Red Hat Product Errata RHSA-2026:26348 - Security Advisory Issued: 2026-06-16 Updated: 2026-06-16 RHSA-2026:26348 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng12 security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng12 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng12 package provides libpng 1.2, which is the previous version of the libpng library for manipulating PNG (Portable Network Graphics) image format files. This version should be used in case that it is not possible to use the current version of libpng. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM libpng12-1.2.57-7.el8_10.src.rpm SHA-256: 4a3e93f31fdc10275a43110e212f1b06624b11cb73bcdc4850cab81b22448391 x86_64 libpng12-1.2.57-7.el8_10.i686.rpm SHA-256: 85f25ce884ad79cde2870a3c5fa9077cfae86d6e075cb08c57b731b26a25f8d1 libpng12-1.2.57-7.el8_10.x86_64.rpm SHA-256: cdad862d50853f608af358530841ba2a7122188ea018941e6b0614cd34ce67b3 libpng12-debuginfo-1.2.57-7.el8_10.i686.rpm SHA-256: 948296f348516a4a1bf1bc45c97925a32072243527e1b2b864bbb47cabf8bb07 libpng12-debuginfo-1.2.57-7.el8_10.x86_64.rpm SHA-256: adba6a574cf07cbabadbe58e4ddb33c76fb12c4f8157a7edb791c31de7c68d81 libpng12-debugsource-1.2.57-7.el8_10.i686.rpm SHA-256: 0106ad6e38fe95b60f91e543e20ce8fbd2550ee1d5206b91f89bc70fd244de31 libpng12-debugsource-1.2.57-7.el8_10.x86_64.rpm SHA-256: 88d06bc22141c1bb00f8c7efc6de77a4289e448428e3647845c3fea0f4e85061 Red Hat Enterprise Linux for IBM z Systems 8 SRPM libpng12-1.2.57-7.el8_10.src.rpm SHA-256: 4a3e93f31fdc10275a43110e212f1b06624b11cb73bcdc4850cab81b22448391 s390x libpng12-1.2.57-7.el8_10.s390x.rpm SHA-256: 95c3def36b7b299d881ff77495bcbaa02f6c959e645a7fb5f264bab63d42262a libpng12-debuginfo-1.2.57-7.el8_10.s390x.rpm SHA-256: 24ef70fa9083b5e2c80ca4dfeda2b9d7666c17bdb4f2fc64aa653c69f263eeca libpng12-debugsource-1.2.57-7.el8_10.s390x.rpm SHA-256: 74e0f930a60e6aa0cc1d6a9005c0878aca18c010f5b93826fd9a70e3ab622ca7 Red Hat Enterprise Linux for Power, little endian 8 SRPM libpng12-1.2.57-7.el8_10.src.rpm SHA-256: 4a3e93f31fdc10275a43110e212f1b06624b11cb73bcdc4850cab81b22448391 ppc64le libpng12-1.2.57-7.el8_10.ppc64le.rpm SHA-256: 00e84b705956ceabd4b6567296319f15ea64de8ee59003816995a4aa31a66311 libpng12-debuginfo-1.2.57-7.el8_10.ppc64le.rpm SHA-256: 628f78388ba37570b8756ff0d2d1ab1aacc4d846a2a57f36780ced923c516de7 libpng12-debugsource-1.2.57-7.el8_10.ppc64le.rpm SHA-256: 5300c0b7c60d43fad3483310a46c4b32f0868646c1ae3ebaac8d1458630e5045 Red Hat Enterprise Linux for ARM 64 8 SRPM libpng12-1.2.57-7.el8_10.src.rpm SHA-256: 4a3e93f31fdc10275a43110e212f1b06624b11cb73bcdc4850cab81b22448391 aarch64 libpng12-1.2.57-7.el8_10.aarch64.rpm SHA-256: 85b006e71921cf43ca90a6933a824acbe62185920425362bef9aac03161dd5a6 