SUSE-SU-2026:1311-1

UNKNOWN

Security update for libpng16

Published Apr 14, 2026

Modified 1 weeks ago

Fix available

Details

This update for libpng16 fixes the following issue:

CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE can lead to arbitrary code execution (bsc#1260754).

Affected Packages

libpng16

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.6.8-15.21.1

libpng16-16

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.6.8-15.21.1

libpng16-16-32bit

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.6.8-15.21.1

libpng16-compat-devel

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.6.8-15.21.1

libpng16-devel

SUSE Linux Enterprise Server 12 SP5-LTSSSUSE Linux Enterprise Server LTSS Extended Security 12 SP5

Fixed in:

1.6.8-15.21.1

References

Upstream

Ecosystems

Timeline

PublishedApr 14, 2026

ModifiedApr 14, 2026

SUSE-SU-2026:1311-1 | Mondoo Vulnerability Intelligence