Red Hat Product Errata RHSA-2026:28456 - Security Advisory Issued: 2026-06-23 Updated: 2026-06-25 RHSA-2026:28456 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng15 security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng15 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng15 package provides libpng 1.5, an older version of the libpng. library for manipulating PNG (Portable Network Graphics) image format files. This version should be used only if you are unable to use the current version of libpng. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64 Red Hat Enterprise Linux Server - AUS 9.6 x86_64 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a x86_64 libpng15-1.5.30-14.el9_6.2.i686.rpm SHA-256: dc6675a8d19dba527a7d397286735715e083c221e083e6aaf63f7e0970fe3370 libpng15-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 0f29ec1e955bff72e5cc99f1ccf57c75dcdbd5debdce9842c7f9089be0c93173 libpng15-debuginfo-1.5.30-14.el9_6.2.i686.rpm SHA-256: 67b62703814b79c016a9950ac004f6eca5c3851858c9f4bac45a8731738c6508 libpng15-debuginfo-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 1a9422df14c1a44b21b5e736d1aab720ad9cb6f97ccccb68e947ef637de9bbd3 libpng15-debugsource-1.5.30-14.el9_6.2.i686.rpm SHA-256: 2f23445565d1b0937eb670e9c1c0411dee809a94c0700b080c13ccb939b725ff libpng15-debugsource-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 24c65788441c531832e34c8b77e68b0d731c2d5041afdb2a1b827ff587410b24 Red Hat Enterprise Linux Server - AUS 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a x86_64 libpng15-1.5.30-14.el9_6.2.i686.rpm SHA-256: dc6675a8d19dba527a7d397286735715e083c221e083e6aaf63f7e0970fe3370 libpng15-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 0f29ec1e955bff72e5cc99f1ccf57c75dcdbd5debdce9842c7f9089be0c93173 libpng15-debuginfo-1.5.30-14.el9_6.2.i686.rpm SHA-256: 67b62703814b79c016a9950ac004f6eca5c3851858c9f4bac45a8731738c6508 libpng15-debuginfo-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 1a9422df14c1a44b21b5e736d1aab720ad9cb6f97ccccb68e947ef637de9bbd3 libpng15-debugsource-1.5.30-14.el9_6.2.i686.rpm SHA-256: 2f23445565d1b0937eb670e9c1c0411dee809a94c0700b080c13ccb939b725ff libpng15-debugsource-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 24c65788441c531832e34c8b77e68b0d731c2d5041afdb2a1b827ff587410b24 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a s390x libpng15-1.5.30-14.el9_6.2.s390x.rpm SHA-256: 918d4c90b6e85b89382f536c813a9e6a39d0c000b2626faf113f4b5d9b7f12d5 libpng15-debuginfo-1.5.30-14.el9_6.2.s390x.rpm SHA-256: 4458f5454a09c313adbbaa4a03ae893f373e692fdcd392fe0ec7c1980d8e72e4 libpng15-debugsource-1.5.30-14.el9_6.2.s390x.rpm SHA-256: 6ee76eb493eac81c3cc2205681cac56c33db5efe0fecc763d1683197ec715777 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a ppc64le libpng15-1.5.30-14.el9_6.2.ppc64le.rpm SHA-256: ac8fd5659e1c61273231e79cffa60494520cc0d9c735713c04c0591e1aa9976b libpng15-debuginfo-1.5.30-14.el9_6.2.ppc64le.rpm SHA-256: e4680c01cb9224ae6179280111665e7581c9185c1e4ef37a51a7c70d9ac3018d libpng15-debugsource-1.5.30-14.el9_6.2.ppc64le.rpm SHA-256: 53fb5ce24bdbebf11c7015bd52255ae18501cfa50a9c10209d6fd5eee6035ae2 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a aarch64 libpng15-1.5.30-14.el9_6.2.aarch64.rpm SHA-256: 9de839693e3516a2bc7042f01086f8aaf3af2975ab5cc17b000e0a8978b1227f libpng15-debuginfo-1.5.30-14.el9_6.2.aarch64.rpm SHA-256: 