Re: [SECURITY] [DSA 536-1] New libpng, libpng3 packages fix multiple vulnerabilities
* Josselin Mouette wrote:
> On mer, 2004-08-04 at 19:10 -0700, Matt Zimmerman wrote:
> > For the unstable distribution (sid), these problems will be fixed
> > soon.
>
> I've just uploaded fixed packages for unstable; however I've noticed
> mozilla still crashes on the crafted PNG provided by Chris Evans. It
> seems that /usr/lib/mozilla/components/libimglib2.so is not
> dynamically linked with libpng, but still includes code from it.
Maybe that's the reason why mozilla.org released new versions of
mozilla, mozilla-thunderbird and mozilla-firefox.
Norbert
Reply to: