Red Hat Product Errata RHSA-2026:29898 - Security Advisory Issued: 2026-06-25 Updated: 2026-06-25 RHSA-2026:29898 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 8 x86_64 Red Hat Enterprise Linux for IBM z Systems 8 s390x Red Hat Enterprise Linux for Power, little endian 8 ppc64le Red Hat Enterprise Linux for ARM 64 8 aarch64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 8 SRPM libpng-1.6.34-11.el8_10.src.rpm SHA-256: a892aacf6789572c691ad09faafc4e2542f9abd0b46bc04232375aad020998de x86_64 libpng-1.6.34-11.el8_10.i686.rpm SHA-256: 7c89bb8e2f6a1e6afce03ba7f2878de623c0f28ba6690cd671e09f2113d1013b libpng-1.6.34-11.el8_10.x86_64.rpm SHA-256: c90a6209e5e72aed23e984e3e698bb16adbcea69cbac2343f132ae9e42adb2c2 libpng-debuginfo-1.6.34-11.el8_10.i686.rpm SHA-256: 0028152f75f026fc8a5090f457b6e97e85e1c236e23025891636a1d5347ae017 libpng-debuginfo-1.6.34-11.el8_10.x86_64.rpm SHA-256: 1fb6a3e82bc4c821190d829ad572afa0a57ad2d5f90580083a4a8bfe664d55e8 libpng-debugsource-1.6.34-11.el8_10.i686.rpm SHA-256: fda68284d5981725a0feaaef4543fc109fb60c07b865fa5224342c4d7725d48d libpng-debugsource-1.6.34-11.el8_10.x86_64.rpm SHA-256: d9075cc410d087d98226d31275aa18787119cee3567df11b39e19808f9665848 libpng-devel-1.6.34-11.el8_10.i686.rpm SHA-256: 59da1278e152f792372fcdf703d088bab72a2e2375fa4dfa800bf396b9ad2650 libpng-devel-1.6.34-11.el8_10.x86_64.rpm SHA-256: 7fc272decc6562fb6adfdf2eac34126be8874a74ff629cbf78a6ad642424433a libpng-devel-debuginfo-1.6.34-11.el8_10.i686.rpm SHA-256: b35697c51ca8079ea1dc383c48ac86d847ae8c75feb26a20966e086ec485c60e libpng-devel-debuginfo-1.6.34-11.el8_10.x86_64.rpm SHA-256: 12bcee6ff2c0e010f4a4f8a03a3ff28f1f8cf98b10e36d2ccedf0e98e66323aa libpng-tools-debuginfo-1.6.34-11.el8_10.i686.rpm SHA-256: 86581d19491a37086d337edea38c8dbe701f49bc9cacfe029c9da5bf5ea6e0da libpng-tools-debuginfo-1.6.34-11.el8_10.x86_64.rpm SHA-256: dc3770e0b7482f31ce104c5ba2037dceaa8177b998d429431a23abd8b72dea34 Red Hat Enterprise Linux for IBM z Systems 8 SRPM libpng-1.6.34-11.el8_10.src.rpm SHA-256: a892aacf6789572c691ad09faafc4e2542f9abd0b46bc04232375aad020998de s390x libpng-1.6.34-11.el8_10.s390x.rpm SHA-256: cc70afd4abae590234c0e428650c1a4ff2935abb9cad639d460c8cfe7f5683b0 libpng-debuginfo-1.6.34-11.el8_10.s390x.rpm SHA-256: 03b7e891ab739a211f351e2d084f1b7d351e56d1018a21c0f6498d4d8ed04e27 libpng-debugsource-1.6.34-11.el8_10.s390x.rpm SHA-256: 583a4024a3577c502edea9f35a3094534c9ed1dc10653bcea620f5fc7f191842 libpng-devel-1.6.34-11.el8_10.s390x.rpm SHA-256: 1fc501989a1159721087b945cde059acf0df83a482c9b1036fa2eb243f94b353 libpng-devel-debuginfo-1.6.34-11.el8_10.s390x.rpm SHA-256: 69032d945824af233eb2877560b27c00d673f67ca5d551391faa7ccc5cb635cc libpng-tools-debuginfo-1.6.34-11.el8_10.s390x.rpm SHA-256: 854a447eb5962a5ca1952fc56a4fec28bb875b13da7bb8c18ebc80f56a29d76a