Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

This advisory covers a security update for libpng packages included in Red Hat Hardened Images RPMs. The update addresses CVE-2026-46675, a vulnerability tracked under CWE-416 (Use After Free). The fixed packages are libpng-1.6.59-0.1.hum1 and related development, static, and tools packages for aarch64, s390x, and x86_64 architectures. The advisory references updated RPMs and provides links for applying the update. No exploit code or active exploitation is reported.

The vulnerability is classified as medium severity and relates to a use-after-free condition in libpng, which could potentially lead to memory corruption or denial of service. No known exploits in the wild have been reported. The impact is limited to systems using the affected libpng versions within Red Hat Hardened Images RPMs.

Red Hat has released updated libpng packages (version 1.6.59-0.1.hum1) that fix CVE-2026-46675. Users of Red Hat Hardened Images RPMs should apply these updates as per the vendor's instructions available at https://images.redhat.com/. No additional mitigation steps are indicated by the vendor advisory.