{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "CVE-2016-10087: fix NULL pointer dereference in png_set_text_2()\n- CVE-2026-25646: fix heap buffer overflow in png_set_dither()\n- CVE-2026-33416: fix use-after-free on png_ptr palette and trans buffers", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792993907", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792993907" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/oraclelinux6els/advisories/2026/clsa-2026_1792993907.json" } ], "tracking": { "current_release_date": "2026-10-26T05:52:47Z", "generator": { "date": "2026-10-26T05:52:47Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792993907", "initial_release_date": "2026-10-26T05:52:47Z", "revision_history": [ { "date": "2026-10-26T05:52:47Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "libpng: Fix of 3 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Oracle Linux 6", "product": { "name": "Oracle Linux 6", "product_id": "Oracle-Linux-6", "product_identification_helper": { "cpe": "cpe:2.3:o:oracle:linux:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Oracle Linux" } ], "category": "vendor", "name": "Oracle Corporation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product": { "name": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product_id": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libpng@1.2.49-2.el6_7.tuxcare.els1?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product": { "name": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product_id": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libpng-static@1.2.49-2.el6_7.tuxcare.els1?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product": { "name": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product_id": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libpng-devel@1.2.49-2.el6_7.tuxcare.els1?arch=i686&epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product": { "name": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product_id": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libpng@1.2.49-2.el6_7.tuxcare.els1?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product": { "name": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product_id": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libpng-static@1.2.49-2.el6_7.tuxcare.els1?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product": { "name": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product_id": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/libpng-devel@1.2.49-2.el6_7.tuxcare.els1?arch=x86_64&epoch=2" } } } ], "category": "architecture", "name": "x86_64" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686" }, "product_reference": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" }, "product_reference": "libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" }, "product_reference": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686" }, "product_reference": "libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" }, "product_reference": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "relates_to_product_reference": "Oracle-Linux-6" }, { "category": "default_component_of", "full_product_name": { "name": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686 as a component of Oracle Linux 6", "product_id": "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686" }, "product_reference": "libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "relates_to_product_reference": "Oracle-Linux-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-33416", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. In versions 1.2.1 through 1.6.55, `png_set_tRNS` and `png_set_PLTE` each alias a heap-allocated buffer between `png_struct` and `png_info`, sharing a single allocation across two structs with independent lifetimes. The `trans_alpha` aliasing has been present since at least libpng 1.0, and the `palette` aliasing since at least 1.2.1. Both affect all prior release lines `png_set_tRNS` sets `png_ptr->trans_alpha = info_ptr->trans_alpha` (256-byte buffer) and `png_set_PLTE` sets `info_ptr->palette = png_ptr->palette` (768-byte buffer). In both cases, calling `png_free_data` (with `PNG_FREE_TRNS` or `PNG_FREE_PLTE`) frees the buffer through `info_ptr` while the corresponding `png_ptr` pointer remains dangling. Subsequent row-transform functions dereference and, in some code paths, write to the freed memory. A second call to `png_set_tRNS` or `png_set_PLTE` has the same effect, because both functions call `png_free_data` internally before reallocating the `info_ptr` buffer. Version 1.6.56 fixes the issue.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-33416" }, { "category": "external", "summary": "https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb", "url": "https://github.com/pnggroup/libpng/commit/23019269764e35ed8458e517f1897bd3c54820eb" }, { "category": "external", "summary": "https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667", "url": "https://github.com/pnggroup/libpng/commit/7ea9eea884a2328cc7fdcb3c0c00246a50d90667" }, { "category": "external", "summary": "https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25", "url": "https://github.com/pnggroup/libpng/commit/a3a21443ed12bfa1ef46fa0d4fb2b74a0fa34a25" }, { "category": "external", "summary": "https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1", "url": "https://github.com/pnggroup/libpng/commit/c1b0318b393c90679e6fa5bc1d329fd5d5012ec1" }, { "category": "external", "summary": "https://github.com/pnggroup/libpng/pull/824", "url": "https://github.com/pnggroup/libpng/pull/824" }, { "category": "external", "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j", "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-m4pc-p4q3-4c7j" } ], "release_date": "2026-03-26T17:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T05:51:48.788109Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792993907", "product_ids": [ "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792993907" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2016-10087", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "The png_set_text_2 function in libpng 0.71 before 1.0.67, 1.2.x before 1.2.57, 1.4.x before 1.4.20, 1.5.x before 1.5.28, and 1.6.x before 1.6.27 allows context-dependent attackers to cause a NULL pointer dereference vectors involving loading a text chunk into a png structure, removing the text, and then adding another text chunk to the structure.