SUSE-SU-2026:20523-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-202620523-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:20523-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:20523-1
- Upstream
- Related
- Published
- 2026-02-26T10:51:48Z
- Modified
- 2026-03-23T04:53:01.749705Z
- Summary
- Security update for libpng16
- Details
-
This update for libpng16 fixes the following issues:
- CVE-2025-28162: memory leaks when running
pngimage(bsc#1257364). - CVE-2025-28164: memory leaks when running
pngimage(bsc#1257365). - CVE-2026-22695: heap buffer over-read in pngimagefinish_read (bsc#1256525).
- CVE-2026-22801: integer truncation causing heap buffer over-read in pngimagewrite_* (bsc#1256526).
- CVE-2026-25646: heap buffer overflow vulnerability in pngsetdither/pngsetquantize (bsc#1258020).
- CVE-2025-28162: memory leaks when running
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-202620523-1/
- https://bugzilla.suse.com/1256525
- https://bugzilla.suse.com/1256526
- https://bugzilla.suse.com/1257364
- https://bugzilla.suse.com/1257365
- https://bugzilla.suse.com/1258020
- https://www.suse.com/security/cve/CVE-2025-28162
- https://www.suse.com/security/cve/CVE-2025-28164
- https://www.suse.com/security/cve/CVE-2026-22695
- https://www.suse.com/security/cve/CVE-2026-22801
- https://www.suse.com/security/cve/CVE-2026-25646