Red Hat Product Errata RHSA-2026:28233 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-23 RHSA-2026:28233 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability BZ - 2451819 - CVE-2026-33636 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion CVEs CVE-2026-33416 CVE-2026-33636 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM libpng-1.6.40-11.el10_2.1.src.rpm SHA-256: ec8bb21aa915d287d4a6f856b547d8b32951a8e1f701a2977a700b9060a9fbf7 x86_64 libpng-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 9575385442ca75a4692acdaf8ae9a5e22e3d01c14b65ad30c4a817c56454f880 libpng-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 6abea5797f3f4e7f34ec6db169b4e9ac7dba79578f225fe413a4302ee7cfc47d libpng-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 6abea5797f3f4e7f34ec6db169b4e9ac7dba79578f225fe413a4302ee7cfc47d libpng-debugsource-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 96713680d66bde5c63fdf45edef0003facd0b40ded56255c7bc6d0244456d0ca libpng-debugsource-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 96713680d66bde5c63fdf45edef0003facd0b40ded56255c7bc6d0244456d0ca libpng-devel-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: cd060bb89869f76443cf78836d071ff38e76d123e3b8bf77faad98a027496d7a libpng-devel-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 80d0a5ae447472a02e1e7450103329286ba811c3ee9ab4a9bdbd30d99f186b28 libpng-devel-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 80d0a5ae447472a02e1e7450103329286ba811c3ee9ab4a9bdbd30d99f186b28 libpng-tools-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 7871b6fb6bb46358856544a7545f06cc1d7946d59ee2935ceca3e506f8901d62 libpng-tools-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 7871b6fb6bb46358856544a7545f06cc1d7946d59ee2935ceca3e506f8901d62 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM libpng-1.6.40-11.el10_2.1.src.rpm SHA-256: ec8bb21aa915d287d4a6f856b547d8b32951a8e1f701a2977a700b9060a9fbf7 x86_64 libpng-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 9575385442ca75a4692acdaf8ae9a5e22e3d01c14b65ad30c4a817c56454f880 libpng-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 6abea5797f3f4e7f34ec6db169b4e9ac7dba79578f225fe413a4302ee7cfc47d libpng-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 6abea5797f3f4e7f34ec6db169b4e9ac7dba79578f225fe413a4302ee7cfc47d libpng-debugsource-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 96713680d66bde5c63fdf45edef0003facd0b40ded56255c7bc6d0244456d0ca libpng-debugsource-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 96713680d66bde5c63fdf45edef0003facd0b40ded56255c7bc6d0244456d0ca libpng-devel-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: cd060bb89869f76443cf78836d071ff38e76d123e3b8bf77faad98a027496d7a libpng-devel-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 80d0a5ae447472a02e1e7450103329286ba811c3ee9ab4a9bdbd30d99f186b28 libpng-devel-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 80d0a5ae447472a02e1e7450103329286ba811c3ee9ab4a9bdbd30d99f186b28 libpng-tools-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 7871b6fb6bb46358856544a7545f06cc1d7946d59ee2935ceca3e506f8901d62 libpng-tools-debuginfo-1.6.40-11.el10_2.1.x86_64.rpm SHA-256: 7871b6fb6bb46358856544a7545f06cc1d7946d59ee2935ceca3e506f8901d62 Red Hat Enterprise Linux for IBM z Systems 10 SRPM s390x libpng-1.6.40-11.el10_2.1.s390x.rpm SHA-256: 48c63e136549f067605ab1d77e1f5b5e87356b0052a0454798d62692d4e2dbd0 libpng-debuginfo-1.6.40-11.el10_2.1.s390x.rpm SHA-256: d0f0da74f177d908a703f81976c0800741e4f50ea4f05b8040bc17cda7045b32 libpng-debugsource-1.6.40-11.el10_2.1.s390x.rpm SHA-256: 4f626d974bbc3732c3d78c2766f3ffedc1138aaeb57d73d1dbd78b61aa17dd28 libpng-devel-1.6.40-11.el10_2.1.s390x.rpm SHA-256: 