AZL-44973 CVE-2017-12652 affecting package fltk for versions less than 1.3.8-1

libpng before 1.6.32 does not properly check the length of chunks against the user limit...