Advisories » MGASA-2026-0096

Updated libpng12 packages fix security vulnerability

Publication date: 12 Apr 2026
Modification date: 12 Apr 2026
Type: security
Affected Mageia releases : 9
CVE: CVE-2026-25646

Description

LIBPNG has a heap buffer overflow in png_set_quantize. (CVE-2026-25646)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=35342
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TECJI2SKV2DKMEVXPPPQ3B7AQ26QYEWB/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25646

SRPMS

9/core

• libpng12-1.2.59-3.1.mga9