42de84379d3d738160b72d4ac8d9c1be61126cb385e65e08751aa42a1cd52cad libpng-devel-debuginfo-1.6.40-11.el10_2.1.s390x.rpm SHA-256: 6f8bb7f5f42f1b630e996abcb26ce87b6000d7f594cee619636950b1e484602c libpng-tools-debuginfo-1.6.40-11.el10_2.1.s390x.rpm SHA-256: c4686882bad8be16f600393a531cc5cbbc3619e491c7852f303c7af2f51d990b Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM s390x libpng-1.6.40-11.el10_2.1.s390x.rpm SHA-256: 48c63e136549f067605ab1d77e1f5b5e87356b0052a0454798d62692d4e2dbd0 libpng-debuginfo-1.6.40-11.el10_2.1.s390x.rpm SHA-256: d0f0da74f177d908a703f81976c0800741e4f50ea4f05b8040bc17cda7045b32 libpng-debugsource-1.6.40-11.el10_2.1.s390x.rpm SHA-256: 4f626d974bbc3732c3d78c2766f3ffedc1138aaeb57d73d1dbd78b61aa17dd28 libpng-devel-1.6.40-11.el10_2.1.s390x.rpm SHA-256: 42de84379d3d738160b72d4ac8d9c1be61126cb385e65e08751aa42a1cd52cad libpng-devel-debuginfo-1.6.40-11.el10_2.1.s390x.rpm SHA-256: 6f8bb7f5f42f1b630e996abcb26ce87b6000d7f594cee619636950b1e484602c libpng-tools-debuginfo-1.6.40-11.el10_2.1.s390x.rpm SHA-256: c4686882bad8be16f600393a531cc5cbbc3619e491c7852f303c7af2f51d990b Red Hat Enterprise Linux for Power, little endian 10 SRPM libpng-1.6.40-11.el10_2.1.src.rpm SHA-256: ec8bb21aa915d287d4a6f856b547d8b32951a8e1f701a2977a700b9060a9fbf7 ppc64le libpng-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 80ac95b4a72dd280bc7d855cef53426f9f43686ff115b2f2c021efd6283f20ef libpng-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 7a7d777121dbb2f2bd6da17ad91bf5684954b859b9ba312158afe1e92ef5e674 libpng-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 7a7d777121dbb2f2bd6da17ad91bf5684954b859b9ba312158afe1e92ef5e674 libpng-debugsource-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 6e8026aa1a9f628fdcc54f50f21f052bd5abfaca486a02e02e696a13e4c2515d libpng-debugsource-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 6e8026aa1a9f628fdcc54f50f21f052bd5abfaca486a02e02e696a13e4c2515d libpng-devel-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 51f36d2100f6a5d6432d01d1698d8d4bc89fbacf1823e21df2134a9f2d1fbf98 libpng-devel-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 78b1b67e11a1c268d4a4feb391335d4e9ac378f68d7ae0350eab6ceec6c436e9 libpng-devel-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 78b1b67e11a1c268d4a4feb391335d4e9ac378f68d7ae0350eab6ceec6c436e9 libpng-tools-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 367d1270b1b5d0a7f5f4c58b575edc2c514dce90fbc19dfc2fbb9ddfedbac14f libpng-tools-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 367d1270b1b5d0a7f5f4c58b575edc2c514dce90fbc19dfc2fbb9ddfedbac14f Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM libpng-1.6.40-11.el10_2.1.src.rpm SHA-256: ec8bb21aa915d287d4a6f856b547d8b32951a8e1f701a2977a700b9060a9fbf7 ppc64le libpng-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 80ac95b4a72dd280bc7d855cef53426f9f43686ff115b2f2c021efd6283f20ef libpng-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 7a7d777121dbb2f2bd6da17ad91bf5684954b859b9ba312158afe1e92ef5e674 libpng-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 7a7d777121dbb2f2bd6da17ad91bf5684954b859b9ba312158afe1e92ef5e674 libpng-debugsource-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 6e8026aa1a9f628fdcc54f50f21f052bd5abfaca486a02e02e696a13e4c2515d libpng-debugsource-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 6e8026aa1a9f628fdcc54f50f21f052bd5abfaca486a02e02e696a13e4c2515d libpng-devel-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 51f36d2100f6a5d6432d01d1698d8d4bc89fbacf1823e21df2134a9f2d1fbf98 libpng-devel-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 78b1b67e11a1c268d4a4feb391335d4e9ac378f68d7ae0350eab6ceec6c436e9 libpng-devel-debuginfo-1.6.40-11.el10_2.1.ppc64le.rpm SHA-256: 78b1b67e11a1c268d4a4feb391335d4e9ac378f68d7ae