Upgrade libpng to 1.6.58 for a regression introduced in version 1.6.56 that caused to return stale palette data after applying gamma and background transforms in-place

Author: CBL-Mariner-Bot

SPECS/libpng/libpng.signatures.json

@@ -1,5 +1,5 @@
 {
   "Signatures": {
-    "libpng-1.6.57.tar.xz": "d10c20d7171569804cae8dfc13ba6dcd0662c41ed39d43d4d429314aafb10a80"
+    "libpng-1.6.58.tar.xz": "28eb403f51f0f7405249132cecfe82ea5c0ef97f1b32c5a65828814ae0d34775"
   }
 }

SPECS/libpng/libpng.spec

@@ -1,6 +1,6 @@
 Summary:        contains libraries for reading and writing PNG files.
 Name:           libpng
-Version:        1.6.57
+Version:        1.6.58
 Release:        1%{?dist}
 License:        zlib
 Vendor:         Microsoft Corporation
@@ -57,6 +57,9 @@ make %{?_smp_mflags} -k check
 %{_mandir}/man3/*
 
 %changelog
+* Fri May 08 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.6.58-1
+- Auto-upgrade to 1.6.58 - for a regression introduced in version 1.6.56 that caused     to return stale palette data after applying gamma and background transforms in-place
+
 * Sat Apr 11 2026 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 1.6.57-1
 - Auto-upgrade to 1.6.57 - for CVE-2026-34757
 

cgmanifest.json

@@ -10911,8 +10911,8 @@
         "type": "other",
         "other": {
           "name": "libpng",
-          "version": "1.6.57",
-          "downloadUrl": "https://downloads.sourceforge.net/libpng/libpng-1.6.57.tar.xz"
+          "version": "1.6.58",
+          "downloadUrl": "https://downloads.sourceforge.net/libpng/libpng-1.6.58.tar.xz"
         }
       }
     },