Bug 691438 - security-related upgrade of libpng
Summary: security-related upgrade of libpng
Status: RESOLVED FIXED
Alias: None
Product: Ghostscript
Classification: Unclassified
Component: Images (show other bugs)
Version: master
Hardware: PC Linux
: P4 normal
Assignee: Alex Cherepanov
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-07-02 00:44 UTC by Hin-Tak Leung
Modified: 2010-07-04 20:07 UTC (History)
0 users

See Also:
Customer:
Word Size: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Hin-Tak Leung 2010-07-02 00:44:13 UTC
1.2.44 of lipng fixes some security problems related to libpng apparently. 
CVE-2010-1205 . The patch is r11453 but was reverted. Somebody can review and re-apply.
Comment 1 Alex Cherepanov 2010-07-04 20:07:24 UTC
The patch has been re-applied as 11482.

Besides numerous whitespace changes, libpng 1.2.44 changes implementation
of a few functions without any changes to the interface. The patch is safe to
commit.