SUSE-SU-2025:4432-1

Опубликовано: 17 дек. 2025

Источник: suse-cvrf

Описание

Security update for libpng12

This update for libpng12 fixes the following issues:

CVE-2025-64505: Fixed heap buffer over-read in png_do_quantize via malformed palette index (bsc#1254157)

Список пакетов

Image SLES15-SP4-SAP

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-BYOS-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-BYOS-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-BYOS-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Hardened

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Hardened-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Hardened-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Hardened-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAPCAL

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAPCAL-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAPCAL-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAPCAL-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Azure-3P

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Azure-LI-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Azure-LI-BYOS-Production

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-BYOS-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-BYOS-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-BYOS-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Hardened-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Hardened-BYOS-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAP-Hardened-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAPCAL-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAPCAL-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP5-SAPCAL-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Azure-3P

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-BYOS-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-BYOS-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-BYOS-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Hardened

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Hardened-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Hardened-BYOS

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Hardened-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAP-Hardened-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAPCAL

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAPCAL-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAPCAL-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP6-SAPCAL-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Azure-3P

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-BYOS-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-BYOS-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-BYOS-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-GCE-3P

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Hardened-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAP-Hardened-GCE

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAPCAL-Azure

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAPCAL-EC2

libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP7-SAPCAL-GCE

libpng12-0-1.2.57-150000.4.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

libpng12-0-1.2.57-150000.4.3.1

libpng12-devel-1.2.57-150000.4.3.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libpng12-0-1.2.57-150000.4.3.1

libpng12-devel-1.2.57-150000.4.3.1

openSUSE Leap 15.6

libpng12-0-1.2.57-150000.4.3.1

libpng12-0-32bit-1.2.57-150000.4.3.1

libpng12-compat-devel-1.2.57-150000.4.3.1

libpng12-compat-devel-32bit-1.2.57-150000.4.3.1

libpng12-devel-1.2.57-150000.4.3.1

libpng12-devel-32bit-1.2.57-150000.4.3.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20254432-1/
Link for SUSE-SU-2025:4432-1
https://lists.suse.com/pipermail/sle-security-updates/2025-December/023583.html
E-Mail link for SUSE-SU-2025:4432-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1254157
SUSE Bug 1254157
https://www.suse.com/security/cve/CVE-2025-64505/
SUSE CVE CVE-2025-64505 page

Описание

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to version 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_do_quantize function when processing PNG files with malformed palette indices. The vulnerability occurs when palette_lookup array bounds are not validated against externally-supplied image data, allowing an attacker to craft a PNG file with out-of-range palette indices that trigger out-of-bounds memory access. This issue has been patched in version 1.6.51.

Затронутые продукты

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production:libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Azure-LI-BYOS:libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production:libpng12-0-1.2.57-150000.4.3.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS:libpng12-0-1.2.57-150000.4.3.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-64505.html
CVE-2025-64505
https://bugzilla.suse.com/1254157
SUSE Bug 1254157