SUSE SLED15: libpng16-16 / libpng16-16-32bit / libpng16-compat-devel / etc (SUSE-SU-2026:4796-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4796-1 advisory. This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in pngreadend after...

SUSE SLES12: libpng16-16 / libpng16-16-32bit / libpng16-compat-devel / etc (SUSE-SU-2026:4801-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4801-1 advisory. - CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for...

Updated libpng package fixes a security vulnerability

Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression. CVE-2026-46675...

MGASA-2026-0520 Updated libpng package fixes a security vulnerability

Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression. CVE-2026-46675...

Security update for libpng16 (moderate)

openSUSE security update: security update for libpng16 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22084-1 Rating: moderate References: bsc1283183 Cross-References: CVE-2026-46675 CVSS scores: CVE-2026-46675 SUSE : 5.9...

OESA-2026-4399 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: Use-after-free of zlib inpu...

OESA-2026-4397 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: Use-after-free of zlib inpu...

OESA-2026-4398 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: Use-after-free of zlib inpu...

OESA-2026-4396 libpng security update

The libpng package contains libraries used by other programs for reading and writing PNG format files. The PNG format was designed as a replacement for GIF and, to a lesser extent, TIFF, with many improvements and extensions and lack of patent problems. Security Fixes: Use-after-free of zlib inpu...

SUSE-SU-2026:24228-1 Security update for libpng16

This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: - version update to 1.6.59: Fixed CVE-2026-46675 medium severity: Use-after-free of zlib input in...

SUSE-SU-2026:24130-1 Security update for libpng16

This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: - version update to 1.6.59: Fixed CVE-2026-46675 medium severity: Use-after-free of zlib input in...

OPENSUSE-SU-2026:22084-1 Security update for libpng16

This update for libpng16 fixes the following issue: - CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: - version update to 1.6.59: Fixed CVE-2026-46675 medium severity: Use-after-free of zlib input in...

[slackware-security] libpng

New libpng packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libpng-1.6.59-i586-1slack15.0.txz: Upgraded. Fixed use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP...

CVE-2026-46675

libpng 1.6.0 through 1.6.58 contains a use-after-free of zlib input in pngreadend. When an application calls pngreadend after pngreadinfo without reading image rows, a crafted zTXt, iTXt or iCCP chunk can make libpng abandon decompression while zlib still expects input, leaving a stale input...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: libpng12 (UTSA-2026-093147)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093147 advisory. Multiple off-by-one errors in libpng before 1.2.32beta01, and 1.4 before 1.4.0beta34, allow context- dependent attackers to cause a denial of service crash or have...

CVE-2026-8814

Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data Data Amplification due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file containi...

CVE-2026-8814

Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data Data Amplification due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file containi...

CVE-2026-8814

Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data Data Amplification due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file containi...

CVE-2026-8814

Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data Data Amplification due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file containi...

CVE-2026-8814

Versions of the package exifreader before 4.39.0 are vulnerable to Improper Handling of Highly Compressed Data Data Amplification due to decompressing PNG zTXt metadata without enforcing a built-in maximum decompressed output size. When asynchronous parsing is enabled, a crafted PNG file containi...