Accepted libpng 1.0.12-3.woody.8 (i386 source)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Thu, 14 Oct 2004 15:12:57 +0200
Source: libpng
Binary: libpng2-dev libpng2
Architecture: source i386
Version: 1.0.12-3.woody.8
Distribution: stable-security
Urgency: high
Maintainer: Martin Schulze <joey@debian.org>
Changed-By: Martin Schulze <joey@infodrom.org>
Description:
libpng2 - PNG library - runtime
libpng2-dev - PNG library - development
Changes:
libpng (1.0.12-3.woody.8) stable-security; urgency=high
.
* Non-maintainer upload by the Security Team
* Added PNG_UINT_32_MAX macro [png.h]
* Applied upstream patch to detect potential buffer overflows [png.c]
* Applied upstream patch to add a check to detect a buffer overflow
[pngmem.c]
* Applied upstream patch to fix integer overflow [pngread.c,
CAN-2004-0955]
* Applied upstream patch to fix buffer overflow [pngrutil.c,
CAN-2004-0954]
Files:
398be2f8366e4114290c581e892cf36f 580 libs optional libpng_1.0.12-3.woody.8.dsc
f1500f77753f56cda2e1e345d652563d 10544 libs optional libpng_1.0.12-3.woody.8.diff.gz
0a60169789e390e3a28ef8bf57897f46 107330 libs standard libpng2_1.0.12-3.woody.8_i386.deb
950ba33d1e72e96dafe03ed6f4d2371d 227734 devel optional libpng2-dev_1.0.12-3.woody.8_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFBbodZW5ql+IAeqTIRAkm7AJoDTCfPWoqxXvjblC+EkSB3uS/R+ACfej+g
kzcZfCwIgs+ZWNuxQnbCV6s=
=xfvy
-----END PGP SIGNATURE-----
Accepted:
libpng2-dev_1.0.12-3.woody.8_i386.deb
to pool/main/libp/libpng/libpng2-dev_1.0.12-3.woody.8_i386.deb
libpng2_1.0.12-3.woody.8_i386.deb
to pool/main/libp/libpng/libpng2_1.0.12-3.woody.8_i386.deb
libpng_1.0.12-3.woody.8.diff.gz
to pool/main/libp/libpng/libpng_1.0.12-3.woody.8.diff.gz
libpng_1.0.12-3.woody.8.dsc
to pool/main/libp/libpng/libpng_1.0.12-3.woody.8.dsc
Reply to: