{"id":"CLSA-2026-1777311274","summary":"Fix CVE(s): CVE-2026-22801, CVE-2026-25646","details":"   * SECURITY UPDATE: Heap buffer over-read in png_write_image_* due to\n     truncation of ptrdiff_t row stride to png_uint_16\n     - debian/patches/CVE-2026-22801.patch: remove incorrect truncation\n       casts from png_write_image_16bit, png_write_image_8bit, and\n       png_image_write_main so large (\u003e65535) and negative row strides\n       are handled correctly\n     - CVE-2026-22801\n   * SECURITY UPDATE: Heap buffer overflow in png_set_quantize due to\n     stale palette indices stored in the color distance hash table\n     - debian/patches/CVE-2026-25646.patch: store original palette\n       indices via palette_to_index in png_set_quantize so the\n       color-pruning loop does not read past the 769-element hash array\n     - CVE-2026-25646","modified":"2026-06-04T09:46:51.359069115Z","published":"2026-04-27T17:34:38Z","upstream":["CVE-2026-22801","CVE-2026-25646"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1777311274.html"}],"affected":[{"package":{"name":"libpng-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libpng-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.37-2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1777311274.json"}},{"package":{"name":"libpng-tools","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libpng-tools?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.37-2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1777311274.json"}},{"package":{"name":"libpng16-16","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/libpng16-16?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.37-2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1777311274.json"}}],"schema_version":"1.7.5"}