ALSA-2026:99225: Moderate: mingw-libpng security update
MinGW Windows Libpng library.
Security Fix(es):
libpng: libpng: Arbitrary code execution due to use-after-free vulnerability (CVE-2026-33416)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/mingw32-libpngto a version that resolves this vulnerability.Fixed in 1.6.34-3.el8_10 - Upgrade
Upgrade
almalinux/mingw32-libpng-staticto a version that resolves this vulnerability.Fixed in 1.6.34-3.el8_10 - Upgrade
Upgrade
almalinux/mingw64-libpngto a version that resolves this vulnerability.Fixed in 1.6.34-3.el8_10 - Upgrade
Upgrade
almalinux/mingw64-libpng-staticto a version that resolves this vulnerability.Fixed in 1.6.34-3.el8_10
Event History
Frequently Asked Questions
Which packages should be reviewed for this update?
Review installations of almalinux/mingw32-libpng, almalinux/mingw32-libpng-static, almalinux/mingw64-libpng, and almalinux/mingw64-libpng-static.
What is the potential impact if the vulnerability is exploited?
The advisory identifies a use-after-free vulnerability in libpng that can lead to arbitrary code execution.
Can the affected versions or a temporary mitigation be determined from this advisory?
No. The provided advisory data does not specify affected or fixed package versions, configuration prerequisites, or a mitigation other than applying the security update.