aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Gustavo Zacarias <gustavo@zacarias.com.ar>2015-12-03 18:48:07 -0300
committerGravatar Peter Korsgaard <peter@korsgaard.com>2015-12-04 22:02:01 +0100
commitc76f557eefa2ce1f17ecd948186a1fb3dc4d2ba3 (patch)
tree643b3e5cad91f4162737232d8aa713fa6947e35a
parentc0c568ddd6e731d89c7ed708ca17079c31f42b36 (diff)
downloadbuildroot-c76f557eefa2ce1f17ecd948186a1fb3dc4d2ba3.tar.gz
buildroot-c76f557eefa2ce1f17ecd948186a1fb3dc4d2ba3.tar.bz2
libpng: security bump to version 1.6.20
Fixes: CVE-2015-8126 - incorrect implementation of png_set_PLTE() that uses png_ptr not info_ptr, that left png_set_PLTE() open to this vuln. (fix in previous release was incomplete) Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com> (cherry picked from commit 371e2f7f3c2f66eadba91e5d33c32f462f9691b7)
-rw-r--r--package/libpng/libpng.hash6
-rw-r--r--package/libpng/libpng.mk2
2 files changed, 4 insertions, 4 deletions
diff --git a/package/libpng/libpng.hash b/package/libpng/libpng.hash
index a26538dd56..264dd45f6c 100644
--- a/package/libpng/libpng.hash
+++ b/package/libpng/libpng.hash
@@ -1,3 +1,3 @@
-# From http://sourceforge.net/projects/libpng/files/libpng16/1.6.19/
-md5 1e6a458429e850fc93c1f3b6dc00a48f libpng-1.6.19.tar.xz
-sha1 483d72ced11c9258f9d1119105273d9af9ff151c libpng-1.6.19.tar.xz
+# From http://sourceforge.net/projects/libpng/files/libpng16/1.6.20/
+md5 3968acb7c66ef81a9dab867f35d0eb4b libpng-1.6.20.tar.xz
+sha1 c4f02051e0b86613076ce390fd15824f3506a148 libpng-1.6.20.tar.xz
diff --git a/package/libpng/libpng.mk b/package/libpng/libpng.mk
index 649a3e0c49..36ccf83f81 100644
--- a/package/libpng/libpng.mk
+++ b/package/libpng/libpng.mk
@@ -4,7 +4,7 @@
#
################################################################################
-LIBPNG_VERSION = 1.6.19
+LIBPNG_VERSION = 1.6.20
LIBPNG_SERIES = 16
LIBPNG_SOURCE = libpng-$(LIBPNG_VERSION).tar.xz
LIBPNG_SITE = http://downloads.sourceforge.net/project/libpng/libpng${LIBPNG_SERIES}/$(LIBPNG_VERSION)