Red Hat Enterprise Linux for Power, little endian 8 SRPM libpng-1.6.34-11.el8_10.src.rpm SHA-256: a892aacf6789572c691ad09faafc4e2542f9abd0b46bc04232375aad020998de ppc64le libpng-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 83bea993ac1168d9389bfdedf973cfb0e4bc16deb819af428c76160a4916f1ab libpng-debuginfo-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 3faab237ce0acf4907165e0e4b072fd040b65e90f8a558a50b38cb7a1a35f36b libpng-debugsource-1.6.34-11.el8_10.ppc64le.rpm SHA-256: addc06dddc328860e8647b5bbf0848839bf41de1ea007caa907c82e8bcb36713 libpng-devel-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 1176b0cc932898b2e87b307b909788a3dbac60187db514239af73acc7168dc64 libpng-devel-debuginfo-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 54d9a40e3c9b8c14d86f9198b552ab99bc481b9ff09398bac74812c6638d7712 libpng-tools-debuginfo-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 491edf95284525f04cb9a2d747ddd1b41b48349da63a065f72259f028c785bc7 Red Hat Enterprise Linux for ARM 64 8 SRPM libpng-1.6.34-11.el8_10.src.rpm SHA-256: a892aacf6789572c691ad09faafc4e2542f9abd0b46bc04232375aad020998de aarch64 libpng-1.6.34-11.el8_10.aarch64.rpm SHA-256: 1cd80686c8149aab66b7c6016de7e8d5157bdb74b9a6eee7b7426c6e0ac21349 libpng-debuginfo-1.6.34-11.el8_10.aarch64.rpm SHA-256: 726d2cfe7a197c2af99c1437cdfa1a0d4920244417d4b1148dc3abbdf16141c8 libpng-debugsource-1.6.34-11.el8_10.aarch64.rpm SHA-256: b7bc248039251659765cc3f807c041185c04ef95fe3226787b4ca606952f05eb libpng-devel-1.6.34-11.el8_10.aarch64.rpm SHA-256: 8242d1cf9cfd1c60f32c2cb2dbb75cad527a3e20fc6942fe89326c5277308f18 libpng-devel-debuginfo-1.6.34-11.el8_10.aarch64.rpm SHA-256: de11b1ea09dea9ef4d79de57f1a439f54697019fea600c58fa0e32a177585408 libpng-tools-debuginfo-1.6.34-11.el8_10.aarch64.rpm SHA-256: 34028cf04cfb350a369f972cba961c06fe3d61c09b4ce63def5a66c03efd70b6 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 SRPM libpng-1.6.34-11.el8_10.src.rpm SHA-256: a892aacf6789572c691ad09faafc4e2542f9abd0b46bc04232375aad020998de x86_64 libpng-1.6.34-11.el8_10.i686.rpm SHA-256: 7c89bb8e2f6a1e6afce03ba7f2878de623c0f28ba6690cd671e09f2113d1013b libpng-1.6.34-11.el8_10.x86_64.rpm SHA-256: c90a6209e5e72aed23e984e3e698bb16adbcea69cbac2343f132ae9e42adb2c2 libpng-debuginfo-1.6.34-11.el8_10.i686.rpm SHA-256: 0028152f75f026fc8a5090f457b6e97e85e1c236e23025891636a1d5347ae017 libpng-debuginfo-1.6.34-11.el8_10.x86_64.rpm SHA-256: 1fb6a3e82bc4c821190d829ad572afa0a57ad2d5f90580083a4a8bfe664d55e8 libpng-debugsource-1.6.34-11.el8_10.i686.rpm SHA-256: fda68284d5981725a0feaaef4543fc109fb60c07b865fa5224342c4d7725d48d libpng-debugsource-1.6.34-11.el8_10.x86_64.rpm SHA-256: d9075cc410d087d98226d31275aa18787119cee3567df11b39e19808f9665848 libpng-devel-1.6.34-11.el8_10.i686.rpm