Red Hat Product Errata RHSA-2026:17642 - Security Advisory Issued: 2026-05-14 Updated: 2026-05-14 RHSA-2026:17642 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion (CVE-2026-33636) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2451819 - CVE-2026-33636 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion CVEs CVE-2026-33636 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM libpng-1.6.37-12.el9_2.3.src.rpm SHA-256: 61019ab4bb76c594a712c4accf534ea0032031e9b213b9b09e75678ab9a8ea4f x86_64 libpng-1.6.37-12.el9_2.3.i686.rpm SHA-256: bb3ccb918b552572f8eaa0c964d52a2fdbb6f36a89358c41f98679d7847935a8 libpng-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: b44a376165f971cc637792c574e418c13c536b596334ed7a0ab57a5e146367f5 libpng-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: d54ef9693a94d6693b9646839a802aadcbe589ae7b66293ce81f134fa8d958a6 libpng-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: d54ef9693a94d6693b9646839a802aadcbe589ae7b66293ce81f134fa8d958a6 libpng-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: d3f58b44608ce773cde0bf5753d2d3b3231343dcdebf199a5217145689ad6fb8 libpng-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: d3f58b44608ce773cde0bf5753d2d3b3231343dcdebf199a5217145689ad6fb8 libpng-debugsource-1.6.37-12.el9_2.3.i686.rpm SHA-256: 54dc89d6682cb0a8b7d6c7494f28e92c836877bd6789e01ea9a927778c387840 libpng-debugsource-1.6.37-12.el9_2.3.i686.rpm SHA-256: 54dc89d6682cb0a8b7d6c7494f28e92c836877bd6789e01ea9a927778c387840 libpng-debugsource-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: 2b664ce50f7df7c469f47993ddfa6a572922cb879d4716b4c53f771ae8058133 libpng-debugsource-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: 2b664ce50f7df7c469f47993ddfa6a572922cb879d4716b4c53f771ae8058133 libpng-devel-1.6.37-12.el9_2.3.i686.rpm SHA-256: ade28e878d31bc7b41f1dbfe4d072e59db8c200175164ba550956c32f9c01047 libpng-devel-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: d944b15dcaa27b9930e78cf16df56e2ea773550be6430bb4b74368cbfb60198d libpng-devel-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: 34a245b63e6c2958080ba18015e0742e700e531c25f616e5e421a0f3a7ea13b6 libpng-devel-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: 34a245b63e6c2958080ba18015e0742e700e531c25f616e5e421a0f3a7ea13b6 libpng-devel-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: cfde64a7871c2c3057ad8f6fd893b7292319dc8819c076a8cafdb236fc5fed78 libpng-devel-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: cfde64a7871c2c3057ad8f6fd893b7292319dc8819c076a8cafdb236fc5fed78 libpng-tools-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: 936c6266018850b81a2c7e973afd9878d4e97462988aaea883f4c1eb3d1ae15b libpng-tools-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: 936c6266018850b81a2c7e973afd9878d4e97462988aaea883f4c1eb3d1ae15b libpng-tools-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: 641837a8f0947017d129942e421449a4c1c7332c32fb72ad2e3c68a52f4bd993 libpng-tools-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: 641837a8f0947017d129942e421449a4c1c7332c32fb72ad2e3c68a52f4bd993 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM libpng-1.6.37-12.el9_2.3.src.rpm SHA-256: 61019ab4bb76c594a712c4accf534ea0032031e9b213b9b09e75678ab9a8ea4f ppc64le libpng-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: 5814759c82adae879050a5005926ebe98e1a8a955ffb35bb86de82e9571d9ed7 libpng-debuginfo-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: 4d6b59fc8eb75483a1640611e583098c08c4d5e4d74a301deeaf3dadf8f5b155 libpng-debuginfo-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: 4d6b59fc8eb75483a1640611e583098c08c4d5e4d74a301deeaf3dadf8f5b155 libpng-debugsource-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: 6b8d64e2152f3cf65c37265668fa283f3b61d05efae86468748038c181e9ce50 libpng-debugsource-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: 6b8d64e2152f3cf65c37265668fa283f3b61d05efae86468748038c181e9ce50 libpng-devel-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: ce747cb09d5c889d0a3960312bfecc0f03bbdff4a1b79f62af4049bb0fd76988 libpng-devel-debuginfo-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: 