gpp_maybe Security update for libpng16

SUSE-SLE-Module-Basesystem-15-SP7-2026-1368

This update for libpng16 fixes the following issues: - CVE-2026-33416: use-after-free via pointer aliasing in `png_set_tRNS` and `png_set_PLTE` can lead to arbitrary code execution (bsc#1260754). - CVE-2026-33636: out-of-bounds read/write in the palette expansion on ARM Neon can lead to information leak and crashes (bsc#1260755).

• Release Date
  Apr 15 2026
• References
  Bugzilla: 1260754, 1260755
  CVEs: CVE-2026-33416, CVE-2026-33636
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.7 x86_64

• Packages
  libpng16
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock src

  libpng16-16
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock rpm

  libpng16-16-32bit
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock rpm

  libpng16-compat-devel
  Development tools for applications which will use libpng

  1.6.40-150600.3.17.1 lock rpm

  libpng16-devel
  Development tools for applications which will use libpng

  1.6.40-150600.3.17.1 lock rpm

Basesystem Module 15.7 s390x

• Packages
  libpng16
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock src

  libpng16-16
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock rpm

  libpng16-compat-devel
  Development tools for applications which will use libpng

  1.6.40-150600.3.17.1 lock rpm

  libpng16-devel
  Development tools for applications which will use libpng

  1.6.40-150600.3.17.1 lock rpm

Basesystem Module 15.7 aarch64

• Packages
  libpng16
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock src

  libpng16-16
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock rpm

  libpng16-compat-devel
  Development tools for applications which will use libpng

  1.6.40-150600.3.17.1 lock rpm

  libpng16-devel
  Development tools for applications which will use libpng

  1.6.40-150600.3.17.1 lock rpm

Basesystem Module 15.7 ppc64le

• Packages
  libpng16
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock src

  libpng16-16
  Library for the Portable Network Graphics Format (PNG)

  1.6.40-150600.3.17.1 lock rpm

  libpng16-compat-devel
  Development tools for applications which will use libpng

  1.6.40-150600.3.17.1 lock rpm

  libpng16-devel
  Development tools for applications which will use libpng

  1.6.40-150600.3.17.1 lock rpm