Typo (libpng.2 -> libpng.3).27e019d828
png -- CWE-122: Heap-based Buffer Overflowentered 2026-02-16
Port details
graphics/png1.6.59_1
Library for manipulating PNG images
- Maintainer
- desktop@FreeBSD.org
- Packages
- png 1.6.59_1
- Upstream
- up to date
- CPE
libpng:libpngfrom the port- WWW
- http://www.libpng.org/pub/png/libpng.html
- Links
- cgit · VuXML
Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE
None. There is no CVE without a VuXML entry for this version.
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (13)
Show 13 fixed
VuXML entries whose affected range this version has left.
png -- Out-of-bounds readentered 2025-12-05
png -- Multiple vulnerabilitiesentered 2025-11-27
CVE-2025-64505, CVE-2025-64506, CVE-2025-64720, CVE-2025-65018
libpng buffer overflow in png_set_PLTEentered 2015-11-15
png -- heap overflow for 32-bit buildsentered 2015-01-05
no CVE referenced
png -- memory corruption/possible remote code executionentered 2012-04-08
png -- libpng decompression buffer overflowentered 2010-06-28
png -- libpng decompression denial of serviceentered 2010-04-20
png -- unknown chunk processing uninitialized memory accessentered 2008-04-25
png -- multiple vulnerabilitiesentered 2007-10-11
png -- DoS crash vulnerabilityentered 2007-05-16
libpng stack-based buffer overflow and other code concernsentered 2004-08-04
libpng denial-of-serviceentered 2004-05-02
Commits (225)
Roll back libpng's shared library version number. Also, build libraries and links correctly for ELF.6904462529
Roll back libpng major to 2.27ba461c8e
Convert to ELF in accordance with Satoshi's instructions.22f81a0cd9
Wow. Checkout the number of manpages that are in EZWGL. I think that's too many, so I'll remove half of them.c32eae1535
Upgrade to 1.0.2f31512dd5f
Execute `ldconfig -R' at the pkg_delete step. PR: 6281 Submitted by: SADA Kenji <sada@e-mail.ne.jp>944910bb30
Upgrade to 1.0.15e30defae1
Update the shlib minor version to "0.99" so this thing packages. Note, I think it is totally stupid to match the shared library version number with the software version, but that's the author's call, not mine.2e7c59f286
Upgrade to 0.99eb65996dfe7
Add -lm to shared flagsb73b77c48e
Add -lz to .so building Submitted by: Sumida <alta@ryozan.rim.or.jp>2dbdd48f88
ldconfig -> ${LDCONFIG}.5e5eddfc60Upgrade to 0.9624428df5d0
Compress a bunch of manpages. Remove unnecessary @ directives from PLISTs. Note: I know that this is going to break some symlinks and/or .so includes, I will back some of these out as I run into these during package building.c98cfd116d
Use MAN? macros. CATEGORIES+= -> CATEGORIES.300c45cf2e
Oh my goodness! Satoshi is finally fed up and decided to "clean up" all the COMMENTs! No package names, no version numbers, no "this is absolutix-3.1.2" type comments that have zero information contents. Now, without any bad examples to follow, nobody has an excuse to import a port with those kind of comments. :) Phew! 238 ports modified!95137d2010
Remove LIB_DEPENDS on libz, it's in /usr/src now.7a4662e170
Upgrade to 0.89c842320ba71
Just another little variable reorginization.9d85840690
Upgrade to 0.8830a6ef9fbc
Use absolute path to ldconfig0fd1ce02d6
exec ranlib & ldconfiged6121bf73
Fix categories1b79077ae2
libpng - manipulate PNG images library85bc0bac44