[CLSA-2026:1785775169] libpng: Fix of CVE-2025-64506
Type:
security
Severity:
Moderate
Release date:
2026-08-03 16:39:40 UTC
Description:
- CVE-2025-64506: fix heap buffer over-read in png_write_image_8bit when 8-bit input is written with the convert_to_8bit flag set
CVEs fixed:
Updated packages:
  • libpng-1.6.37-12.el9_6.tuxcare.els9.i686.rpm
    sha:3e994853dc539ca57fa36b8b1254b0edd629c2d0bd05bb12a98d24d5f1823ca9
  • libpng-1.6.37-12.el9_6.tuxcare.els9.x86_64.rpm
    sha:913343af8bb82514d737640aeaf95dabadb0131a74c34868fce9d91fa8ae6c2f
  • libpng-devel-1.6.37-12.el9_6.tuxcare.els9.i686.rpm
    sha:a55cb48eac016d2678db093a70dd37fc1a9987ece046aba03747390657051110
  • libpng-devel-1.6.37-12.el9_6.tuxcare.els9.x86_64.rpm
    sha:638c9933becc48131f5d9f57aca177d4e3ee9de02ad9d56718caef7dd1cab77b
  • libpng-static-1.6.37-12.el9_6.tuxcare.els9.x86_64.rpm
    sha:e7522fced1bf2773063f27d3adc4c8512d6b5c909f80f633609dee71e256452d
  • libpng-tools-1.6.37-12.el9_6.tuxcare.els9.x86_64.rpm
    sha:5137c62719648c2ec944224fa9cf2e0485ac3541a63c2a41baeac88638f7278a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.