Security update provided to RLSA-2026:1478 and Rocky Linux Security Update for libpng (RLSA-2026:0238)

Brocade SANnav OVA

0 more products

37950

28 July 2026

28 July 2026

CLOSED

MEDIUM

Varies

CVE-2025-12084, CVE-2025-64720, CVE-2025-65018, CVE-2025-66293

Brocade Security Advisory ID

BSA-2026-3682

Component

 Rocky Linux

 

 

Summary

Brocade SANnav OVA has provided Security updates for python3.9 (RLSA-2026:1478) and Rocky Linux Security Update for libpng (RLSA-2026:0238)

  • python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service (CVE-2025-12084)

Rocky Linux Security Update for libpng (RLSA-2026:0238) 

  • libpng: LIBPNG buffer overflow (CVE-2025-64720)
  • libpng: LIBPNG heap buffer overflow (CVE-2025-65018)
  • libpng: LIBPNG out-of-bounds read in png_image_read_composite (CVE-2025-66293)

Products Affected

  • Brocade SANnav OVA Base OS OVA versions before 3.0.1 for the following CVES: CVE-2025-64720, CVE-2025-66293
  • Brocade SANnav OVA Base OS versions 3.0.0 through 3.0.0a for the following CVEs: CVE-2025-12084, CVE-2025-65018.

Products Confirmed not Affected

  • Brocade SANnav Standard Deployment (management portal)
    [VEX Justification: Vulnerable_code_not_present]

Solution

  • Security update provided in Brocade SANnav OVA Base OS 3.0.1. The same update is provided in OVA OS Patches OVA_9x_os_06_2026 and the SANnav_ova_8x_os_06_2026.
  • The OVA_9x_os_06_2026 supports Brocade SANnav versions 3.0.0, and 3.0.0a.
  • Security update is also provided in Brocade SANnav OVA OS Patch OVA_8x_os_06_2026 for the following CVEs: CVE-2025-64720, CVE-2025-66293
  • The  Brocade SANnav OVA_8x_os_06_2026 patch supports Brocade SANnav versions 2.40, 2.4.0a, 2,4,0b

Note:

  • The following vulnerabilities are not applicable for the Brocade SANnav OVA_8x_os-06_2026:CVE-2025-12084, CVE-2025-65018, CVE-2025-64720

 

Revision History

Version

Change

Date

1.0

Initial Publication

 July 28th, 2026

 

Disclaimer

THIS DOCUMENT IS PROVIDED ON AN AS-IS BASIS SOLELY FOR INFORMATIONAL PURPOSES AND DOES NOT IMPLY ANY KIND OF GUARANTY OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. YOUR USE OF THE INFORMATION CONTAINED HEREIN IS AT YOUR OWN RISK. ALL INFORMATION PROVIDED HEREIN IS BASED ON BROCADE'S CURRENT KNOWLEDGE AND UNDERSTANDING OF THE VULNERABILITY AND IMPACT TO BROCADE HARDWARE AND SOFTWARE PRODUCTS. BROCADE RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.