[CLSA-2026:1792506818] libpng15: Fix of 2 CVEs
Type:
security
Severity:
Moderate
Release date:
2026-10-20 14:33:50 UTC
Description:
- CVE-2025-64505: heap buffer over-read in png_do_quantize() - CVE-2026-34757: use-after-free in png_set_PLTE() and related setters
CVEs fixed:
Updated packages:
  • libpng15-1.5.30-15.el9_8.1.tuxcare.els1.aarch64.rpm
    sha:4262e37007cc43664490e1f036a47e5597d8e76a687628bcd5f5a60aaa3ef9ff
  • libpng15-1.5.30-15.el9_8.1.tuxcare.els1.i686.rpm
    sha:fb42927930fd91ad5278fa7c7db5c8b7c580fb152314a5c5f1fdaf3791225f4d
  • libpng15-1.5.30-15.el9_8.1.tuxcare.els1.x86_64.rpm
    sha:2cf53e919895f5f7044c18ca0c09cb633609db1573e4e230d46055ad842dad2a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.