724e387cde5c76a2b7b5340e9fed1c56ddd31718e6dd2c26cb0ed216b80242a3 libpng15-debugsource-1.5.30-14.el9_6.2.aarch64.rpm SHA-256: fdc6927d0c25caa97112c84a9ebdd8036c8945cd0bf5706f611af726cb57745a Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a ppc64le libpng15-1.5.30-14.el9_6.2.ppc64le.rpm SHA-256: ac8fd5659e1c61273231e79cffa60494520cc0d9c735713c04c0591e1aa9976b libpng15-debuginfo-1.5.30-14.el9_6.2.ppc64le.rpm SHA-256: e4680c01cb9224ae6179280111665e7581c9185c1e4ef37a51a7c70d9ac3018d libpng15-debugsource-1.5.30-14.el9_6.2.ppc64le.rpm SHA-256: 53fb5ce24bdbebf11c7015bd52255ae18501cfa50a9c10209d6fd5eee6035ae2 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a x86_64 libpng15-1.5.30-14.el9_6.2.i686.rpm SHA-256: dc6675a8d19dba527a7d397286735715e083c221e083e6aaf63f7e0970fe3370 libpng15-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 0f29ec1e955bff72e5cc99f1ccf57c75dcdbd5debdce9842c7f9089be0c93173 libpng15-debuginfo-1.5.30-14.el9_6.2.i686.rpm SHA-256: 67b62703814b79c016a9950ac004f6eca5c3851858c9f4bac45a8731738c6508 libpng15-debuginfo-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 1a9422df14c1a44b21b5e736d1aab720ad9cb6f97ccccb68e947ef637de9bbd3 libpng15-debugsource-1.5.30-14.el9_6.2.i686.rpm SHA-256: 2f23445565d1b0937eb670e9c1c0411dee809a94c0700b080c13ccb939b725ff libpng15-debugsource-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 24c65788441c531832e34c8b77e68b0d731c2d5041afdb2a1b827ff587410b24 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a aarch64 libpng15-1.5.30-14.el9_6.2.aarch64.rpm SHA-256: 9de839693e3516a2bc7042f01086f8aaf3af2975ab5cc17b000e0a8978b1227f libpng15-debuginfo-1.5.30-14.el9_6.2.aarch64.rpm SHA-256: 724e387cde5c76a2b7b5340e9fed1c56ddd31718e6dd2c26cb0ed216b80242a3 libpng15-debugsource-1.5.30-14.el9_6.2.aarch64.rpm SHA-256: fdc6927d0c25caa97112c84a9ebdd8036c8945cd0bf5706f611af726cb57745a Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a s390x libpng15-1.5.30-14.el9_6.2.s390x.rpm SHA-256: 918d4c90b6e85b89382f536c813a9e6a39d0c000b2626faf113f4b5d9b7f12d5 libpng15-debuginfo-1.5.30-14.el9_6.2.s390x.rpm SHA-256: 4458f5454a09c313adbbaa4a03ae893f373e692fdcd392fe0ec7c1980d8e72e4 libpng15-debugsource-1.5.30-14.el9_6.2.s390x.rpm SHA-256: 6ee76eb493eac81c3cc2205681cac56c33db5efe0fecc763d1683197ec715777 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a x86_64 libpng15-1.5.30-14.el9_6.2.i686.rpm SHA-256: dc6675a8d19dba527a7d397286735715e083c221e083e6aaf63f7e0970fe3370 libpng15-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 0f29ec1e955bff72e5cc99f1ccf57c75dcdbd5debdce9842c7f9089be0c93173 libpng15-debuginfo-1.5.30-14.el9_6.2.i686.rpm SHA-256: 67b62703814b79c016a9950ac004f6eca5c3851858c9f4bac45a8731738c6508 libpng15-debuginfo-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 1a9422df14c1a44b21b5e736d1aab720ad9cb6f97ccccb68e947ef637de9bbd3 libpng15-debugsource-1.5.30-14.el9_6.2.i686.rpm SHA-256: 2f23445565d1b0937eb670e9c1c0411dee809a94c0700b080c13ccb939b725ff libpng15-debugsource-1.5.30-14.el9_6.2.x86_64.rpm SHA-256: 24c65788441c531832e34c8b77e68b0d731c2d5041afdb2a1b827ff587410b24 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 SRPM libpng15-1.5.30-14.el9_6.2.src.rpm SHA-256: 949d5737049ebb0d9d013511479dbc8255161b6cf7ce9de86821001141900e8a aarch64 libpng15-1.5.30-14.el9_6.2.aarch64.rpm SHA-256: 9de839693e3516a2bc7042f01086f8aaf3af2975ab5cc17b000e0a8978b1227f libpng15-debuginfo-1.5.30-14.el9_6.2.aarch64.rpm SHA-256: 724e38