Alerts This Week
Warning Icon 1 1,154
Alerts This Week
Warning Icon 1 1,154

Red Hat Enterprise Linux 9 Security Update for libjpeg ELSA-2026-3406

oracle
Calendar Grey February 26, 2026
Oracle Linux Logo Esm H88
Oracle Linux 9 security advisory ELSA-2026-3405 for libpng addresses important buffer overflow issues.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:

Summary

[2:1.6.37-12.2] - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148970) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-148403) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147343)

Topics%20covered

Topics Covered

security advisory buffer overflow important libpng heap overflow Oracle Linux

SRPMs

http://oss.oracle.com/ol9/SRPMS-updates/libpng-1.6.37-12.el9_7.2.src.rpm

x86_64

libpng-1.6.37-12.el9_7.2.i686.rpm libpng-1.6.37-12.el9_7.2.x86_64.rpm libpng-devel-1.6.37-12.el9_7.2.i686.rpm libpng-devel-1.6.37-12.el9_7.2.x86_64.rpm

aarch64

libpng-1.6.37-12.el9_7.2.aarch64.rpm libpng-devel-1.6.37-12.el9_7.2.aarch64.rpm

Severity
important
Lowest
Low
Medium
High
Critical

Related CVEs: CVE-2026-22695 CVE-2026-22801 CVE-2026-25646

Topics%20covered

Topics Covered

security advisory buffer overflow important libpng heap overflow Oracle Linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here