mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-09 17:03:35 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/libpng: security bump version to 1.6.54

Browse Source 
Release notes:
https://raw.githubusercontent.com/pnggroup/libpng/v1.6.54/ANNOUNCE

* Fixed CVE-2026-22695 (medium severity):
  Heap buffer over-read in `png_image_read_direct_scaled.
  (Reported and fixed by Petr Simecek.)
* Fixed CVE-2026-22801 (medium severity):
  Integer truncation causing heap buffer over-read in `png_image_write_*`

Updated license hash due to copyright year bump:
9e4e247afb

Signed-off-by: Bernd Kuhls <bernd@kuhls.net>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Bernd Kuhls
2026-01-15 22:02:46 +01:00
committed by Julien Olivain
parent f594f86f9d
commit 85fa070335
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
package/libpng/libpng.hash
View File

@@ -1,5 +1,5 @@
# From https://sourceforge.net/projects/libpng/files/libpng16/1.6.53/
sha1 90672f16e545e4931abd50d372edef50596a1d46 libpng-1.6.53.tar.xz
# From https://sourceforge.net/projects/libpng/files/libpng16/1.6.54/
sha1 3dcffaeb58daa7b754bebe93cb008342964d9f39 libpng-1.6.54.tar.xz
# Locally computed:
sha256 1d3fb8ccc2932d04aa3663e22ef5ef490244370f4e568d7850165068778d98d4 libpng-1.6.53.tar.xz
sha256 16d9daaafbf63a31a5bdc91d4600972548fef5aaa1244202393288dbd079c49a LICENSE
sha256 01c9d8a303c941ec2c511c14312a3b1d36cedb41e2f5168ccdaa85d53b887805 libpng-1.6.54.tar.xz
sha256 bdb0a645ea18c60507d0368379b1ac5474b92255fcc2d115e07486a7672ba526 LICENSE

2
package/libpng/libpng.mk
View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBPNG_VERSION = 1.6.53
LIBPNG_VERSION = 1.6.54
LIBPNG_SERIES = 16
LIBPNG_SOURCE = libpng-$(LIBPNG_VERSION).tar.xz
LIBPNG_SITE = https://downloads.sourceforge.net/project/libpng/libpng$(LIBPNG_SERIES)/$(LIBPNG_VERSION)