[ubuntu/karmic-security] libpng, libpng (delayed) 1.2.37-1ubuntu0.1 (Accepted)

[Ubuntu Installer]

libpng (1.2.37-1ubuntu0.1) karmic-security; urgency=low

  * SECURITY UPDATE: denial of service via decompression bomb (LP: #533140)
    - debian/patches/02-CVE-2010-0205.patch: use new two-pass decompression
      method in pngrutil.c.
    - CVE-2010-0205

Date: Fri, 12 Mar 2010 10:53:26 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/karmic/+source/libpng/1.2.37-1ubuntu0.1
-------------- next part --------------
Format: 1.8
Date: Fri, 12 Mar 2010 10:53:26 -0500
Source: libpng
Binary: libpng12-0 libpng12-dev libpng3 libpng12-0-udeb
Architecture: source
Version: 1.2.37-1ubuntu0.1
Distribution: karmic-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 libpng12-0 - PNG library - runtime
 libpng12-0-udeb - PNG library - minimal runtime library (udeb)
 libpng12-dev - PNG library - development
 libpng3    - PNG library - runtime
Changes: 
 libpng (1.2.37-1ubuntu0.1) karmic-security; urgency=low
 .
   * SECURITY UPDATE: denial of service via decompression bomb (LP: #533140)
     - debian/patches/02-CVE-2010-0205.patch: use new two-pass decompression
       method in pngrutil.c.
     - CVE-2010-0205
Checksums-Sha1: 
 cf1381b792f59ccb96e715ba8f2f4802c2c2673e 1293 libpng_1.2.37-1ubuntu0.1.dsc
 ee45bcad85d40a41dbbaedc11dabee6992bd105b 18107 libpng_1.2.37-1ubuntu0.1.diff.gz
Checksums-Sha256: 
 dec87e549c3663311880318828ec57247afcb371f9d9a8d06e7c6f4f81c16c8b 1293 libpng_1.2.37-1ubuntu0.1.dsc
 2d0ae88e064cc7a6bb89619b734b5a867cb5a257c56221ba35d58a0518df20f7 18107 libpng_1.2.37-1ubuntu0.1.diff.gz
Files: 
 dc9a20f9a129ad150f61ec9bb745b039 1293 libs optional libpng_1.2.37-1ubuntu0.1.dsc
 a9bf93cac21b17a3589193ae511b75d2 18107 libs optional libpng_1.2.37-1ubuntu0.1.diff.gz
Launchpad-Bugs-Fixed: 533140
Original-Maintainer: Anibal Monsalve Salazar <anibal at debian.org>