Red Hat Product Errata RHSA-2026:18028 - Security Advisory Issued: 2026-05-18 Updated: 2026-05-18 RHSA-2026:18028 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM libpng-1.6.37-12.el9_7.4.src.rpm SHA-256: 6338d35e00a8cca5eaf71ad8ef8cba54c3750e1e6bbad9385420cebcc0231719 x86_64 libpng-1.6.37-12.el9_7.4.i686.rpm SHA-256: 6dba2e95ae02a4cf48081254fd3404c3ab1aa023d70728d870059000bd553cf9 libpng-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: f48405877780569d000c7797b6ecbda96f6c34fa6dcf7f76ff02f41e99aae66c libpng-debuginfo-1.6.37-12.el9_7.4.i686.rpm SHA-256: ea9e051c16342457f6636457e4eb5d71f021a20af50fd3cfa92365cf1c6df92f libpng-debuginfo-1.6.37-12.el9_7.4.i686.rpm SHA-256: ea9e051c16342457f6636457e4eb5d71f021a20af50fd3cfa92365cf1c6df92f libpng-debuginfo-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 14f7ded613c9f02a9f11f20790005bde7b4e05fe79005068135dc61f2b99875f libpng-debuginfo-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 14f7ded613c9f02a9f11f20790005bde7b4e05fe79005068135dc61f2b99875f libpng-debugsource-1.6.37-12.el9_7.4.i686.rpm SHA-256: e95896f371b5f7e19cc26fbe133d71f2f42f087361563d92f6672c2e2a3d4d02 libpng-debugsource-1.6.37-12.el9_7.4.i686.rpm SHA-256: e95896f371b5f7e19cc26fbe133d71f2f42f087361563d92f6672c2e2a3d4d02 libpng-debugsource-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 4c94f2bbbd3e416c64746047194319788a4e8e8f053a00fc4b4e90ab55e4e926 libpng-debugsource-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 4c94f2bbbd3e416c64746047194319788a4e8e8f053a00fc4b4e90ab55e4e926 libpng-devel-1.6.37-12.el9_7.4.i686.rpm SHA-256: 6c279a5096b3fdfc7c5bb5690ff47af12e3a022d6bd17a3c837630611d538cd6 libpng-devel-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 54f883a6140022328d4f152a40bef26bf7968e8c85a6f8148742c619cf84d606 libpng-devel-debuginfo-1.6.37-12.el9_7.4.i686.rpm SHA-256: a4ecec15e8bb4d211ae576663f77320775a04adf7efca13fc5ea4ef0f416b837 libpng-devel-debuginfo-1.6.37-12.el9_7.4.i686.rpm SHA-256: a4ecec15e8bb4d211ae576663f77320775a04adf7efca13fc5ea4ef0f416b837 libpng-devel-debuginfo-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 0ec68604e78aa82fb2382494b8c0043158ca70f71c76c73fac1f4911ac24f431 libpng-devel-debuginfo-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 0ec68604e78aa82fb2382494b8c0043158ca70f71c76c73fac1f4911ac24f431 libpng-tools-debuginfo-1.6.37-12.el9_7.4.i686.rpm SHA-256: 79a7519cb53bd4dc05cda439b19f01e9cac14d1c58565a6da100e0111a5ded99 libpng-tools-debuginfo-1.6.37-12.el9_7.4.i686.rpm SHA-256: 79a7519cb53bd4dc05cda439b19f01e9cac14d1c58565a6da100e0111a5ded99 libpng-tools-debuginfo-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 9e61fd9465de563e46fb0ba8cbd316271107724ae63ba254629e3be19202bb8f libpng-tools-debuginfo-1.6.37-12.el9_7.4.x86_64.rpm SHA-256: 9e61fd9465de563e46fb0ba8cbd316271107724ae63ba254629e3be19202bb8f Red Hat Enterprise Linux for IBM z Systems 9 SRPM s390x libpng-1.6.37-12.el9_7.4.s390x.rpm SHA-256: e4192c952aaadebd4b05bf3af45529fb97141b3741949fcc5990fd6528340c5c libpng-debuginfo-1.6.37-12.el9_7.4.s390x.rpm SHA-256: db5333fcd25482e10037030ded32c40fc097ee378e474c4ef6b5e6d15780a2fe libpng-debugsource-1.6.37-12.el9_7.4.s390x.rpm SHA-256: 6261a391b92fff869c421f6bac6844f0b5c188728110ce0db9fada34f7babcd8 libpng-devel-1.6.37-12.el9_7.4.s390x.rpm SHA-256: 831b84dc8ed0505ba154aabbf0da5d88ea825dc77108c137c3f207f5014541de libpng-devel-debuginfo-1.6.37-12.el9_7.4.s390x.rpm