Packages
Details
Patrick Keshishian discovered that libpng incorrectly handled certain
text chunks. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10087)
It was discovered that libpng incorrectly handled certain malformed
images. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-14048)
It was discovered that libpng incorrectly handled memory when freeing
certain images. An attacker could possibly use this issue to cause
a denial of service. This issue only affected Ubuntu 16.04 LTS.
(CVE-2019-7317)
It was discovered that libpng incorrectly handled memory when
processing certain images. An attacker could possibly use this issue
to cause a denial of service, or execute...
Patrick Keshishian discovered that libpng incorrectly handled certain
text chunks. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10087)
It was discovered that libpng incorrectly handled certain malformed
images. An attacker could possibly use this issue to cause a denial of
service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-14048)
It was discovered that libpng incorrectly handled memory when freeing
certain images. An attacker could possibly use this issue to cause
a denial of service. This issue only affected Ubuntu 16.04 LTS.
(CVE-2019-7317)
It was discovered that libpng incorrectly handled memory when
processing certain images. An attacker could possibly use this issue
to cause a denial of service, or execute arbitrary code. This issue only
affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu
20.04 LTS. (CVE-2026-33416)
It was discovered that libpng incorrectly handled certain images. An
attacker could possibly use this issue to cause a denial of service or
execute arbitrary code. This issue only affected Ubuntu 20.04 LTS.
(CVE-2026-33636)
It was discovered that libpng incorrectly handled memory when
processing certain images. An attacker could possibly use this issue
to cause a denial of service or obtain sensitive information. This issue
only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and
Ubuntu 20.04 LTS. (CVE-2026-34757)
Seung Min Shin discovered that libpng incorrectly handled certain
animated images. An attacker could possibly use this issue to cause
libpng to misinterpret image data. This issue only affected Ubuntu
20.04 LTS and Ubuntu 22.04 LTS. (CVE-2026-40930)
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 22.04 LTS jammy | libpng-dev – 1.6.37-3ubuntu0.6 | ||
| libpng-tools – 1.6.37-3ubuntu0.6 | |||
| libpng16-16 – 1.6.37-3ubuntu0.6 | |||
| 20.04 LTS focal | libpng-dev – 1.6.37-2ubuntu0.1~esm3 | ||
| libpng-tools – 1.6.37-2ubuntu0.1~esm3 | |||
| libpng16-16 – 1.6.37-2ubuntu0.1~esm3 | |||
| 18.04 LTS bionic | libpng-dev – 1.6.34-1ubuntu0.18.04.2+esm3 | ||
| libpng-tools – 1.6.34-1ubuntu0.18.04.2+esm3 | |||
| libpng16-16 – 1.6.34-1ubuntu0.18.04.2+esm3 | |||
| 16.04 LTS xenial | libpng12-0 – 1.2.54-1ubuntu1.1+esm3 | ||
| libpng12-dev – 1.2.54-1ubuntu1.1+esm3 | |||
| libpng16-16 – 1.6.20-2ubuntu0.1~esm4 | |||
| libpng16-dev – 1.6.20-2ubuntu0.1~esm4 | |||
| libpng16-devtools – 1.6.20-2ubuntu0.1~esm4 | |||
| libpng16-tools – 1.6.20-2ubuntu0.1~esm4 | |||
| libpng3 – 1.2.54-1ubuntu1.1+esm3 | |||
| 14.04 LTS trusty | libpng12-0 – 1.2.50-1ubuntu2.14.04.3+esm2 | ||
| libpng12-dev – 1.2.50-1ubuntu2.14.04.3+esm2 | |||
| libpng3 – 1.2.50-1ubuntu2.14.04.3+esm2 | |||
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.