Skip to contentSkip to conversation

libpng: security bump to version 1.6.16

PATCH New Gustavo Zacarias 2 participants 2 messages Dec 24, 2014 – Dec 26, 2014

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 libpng: security bump to version 1.6.16

Fixes a buffer overflow which may allow an attacker to gain write access to memory.
CVE requested but not yet assigned.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/libpng/libpng.hash | 6 +++---
 package/libpng/libpng.mk   | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)
package/libpng/libpng.hash +3 -3
index 37f6067..d0027c7 100644
@@ -1,3 +1,3 @@
-# From http://sourceforge.net/projects/libpng/files/libpng16/1.6.15/
-md5	a95cb387c53215b034203b41ec57c7e5	libpng-1.6.15.tar.xz
-sha1	bddeac8ca97fbcf54d6d32c6eefed5d94b49df88	libpng-1.6.15.tar.xz
+# From http://sourceforge.net/projects/libpng/files/libpng16/1.6.16/
+md5	23b7286b5d4a86de950fd2ffc5cac742	libpng-1.6.16.tar.xz
+sha1	31855a8438ae795d249574b0da15b34eb0922e13	libpng-1.6.16.tar.xz
package/libpng/libpng.mk +1 -1
index 67bf141..2f53a95 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBPNG_VERSION = 1.6.15
+LIBPNG_VERSION = 1.6.16
 LIBPNG_SERIES = 16
 LIBPNG_SOURCE = libpng-$(LIBPNG_VERSION).tar.xz
 LIBPNG_SITE = http://downloads.sourceforge.net/project/libpng/libpng${LIBPNG_SERIES}/$(LIBPNG_VERSION)
Signature · 1 line
2.0.4
Applied
#1 lore raw

PATCH 1/1 libpng: security bump to version 1.6.16

Dear Gustavo Zacarias,

Quoted 5 lines · Gustavo Zacarias

Fixes a buffer overflow which may allow an attacker to gain write access to memory.
CVE requested but not yet assigned.

Signed-off-by Gustavo Zacarias <[email protected]>

Applied, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Free Electrons
Embedded Linux, Kernel and Android engineering
http://free-electrons.com