SUSE-SU-2026:0597-1

Опубликовано: 23 фев. 2026

Источник: suse-cvrf

Описание

Security update for libpng16

This update for libpng16 fixes the following issues:

CVE-2026-25646: heap buffer overflow vulnerability in png_set_dither/png_set_quantize (bsc#1258020).

Список пакетов

Container bci/openjdk-devel:17

libpng16-16-1.6.40-150600.3.12.1

Container bci/openjdk-devel:21

libpng16-16-1.6.40-150600.3.12.1

Container bci/openjdk-devel:latest

libpng16-16-1.6.40-150600.3.12.1

Container bci/openjdk:17

libpng16-16-1.6.40-150600.3.12.1

Container bci/openjdk:21

libpng16-16-1.6.40-150600.3.12.1

Container bci/openjdk:latest

libpng16-16-1.6.40-150600.3.12.1

Container private-registry/1.2/harbor-portal:latest

libpng16-16-1.6.40-150600.3.12.1

Container private-registry/harbor-portal:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/kiosk/firefox-esr:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/kiosk/pulseaudio:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/kiosk/xorg-client:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/kiosk/xorg:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/manager/5.0/x86_64/server-attestation:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/manager/5.0/x86_64/server:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/multi-linux-manager/5.1/x86_64/server-attestation:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/multi-linux-manager/5.1/x86_64/server:latest

libpng16-16-1.6.40-150600.3.12.1

Container suse/nginx:1.21

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-Azure-3P

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-Azure-Basic

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-Azure-Standard

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-BYOS

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-CHOST-BYOS

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-CHOST-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-CHOST-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-CHOST-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-CHOST-BYOS-GDC

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-EC2-ECS-HVM

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-HPC

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-HPC-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-HPC-BYOS

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-HPC-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-HPC-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-HPC-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-HPC-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-HPC-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-Hardened-BYOS

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-Hardened-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-Hardened-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-Hardened-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Azure

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Azure-3P

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-BYOS

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-EC2

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-GCE

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Hardened

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Hardened-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Hardened-BYOS

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Hardened-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAP-Hardened-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP6-SAPCAL

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP6-SAPCAL-Azure

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP6-SAPCAL-EC2

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP6-SAPCAL-GCE

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP7-Azure-3P

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-Azure-Basic

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-Azure-Standard

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-CHOST-BYOS-Aliyun

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-CHOST-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-CHOST-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-CHOST-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-CHOST-BYOS-GDC

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-CHOST-BYOS-SAP-CCloud

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-EC2-ECS-HVM

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-GCE-3P

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-HPC-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-HPC-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-HPC-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-HPC-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-Hardened-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-Hardened-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-Hardened-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Azure-3P

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Azure-LI-BYOS-Production

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-GCE-3P

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Hardened-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAP-Hardened-GCE

libpng16-16-1.6.40-150600.3.12.1

Image SLES15-SP7-SAPCAL-Azure

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP7-SAPCAL-EC2

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image SLES15-SP7-SAPCAL-GCE

libpng16-16-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

Image server-attestation-image

libpng16-16-1.6.40-150600.3.12.1

Image server-image

libpng16-16-1.6.40-150600.3.12.1

Image server-image-sles15sp7

libpng16-16-1.6.40-150600.3.12.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

libpng16-16-1.6.40-150600.3.12.1

libpng16-16-32bit-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

SUSE Linux Enterprise Server 15 SP6-LTSS

libpng16-16-1.6.40-150600.3.12.1

libpng16-16-32bit-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

SUSE Linux Enterprise Server for SAP Applications 15 SP6

libpng16-16-1.6.40-150600.3.12.1

libpng16-16-32bit-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

openSUSE Leap 15.6

libpng16-16-1.6.40-150600.3.12.1

libpng16-16-32bit-1.6.40-150600.3.12.1

libpng16-compat-devel-1.6.40-150600.3.12.1

libpng16-compat-devel-32bit-1.6.40-150600.3.12.1

libpng16-devel-1.6.40-150600.3.12.1

libpng16-devel-32bit-1.6.40-150600.3.12.1

libpng16-tools-1.6.40-150600.3.12.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20260597-1/
Link for SUSE-SU-2026:0597-1
https://lists.suse.com/pipermail/sle-security-updates/2026-February/024367.html
E-Mail link for SUSE-SU-2026:0597-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1258020
SUSE Bug 1258020
https://www.suse.com/security/cve/CVE-2026-25646/
SUSE CVE CVE-2026-25646 page

Описание

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function is called with no histogram and the number of colors in the palette is more than twice the maximum supported by the user's display, certain palettes will cause the function to enter into an infinite loop that reads past the end of an internal heap-allocated buffer. The images that trigger this vulnerability are valid per the PNG specification. This vulnerability is fixed in 1.6.55.

Затронутые продукты

Container bci/openjdk-devel:17:libpng16-16-1.6.40-150600.3.12.1

Container bci/openjdk-devel:21:libpng16-16-1.6.40-150600.3.12.1

Container bci/openjdk-devel:latest:libpng16-16-1.6.40-150600.3.12.1

Container bci/openjdk:17:libpng16-16-1.6.40-150600.3.12.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-25646.html
CVE-2026-25646
https://bugzilla.suse.com/1258020
SUSE Bug 1258020
https://bugzilla.suse.com/1261341
SUSE Bug 1261341
https://bugzilla.suse.com/1265430
SUSE Bug 1265430
https://bugzilla.suse.com/1265909
SUSE Bug 1265909