ELSA-2026-7032

ELSA-2026-7032 - libpng12 security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-04-24

Description

[1.2.50-10.0.1]
- Fix CVE-2026-25646: heap buffer overflow in png_set_quantize [Orabug: 39183864]

Related CVEs

CVE-2026-25646

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	libpng12-1.2.50-10.0.1.el7.src.rpm	0a259588bdf7af7bcf432bb565710ad54696487feba3c7bed0f6b9ae42cf33c5	-	ol7_x86_64_latest_ELS
	libpng12-1.2.50-10.0.1.el7.i686.rpm	df094a4851a2da85cb9b3af87fd4179e215b977624a0a04443a9eb183feb620f	-	ol7_x86_64_latest_ELS
	libpng12-1.2.50-10.0.1.el7.x86_64.rpm	83f99d9e1f024f8b2b3a353ffd8b1e0f27219fb1c8e2c502b7e84c02543b4896	-	ol7_x86_64_latest_ELS
	libpng12-devel-1.2.50-10.0.1.el7.i686.rpm	64290bc54c04e814e6132dd26a290a48b1a6f02647e9b500f11654d2ea589794	-	ol7_x86_64_latest_ELS
	libpng12-devel-1.2.50-10.0.1.el7.x86_64.rpm	0a318cbb001d85bf6f89e959da20efaebd7c95cfe4cb9362a2eb7abdc9701cd5	-	ol7_x86_64_latest_ELS

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team