Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Fixed packages 4

Vulnerabilities 2

• High 8.3
  CVE-2026-25646

  LIBPNG has a heap buffer overflow in png_set_quantize

  LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. Prior to 1.6.55, an out-of-bounds read vulnerability exists in the png_set_quantize() API function. When the function i…

  pnggroup libpng openjpeg2 fltk Debian Ubuntu Azure Linux Alpine Wolfi
  Feb 10, 2026
• Medium 5.5
  CVE-2025-28164

  Buffer Overflow vulnerability in libpng 1.6.43-1.6.46 allows a local attacker to cause a denial of service via png_crea…

  libpng1.6 libpng1.6 Debian Ubuntu
  Jan 27, 2026

References

• article
  https://images.redhat.com/
• report
  https://access.redhat.com/security/cve/CVE-2025-28164
• article
  https://access.redhat.com/security/updates/classification/
• report
  https://access.redhat.com/security/cve/CVE-2026-25646
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_7503.json
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2433398
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-28164
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-28164
• article
  https://gist.github.com/kittener/506516f8c22178005b4379c8b2a7de20
• article
  https://github.com/pnggroup/libpng/issues/655
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2438542
• advisory
  https://www.cve.org/CVERecord?id=CVE-2026-25646
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2026-25646
• article
  http://www.openwall.com/lists/oss-security/2026/02/09/7
• article
  https://github.com/pnggroup/libpng/commit/01d03b8453eb30ade759cd45c707e5a1c7277d88
• article
  https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3