Thanks, applied as cd22abf9afdccabb312ef901b6fa5b6d7e42c5f9. Michael
[sent from post-receive hook] On Thu, 15 Oct 2026 07:58:01 +0200, Christian Melki <[email protected]> wrote: > Minor fixes. > https://sourceforge.net/p/libpng/code/ci/libpng16/tree/CHANGES > > Plugs CVE: > CVE-2026-46675: Use-after-free of zlib input in `png_read_end` > > Signed-off-by: Christian Melki <[email protected]> > Message-Id: <[email protected]> > Signed-off-by: Michael Olbrich <[email protected]> > > diff --git a/rules/libpng.make b/rules/libpng.make > index 842fb4ff7556..c1e759b46664 100644 > --- a/rules/libpng.make > +++ b/rules/libpng.make > @@ -16,8 +16,8 @@ PACKAGES-$(PTXCONF_LIBPNG) += libpng > # > # Paths and names > # > -LIBPNG_VERSION := 1.6.58 > -LIBPNG_SHA256 := > 28eb403f51f0f7405249132cecfe82ea5c0ef97f1b32c5a65828814ae0d34775 > +LIBPNG_VERSION := 1.6.59 > +LIBPNG_SHA256 := > d80dd2a38a37f803cb9b6ac7b14bd6e74ddc3b654780a8380bdf93523fdb4389 > LIBPNG := libpng-$(LIBPNG_VERSION) > LIBPNG_SUFFIX := tar.xz > LIBPNG_URL := $(call ptx/mirror, SF, libpng/$(LIBPNG).$(LIBPNG_SUFFIX))
