[ubuntu/precise] libpng 1.2.46-3ubuntu4 (Accepted)
Marc Deslauriers
marc.deslauriers at ubuntu.com
Thu Apr 5 15:00:27 UTC 2012
libpng (1.2.46-3ubuntu4) precise; urgency=low
* SECURITY UPDATE: denial of service and possible code execution via
memory corruption issue.
- debian/patches/CVE-2011-3048.patch: correctly restore to previous
condition in pngset.c.
- CVE-2011-3048
Date: Thu, 05 Apr 2012 08:21:56 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/precise/+source/libpng/1.2.46-3ubuntu4
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 05 Apr 2012 08:21:56 -0400
Source: libpng
Binary: libpng12-0 libpng12-dev libpng3 libpng12-0-udeb
Architecture: source
Version: 1.2.46-3ubuntu4
Distribution: precise
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
libpng12-0 - PNG library - runtime
libpng12-0-udeb - PNG library - minimal runtime library (udeb)
libpng12-dev - PNG library - development
libpng3 - PNG library - runtime
Changes:
libpng (1.2.46-3ubuntu4) precise; urgency=low
.
* SECURITY UPDATE: denial of service and possible code execution via
memory corruption issue.
- debian/patches/CVE-2011-3048.patch: correctly restore to previous
condition in pngset.c.
- CVE-2011-3048
Checksums-Sha1:
0ecd9bf56ab85d6787705a3cdf3a146fa60aea7a 2083 libpng_1.2.46-3ubuntu4.dsc
ecd432f6a3761697bb05fe33ee07020bd61b959a 17514 libpng_1.2.46-3ubuntu4.debian.tar.bz2
Checksums-Sha256:
43d5f62e572a1b43745372d9d2608223f4ee9460d333a368084dbcf1e24809a1 2083 libpng_1.2.46-3ubuntu4.dsc
7fb2624e2b55d49aa85f008e8136d3b7f95a6a709f98f6257b72ec8495b6ffd4 17514 libpng_1.2.46-3ubuntu4.debian.tar.bz2
Files:
3d80822f009696c8dbf2a77fff02ef0e 2083 libs optional libpng_1.2.46-3ubuntu4.dsc
b0a79cb76c0ad3fe7e860b30384ef18f 17514 libs optional libpng_1.2.46-3ubuntu4.debian.tar.bz2
Original-Maintainer: Anibal Monsalve Salazar <anibal at debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)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=6/Vn
-----END PGP SIGNATURE-----
More information about the Precise-changes
mailing list