[OE-core] [PATCH 3/4] libpng: Upgrade 1.6.26 -> 1.6.28

Maxin B. John maxin.john at intel.com
Mon Jan 23 09:58:59 UTC 2017


This upgrade fixes the vulnerability: CVE-2016-10087

License file changes are due to updates in Package Version
and Copyright date. ie:
 'libpng version 1.6.28, January 5, 2017'

Signed-off-by: Maxin B. John <maxin.john at intel.com>
---
 .../libpng/{libpng_1.6.26.bb => libpng_1.6.28.bb}                 | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)
 rename meta/recipes-multimedia/libpng/{libpng_1.6.26.bb => libpng_1.6.28.bb} (67%)

diff --git a/meta/recipes-multimedia/libpng/libpng_1.6.26.bb b/meta/recipes-multimedia/libpng/libpng_1.6.28.bb
similarity index 67%
rename from meta/recipes-multimedia/libpng/libpng_1.6.26.bb
rename to meta/recipes-multimedia/libpng/libpng_1.6.28.bb
index 8c1cb8c..9cb2967 100644
--- a/meta/recipes-multimedia/libpng/libpng_1.6.26.bb
+++ b/meta/recipes-multimedia/libpng/libpng_1.6.28.bb
@@ -2,14 +2,14 @@ SUMMARY = "PNG image format decoding library"
 HOMEPAGE = "http://www.libpng.org/"
 SECTION = "libs"
 LICENSE = "Libpng"
-LIC_FILES_CHKSUM = "file://LICENSE;md5=ce8d0bd8303802e5492f064ddddef0e7 \
-                    file://png.h;endline=149;md5=8cca27e71fd88e1fe1adad7d9e841b5f"
+LIC_FILES_CHKSUM = "file://LICENSE;md5=67d8837410863f9821bbd606536f0329 \
+                    file://png.h;endline=144;md5=abfa0497feb393b5842d3d82c1009520"
 DEPENDS = "zlib"
 
 SRC_URI = "${GENTOO_MIRROR}/libpng-${PV}.tar.xz \
           "
-SRC_URI[md5sum] = "faed9bb495d2e12dd0c9ec561ca60cd8"
-SRC_URI[sha256sum] = "266743a326986c3dbcee9d89b640595f6b16a293fd02b37d8c91348d317b73f9"
+SRC_URI[md5sum] = "425354f86c392318d31aedca71019372"
+SRC_URI[sha256sum] = "d8d3ec9de6b5db740fefac702c37ffcf96ae46cb17c18c1544635a3852f78f7a"
 
 BINCONFIG = "${bindir}/libpng-config ${bindir}/libpng16-config"
 
-- 
2.4.0




More information about the Openembedded-core mailing list