libpng: bump to latest of 1.5 series (security fix)