The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>

Fixes CVE-2019-7317

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Fixes CVE-2018-13785 and CVE-2018-14048.

Added PKG_CPE_ID for proper CVE tracking.

Signed-off-by: Rosen Penev <rosenp@gmail.com>

Update libpng to 1.6.34

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update libpng to 1.6.32
Add ARM NEON optimization

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Sprinkle more symlinks for compatibility

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Update libpng to 1.6.29
Add patch to allow older versions of libtool

Signed-off-by: Daniel Engberg <daniel.engberg.lists@pyret.net>

Fixes CVE-2016-10087

Signed-off-by: Daniel Albers <Daniel.Albers@public-files.de>

Signed-off-by: Jo-Philipp Wich <jo@mein.io>

Fixes CVE-2015-8126 and CVE-2015-8540.

Signed-off-by: Oliver Middleton <olliemail27@gmail.com>

Includes fixes for CVE-2015-7981 and CVE-2015-8126.

Signed-off-by: Oliver Middleton <olliemail27@gmail.com>

Signed-off-by: Ian Leonard <antonlacon@gmail.com>

Signed-off-by: Jo-Philipp Wich <jow@openwrt.org>