From 42b17eaa92e1ae309c8d9d3c774406979a98f5bc Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Mon, 8 Dec 2025 21:31:14 +0100 Subject: [PATCH] package/libpng: security bump version to 1.6.53 Release notes: https://raw.githubusercontent.com/pnggroup/libpng/v1.6.53/ANNOUNCE https://raw.githubusercontent.com/pnggroup/libpng/v1.6.52/ANNOUNCE Version 1.6.52 fixed CVE-2025-66293 (high severity). Fixes: https://www.cve.org/CVERecord?id=CVE-2025-66293 Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit 52f83ccfbca8497d58eb624ac7b59d5195565f3d) Signed-off-by: Thomas Perale --- package/libpng/libpng.hash | 6 +++--- package/libpng/libpng.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/libpng/libpng.hash b/package/libpng/libpng.hash index fc4aeba85a..1e57e1dc33 100644 --- a/package/libpng/libpng.hash +++ b/package/libpng/libpng.hash @@ -1,5 +1,5 @@ -# From https://sourceforge.net/projects/libpng/files/libpng16/1.6.51/ -sha1 8fd6ff93769fac269ab9197c106d4e0808521b04 libpng-1.6.51.tar.xz +# From https://sourceforge.net/projects/libpng/files/libpng16/1.6.53/ +sha1 90672f16e545e4931abd50d372edef50596a1d46 libpng-1.6.53.tar.xz # Locally computed: -sha256 a050a892d3b4a7bb010c3a95c7301e49656d72a64f1fc709a90b8aded192bed2 libpng-1.6.51.tar.xz +sha256 1d3fb8ccc2932d04aa3663e22ef5ef490244370f4e568d7850165068778d98d4 libpng-1.6.53.tar.xz sha256 16d9daaafbf63a31a5bdc91d4600972548fef5aaa1244202393288dbd079c49a LICENSE diff --git a/package/libpng/libpng.mk b/package/libpng/libpng.mk index 96b97d134f..6fc3744963 100644 --- a/package/libpng/libpng.mk +++ b/package/libpng/libpng.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBPNG_VERSION = 1.6.51 +LIBPNG_VERSION = 1.6.53 LIBPNG_SERIES = 16 LIBPNG_SOURCE = libpng-$(LIBPNG_VERSION).tar.xz LIBPNG_SITE = http://downloads.sourceforge.net/project/libpng/libpng$(LIBPNG_SERIES)/$(LIBPNG_VERSION)