========================================================================== Ubuntu Security Notice USN-7963-1 January 14, 2026
libpng1.6 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in libpng. Software Description: - libpng1.6: PNG (Portable Network Graphics) file library Details: It was discovered that the libpng simplified API incorrectly processed palette PNG images with partial transparency and gamma correction. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service. (CVE-2025-66293) Petr Simecek, Stanislav Fort and Pavel Kohout discovered that the libpng simplified API incorrectly processed interlaced 16-bit PNGs with 8-bit output format and non-minimal row strides. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service. (CVE-2026-22695) Cosmin Truta discovered that the libpng simplified API incorrectly handled invalid row strides. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial of service. (CVE-2026-22801) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libpng16-16t64 1.6.50-1ubuntu0.3 Ubuntu 25.04 libpng16-16t64 1.6.47-1.1ubuntu0.3 Ubuntu 24.04 LTS libpng16-16t64 1.6.43-5ubuntu0.3 Ubuntu 22.04 LTS libpng16-16 1.6.37-3ubuntu0.3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7963-1 CVE-2025-66293, CVE-2026-22695, CVE-2026-22801 Package Information: https://launchpad.net/ubuntu/+source/libpng1.6/1.6.50-1ubuntu0.3 https://launchpad.net/ubuntu/+source/libpng1.6/1.6.47-1.1ubuntu0.3 https://launchpad.net/ubuntu/+source/libpng1.6/1.6.43-5ubuntu0.3 https://launchpad.net/ubuntu/+source/libpng1.6/1.6.37-3ubuntu0.3
signature.asc
Description: OpenPGP digital signature
