A heap-based buffer overflow in libpng was fixed that could
potentially be exploited by attackers to execute arbitrary
code or cause an application to crash (CVE-2011-3026).

libpng 1.2 was updated to 1.2.47 to fix this issue.