Skip to content

Commit

Permalink
Bump libpng to latest version v1.6.26 for gradle build
Browse files Browse the repository at this point in the history
Summary:
This change updates the underlying libpng to its latest version v1.6.26 (see http://www.libpng.org/pub/png/libpng.html)

As a result, the library moves pass some fixes for vulnerabilities. Most mentionable: CVE-2016-10087, CVE-2015-8126 and CVE-2015-0973. Those should have not had any affect on the security of Fresco, as we only use libpng for creating PNG files and not for reading untrusted sources.

Reviewed By: kirwan

Differential Revision: D4681405

fbshipit-source-id: 4ddf797f270b1f096da544a6a7bd2eb485bcb8ca
  • Loading branch information
Daniel Hugenroth authored and facebook-github-bot committed Mar 9, 2017
1 parent 9b99e1f commit a21960c
Show file tree
Hide file tree
Showing 3 changed files with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion gradle.properties
Original file line number Diff line number Diff line change
Expand Up @@ -44,7 +44,7 @@ VOLLEY_VERSION=1.0.0

# Deps for native libraries
LIBJPEG_TURBO_VERSION=1.5.0
LIBPNG_VERSION=1.6.10
LIBPNG_VERSION=1.6.26
GIFLIB_VERSION=5.1.1
LIBWEBP_VERSION=0.5.2

Expand Down

0 comments on commit a21960c

Please sign in to comment.