gpp_maybe Security update for libpng16

SUSE-SLE-Micro-6.0-536

This update for libpng16 fixes the following issues: - CVE-2025-66293: Fixed out-of-bounds read in png_image_read_composite (bsc#1254480). - CVE-2025-64505: Fixed heap buffer over-read in `png_do_quantize` via malformed palette index (bsc#1254157). - CVE-2025-64506: Fixed heap buffer over-read in `png_write_image_8bit` with 8-bit input and `convert_to_8bit` enabled (bsc#1254158). - CVE-2025-64720: Fixed buffer overflow in `png_image_read_composite` via incorrect palette premultiplication (bsc#1254159). - CVE-2025-65018: Fixed heap buffer overflow in `png_combine_row` triggered via `png_image_finish_read` (bsc#1254160).

• Release Date
  Dec 16 2025
• References
  Bugzilla: 1254157, 1254158, 1254159, 1254160, 1254480
  CVEs: CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018, CVE-2025-66293
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Micro 6.0 s390x

• Packages
  libpng16-16
  Library for the Portable Network Graphics Format (PNG)

  1.6.43-2.1 lock rpm

SUSE Linux Micro 6.0 x86_64

• Packages
  libpng16-16
  Library for the Portable Network Graphics Format (PNG)

  1.6.43-2.1 lock rpm

SUSE Linux Micro 6.0 aarch64

• Packages
  libpng16-16
  Library for the Portable Network Graphics Format (PNG)

  1.6.43-2.1 lock rpm