SUSE-SU-2025:4432-1

Details

Description of the patch:

This update for libpng12 fixes the following issues:

CVE-2025-64505: Fixed heap buffer over-read in png_do_quantize via malformed palette index (bsc#1254157)

Affected Packages

libpng12-0

SUSE Linux Enterprise Desktop 15 SP6SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP6SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP6

Fixed in:

1.2.57-150000.4.3.1

libpng12-devel

SUSE Linux Enterprise Desktop 15 SP6SUSE Linux Enterprise Desktop 15 SP7SUSE Linux Enterprise High Performance Computing 15 SP6SUSE Linux Enterprise High Performance Computing 15 SP7SUSE Linux Enterprise Module for Basesystem 15 SP6

Fixed in:

1.2.57-150000.4.3.1

libpng12-0-32bit

openSUSE Leap 15.6

Fixed in:

1.2.57-150000.4.3.1

libpng12-compat-devel

openSUSE Leap 15.6

Fixed in:

1.2.57-150000.4.3.1

libpng12-compat-devel-32bit

openSUSE Leap 15.6