70e522684cae4b485066c36f9e2cc535853dc8a564067ad22d22ead417e5ba5e libpng-devel-debuginfo-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: 70e522684cae4b485066c36f9e2cc535853dc8a564067ad22d22ead417e5ba5e libpng-tools-debuginfo-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: e75c2cdc810c66d44eaa0201d9b63a53ad7e9f2d2e40f2c59a2777847f330957 libpng-tools-debuginfo-1.6.37-12.el9_2.3.ppc64le.rpm SHA-256: e75c2cdc810c66d44eaa0201d9b63a53ad7e9f2d2e40f2c59a2777847f330957 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM libpng-1.6.37-12.el9_2.3.src.rpm SHA-256: 61019ab4bb76c594a712c4accf534ea0032031e9b213b9b09e75678ab9a8ea4f x86_64 libpng-1.6.37-12.el9_2.3.i686.rpm SHA-256: bb3ccb918b552572f8eaa0c964d52a2fdbb6f36a89358c41f98679d7847935a8 libpng-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: b44a376165f971cc637792c574e418c13c536b596334ed7a0ab57a5e146367f5 libpng-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: d54ef9693a94d6693b9646839a802aadcbe589ae7b66293ce81f134fa8d958a6 libpng-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: d54ef9693a94d6693b9646839a802aadcbe589ae7b66293ce81f134fa8d958a6 libpng-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: d3f58b44608ce773cde0bf5753d2d3b3231343dcdebf199a5217145689ad6fb8 libpng-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: d3f58b44608ce773cde0bf5753d2d3b3231343dcdebf199a5217145689ad6fb8 libpng-debugsource-1.6.37-12.el9_2.3.i686.rpm SHA-256: 54dc89d6682cb0a8b7d6c7494f28e92c836877bd6789e01ea9a927778c387840 libpng-debugsource-1.6.37-12.el9_2.3.i686.rpm SHA-256: 54dc89d6682cb0a8b7d6c7494f28e92c836877bd6789e01ea9a927778c387840 libpng-debugsource-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: 2b664ce50f7df7c469f47993ddfa6a572922cb879d4716b4c53f771ae8058133 libpng-debugsource-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: 2b664ce50f7df7c469f47993ddfa6a572922cb879d4716b4c53f771ae8058133 libpng-devel-1.6.37-12.el9_2.3.i686.rpm SHA-256: ade28e878d31bc7b41f1dbfe4d072e59db8c200175164ba550956c32f9c01047 libpng-devel-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: d944b15dcaa27b9930e78cf16df56e2ea773550be6430bb4b74368cbfb60198d libpng-devel-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: 34a245b63e6c2958080ba18015e0742e700e531c25f616e5e421a0f3a7ea13b6 libpng-devel-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: 34a245b63e6c2958080ba18015e0742e700e531c25f616e5e421a0f3a7ea13b6 libpng-devel-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: cfde64a7871c2c3057ad8f6fd893b7292319dc8819c076a8cafdb236fc5fed78 libpng-devel-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: cfde64a7871c2c3057ad8f6fd893b7292319dc8819c076a8cafdb236fc5fed78 libpng-tools-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: 936c6266018850b81a2c7e973afd9878d4e97462988aaea883f4c1eb3d1ae15b libpng-tools-debuginfo-1.6.37-12.el9_2.3.i686.rpm SHA-256: 936c6266018850b81a2c7e973afd9878d4e97462988aaea883f4c1eb3d1ae15b libpng-tools-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: 641837a8f0947017d129942e421449a4c1c7332c32fb72ad2e3c68a52f4bd993 libpng-tools-debuginfo-1.6.37-12.el9_2.3.x86_64.rpm SHA-256: 641837a8f0947017d129942e421449a4c1c7332c32fb72ad2e3c68a52f4bd993 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM libpng-1.6.37-12.el9_2.3.src.rpm SHA-256: 61019ab4bb76c594a712c4accf534ea0032031e9b213b9b09e75678ab9a8ea4f aarch64 libpng-1.6.37-12.el9_2.3.aarch64.rpm SHA-256: b55f4a9fb20708e694ada2057e99d69510ef24e55d538fe5ddb42ab32176bace libpng-debuginfo-1.6.37-12.el9_2.3.aarch64.rpm SHA-256: e246928d90012d5683d462e79daa8346d273baed74e2218a043df5f93e545a54 libpng-debuginfo-1.6.37-12.el9_2.3.aarch64.rpm SHA-256: e246928d90012d5683d462e79daa8346d273baed74e2218a043df5f93e545a54 libpng-debugsource-1.6.37-12.el9_2.3.aarch64.rpm SHA-256: aaa0e851c70cda45e93471b67f97f067a26295fc7de900fd139c14d5667713aa libpng-debugsource-1.6.37-12.el9_2.3.aarch64.rpm SHA-256: aaa0e851c70cda45e93471b67f97f067a26295fc7de900fd139c14d5667713aa libpng-devel-1.6.37-12.el9_2.3.aarch64.rpm SHA-256: 38223fa268d0b354a01abc252a43973b7f7ae4c0d2db03cd9029dbd369c737fe libpng-devel-debuginfo-1.6.37-12.el9_2.3.aarch64.rpm SHA-256: fef49c0ff8c5530d1622914