tree 643b3e5cad91f4162737232d8aa713fa6947e35a
parent c0c568ddd6e731d89c7ed708ca17079c31f42b36
author Gustavo Zacarias <gustavo@zacarias.com.ar> 1449179287 -0300
committer Peter Korsgaard <peter@korsgaard.com> 1449262921 +0100

libpng: security bump to version 1.6.20

Fixes:
CVE-2015-8126 - incorrect implementation of png_set_PLTE() that uses
png_ptr not info_ptr, that left png_set_PLTE() open to this vuln.

(fix in previous release was incomplete)

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 371e2f7f3c2f66eadba91e5d33c32f462f9691b7)