package/libpng: security bump to version 1.6.59

https://github.com/pnggroup/libpng/blob/v1.6.59/ANNOUNCE

Fixes CVE-2026-46675.

Switched to sha256 tarball hash provided by upstream.

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
This commit is contained in:
Bernd Kuhls
2026-10-02 23:47:11 +02:00
committed by Fiona Klute
parent c2f05a81ad
commit 7bb353814c
2 changed files with 3 additions and 4 deletions

View File

@@ -1,5 +1,4 @@
# From https://sourceforge.net/projects/libpng/files/libpng16/1.6.58/
sha1 6263409a6907d180e7b990827ca84ee944c6cc17 libpng-1.6.58.tar.xz
# From https://sourceforge.net/projects/libpng/files/libpng16/1.6.59/
sha256 d80dd2a38a37f803cb9b6ac7b14bd6e74ddc3b654780a8380bdf93523fdb4389 libpng-1.6.59.tar.xz
# Locally computed:
sha256 28eb403f51f0f7405249132cecfe82ea5c0ef97f1b32c5a65828814ae0d34775 libpng-1.6.58.tar.xz
sha256 bdb0a645ea18c60507d0368379b1ac5474b92255fcc2d115e07486a7672ba526 LICENSE

View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBPNG_VERSION = 1.6.58
LIBPNG_VERSION = 1.6.59
LIBPNG_SERIES = 16
LIBPNG_SOURCE = libpng-$(LIBPNG_VERSION).tar.xz
LIBPNG_SITE = https://downloads.sourceforge.net/project/libpng/libpng$(LIBPNG_SERIES)/$(LIBPNG_VERSION)