56 matches found
Rocky Linux 8.6 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1653)
The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261653 advisory. This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 8.6. It addresses 20 CVEs: CVE-2026-22801, CVE-2007-2445, CVE-2007-5269,...
Rocky Linux 9.6 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1395)
The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261395 advisory. This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 9.6. It addresses 21 CVEs: CVE-2025-64506, CVE-2019-7317, CVE-2007-2445,...
Rocky Linux 9.2 [CIQ] Security Update: libpng / libpng-devel Multiple Vulnerabilities (ciqsa-2026_1424)
The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261424 advisory. This advisory aggregates security fixes for the libpng SRPM in CIQ LTS 9.2. It addresses 31 CVEs: CVE-2025-64720, CVE-2025-65018, CVE-2025-66293,...
AlmaLinux 9.6 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1778054892)
The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1778054892 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image...
Oracle Linux 8 : libpng (ELSA-2026-29898)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-29898 advisory. 2:1.6.37-11 - fix CVE-2026-33416: use-after-free via pointer aliasing in pngsettRNS and pngsetPLTE RHEL-161344 Tenable has extracted the preceding description...
Amazon Linux 2023 : libpng, libpng-devel, libpng-static (ALAS2023-2026-1463)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1463 advisory. libpng: An out-of-bounds read vulnerability exists in the pngsetquantize API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maxim...
Amazon Linux 2023 : libpng, libpng-devel, libpng-static (ALAS2023-2025-1306)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1306 advisory. A heap buffer over-read vulnerability exists in libpng's pngdoquantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palettelookup array boun...
libpng security update
CentOS Errata and Security Advisory CESA-2020:3901 An update for libpng is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...
Oracle Linux 7 : libpng (ELSA-2020-3901)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3901 advisory. - Fix CVE-2017-12652 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the libpng-devel-1.2.49 package on the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
Red Hat Enterprise Linux Compromise Protected Information
The vulnerability of the libpng-devel-1.2.10 package on the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Red Hat Enterprise Linux Compromise Protected Information
The vulnerability of the libpng-devel-1.2.2 package in the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Red Hat Enterprise Linux Compromise Protected Information
The vulnerability of the libpng-devel-1.2.7 package on the Red Hat Enterprise Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
SUSE Linux Enterprise Data Compromise
The vulnerability of the libpng-devel-64bit package on the SUSE Linux Enterprise operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited remotely...
CentOS Information Disclosure
The vulnerability of the libpng-devel-1.2.2 package on the CentOS operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
Red Hat Linux Privilege Escalation
The vulnerability of the libpng-devel-1.2.2 package in the Red Hat Linux operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
CentOS Data Compromise
The multiple vulnerabilities in the libpng-devel-1.0.14 package of the CentOS operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Red Hat Linux Data Compromise
The multiple vulnerabilities in the libpng-devel-1.0.14 package of the Red Hat Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
CentOS Information Disclosure
The vulnerability of the libpng-devel-1.2.7 package on the CentOS operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...
CentOS Information Disclosure
The vulnerability of the libpng-devel-1.2.10 package on the CentOS operating system can lead to a violation of the accessibility of protected information. This vulnerability can be exploited remotely...