Skip to content
Fedora 43: libpng High CVE-2025-66293 Out-of

Fedora 43: libpng High CVE-2025-66293 Out-of

Linuxsecurity LinuxSecurity Advisories December 14, 2025

The libpng package contains a library of functions for creating and manipulating PNG (Portable Network Graphics) image format files. PNG is a bit-mapped graphics format similar to the GIF format. PNG was created to replace the GIF format, since GIF uses a patented data compression algorithm. Libpng should be installed if you need to manipulate PNG format image files. Update Information : Fixed CVE-2025-66293 (high severity): Out-of-bounds read in png_image_read_composite. Fixed the Paeth filter handling in the RISC-V RVV implementation. Improved the performance of the RISC-V RVV implementation.

The libpng package contains a library of functions for creating and

manipulating PNG (Portable Network Graphics) image format files. PNG

is a bit-mapped graphics format similar to the GIF format. PNG was

created to replace the GIF format, since GIF uses a patented data

compression algorithm.

Libpng should be installed if you need to manipulate PNG format image

Fixed CVE-2025-66293 (high severity): Out-of-bounds read in png_image_read_composite. Fixed the Paeth filter handling in the RISC-V RVV implementation. Improved the performance of the RISC-V RVV implementation.

* Mon Dec 8 2025 Michal Hlavinka - 2:1.6.53-1 - updated to 1.6.53 (#2418775) * Mon Dec 8 2025 Michal Hlavinka - 2:1.6.52-1 - updated to 1.6.52 (#2418775)

* Mon Dec 8 2025 Michal Hlavinka - 2:1.6.53-1 - updated to 1.6.53 (#2418775) * Mon Dec 8 2025 Michal Hlavinka - 2:1.6.52-1 - updated to 1.6.52 (#2418775)

[ 1 ] Bug #2418747 - CVE-2025-66293 libpng: LIBPNG out-of-bounds read in png_image_read_composite [fedora-43]

[ 1 ] Bug #2418747 - CVE-2025-66293 libpng: LIBPNG out-of-bounds read in png_image_read_composite [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-7f360be18f' at the command line. For more information, refer to the dnf documentation available at

Extracted Entities

Companies (1)