Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

This Red Hat security advisory announces an update to Red Hat Hardened Images RPMs, specifically libpng packages version 1.6.58-2.1.hum1 for multiple architectures (aarch64, s390x, x86_64). The update addresses multiple CVEs including CVE-2025-28164 and others, which are related to various security weaknesses (CWE-120, CWE-125, CWE-787, CWE-825, CWE-124). The advisory does not detail the specific nature of each vulnerability but indicates a high severity level. No known exploits in the wild are reported. The advisory references the Red Hat errata RHSA-2026:80330 for applying the update.

The vulnerabilities addressed are rated as high severity and involve multiple security weaknesses in the libpng library used in Red Hat Hardened Images. These could potentially lead to memory corruption or out-of-bounds access issues, which may impact system security if exploited. However, no active exploitation has been reported.

A fixed update is available for the affected libpng packages as part of Red Hat Hardened Images RPMs version 1.6.58-2.1.hum1. Users should apply this update following Red Hat's official guidance at https://images.redhat.com/ and the advisory RHSA-2026:80330. No additional mitigation steps are indicated by the vendor advisory.