libpng12-debuginfo-1.2.57-7.el8_10.aarch64.rpm SHA-256: 786c6a319690b82ac07b03dbafbcd06565cddbe52b7bcfeb15a2a86b103b5b99 libpng12-debugsource-1.2.57-7.el8_10.aarch64.rpm SHA-256: 40553b3d972955327edd381942780b174b8856043eaa2beb30da657294f4be5e Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM libpng12-1.2.57-7.el8_10.src.rpm SHA-256: 4a3e93f31fdc10275a43110e212f1b06624b11cb73bcdc4850cab81b22448391 x86_64 libpng12-1.2.57-7.el8_10.i686.rpm SHA-256: 85f25ce884ad79cde2870a3c5fa9077cfae86d6e075cb08c57b731b26a25f8d1 libpng12-1.2.57-7.el8_10.x86_64.rpm SHA-256: cdad862d50853f608af358530841ba2a7122188ea018941e6b0614cd34ce67b3 libpng12-debuginfo-1.2.57-7.el8_10.i686.rpm SHA-256: 948296f348516a4a1bf1bc45c97925a32072243527e1b2b864bbb47cabf8bb07 libpng12-debuginfo-1.2.57-7.el8_10.x86_64.rpm SHA-256: adba6a574cf07cbabadbe58e4ddb33c76fb12c4f8157a7edb791c31de7c68d81 libpng12-debugsource-1.2.57-7.el8_10.i686.rpm SHA-256: 0106ad6e38fe95b60f91e543e20ce8fbd2550ee1d5206b91f89bc70fd244de31 libpng12-debugsource-1.2.57-7.el8_10.x86_64.rpm SHA-256: 88d06bc22141c1bb00f8c7efc6de77a4289e448428e3647845c3fea0f4e85061 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM libpng12-1.2.57-7.el8_10.src.rpm SHA-256: 4a3e93f31fdc10275a43110e212f1b06624b11cb73bcdc4850cab81b22448391 aarch64 libpng12-1.2.57-7.el8_10.aarch64.rpm SHA-256: 85b006e71921cf43ca90a6933a824acbe62185920425362bef9aac03161dd5a6 libpng12-debuginfo-1.2.57-7.el8_10.aarch64.rpm SHA-256: 786c6a319690b82ac07b03dbafbcd06565cddbe52b7bcfeb15a2a86b103b5b99 libpng12-debugsource-1.2.57-7.el8_10.aarch64.rpm SHA-256: 40553b3d972955327edd381942780b174b8856043eaa2beb30da657294f4be5e Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM libpng12-1.2.57-7.el8_10.src.rpm SHA-256: 4a3e93f31fdc10275a43110e212f1b06624b11cb73bcdc4850cab81b22448391 ppc64le libpng12-1.2.57-7.el8_10.ppc64le.rpm SHA-256: 00e84b705956ceabd4b6567296319f15ea64de8ee59003816995a4aa31a66311 libpng12-debuginfo-1.2.57-7.el8_10.ppc64le.rpm SHA-256: 628f78388ba37570b8756ff0d2d1ab1aacc4d846a2a57f36780ced923c516de7 libpng12-debugsource-1.2.57-7.el8_10.ppc64le.rpm SHA-256: 5300c0b7c60d43fad3483310a46c4b32f0868646c1ae3ebaac8d1458630e5045 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 SRPM libpng12-1.2.57-7.el8_10.src.rpm SHA-256: 4a3e93f31fdc10275a43110e212f1b06624b11cb73bcdc4850cab81b22448391 s390x libpng12-1.2.57-7.el8_10.s390x.rpm SHA-256: 95c3def36b7b299d881ff77495bcbaa02f6c959e645a7fb5f264bab63d42262a libpng12-debuginfo-1.2.57-7.el8_10.s390x.rpm SHA-256: 24ef70fa9083b5e2c80ca4dfeda2b9d7666c17bdb4f2fc64aa653c69f263eeca libpng12-debugsource-1.2.57-7.el8_10.s390x.rpm SHA-256: 74e0f930a60e6aa0cc1d6a9005c0878aca18c010f5b93826fd9a70e3ab622ca7 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .