gpp_maybe Security update for libpng16

SUSE-SLE-Micro-5.5-2025-4436

This update for libpng16 fixes the following issues: - CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160) - CVE-2025-66293: Fixed LIBPNG out-of-bounds read in `png_image_read_composite` (bsc#1254480) - CVE-2025-64506: Fixed heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled (bsc#1254158) - CVE-2025-64720: Fixed buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159) - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157)

Release Date

Dec 17 2025
References

Bugzilla: 1254158, 1254160, 1254159, 1254157, 1254480
CVEs: CVE-2025-64720, CVE-2025-66293, CVE-2025-65018, CVE-2025-64505, CVE-2025-64506
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Micro 5.5 s390x

Packages

libpng16
Library for the Portable Network Graphics Format (PNG)

1.6.34-150000.3.12.1 lock src

libpng16-16
Library for the Portable Network Graphics Format (PNG)

1.6.34-150000.3.12.1 lock rpm

SUSE Linux Enterprise Micro 5.5 aarch64

Packages

libpng16
Library for the Portable Network Graphics Format (PNG)

1.6.34-150000.3.12.1 lock src

libpng16-16
Library for the Portable Network Graphics Format (PNG)

1.6.34-150000.3.12.1 lock rpm

SUSE Linux Enterprise Micro 5.5 ppc64le

Packages

libpng16
Library for the Portable Network Graphics Format (PNG)

1.6.34-150000.3.12.1 lock src

libpng16-16
Library for the Portable Network Graphics Format (PNG)

1.6.34-150000.3.12.1 lock rpm

SUSE Linux Enterprise Micro 5.5 x86_64

Packages

libpng16
Library for the Portable Network Graphics Format (PNG)

1.6.34-150000.3.12.1 lock src

libpng16-16
Library for the Portable Network Graphics Format (PNG)

1.6.34-150000.3.12.1 lock rpm