gpp_maybe Security update for libpng16

SUSE-SL-Micro-6.2-131

This update for libpng16 fixes the following issues: - CVE-2025-64505: heap buffer over-read in `png_do_quantize` when processing PNG files malformed palette indices (bsc#1254157). - CVE-2025-64506: heap buffer over-read in `png_write_image_8bit` when processing 8-bit input with `convert_to_8bit` enabled (bsc#1254158). - CVE-2025-64720: out-of-bounds read in `png_image_read_composite` when processing palette images with `PNG_FLAG_OPTIMIZE_ALPHA` enabled (bsc#1254159). - CVE-2025-65018: heap buffer overflow in `png_image_finish_read` when processing specially crafted 16-bit interlaced PNGs with 8-bit output format (bsc#1254160). - CVE-2025-66293: out-of-bounds read of the `png_sRGB_base` array when processing palette PNG images with partial transparency and gamma correction (bsc#1254480).

Release Date

Jan 12 2026
References

Bugzilla: 1254157, 1254159, 1254160, 1254480, 1254158
CVEs: CVE-2025-66293, CVE-2025-65018, CVE-2025-64720, CVE-2025-64506, CVE-2025-64505
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Micro 6.2 aarch64

Packages

libpng16-16
Library for the Portable Network Graphics Format (PNG)

1.6.44-160000.3.1 lock rpm

SUSE Linux Micro 6.2 ppc64le

Packages

libpng16-16
Library for the Portable Network Graphics Format (PNG)

1.6.44-160000.3.1 lock rpm

SUSE Linux Micro 6.2 x86_64

Packages

libpng16-16
Library for the Portable Network Graphics Format (PNG)

1.6.44-160000.3.1 lock rpm

SUSE Linux Micro 6.2 s390x

Packages

libpng16-16
Library for the Portable Network Graphics Format (PNG)

1.6.44-160000.3.1 lock rpm