SHA-256: 1a005ef544145f73ac720c6701674ac8433a758fc0176eff009440c2c47ea2b4 libpng-tools-debuginfo-1.6.37-12.el9_7.4.s390x.rpm SHA-256: 6b9569211db3dcad743a9dac38f5738582bc45649d117fdce20a557e3d1fe444 Red Hat Enterprise Linux for Power, little endian 9 SRPM libpng-1.6.37-12.el9_7.4.src.rpm SHA-256: 6338d35e00a8cca5eaf71ad8ef8cba54c3750e1e6bbad9385420cebcc0231719 ppc64le libpng-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: 8c27c1ec71caeb65f39cec1e1cf88cd44804d0802a3e27263c690880c82142d2 libpng-debuginfo-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: 810e04b5f5b2740c59e84520b44bb13cb594a50d3615b0ba55005aeb4b657250 libpng-debuginfo-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: 810e04b5f5b2740c59e84520b44bb13cb594a50d3615b0ba55005aeb4b657250 libpng-debugsource-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: 50650dd5a242e698a403c3d983ac550d6fc0faef959e90406168591e4e83029a libpng-debugsource-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: 50650dd5a242e698a403c3d983ac550d6fc0faef959e90406168591e4e83029a libpng-devel-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: 046b615edec218263ca7aeb6746af6e75af39935247fcd80803bc4b03c476315 libpng-devel-debuginfo-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: 1efe94376dbdc82d59769a0ea3d6c4aa290be609378b3eb3c05c7fe75e731f3b libpng-devel-debuginfo-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: 1efe94376dbdc82d59769a0ea3d6c4aa290be609378b3eb3c05c7fe75e731f3b libpng-tools-debuginfo-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: f0ae7ac3e76d488d80fc33e0fa93dfdd30cbe0a5f2b7099738bf7ca20e9718cf libpng-tools-debuginfo-1.6.37-12.el9_7.4.ppc64le.rpm SHA-256: f0ae7ac3e76d488d80fc33e0fa93dfdd30cbe0a5f2b7099738bf7ca20e9718cf Red Hat Enterprise Linux for ARM 64 9 SRPM libpng-1.6.37-12.el9_7.4.src.rpm SHA-256: 6338d35e00a8cca5eaf71ad8ef8cba54c3750e1e6bbad9385420cebcc0231719 aarch64 libpng-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: 0ca66242e17a3f88b74a80c9559e508c53794ad41bd1dbe563cc1ebbce78c8f8 libpng-debuginfo-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: 0d252039a01fe544762e94c38491a189f31dfcab353116cc53545368494b9faf libpng-debuginfo-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: 0d252039a01fe544762e94c38491a189f31dfcab353116cc53545368494b9faf libpng-debugsource-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: ef107fd5460a5dde9652831c663b399e5d91f230e61b948fa3f0531825f6b5ef libpng-debugsource-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: ef107fd5460a5dde9652831c663b399e5d91f230e61b948fa3f0531825f6b5ef libpng-devel-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: 8caf69386feffdd1281e9ab9cf4b2ff1ca7e0af9cd3144c965d5445081ab2e45 libpng-devel-debuginfo-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: 0e03aaf944f9b64b24b6a908c14b8c133c3598f3575958bc500a1d0ff0c6942f libpng-devel-debuginfo-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: 0e03aaf944f9b64b24b6a908c14b8c133c3598f3575958bc500a1d0ff0c6942f libpng-tools-debuginfo-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: c1108dc71240642e5c27d6da76ad9ab439ebb8939e4599ecaad937c0a4672b28 libpng-tools-debuginfo-1.6.37-12.el9_7.4.aarch64.rpm SHA-256: c1108dc71240642e5c27d6da76ad9ab439ebb8939e4599ecaad937c0a4672b28 The Red Hat security contact is secalert@redhat.com . More contact details at https://access.redhat.com/security/team/contact/ .