[vlc-commits] [Git][videolan/vlc][master] 3 commits: contrib: png: update to 1.6.53

[Tristan Matthews (@tmatth)]

Tristan Matthews pushed to branch master at VideoLAN / VLC


Commits:
2bd165ef by Marvin Scholz at 2025-12-09T02:59:53+01:00
contrib: png: update to 1.6.53

This fixes several CVEs in libpng:
- CVE-2025-66293
- CVE-2025-64505
- CVE-2025-64506
- CVE-2025-64720
- CVE-2025-65018

However most of these are for the simple API which we do not seem to
use in VLC.

- - - - -
5ed7ed20 by Marvin Scholz at 2025-12-09T03:00:26+01:00
contrib: png: disable building Framework on Darwin

- - - - -
e9ea9fd4 by Marvin Scholz at 2025-12-09T03:09:10+01:00
contrib: png: remove ASM flags

The ASM language was removed in the CMake file in
https://github.com/pnggroup/libpng/commit/ff615fdcaf393ec2402bfafebadaa30b32fe5f3a
so setting this does nothing.

- - - - -


2 changed files:

- contrib/src/png/SHA512SUMS
- contrib/src/png/rules.mak


Changes:

=====================================
contrib/src/png/SHA512SUMS
=====================================
@@ -1 +1 @@
-05adc94ef532bbddaae46e087088a23236e6528fd3fc705c8edfb5ff293983b790d4361d6b20c20df73632a9fbe55d2f394296385cd8efd646f58393ff21257d  libpng-1.6.50.tar.xz
+569f81d57dcce7bb874a45fa9f8db2044585245d2eb0c0485a1b03c2e338ecaec6bfda3cb94ad2a34951997414c69fc0373c8c5852d6c313c03e8a946ff345c6  libpng-1.6.53.tar.xz


=====================================
contrib/src/png/rules.mak
=====================================
@@ -1,5 +1,5 @@
 # PNG
-PNG_VERSION := 1.6.50
+PNG_VERSION := 1.6.53
 PNG_URL := $(SF)/libpng/libpng16/$(PNG_VERSION)/libpng-$(PNG_VERSION).tar.xz
 
 PKGS += png
@@ -20,14 +20,7 @@ png: libpng-$(PNG_VERSION).tar.xz .sum-png
 
 DEPS_png = zlib $(DEPS_zlib)
 
-PNG_CONF := -DPNG_SHARED=OFF -DPNG_TESTS=OFF -DPNG_EXECUTABLES=OFF
-
-ifdef HAVE_CLANG
-ifneq ($(filter arm aarch64, $(ARCH)),)
-# TODO this might be set globally and for all targets where intrinsincs are used
-PNG_CONF += -DCMAKE_ASM_FLAGS="$(CFLAGS)"
-endif
-endif
+PNG_CONF := -DPNG_SHARED=OFF -DPNG_TESTS=OFF -DPNG_TOOLS=OFF -DPNG_FRAMEWORK=OFF
 
 PNG_CONF += -DPNG_DEBUG_POSTFIX:STRING=
 



View it on GitLab: https://code.videolan.org/videolan/vlc/-/compare/3c8a6495afea3e50e037fc8af456ebe57ccf82ad...e9ea9fd496f0cf77a6943304c2c4f35cb3840b10

-- 
View it on GitLab: https://code.videolan.org/videolan/vlc/-/compare/3c8a6495afea3e50e037fc8af456ebe57ccf82ad...e9ea9fd496f0cf77a6943304c2c4f35cb3840b10
You're receiving this email because of your account on code.videolan.org.


VideoLAN code repository instance