NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libpng: security bump to version 1.6.20

Browse Source 
Fixes:
CVE-2015-8126 - incorrect implementation of png_set_PLTE() that uses
png_ptr not info_ptr, that left png_set_PLTE() open to this vuln.

(fix in previous release was incomplete)

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Gustavo Zacarias 2015-12-03 18:48:07 -03:00 committed by Peter Korsgaard
parent f2cc2a3eef
commit 371e2f7f3c
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
package/libpng/libpng.hash
View File

@ -1,3 +1,3 @@
# From http://sourceforge.net/projects/libpng/files/libpng16/1.6.19/
md5 1e6a458429e850fc93c1f3b6dc00a48f libpng-1.6.19.tar.xz
sha1 483d72ced11c9258f9d1119105273d9af9ff151c libpng-1.6.19.tar.xz
# From http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/
md5 3968acb7c66ef81a9dab867f35d0eb4b libpng-1.6.20.tar.xz
sha1 c4f02051e0b86613076ce390fd15824f3506a148 libpng-1.6.20.tar.xz

2
package/libpng/libpng.mk
View File

@ -4,7 +4,7 @@
#
################################################################################
LIBPNG_VERSION = 1.6.19
LIBPNG_VERSION = 1.6.20
LIBPNG_SERIES = 16
LIBPNG_SOURCE = libpng-$(LIBPNG_VERSION).tar.xz
LIBPNG_SITE = http://downloads.sourceforge.net/project/libpng/libpng${LIBPNG_SERIES}/$(LIBPNG_VERSION)