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2016-10087" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2016/12/29/2", "url": "http://www.openwall.com/lists/oss-security/2016/12/29/2" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2016/12/30/4", "url": "http://www.openwall.com/lists/oss-security/2016/12/30/4" }, { "category": "external", "summary": "http://www.securityfocus.com/bid/95157", "url": "http://www.securityfocus.com/bid/95157" }, { "category": "external", "summary": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E", "url": "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E" }, { "category": "external", "summary": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E", "url": "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/201701-74", "url": "https://security.gentoo.org/glsa/201701-74" }, { "category": "external", "summary": "https://usn.ubuntu.com/3712-1/", "url": "https://usn.ubuntu.com/3712-1/" }, { "category": "external", "summary": "https://usn.ubuntu.com/3712-2/", "url": "https://usn.ubuntu.com/3712-2/" } ], "release_date": "2017-01-30T22:59:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T05:51:48.788109Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792993907", "product_ids": [ "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792993907" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-25646", "cwe": { "id": "CWE-122", "name": "Heap-based Buffer Overflow" }, "notes": [ { "category": "description", "text": "LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-25646" }, { "category": "external", "summary": "https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88", "url": "https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88" }, { "category": "external", "summary": "https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3", "url": "https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2026/02/09/7", "url": "http://www.openwall.com/lists/oss-security/2026/02/09/7" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:10097", "url": "https://access.redhat.com/errata/RHSA-2026:10097" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:12274", "url": "https://access.redhat.com/errata/RHSA-2026:12274" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:14773", "url": "https://access.redhat.com/errata/RHSA-2026:14773" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:15087", "url": "https://access.redhat.com/errata/RHSA-2026:15087" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:16174", "url": "https://access.redhat.com/errata/RHSA-2026:16174" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:17596", "url": "https://access.redhat.com/errata/RHSA-2026:17596" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3031", "url": "https://access.redhat.com/errata/RHSA-2026:3031" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3405", "url": "https://access.redhat.com/errata/RHSA-2026:3405" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3551", "url": "https://access.redhat.com/errata/RHSA-2026:3551" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3573", "url": "https://access.redhat.com/errata/RHSA-2026:3573" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3574", "url": "https://access.redhat.com/errata/RHSA-2026:3574" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3575", "url": "https://access.redhat.com/errata/RHSA-2026:3575" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3576", "url": "https://access.redhat.com/errata/RHSA-2026:3576" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3577", "url": "https://access.redhat.com/errata/RHSA-2026:3577" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3968", "url": "https://access.redhat.com/errata/RHSA-2026:3968" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:3969", "url": "https://access.redhat.com/errata/RHSA-2026:3969" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4221", "url": "https://access.redhat.com/errata/RHSA-2026:4221" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4222", "url": "https://access.redhat.com/errata/RHSA-2026:4222" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4306", "url": "https://access.redhat.com/errata/RHSA-2026:4306" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4501", "url": "https://access.redhat.com/errata/RHSA-2026:4501" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4728", "url": "https://access.redhat.com/errata/RHSA-2026:4728" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4729", "url": "https://access.redhat.com/errata/RHSA-2026:4729" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4730", "url": "https://access.redhat.com/errata/RHSA-2026:4730" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4731", "url": "https://access.redhat.com/errata/RHSA-2026:4731" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4732", "url": "https://access.redhat.com/errata/RHSA-2026:4732" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:4756", "url": "https://access.redhat.com/errata/RHSA-2026:4756" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:5606", "url": "https://access.redhat.com/errata/RHSA-2026:5606" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6439", "url": "https://access.redhat.com/errata/RHSA-2026:6439" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6445", "url": "https://access.redhat.com/errata/RHSA-2026:6445" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6466", "url": "https://access.redhat.com/errata/RHSA-2026:6466" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6467", "url": "https://access.redhat.com/errata/RHSA-2026:6467" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6468", "url": "https://access.redhat.com/errata/RHSA-2026:6468" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6469", "url": "https://access.redhat.com/errata/RHSA-2026:6469" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6553", "url": "https://access.redhat.com/errata/RHSA-2026:6553" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:6732", "url": "https://access.redhat.com/errata/RHSA-2026:6732" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7032", "url": "https://access.redhat.com/errata/RHSA-2026:7032" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7033", "url": "https://access.redhat.com/errata/RHSA-2026:7033" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7034", "url": "https://access.redhat.com/errata/RHSA-2026:7034" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7035", "url": "https://access.redhat.com/errata/RHSA-2026:7035" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7036", "url": "https://access.redhat.com/errata/RHSA-2026:7036" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7239", "url": "https://access.redhat.com/errata/RHSA-2026:7239" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:7243", "url": "https://access.redhat.com/errata/RHSA-2026:7243" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8746", "url": "https://access.redhat.com/errata/RHSA-2026:8746" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8747", "url": "https://access.redhat.com/errata/RHSA-2026:8747" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:8748", "url": "https://access.redhat.com/errata/RHSA-2026:8748" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-25646", "url": "https://access.redhat.com/security/cve/CVE-2026-25646" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2438542", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438542" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25646.json" } ], "release_date": "2026-02-10T18:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T05:51:48.788109Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792993907", "product_ids": [ "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-devel-2:1.2.49-2.el6_7.tuxcare.els1.x86_64", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.i686", "Oracle-Linux-6:libpng-static-2:1.2.49-2.el6_7.tuxcare.els1.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792993907" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }