BSD PortsVulnerable: version 1.6.59 is affected by 2 known vulnerabilities. See below.
graphics/png 1.6.59 NetBSD
Library for manipulating PNG images
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
32b0768a1a- License
- zlib
- Categories
- graphics
- Package size
- 231.2 KiB, 1056.7 KiB installed
Description
Libpng was written as a companion to the PNG specification, as a way to reduce the amount of time and effort it takes to support the PNG file format in application programs. Most users will not have to modify the library significantly; advanced users may want to modify it more. The library was coded for both users. All attempts were made to make it as complete as possible, while keeping the code easy to understand. Currently, this library only supports C. Support for other languages is being considered.
In the other systems
| System | Port | Version |
|---|---|---|
| NetBSD | graphics/png | 1.6.59 |
| FreeBSD | graphics/png | 1.6.59_1 |
| OpenBSD | graphics/png | 1.6.59 |
| DragonFly | graphics/png | 1.6.47 |
| MidnightBSD | graphics/png | 1.6.59 |
| HardenedBSD | graphics/png | 1.6.58 |
| GhostBSD | graphics/png | 1.6.58 |
| OPNsense | graphics/png | 1.6.58 |
Install
Binary package:
pkgin install pngFrom pkgsrc:
cd /usr/pkgsrc/graphics/png && make install cleanPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 1.6.59 |
| NetBSD 10.1 aarch64 | 1.6.58nb1 |
| SmartOS / illumos x86_64 | 1.6.59 |
| macOS 15 arm64 | 1.6.59 |
Dependencies
Required by 456
- audio/csound6
- audio/ocp
- audio/sox_ng
- audio/tenacity
- audio/timidity
- benchmarks/glmark2
- cad/gerbv
- cad/nelma
- cad/solvespace
- comms/p5-pilot-link
- comms/pilot-link
- converters/libzmf
- converters/qrencode
- databases/rrdtool
- devel/allegro
- devel/allegro5
- devel/devIL
- devel/fifengine
- devel/libmatchbox
- devel/p5-Alien-SDL
- devel/p5-SDL
- devel/py-game
- devel/py-game_sdl2
- devel/py27-game
- devel/rgbds
- devel/teem
- editors/abiword
- editors/emacs29
- editors/emacs30
- editors/emacs31
- editors/qemacs
- editors/ted
- editors/texmaker
- editors/xemacs
- editors/xemacs-current
- emulators/caprice32
- emulators/dolphin-emu
- emulators/dosbox
- emulators/dosbox-staging
- emulators/dosbox-x
- emulators/fbneo
- emulators/fs-uae
- emulators/fuse-emulator-utils
- emulators/hatari
- emulators/mgba
- emulators/mgba-qt
- emulators/open-simh
- emulators/openmsx
- emulators/pcsx-rearmed
- emulators/picodrive
- emulators/qemu
- emulators/qemu7
- emulators/raine
- emulators/sameboy
- emulators/simh
- emulators/simh3
- emulators/snes9x
- emulators/snes9x-gtk
- emulators/stella
- emulators/wine
- emulators/wine5
- fonts/fontforge
- games/alephone
- games/armagetronad
- games/augustus
- games/bomberclone
- games/chocolate-doom
- games/criticalmass
- games/crossfire-client
- games/endless-sky
- games/enigma
- games/eternal-lands
- games/exult
- games/fltk-sudoku
- games/fnaify
- games/foobillardplus
- games/freeciv-client
- games/freedroid
- games/gargoyle
- games/gemrb
- games/glaxium
- games/gltron
- games/julius
- games/lbreakout2
- games/luanti
- games/lugaru
- games/manaplus
- games/megaglest
- games/naev
- games/neverball
- games/nxengine-evo
- games/openclonk
- games/openjk
- games/openrct2
- games/openttd
- games/pingus
- games/powermanga
- games/pushover
- games/py-renpy
- games/quakeforge
The first 100 are listed.
Known vulnerabilities 2
Commit history 2
| Date | Commit | Credits | Log message |
|---|---|---|---|
32b0768a1a |
wiz | png: update to 1.6.59. Version 1.6.59 [September 28, 2026]
Fixed CVE-2026-46675 (medium severity):
Use-after-free of zlib input in `png_read_end` after incomplete zTXt, iTXt
or iCCP decompression.
(Reported independently by Ze Sheng and
<[email protected]>.)
Fixed a regression introduced in version 1.6.47 that caused libpng to reject
hIST chunks in their correct position, after PLTE.
(Contributed by Yuki Sekiguchi.)
Prevented a double free of `png_struct` members after an allocation failure.
(Contributed by Anthony Hurtado.)
Applied fixes and updates to the CMake build.
Adopted the REUSE Specification for licensing the CI files. |
|
875dbc2057 |
wiz | mk: switch the default for PATCH_DIST_STRIP from -p0 to -p1 adapt packages that didn't set PATCH_DIST_STRIP to use -p0, and
remove the -p1 lines |