Red Hat Product Errata RHSA-2026:29022 - Security Advisory Issued: 2026-06-24 Updated: 2026-06-24 RHSA-2026:29022 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng12 security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng12 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng12 package provides libpng 1.2, which is the previous version of the libpng library for manipulating PNG (Portable Network Graphics) image format files. This version should be used in case that it is not possible to use the current version of libpng. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64 Red Hat Enterprise Linux Server - AUS 8.4 x86_64 Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 SRPM libpng12-1.2.57-5.el8_4.2.src.rpm SHA-256: 90a533a2f5d6d53c70dbdd1425aebfa4afd1636bbf193b2a81a9bd4db4927a43 x86_64 libpng12-1.2.57-5.el8_4.2.i686.rpm SHA-256: fc7f5c504afda34f57b7915a659761ec03f9a78c9a7d0a0fe7b57d1678727ff1 libpng12-1.2.57-5.el8_4.2.x86_64.rpm SHA-256: 0d406cdec5db65e834592def56881e54b5243b2fe2ec5e708c60f715f45f42fc libpng12-debuginfo-1.2.57-5.el8_4.2.i686.rpm SHA-256: 96efacc18c98fc76d6e530497f0247fec0f8036eff68ad9c28e2e97943a16cbc libpng12-debuginfo-1.2.57-5.el8_4.2.x86_64.rpm SHA-256: 08980ee90cc8d575c938aa1f786ebcf006dd7ab0095b0b06cc586680fe895b97 libpng12-debugsource-1.2.57-5.el8_4.2.i686.rpm SHA-256: 07159dd2b57f8291bb0d90525cc4ccf3731fe710257e27077f50b0a30d43fd45 libpng12-debugsource-1.2.57-5.el8_4.2.x86_64.rpm SHA-256: ee33f4ea80a2c8e78c5890b4a1542f6d6f882f6c5052597094ffd2210b9afe68 Red Hat Enterprise Linux Server - AUS 8.4 SRPM libpng12-1.2.57-5.el8_4.2.src.rpm SHA-256: 90a533a2f5d6d53c70dbdd1425aebfa4afd1636bbf193b2a81a9bd4db4927a43 x86_64 libpng12-1.2.57-5.el8_4.2.i686.rpm SHA-256: fc7f5c504afda34f57b7915a659761ec03f9a78c9a7d0a0fe7b57d1678727ff1 libpng12-1.2.57-5.el8_4.2.x86_64.rpm SHA-256: 0d406cdec5db65e834592def56881e54b5243b2fe2ec5e708c60f715f45f42fc libpng12-debuginfo-1.2.57-5.el8_4.2.i686.rpm SHA-256: 96efacc18c98fc76d6e530497f0247fec0f8036eff68ad9c28e2e97943a16cbc libpng12-debuginfo-1.2.57-5.el8_4.2.x86_64.rpm SHA-256: 08980ee90cc8d575c938aa1f786ebcf006dd7ab0095b0b06cc586680fe895b97 libpng12-debugsource-1.2.57-5.el8_4.2.i686.rpm SHA-256: 07159dd2b57f8291bb0d90525cc4ccf3731fe710257e27077f50b0a30d43fd45 libpng12-debugsource-1.2.57-5.el8_4.2.x86_64.rpm SHA-256: ee33f4ea80a2c8e78c5890b4a1542f6d6f882f6c5052597094ffd2210b9afe68 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .