CLSA-2026-1790600120
Update of libpng
No scoreFix available
- Rebase onto Oracle libpng-1.5.13-8.0.5.el7
- take the vendor's patches in place of our duplicate backports
- keep our png_do_quantize over-read fix; the vendor ships none
What each source reports
OSV No score
Update of libpng
- Rebase onto Oracle libpng-1.5.13-8.0.5.el7
- take the vendor's patches in place of our duplicate backports
- keep our png_do_quantize over-read fix; the vendor ships none
- Record
CLSA-2026-1790600120- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpngTuxCare:CentOS:7 |
before 2:1.5.13-8.0.5.el7.tuxcare.els1 | 2:1.5.13-8.0.5.el7.tuxcare.els1 |
libpng-develTuxCare:CentOS:7 |
before 2:1.5.13-8.0.5.el7.tuxcare.els1 | 2:1.5.13-8.0.5.el7.tuxcare.els1 |
libpng-staticTuxCare:CentOS:7 |
before 2:1.5.13-8.0.5.el7.tuxcare.els1 | 2:1.5.13-8.0.5.el7.tuxcare.els1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CLSA-2026-1790600120 is a vulnerability with no CVSS score yet in libpng, published September 30, 2026. No source lists public exploit code. Fixed in libpng 2:1.5.13-8.0.5.el7.tuxcare.els1.