Red Hat Product Errata RHSA-2026:20550 - Security Advisory Issued: 2026-05-26 Updated: 2026-05-26 RHSA-2026:20550 - Security Advisory Overview Updated Packages Synopsis Moderate: libpng security update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpng is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpng packages contain a library of functions for creating and manipulating Portable Network Graphics (PNG) image format files. Security Fix(es): libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.2 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x Fixes BZ - 2451805 - CVE-2026-33416 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability CVEs CVE-2026-33416 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.2 SRPM libpng-1.6.37-12.el9_2.4.src.rpm SHA-256: cb0ba77af7719fb9436d1320ecb3684442a8b6c96a2ed998e60204d647595da3 x86_64 libpng-1.6.37-12.el9_2.4.i686.rpm SHA-256: 25db8146adcbd2814f60f69dbc91fe6355f5a0570ea4a4ba35ef81e864f31ae3 libpng-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: c457cabe81d4f8b2e9d13b4ff54aae6ca1d334b61ca3a302151abd393a909c5b libpng-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 51e9d8a42da91bb0f98ad44170c93046602f61dd5d97220765b37b8563ac3c2f libpng-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 51e9d8a42da91bb0f98ad44170c93046602f61dd5d97220765b37b8563ac3c2f libpng-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: 049ccbd54d98ee33d72b3829ebfd5b6b5519af2deb82a90e998c7aca8f976300 libpng-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: 049ccbd54d98ee33d72b3829ebfd5b6b5519af2deb82a90e998c7aca8f976300 libpng-debugsource-1.6.37-12.el9_2.4.i686.rpm SHA-256: b6f2b49a4fc337a081c5fd9148848f87dcae1bd0da4f78e437b00f44c42e6c94 libpng-debugsource-1.6.37-12.el9_2.4.i686.rpm SHA-256: b6f2b49a4fc337a081c5fd9148848f87dcae1bd0da4f78e437b00f44c42e6c94 libpng-debugsource-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: 0d8d3d763e1ea2c1d12c10cc5b4d64ac0b99275cc3e4c37e07c7ddc584a8dfe0 libpng-debugsource-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: 0d8d3d763e1ea2c1d12c10cc5b4d64ac0b99275cc3e4c37e07c7ddc584a8dfe0 libpng-devel-1.6.37-12.el9_2.4.i686.rpm SHA-256: 7f8a2093c76920b876e8281f5a28455426fe1eff6c6e66673d2cdbae90dfe929 libpng-devel-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: e027a2d61a7a83a408f42bfa5d04733bf5cb4c20bf16ede3eedab1800bbda92c libpng-devel-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 92914d0c963159a2d84e698b1c88a040480cad97b6d9caa9c59d38217d706640 libpng-devel-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 92914d0c963159a2d84e698b1c88a040480cad97b6d9caa9c59d38217d706640 libpng-devel-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: ad41f31b2f7bd744c83d9065461cc0742ed4037a054726d3832bcdfc3f05d61b libpng-devel-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: ad41f31b2f7bd744c83d9065461cc0742ed4037a054726d3832bcdfc3f05d61b libpng-tools-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 4971ec8c393c64eecc46115c2286f3cf2c135a073ba2fc357d1c637604ba125b libpng-tools-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 4971ec8c393c64eecc46115c2286f3cf2c135a073ba2fc357d1c637604ba125b libpng-tools-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: d0bf5a667e510506c73857c3d425d8f3aa6ddfe08701b59b073fe9da016b8619 libpng-tools-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: d0bf5a667e510506c73857c3d425d8f3aa6ddfe08701b59b073fe9da016b8619 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 SRPM libpng-1.6.37-12.el9_2.4.src.rpm SHA-256: cb0ba77af7719fb9436d1320ecb3684442a8b6c96a2ed998e60204d647595da3 ppc64le libpng-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: bf990ce4b09832e06c51c1e3a50bb5ffed8724894a3979a81f21777b4cd14e8f libpng-debuginfo-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: d7382187a1f2027263a869058ced06d0281a05351d9c633de4fa4949ad54e6f9 libpng-debuginfo-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: d7382187a1f2027263a869058ced06d0281a05351d9c633de4fa4949ad54e6f9 libpng-debugsource-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: a984a0d28d44c3bd7b798a298b09c7aa72d9c2efa705f34b563be9acaa0f144a libpng-debugsource-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: a984a0d28d44c3bd7b798a298b09c7aa72d9c2efa705f34b563be9acaa0f144a libpng-devel-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: