lp:ubuntu/gutsy-updates/libpng

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

14. By Jamie Strandboge on 2009-03-05

* SECURITY UPDATE: denial of service and possible execution of arbitrary
  code via crafted image (LP: #338027)
  - initialize pointers in pngread.c, pngrtans.c, pngset.c and example.c
  - CVE-2009-0040
* SECURITY UPDATE: denial of service and possible execution of arbitrary
  code via crafted image (LP: #217128)
  - initialize "unknown" chunks in pngpread.c, pngrutil.c and pngset.c
  - CVE-2008-1382
* SECURITY UPDATE: denial of service via off-by-one error
  - shorten tIME_string to 29 bytes in pngtest.c
  - CVE-2008-3964
* SECURITY UPDATE: denial of service via incorrect memory assignment
  (LP: #324258)
  - update pngwutil.c to properly set new_key to NULL string
  - CVE-2008-5907

13. By Jamie Strandboge on 2007-10-24

* SECURITY UPDATE: denial of service via a crafted PNG image
* fix for pngpread.c and pngrutil.c to properly do bounds checking on read
  operations
* SECURITY UPDATE: denial of service via a crafted PNG image
* fix for pngset.c to properly check palette size in png_set_hIST
* References
  CVE-2007-5269
  CVE-2007-5268
* Modify Maintainer value to match the DebianMaintainerField
  specification.

12. By LaMont Jones on 2007-10-04

Trigger rebuild for hppa

11. By Anibal Monsalve Salazar on 2007-05-09

* It seems that a grayscale image with a malformed (bad CRC) tRNS
  chunk will crash libpng and mozilla. Closes: #424729.
  - CVE-2007-2445
    http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2007-2445
  - CERT Vulnerability Note VU#684664
    http://www.kb.cert.org/vuls/id/684664

10. By Anibal Monsalve Salazar on 2006-12-20

* Applied legacy_symbols.patch.
* Changed shlibs dependecy versions to ">= 1.2.13-4".
* libpng12-0: Added the following conflicts: mzscheme (<= 1:209-5),
  pngcrush (<= 1.5.10-2), pngmeta (<= 1.11-3), qemacs (<= 0.3.1-5),
  povray-3.5 (<= 3.5.0c-10).

9. By Anibal Monsalve Salazar on 2006-12-03

* New upstream release.
  - Fixed asm API functions not exported on amd64. Closes: #401044.
  - Fixed "libpng hangs when saving profile". Closes: #401423.
* Fixed "Incorrect shlibs information". Closes: #401465.
* Removed patches for png.h and pngconf.h.
* Updated debian/watch.

8. By Anibal Monsalve Salazar on 2006-11-21

Removed drop_pass_width patch. Closes: #399499.

7. By Anibal Monsalve Salazar on 2006-10-16

* New maintainer. Closes: #393109.
* ACK NMUs. Closes: #378463, #377298, #356252.
* debian/control:
  - set Standards-Version to 3.7.2.
  - set Priority to extra for libpng12-0-udeb.
  - added ${misc:Depends} to libpng12-0 and libpng12-0-udeb
    dependency lists.
* Added debian/watch file.

6. By Frans Pop <email address hidden> on 2006-03-30

* Non Maintainer Upload (closes: #356252).
* Add support for udeb dependency resolution in shlibs file.
* Update debhelper compatibility to level 5.

5. By Josselin Mouette <email address hidden> on 2005-10-03

* drop_pass_width.patch: don't export png_pass_width, it's absolutely
  unnecessary.
* libpng12-0.shlibs: downgrade the shlibs accordingly
  (closes: #331383).