[ubuntu/lucid-security] libpng 1.2.42-1ubuntu2.5 (Accepted)
Marc Deslauriers
marc.deslauriers at ubuntu.com
Thu Apr 5 18:03:50 UTC 2012
libpng (1.2.42-1ubuntu2.5) lucid-security; urgency=low
* SECURITY UPDATE: denial of service and possible code execution via
memory corruption issue.
- debian/patches/CVE-2011-3048.patch: correctly restore to previous
condition in pngset.c.
- CVE-2011-3048
Date: Thu, 05 Apr 2012 08:43:48 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/lucid/+source/libpng/1.2.42-1ubuntu2.5
-------------- next part --------------
Format: 1.8
Date: Thu, 05 Apr 2012 08:43:48 -0400
Source: libpng
Binary: libpng12-0 libpng12-dev libpng3 libpng12-0-udeb
Architecture: source
Version: 1.2.42-1ubuntu2.5
Distribution: lucid-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
libpng12-0 - PNG library - runtime
libpng12-0-udeb - PNG library - minimal runtime library (udeb)
libpng12-dev - PNG library - development
libpng3 - PNG library - runtime
Changes:
libpng (1.2.42-1ubuntu2.5) lucid-security; urgency=low
.
* SECURITY UPDATE: denial of service and possible code execution via
memory corruption issue.
- debian/patches/CVE-2011-3048.patch: correctly restore to previous
condition in pngset.c.
- CVE-2011-3048
Checksums-Sha1:
b485ad96ccd33b39d7e71097716561469c12c4f5 1939 libpng_1.2.42-1ubuntu2.5.dsc
9ee81a2ccb44b18cfbfaeb18575eb1fb86b4c0c1 21873 libpng_1.2.42-1ubuntu2.5.debian.tar.bz2
Checksums-Sha256:
6dbc3fe9aaddb973bcad812f47aa98d83621caa461eaeb96833ab05770f46d27 1939 libpng_1.2.42-1ubuntu2.5.dsc
4a93aff435a8e25bb6035eb5dfda93c029779719595953dfd555e7a3d3c164cf 21873 libpng_1.2.42-1ubuntu2.5.debian.tar.bz2
Files:
59338e2ad27310442e6cfd25f8c28466 1939 libs optional libpng_1.2.42-1ubuntu2.5.dsc
b31584bad8eb170f5445e60f5f56e1a7 21873 libs optional libpng_1.2.42-1ubuntu2.5.debian.tar.bz2
Original-Maintainer: Anibal Monsalve Salazar <anibal at debian.org>
More information about the Lucid-changes
mailing list