libpng: Update to version 1.6.53

Message ID 20251216102805.3606194-9-adolf.belka@ipfire.org
State Staged
Commit 9b6b1556815fd17fce51971b2d866dbfd350f387
Headers
Series libpng: Update to version 1.6.53 |

Commit Message

Adolf Belka 16 Dec 2025, 10:28 a.m. UTC
- Update from version 1.6.51 to 1.6.53
- Update of rootfile
- CVE fix from version 1.6.52
- Changelog
    1.6.53
	  Fixed a build failure on RISC-V RVV caused by a misspelled intrinsic.
	    (Contributed by Alexander Smorkalov.)
	  Fixed a build failure with CMake 4.1 or newer, on Windows, when using
	    Visual C++ without MASM installed.
    1.6.52
	  Fixed CVE-2025-66293 (high severity):
	    Out-of-bounds read in `png_image_read_composite`.
	    (Reported by flyfish101 <flyfish101@users.noreply.github.com>.)
	  Fixed the Paeth filter handling in the RISC-V RVV implementation.
	    (Reported by Filip Wasil; fixed by Liang Junzhao.)
	  Improved the performance of the RISC-V RVV implementation.
	    (Contributed by Liang Junzhao.)
	  Added allocation failure fuzzing to oss-fuzz.
	    (Contributed by Philippe Antoine.)

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 config/rootfiles/common/libpng | 2 +-
 lfs/libpng                     | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)
  

Patch

diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng
index 9dfdef5c6..4983219e3 100644
--- a/config/rootfiles/common/libpng
+++ b/config/rootfiles/common/libpng
@@ -16,7 +16,7 @@  usr/lib/libpng.so
 #usr/lib/libpng16.la
 usr/lib/libpng16.so
 usr/lib/libpng16.so.16
-usr/lib/libpng16.so.16.51.0
+usr/lib/libpng16.so.16.53.0
 #usr/lib/pkgconfig/libpng.pc
 #usr/lib/pkgconfig/libpng16.pc
 #usr/share/man/man3/libpng.3
diff --git a/lfs/libpng b/lfs/libpng
index 545b3efef..089f22f5b 100644
--- a/lfs/libpng
+++ b/lfs/libpng
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 1.6.51
+VER        = 1.6.53
 
 THISAPP    = libpng-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -40,7 +40,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 2d1ee36f9796e90a533abf26597df82c39cfab42f8d4044d35e0fdbab65612b9fc0234780677e2ea758450db9815b9d30870e8024bcebc0170c87361b7c4cc0a
+$(DL_FILE)_BLAKE2 = 62e28068e1885305828fff3296b19a7d61e11a52ca425be91289e17087be2c42f06ea2df000169632cc556b398cdcb4784a639879e038962310c53becae779f6
 
 install : $(TARGET)