[Bug 294061] graphics/png: Security Update to 1.6.56
- Reply: bugzilla-noreply_a_freebsd.org: "maintainer-feedback requested: [Bug 294061] graphics/png: Security Update to 1.6.56"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 294061] graphics/png: update to 1.6.56"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 294061] graphics/png: update to 1.6.56"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 294061] graphics/png: update to 1.6.56"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 294061] graphics/png: update to 1.6.56"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 294061] graphics/png: update to 1.6.56"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 294061] graphics/png: update to 1.6.56"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 294061] graphics/png: update to 1.6.56"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Thu, 26 Mar 2026 11:13:42 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=294061
Bug ID: 294061
Summary: graphics/png: Security Update to 1.6.56
Product: Ports & Packages
Version: Latest
Hardware: Any
URL: https://www.libpng.org/pub/png/libpng.html
OS: Any
Status: New
Keywords: security
Severity: Affects Many People
Priority: ---
Component: Individual Port(s)
Assignee: desktop@FreeBSD.org
Reporter: fabian@wenks.ch
Assignee: desktop@FreeBSD.org
Flags: maintainer-feedback?(desktop@FreeBSD.org)
Created attachment 269125
--> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=269125&action=edit
Partial Patch to upgrade from 1.6.55 to 1.6.56 (apng missing)
As reported through oss-security mailing list with:
"libpng 1.6.56: Two high-severity vulnerabilities fixed: CVE-2026-33416,
CVE-2026-33636"
https://www.openwall.com/lists/oss-security/2026/03/26/1
As I see it, libpng-1.6.56-apng.patch is not yet available, so the attached
patch is only partially and building the ports is not possible yet.
--
You are receiving this mail because:
You are the assignee for the bug.