEs

CVE-2026-33416

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	libpng-1.6.34-11.el8_10.src.rpm	2c8b8deed76c7ac9d531935e50b637b3250ed76119c2fe3a70be36c6b939d536	-	ol8_aarch64_baseos_latest
	libpng-1.6.34-11.el8_10.src.rpm	2c8b8deed76c7ac9d531935e50b637b3250ed76119c2fe3a70be36c6b939d536	-	ol8_aarch64_u10_baseos_patch
	libpng-1.6.34-11.el8_10.aarch64.rpm	8b2526f1ac3b92636d55bd31f8fb53f66b15efe1804d4b63cfc2544da7733b4f	-	ol8_aarch64_baseos_latest
	libpng-1.6.34-11.el8_10.aarch64.rpm	8b2526f1ac3b92636d55bd31f8fb53f66b15efe1804d4b63cfc2544da7733b4f	-	ol8_aarch64_u10_baseos_patch
	libpng-devel-1.6.34-11.el8_10.aarch64.rpm	68fb93c097fdeffc52f102b1b8fb5ff62fa6aad1d50e81ebae873bac7651acb3	-	ol8_aarch64_baseos_latest
	libpng-devel-1.6.34-11.el8_10.aarch64.rpm	68fb93c097fdeffc52f102b1b8fb5ff62fa6aad1d50e81ebae873bac7651acb3	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	libpng-1.6.34-11.el8_10.src.rpm	2c8b8deed76c7ac9d531935e50b637b3250ed76119c2fe3a70be36c6b939d536	-	ol8_x86_64_baseos_latest
	libpng-1.6.34-11.el8_10.src.rpm	2c8b8deed76c7ac9d531935e50b637b3250ed76119c2fe3a70be36c6b939d536	-	ol8_x86_64_u10_baseos_patch
	libpng-1.6.34-11.el8_10.i686.rpm	ba3f584da7e14102bf65cb009ca8baaf9f9f358d171f35851a212580926b2677	-	ol8_x86_64_baseos_latest
	libpng-1.6.34-11.el8_10.i686.rpm	ba3f584da7e14102bf65cb009ca8baaf9f9f358d171f35851a212580926b2677	-	ol8_x86_64_u10_baseos_patch
	libpng-1.6.34-11.el8_10.x86_64.rpm	8c5c5371572d59d7c52d5f63c0ae9d8ac5453a90635641035e38d55c7da97179	-	ol8_x86_64_baseos_latest
	libpng-1.6.34-11.el8_10.x86_64.rpm	8c5c5371572d59d7c52d5f63c0ae9d8ac5453a90635641035e38d55c7da97179	-	ol8_x86_64_u10_baseos_patch
	libpng-devel-1.6.34-11.el8_10.i686.rpm	1072987abac641c548a072bd17e65daaa43cc6abafc6b7f8f6ebadfa5189cea4	-	ol8_x86_64_baseos_latest
	libpng-devel-1.6.34-11.el8_10.i686.rpm	1072987abac641c548a072bd17e65daaa43cc6abafc6b7f8f6ebadfa5189cea4	-	ol8_x86_64_u10_baseos_patch
	libpng-devel-1.6.34-11.el8_10.x86_64.rpm	e46b1d1c136e031668c081979fbf112010ab7c7d4d62c2ca441bd7ef5d7cf2ef	-	ol8_x86_64_baseos_latest
	libpng-devel-1.6.34-11.el8_10.x86_64.rpm	e46b1d1c136e031668c081979fbf112010ab7c7d4d62c2ca441bd7ef5d7cf2ef	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team