Red Hat Product Errata RHSA-2026:18064 - Security Advisory Issued: 2026-05-18 Updated: 2026-05-18 RHSA-2026:18064 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM libpng-1.6.40-8.el10_1.4.src.rpm SHA-256: 11cc6b884fd9664d238def26fbaf75f903e8b0a8e467b43fca1b8e02aa18a62e x86_64 libpng-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: b3f13b57361094b186e95bbe44fabd9fb7bb9fc1e0a55fb1a3b81129e15254da libpng-debuginfo-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: d12d578e968ca6d91e53355ea6cc23cdd8df1cef5d1406d87079b48bd9ccdfed libpng-debuginfo-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: d12d578e968ca6d91e53355ea6cc23cdd8df1cef5d1406d87079b48bd9ccdfed libpng-debugsource-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: 9a770a72c58ae1e906e3fdc7325a5191845ac771f011ecfe7d78c18fceda271d libpng-debugsource-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: 9a770a72c58ae1e906e3fdc7325a5191845ac771f011ecfe7d78c18fceda271d libpng-devel-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: 739a6a7989f57892f518653976f89472b8da4f3c262e1b2119d6be87488a4454 libpng-devel-debuginfo-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: 670ef575f1bd804eca09b086be7af0745c1f639307f6cb32067aacb0c0656ff5 libpng-devel-debuginfo-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: 670ef575f1bd804eca09b086be7af0745c1f639307f6cb32067aacb0c0656ff5 libpng-tools-debuginfo-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: 06eee3ca4d8637c2f7124c734815abf4c4bb47f8a9e593fa0c4dbcc86e03a39f libpng-tools-debuginfo-1.6.40-8.el10_1.4.x86_64.rpm SHA-256: 06eee3ca4d8637c2f7124c734815abf4c4bb47f8a9e593fa0c4dbcc86e03a39f Red Hat Enterprise Linux for IBM z Systems 10 SRPM s390x libpng-1.6.40-8.el10_1.4.s390x.rpm SHA-256: 9969b33ffcb994f03239f18429cd4d96505d801ae989c41d4e065b9574a07cf6 libpng-debuginfo-1.6.40-8.el10_1.4.s390x.rpm SHA-256: e7c34f1449a044631fbf6c3c7423f51c52fa8b8bceaf0042cea17d26131fdabe libpng-debugsource-1.6.40-8.el10_1.4.s390x.rpm SHA-256: 4ae2dccc3de18946835fadf02121f60559023570752d0ce21efc1d12ebb935fa libpng-devel-1.6.40-8.el10_1.4.s390x.rpm SHA-256: d703e7420d92e680c9aab31da2bf5978c28986b41940b66ddf8f3eecb7bc6f02 libpng-devel-debuginfo-1.6.40-8.el10_1.4.s390x.rpm SHA-256: 082987d03897aef02bf8e7079eacca57764ffa83256c473cec3c7a77e310dc92 libpng-tools-debuginfo-1.6.40-8.el10_1.4.s390x.rpm SHA-256: f7d8fb03440074db142ae5983834a37dc9eddc624cab0c99d5a14cd9a5758cd6 Red Hat Enterprise Linux for Power, little endian 10 SRPM libpng-1.6.40-8.el10_1.4.src.rpm SHA-256: 11cc6b884fd9664d238def26fbaf75f903e8b0a8e467b43fca1b8e02aa18a62e ppc64le libpng-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 5002a7ed4b7a90a8f2217d217628c9bfa3017e7297a64a1ede4b341a4d739fcd libpng-debuginfo-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 5328b4a6d95f730b1f5279cbbe319df63f86b04585d09ebfc6ffd85cc167264a libpng-debuginfo-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 5328b4a6d95f730b1f5279cbbe319df63f86b04585d09ebfc6ffd85cc167264a libpng-debugsource-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 072f3577e9bf25322c605111a141cd7dddfcf049d77bc4ee61f608a5e8c94bbd libpng-debugsource-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 072f3577e9bf25322c605111a141cd7dddfcf049d77bc4ee61f608a5e8c94bbd libpng-devel-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: ce8ea10efd6bdba6d0f6d8cc89c6b7533b3934fc8faff05a07c457c310e3a864 libpng-devel-debuginfo-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 71b69b54339e690de8bbf515f796acfb23265916e1f52f47c5fffe75e77ae121 libpng-devel-debuginfo-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 71b69b54339e690de8bbf515f796acfb23265916e1f52f47c5fffe75e77ae121 libpng-tools-debuginfo-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 1db387a1dca8c0b50a66f651ba860d4188c9a3645fdbe3867795cc2141e7013e libpng-tools-debuginfo-1.6.40-8.el10_1.4.ppc64le.rpm SHA-256: 1db387a1dca8c0b50a66f651ba860d4188c9a3645fdbe3867795cc2141e7013e Red Hat Enterprise Linux for ARM 64 10 SRPM libpng-1.6.40-8.el10_1.4.src.rpm SHA-256: 11cc6b884fd9664d238def26fbaf75f903e8b0a8e467b43fca1b8e02aa18a62e aarch64 libpng-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: d560f784a1cc38d3e64849c7c08b08f0b7427d0482dfd5e97fa6509fe3223c84 libpng-debuginfo-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: aa15375a94ae82455aab4e7000cf1ae7b1f1ead86f8e8e12c214a73b5982667e libpng-debuginfo-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: aa15375a94ae82455aab4e7000cf1ae7b1f1ead86f8e8e12c214a73b5982667e libpng-debugsource-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: 3b656803f7155ae90a6df59222d611bac27829098f546264b2eb3fe5bf47bb0b libpng-debugsource-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: 3b656803f7155ae90a6df59222d611bac27829098f546264b2eb3fe5bf47bb0b libpng-devel-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: 79b5b97518a8f9d3205eee4618b567611a015cd294ddd0deee9f5fc588f42635 libpng-devel-debuginfo-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: 2ac49e25e9e8a4d02f67d3b82c7d1c80a4ad027965e711b87c83879bf105b26a libpng-devel-debuginfo-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: 2ac49e25e9e8a4d02f67d3b82c7d1c80a4ad027965e711b87c83879bf105b26a libpng-tools-debuginfo-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: 3f7db6ef78e972102c1a11b199ca29d6b1f3c319443b0626802950d8d1101235 libpng-tools-debuginfo-1.6.40-8.el10_1.4.aarch64.rpm SHA-256: 3f7db6ef78e972102c1a11b199ca29d6b1f3c319443b0626802950d8d1101235 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .