mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-26 03:50:44 -09:00
8c21d2f4a7
Fixes the following security vulnerability:
CVE-2026-25646 (High): Heap buffer overflow in png_set_quantize when called
with no histogram and a palette larger than twice the requested maximum
number of colors.
For more details, see the advisory:
https://github.com/pnggroup/libpng/security/advisories/GHSA-g8hp-mq4h-rqm3
Release notes:
https://github.com/pnggroup/libpng/blob/v1.6.55/ANNOUNCE
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6f4e61bff8)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>