CLSA-2026-1786125033
Update of libpng
No scoreFix available
- Re-tag base release to 8.0.3 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 1.5.13-8.0.3.el7
What each source reports
OSV No score
Update of libpng
- Re-tag base release to 8.0.3 to align NVR with Oracle Linux errata; no code or security content changes — this build already contains all fixes shipped in Oracle's 1.5.13-8.0.3.el7
- Record
CLSA-2026-1786125033- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpngTuxCare:CentOS:7 |
before 2:1.5.13-8.0.3.el7.tuxcare.els1 | 2:1.5.13-8.0.3.el7.tuxcare.els1 |
libpng-develTuxCare:CentOS:7 |
before 2:1.5.13-8.0.3.el7.tuxcare.els1 | 2:1.5.13-8.0.3.el7.tuxcare.els1 |
libpng-staticTuxCare:CentOS:7 |
before 2:1.5.13-8.0.3.el7.tuxcare.els1 | 2:1.5.13-8.0.3.el7.tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1786125033 is a vulnerability with no CVSS score yet in libpng, published August 8, 2026. No source lists public exploit code. Fixed in libpng 2:1.5.13-8.0.3.el7.tuxcare.els1.