libpng: security update (no CVE yet)

http://www.securitytracker.com/id/1031444
(cherry picked from commit 5d903d850a8aca3e1825a00fd06c2e5c9d1d60f2)