GitLab

Here is a patch for building tbb for the new libpng:

 git diff
diff --git a/build-scripts/versions.mk b/build-scripts/versions.mk
index 304ed63..124167f 100644
--- a/build-scripts/versions.mk
+++ b/build-scripts/versions.mk
@@ -4,7 +4,7 @@ RELEASE_VER=2.3.25
 
 ZLIB_VER=1.2.7
 OPENSSL_VER=1.0.0k
-LIBPNG_VER=1.5.13
+LIBPNG_VER=1.5.14
 QT_VER=4.8.1
 VIDALIA_VER=0.2.21
 LIBEVENT_VER=2.0.21-stable
@@ -40,7 +40,7 @@ OBFSPROXY_PACKAGE=obfsproxy-$(OBFSPROXY_VER).tar.gz
 ## Location of files for download
 ZLIB_URL=http://www.zlib.net/$(ZLIB_PACKAGE)
 OPENSSL_URL=http://www.openssl.org/source/$(OPENSSL_PACKAGE)
-LIBPNG_URL=ftp://ftp.simplesystems.org/pub/libpng/png/src/$(LIBPNG_PACKAGE)
+LIBPNG_URL=ftp://ftp.simplesystems.org/pub/libpng/png/src/libpng15/$(LIBPNG_PACKAGE)
 QT_URL=ftp://ftp.qt.nokia.com/qt/source/$(QT_PACKAGE)
 VIDALIA_URL=https://archive.torproject.org/tor-package-archive/vidalia/$(VIDALIA_PACKAGE)
 LIBEVENT_URL=https://github.com/downloads/libevent/libevent/$(LIBEVENT_PACKAGE)

I tested it like so:

make -f osx.mk source-dance

It does at least fetch the new version with that patch. I don't know that the new version is perfectly reasonable.