From a9d1714fb286ac546d080a2d95a76eb0cb99fb27 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Thu, 9 Apr 2026 15:16:39 +0200 Subject: [PATCH] package/libpng: security bump to version 1.6.57 https://github.com/pnggroup/libpng/blob/v1.6.57/ANNOUNCE Fixes CVE-2026-34757: https://github.com/pnggroup/libpng/security/advisories/GHSA-6fr7-g8h7-v645 Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain (cherry picked from commit ad5faa474cfd8d79a67e884c8b5fa67223385c11) Signed-off-by: Thomas Perale --- package/libpng/libpng.hash | 6 +++--- package/libpng/libpng.mk | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/libpng/libpng.hash b/package/libpng/libpng.hash index ae28eee087..977f8fcca4 100644 --- a/package/libpng/libpng.hash +++ b/package/libpng/libpng.hash @@ -1,5 +1,5 @@ -# From https://sourceforge.net/projects/libpng/files/libpng16/1.6.56/ -sha1 71eb3636e60b6ea66f2f670cdf1f7160b7a1fa8b libpng-1.6.56.tar.xz +# From https://sourceforge.net/projects/libpng/files/libpng16/1.6.57/ +sha1 866fb81e3355088bb885bb4ded39093ef80eb686 libpng-1.6.57.tar.xz # Locally computed: -sha256 f7d8bf1601b7804f583a254ab343a6549ca6cf27d255c302c47af2d9d36a6f18 libpng-1.6.56.tar.xz +sha256 d10c20d7171569804cae8dfc13ba6dcd0662c41ed39d43d4d429314aafb10a80 libpng-1.6.57.tar.xz sha256 bdb0a645ea18c60507d0368379b1ac5474b92255fcc2d115e07486a7672ba526 LICENSE diff --git a/package/libpng/libpng.mk b/package/libpng/libpng.mk index 7c5bc35a77..0081406300 100644 --- a/package/libpng/libpng.mk +++ b/package/libpng/libpng.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBPNG_VERSION = 1.6.56 +LIBPNG_VERSION = 1.6.57 LIBPNG_SERIES = 16 LIBPNG_SOURCE = libpng-$(LIBPNG_VERSION).tar.xz LIBPNG_SITE = https://downloads.sourceforge.net/project/libpng/libpng$(LIBPNG_SERIES)/$(LIBPNG_VERSION)