CVSROOT: /cvs Module name: ports Changes by: [email protected] 2026/09/30 04:07:07
Modified files:
graphics/png : Makefile distinfo
graphics/png/patches: patch-Makefile_in
Log message:
update to png-1.6.59, fixing use-after-free of zlib input in
png_read_end() after incomplete zTXt, iTXt or iCCP decompression
https://github.com/pnggroup/libpng/security/advisories/GHSA-qvg3-h654-xq3j
ok matthieu who has verified that this is not reachable from xenocara's
use of the static-linked copy