SHA-256: 59da1278e152f792372fcdf703d088bab72a2e2375fa4dfa800bf396b9ad2650 libpng-devel-1.6.34-11.el8_10.x86_64.rpm SHA-256: 7fc272decc6562fb6adfdf2eac34126be8874a74ff629cbf78a6ad642424433a libpng-devel-debuginfo-1.6.34-11.el8_10.i686.rpm SHA-256: b35697c51ca8079ea1dc383c48ac86d847ae8c75feb26a20966e086ec485c60e libpng-devel-debuginfo-1.6.34-11.el8_10.x86_64.rpm SHA-256: 12bcee6ff2c0e010f4a4f8a03a3ff28f1f8cf98b10e36d2ccedf0e98e66323aa libpng-tools-debuginfo-1.6.34-11.el8_10.i686.rpm SHA-256: 86581d19491a37086d337edea38c8dbe701f49bc9cacfe029c9da5bf5ea6e0da libpng-tools-debuginfo-1.6.34-11.el8_10.x86_64.rpm SHA-256: dc3770e0b7482f31ce104c5ba2037dceaa8177b998d429431a23abd8b72dea34 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 SRPM libpng-1.6.34-11.el8_10.src.rpm SHA-256: a892aacf6789572c691ad09faafc4e2542f9abd0b46bc04232375aad020998de aarch64 libpng-1.6.34-11.el8_10.aarch64.rpm SHA-256: 1cd80686c8149aab66b7c6016de7e8d5157bdb74b9a6eee7b7426c6e0ac21349 libpng-debuginfo-1.6.34-11.el8_10.aarch64.rpm SHA-256: 726d2cfe7a197c2af99c1437cdfa1a0d4920244417d4b1148dc3abbdf16141c8 libpng-debugsource-1.6.34-11.el8_10.aarch64.rpm SHA-256: b7bc248039251659765cc3f807c041185c04ef95fe3226787b4ca606952f05eb libpng-devel-1.6.34-11.el8_10.aarch64.rpm SHA-256: 8242d1cf9cfd1c60f32c2cb2dbb75cad527a3e20fc6942fe89326c5277308f18 libpng-devel-debuginfo-1.6.34-11.el8_10.aarch64.rpm SHA-256: de11b1ea09dea9ef4d79de57f1a439f54697019fea600c58fa0e32a177585408 libpng-tools-debuginfo-1.6.34-11.el8_10.aarch64.rpm SHA-256: 34028cf04cfb350a369f972cba961c06fe3d61c09b4ce63def5a66c03efd70b6 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 SRPM libpng-1.6.34-11.el8_10.src.rpm SHA-256: a892aacf6789572c691ad09faafc4e2542f9abd0b46bc04232375aad020998de ppc64le libpng-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 83bea993ac1168d9389bfdedf973cfb0e4bc16deb819af428c76160a4916f1ab libpng-debuginfo-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 3faab237ce0acf4907165e0e4b072fd040b65e90f8a558a50b38cb7a1a35f36b libpng-debugsource-1.6.34-11.el8_10.ppc64le.rpm SHA-256: addc06dddc328860e8647b5bbf0848839bf41de1ea007caa907c82e8bcb36713 libpng-devel-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 1176b0cc932898b2e87b307b909788a3dbac60187db514239af73acc7168dc64 libpng-devel-debuginfo-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 54d9a40e3c9b8c14d86f9198b552ab99bc481b9ff09398bac74812c6638d7712 libpng-tools-debuginfo-1.6.34-11.el8_10.ppc64le.rpm SHA-256: 491edf95284525f04cb9a2d747ddd1b41b48349da63a065f72259f028c785bc7 Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 SRPM libpng-1.6.34-11.el8_10.src.rpm SHA-256: a892aacf6789572c691ad09faafc4e2542f9abd0b46bc04232375aad020998de s390x libpng-1.6.34-11.el8_10.s390x.rpm SHA-256: cc70