Threats Tagged 'cve-2025-64720'

This update includes the following RPMs: libpng: * libpng-1.6.56-1.hum1 (aarch64, x86_64) * libpng-devel-1.6.56-1.hum1 (aarch64, x86_64) * libpng-static-1.6.56-1.hum1 (aarch64, x86_64) * libpng-tools-1.6.56-1.hum1 (aarch64, x86_64) * libpng-1.6.56-1.hum1.src (source)

The OpenJDK 17 packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. This release of the Red Hat build of OpenJDK 17 (17.0.18) for portable Linux serves as a replacement for the Red Hat build of OpenJDK 17 (17.0.17) and includes security and bug fixes as well as enhancements. For further information, refer to the release notes linked to in the References section. Security Fix(es): * JDK: Improve JMX connections (CVE-2026-21925) * JDK: Improve HttpServer Request handling (CVE-2026-21933) * JDK: Enhance Certificate Checking (CVE-2026-21945) * libpng: LIBPNG buffer overflow (CVE-2025-64720) * libpng: LIBPNG heap buffer overflow (CVE-2025-65018) Bug Fix(es): * When using a P11SecretKey for both signing and encryption in FIPS mode, the FIPS PKCS11 provider would fail with a CKR_ATTRIBUTE_VALUE_INVALID error. This was due to the default configuration not applying the CKA_ENCRYPT=true attribute to the key. The configuration in this release is updated to include this attribute. (OPENJDK-4398) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat has released security updates for the OpenJDK 11 Extended Lifecycle Support (ELS) packages addressing multiple vulnerabilities including buffer overflows in the LIBPNG library, improvements to JMX connections, HttpServer request handling, URI handling, and certificate checking. These updates replace previous versions and provide important security and bug fixes for Red Hat Enterprise Linux 7, 8, and 9. The vulnerabilities are rated with moderate to high impact by Red Hat, and the update is available as version 11.0.30. Users should apply this update to mitigate the identified issues.

Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their operating systems, and relevant configuration data stored within them. Discovery also identifies and reports more detailed facts for some versions of key Red Hat packages and products that it finds in the network.

Multiple security vulnerabilities have been identified in the libpng library used in Red Hat Enterprise Linux 8.6 variants. These include buffer overflow, heap buffer overflow, and out-of-bounds read issues. The vulnerabilities are addressed by a security update released by Red Hat. The update is rated as Important by Red Hat Product Security. Users of affected Red Hat Enterprise Linux 8.6 variants should apply the provided update to remediate these issues.

Multiple security vulnerabilities have been identified in the libpng library used in Red Hat Enterprise Linux 8.8. These include buffer overflow and out-of-bounds read issues. Red Hat has issued an important security advisory with updates to address these flaws. The vulnerabilities affect libpng versions in Red Hat Enterprise Linux 8.8 prior to 8.8.1. The advisory provides updated packages to remediate these issues.

Multiple security vulnerabilities have been identified in the libpng library used in Red Hat Enterprise Linux 8.4. These include buffer overflow, heap buffer overflow, and out-of-bounds read issues. The vulnerabilities are addressed in an important security update released by Red Hat. The update is available for Red Hat Enterprise Linux 8.4 Extended Life Cycle and related support versions. Users are advised to apply the update as per Red Hat's guidance.

Multiple security vulnerabilities have been identified in the libpng library used for handling PNG image files in Red Hat Enterprise Linux 8.2 AUS. These include buffer overflow, heap buffer overflow, and out-of-bounds read issues. Red Hat has issued an important security advisory with updates addressing these flaws. The vulnerabilities could potentially lead to memory corruption. A security update is available to remediate these issues.

A buffer overflow vulnerability (CVE-2025-64720) exists in the libpng library used for handling PNG image files. This vulnerability affects Red Hat Enterprise Linux 7 Extended Lifecycle Support versions. Red Hat has issued a security advisory and released updated libpng packages to address this issue. The vulnerability is rated as having an important security impact by Red Hat, and no known exploits are reported in the wild. Users of affected versions are advised to apply the available updates.

Multiple security vulnerabilities have been identified in the libpng library used for handling PNG image files in Red Hat Enterprise Linux 8. These include buffer overflow, heap buffer overflow, and out-of-bounds read issues. Red Hat has issued an important security advisory with updates to address these flaws in libpng version 1.6.34. The vulnerabilities affect various architectures and extended life cycle versions of Red Hat Enterprise Linux 8. Users are advised to apply the provided updates to mitigate these issues.