libpng: Update to version 1.2.57

These all fix a potential "NULL dereference" bug that has existed in libpng
since version 0.71 of June 26, 1995.  To be vulnerable, an application
has to load a text chunk into the png structure, then delete all text, then
add another text chunk to the same png structure, which seems to be
an unlikely sequence, but it has happened.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/common/libpng b/config/rootfiles/common/libpng
index c29eaa7db7c2cb8985e0acbd7e8ae9ab1cc1caa9..9a20880a1ac6b7ef0ce1acd183d505d1c4feedb3 100644 (file)
--- a/config/rootfiles/common/libpng
+++ b/config/rootfiles/common/libpng
@@ -9,12 +9,12 @@
 #usr/lib/libpng.la
 usr/lib/libpng.so
 usr/lib/libpng.so.3
-usr/lib/libpng.so.3.46.0
+usr/lib/libpng.so.3.57.0
 #usr/lib/libpng12.a
 #usr/lib/libpng12.la
 usr/lib/libpng12.so
 usr/lib/libpng12.so.0
-usr/lib/libpng12.so.0.46.0
+usr/lib/libpng12.so.0.57.0
 #usr/lib/pkgconfig/libpng.pc
 #usr/lib/pkgconfig/libpng12.pc
 #usr/share/man/man3/libpng.3

diff --git a/config/rootfiles/core/109/filelists/libpng b/config/rootfiles/core/109/filelists/libpng
new file mode 120000 (symlink)
index 0000000..8ef96e2
--- /dev/null
+++ b/config/rootfiles/core/109/filelists/libpng
@@ -0,0 +1 @@
+../../../common/libpng
\ No newline at end of file

diff --git a/lfs/libpng b/lfs/libpng
index 707511867f49f817cd917a300045cc6c050fe966..af2db684e6e61f579db04e428ede516bc2e82ec6 100644 (file)
--- a/lfs/libpng
+++ b/lfs/libpng
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.2.46
+VER        = 1.2.57
 
 THISAPP    = libpng-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = 03ddfc17ad321db93f984581e9415d22
+$(DL_FILE)_MD5 = dfcda3603e29dcc11870c48f838ef75b
 
 install : $(TARGET)