[CLSA-2026:1785774324] libpng: Fix of CVE-2025-64506
Type:
security
Severity:
Moderate
Release date:
2026-08-03 16:25:35 UTC
Description:
- CVE-2025-64506: fix heap buffer over-read in png_write_image_8bit when 8-bit input is written with the convert_to_8bit flag set
CVEs fixed:
Updated packages:
  • libpng-1.6.37-12.el9_2.tuxcare.els9.i686.rpm
    sha:b59c329260b8e988ecbb66f9517be0e5ee4f00fce7081e5f275efdbe0a9a584b
  • libpng-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm
    sha:30db26800b25db89ce881c29be6312b0fbd6c69ec19e915c40b70e3bf12e52d7
  • libpng-devel-1.6.37-12.el9_2.tuxcare.els9.i686.rpm
    sha:f57afb6e8f60db6f18d2795fd128f05e1e3a88cd708abc55d696d2aca9588ef1
  • libpng-devel-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm
    sha:03562e9bf377467d2e7007b1e6033943dc94bed173e650965dfa9ba173bde3fd
  • libpng-static-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm
    sha:6981f249b1f4a54ffca60b5b5b7b948f4f1cb4bc1b9662eae338e7e2f9c3f7e1
  • libpng-tools-1.6.37-12.el9_2.tuxcare.els9.x86_64.rpm
    sha:48d5e34df6a21ba2566d0fb868ac932d8693bb13c75b5dbb632265478aad0fd6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.