dbdf7ceaeec8ff237ef879496c351dded9787bc4f5f4b3824f7913573e15feb8 libpng-devel-debuginfo-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: 0f53b2b5f56571cf1ef9543b0b1f6d6f341c3bc51ecf6f661d36e60020253365 libpng-devel-debuginfo-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: 0f53b2b5f56571cf1ef9543b0b1f6d6f341c3bc51ecf6f661d36e60020253365 libpng-tools-debuginfo-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: 5611be9da393dba10f4e896ecda4333f8a7536b374975af8a88d7df3b7bb5c4b libpng-tools-debuginfo-1.6.37-12.el9_2.4.ppc64le.rpm SHA-256: 5611be9da393dba10f4e896ecda4333f8a7536b374975af8a88d7df3b7bb5c4b Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 SRPM libpng-1.6.37-12.el9_2.4.src.rpm SHA-256: cb0ba77af7719fb9436d1320ecb3684442a8b6c96a2ed998e60204d647595da3 x86_64 libpng-1.6.37-12.el9_2.4.i686.rpm SHA-256: 25db8146adcbd2814f60f69dbc91fe6355f5a0570ea4a4ba35ef81e864f31ae3 libpng-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: c457cabe81d4f8b2e9d13b4ff54aae6ca1d334b61ca3a302151abd393a909c5b libpng-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 51e9d8a42da91bb0f98ad44170c93046602f61dd5d97220765b37b8563ac3c2f libpng-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 51e9d8a42da91bb0f98ad44170c93046602f61dd5d97220765b37b8563ac3c2f libpng-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: 049ccbd54d98ee33d72b3829ebfd5b6b5519af2deb82a90e998c7aca8f976300 libpng-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: 049ccbd54d98ee33d72b3829ebfd5b6b5519af2deb82a90e998c7aca8f976300 libpng-debugsource-1.6.37-12.el9_2.4.i686.rpm SHA-256: b6f2b49a4fc337a081c5fd9148848f87dcae1bd0da4f78e437b00f44c42e6c94 libpng-debugsource-1.6.37-12.el9_2.4.i686.rpm SHA-256: b6f2b49a4fc337a081c5fd9148848f87dcae1bd0da4f78e437b00f44c42e6c94 libpng-debugsource-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: 0d8d3d763e1ea2c1d12c10cc5b4d64ac0b99275cc3e4c37e07c7ddc584a8dfe0 libpng-debugsource-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: 0d8d3d763e1ea2c1d12c10cc5b4d64ac0b99275cc3e4c37e07c7ddc584a8dfe0 libpng-devel-1.6.37-12.el9_2.4.i686.rpm SHA-256: 7f8a2093c76920b876e8281f5a28455426fe1eff6c6e66673d2cdbae90dfe929 libpng-devel-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: e027a2d61a7a83a408f42bfa5d04733bf5cb4c20bf16ede3eedab1800bbda92c libpng-devel-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 92914d0c963159a2d84e698b1c88a040480cad97b6d9caa9c59d38217d706640 libpng-devel-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 92914d0c963159a2d84e698b1c88a040480cad97b6d9caa9c59d38217d706640 libpng-devel-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: ad41f31b2f7bd744c83d9065461cc0742ed4037a054726d3832bcdfc3f05d61b libpng-devel-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: ad41f31b2f7bd744c83d9065461cc0742ed4037a054726d3832bcdfc3f05d61b libpng-tools-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 4971ec8c393c64eecc46115c2286f3cf2c135a073ba2fc357d1c637604ba125b libpng-tools-debuginfo-1.6.37-12.el9_2.4.i686.rpm SHA-256: 4971ec8c393c64eecc46115c2286f3cf2c135a073ba2fc357d1c637604ba125b libpng-tools-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: d0bf5a667e510506c73857c3d425d8f3aa6ddfe08701b59b073fe9da016b8619 libpng-tools-debuginfo-1.6.37-12.el9_2.4.x86_64.rpm SHA-256: d0bf5a667e510506c73857c3d425d8f3aa6ddfe08701b59b073fe9da016b8619 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 SRPM libpng-1.6.37-12.el9_2.4.src.rpm SHA-256: cb0ba77af7719fb9436d1320ecb3684442a8b6c96a2ed998e60204d647595da3 aarch64 libpng-1.6.37-12.el9_2.4.aarch64.rpm SHA-256: 381d245fae762463ba415c53a45d615dfa4a736c9e22e6a713e04285a3049dde libpng-debuginfo-1.6.37-12.el9_2.4.aarch64.rpm SHA-256: 6a42317cf97434ab554df8e46f6b94d038c7b3e0e215ddc3bd8734ec8c076c8a libpng-debuginfo-1.6.37-12.el9_2.4.aarch64.rpm SHA-256: 6a42317cf97434ab554df8e46f6b94d038c7b3e0e215ddc3bd8734ec8c076c8a libpng-debugsource-1.6.37-12.el9_2.4.aarch64.rpm SHA-256: 7ab8b0cf83e78198e34b41711517cc13c7f129e1017a90d9c363a03b459582ff libpng-debugsource-1.6.37-12.el9_2.4.aarch64.rpm SHA-256: 7ab8b0cf83e78198e34b41711517cc13c7f129e1017a90d9c363a03b459582ff libpng-devel-1.6.37-12.el9_2.4.aarch64.rpm SHA-256: a0a7354e01ce494ed902409a278ebcb9ac40c9ee5074db84c03ff97b993c6584 libpng-devel-debuginfo-1.6.37-12.el9_2.4.aarch64.rpm SHA-256: 495a36594f94be99244ce98fb79f0bfda318fd30743ce037c7e1bf20e7c0e601 libpng-devel-debuginfo-1.6.37-12.el9