Skip to content

Modify: CI Dependency to libpng 1.6.57 #811

@xsscx

Description

@xsscx

Maintainer Summary

2026-04-10 21:27:36 UTC

CVE-2026-34757

Task: Modify CI WASM Build & Packaging

libpng 1.6.57 has been released, fixing a medium-severity
use-after-free vulnerability in the chunk setter API, including a
long-standing defect in png_set_hIST present since at least 1.0.9
and regressions in png_set_PLTE and png_set_tRNS introduced in
1.6.56.

References: https://www.openwall.com/lists/oss-security/2026/04/09/2

Metadata

Metadata

Assignees

Labels

CITriagedMaintainer indicates triaged status and ready for developer handoffWASMWeb Assembly

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions