CLSA-2026-1790599948
Update of libpng
No scoreFix available
- Rebase onto Oracle libpng-1.5.13-8.0.5.el7
- take the vendor's patches in place of our duplicate backports
- keep our png_do_quantize over-read fix; the vendor ships none
What each source reports
OSVNo score
Update of libpng
- Rebase onto Oracle libpng-1.5.13-8.0.5.el7
- take the vendor's patches in place of our duplicate backports
- keep our png_do_quantize over-read fix; the vendor ships none
- Record
CLSA-2026-1790599948- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpngTuxCare:OracleLinux:7 | before 2:1.5.13-8.0.5.el7.tuxcare.els1 | 2:1.5.13-8.0.5.el7.tuxcare.els1 |
libpng-develTuxCare:OracleLinux:7 | before 2:1.5.13-8.0.5.el7.tuxcare.els1 | 2:1.5.13-8.0.5.el7.tuxcare.els1 |
libpng-staticTuxCare:OracleLinux:7 | before 2:1.5.13-8.0.5.el7.tuxcare.els1 | 2:1.5.13-8.0.5.el7.tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1790599948 is a vulnerability with no CVSS score yet in libpng, published September 28, 2026. No source lists public exploit code. Fixed in libpng 2:1.5.13-8.0.5.el7.tuxcare.els1.