~ubuntu-branches/ubuntu/lucid/libpng/lucid-updates : changes

~ubuntu-branches/ubuntu/lucid/libpng/lucid-updates » Changes from revision 30

From Revision 30 to 11

Rev	Summary	Authors	Tags	Date
30	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via memory corruption issue. - debian/patches/CVE-2011-3048.patch: correctly restore to previous condition in pngset.c. - CVE-2011-3048	Marc Deslauriers	1.2.42-1ubuntu2.5	12 years ago
29	* SECURITY UPDATE: denial of service and possible code execu... * SECURITY UPDATE: denial of service and possible code execution via incorrect type. - debian/patches/09-CVE-2011-3045.patch: use correct type, properly handle odd chunk lengths, fix off-by-one in pngrutil.c. - CVE-2011-3045	Marc Deslauriers	1.2.42-1ubuntu2.4	12 years ago
28	* SECURITY UPDATE: fix integer overflow / truncation * SECURITY UPDATE: fix integer overflow / truncation - debian/patches/08-CVE-2011-3026.patch: adjust pngrutil.c to verify size when allocating memory in png_decompress_chunk() - CVE-2011-3026	Jamie Strandboge	1.2.42-1ubuntu2.3	12 years ago
27	* SECURITY UPDATE: denial of service via error message data * SECURITY UPDATE: denial of service via error message data - debian/patches/05-CVE-2011-2501.patch: correctly calculate length in pngerror.c. - CVE-2011-2501 * SECURITY UPDATE: denial of service and possible arbitrary code execution via crafted PNG image - debian/patches/06-CVE-2011-2690.patch: validate coefficients in pngrtran.c. - CVE-2011-2690 * SECURITY UPDATE: denial of service and possible arbitrary code execution via invalid sCAL chunks - debian/patches/07-CVE-2011-2692.patch: check sCAL chunk length in pngrutil.c. - CVE-2011-2692	Marc Deslauriers	1.2.42-1ubuntu2.2	12 years ago
26	* SECURITY UPDATE: arbitrary code execution from additional ... * SECURITY UPDATE: arbitrary code execution from additional data row via malformed PNG image - debian/patches/03-CVE-2010-1205.patch: check for unexpected data after the last row in pngpread.c. - CVE-2010-1205 * SECURITY UPDATE: denial of service via memory leak from malformed sCAL chunks - debian/patches/04-CVE-2010-2249.patch: properly free memory in pngrutil.c. - CVE-2010-2249	Marc Deslauriers	1.2.42-1ubuntu2.1	13 years ago
25	* SECURITY UPDATE: denial of service via decompression bomb ... * SECURITY UPDATE: denial of service via decompression bomb (LP: #533140) - debian/patches/02-CVE-2010-0205.patch: use new two-pass decompression method in pngrutil.c. - CVE-2010-0205	Marc Deslauriers	1.2.42-1ubuntu2	14 years ago
24	* Merge from Debian testing. Remaining changes: * Merge from Debian testing. Remaining changes: - Move libpng from /usr/lib to /lib, so that plymouth is usable on systems with a separate /usr.	Steve Langasek	1.2.42-1ubuntu1	14 years ago
23	Move libpng from /usr/lib to /lib, so that plymouth is usabl... Move libpng from /usr/lib to /lib, so that plymouth is usable on systems with a separate /usr.	Steve Langasek	1.2.41-1ubuntu1	14 years ago
22	* New upstream release * New upstream release * Debian source format is 3.0 (quilt) * Update debian/watch * Add 02-export-png_set_strip_error_numbers.patch Define PNG_ERROR_NUMBERS_SUPPORTED Upstream doesn't define PNG_ERROR_NUMBERS_SUPPORTED since 1.2.41. As a consecuence, the symbol png_set_strip_error_numbe@@PNG12_0 wasn't exported.	Anibal Monsalve Sala...	1.2.41-1	14 years ago
21	New upstream release New upstream release	Anibal Monsalve Sala...	1.2.40-1	14 years ago
20	New upstream release New upstream release	Anibal Monsalve Sala...	1.2.37-1	14 years ago
19	* New upstream release * New upstream release * Standards-Version is 3.8.1 * debhelper compat is 7 * Run dh_prep instead of dh_clean -k	Anibal Monsalve Sala...	1.2.36-1	15 years ago
18	* New upstream release * New upstream release - http://secunia.com/advisories/33970/ Fix a vulnerability reported by Tavis Ormandy in which some arrays of pointers are not initialized prior to using "malloc" to define the pointers. Closes: #516256 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5907 The png_check_keyword function in pngwutil.c in libpng, might allow context-dependent attackers to set the value of an arbitrary memory location to zero via vectors involving creation of crafted PNG files with keywords, related to an implicit cast of the '\0' character constant to a NULL pointer. * Don't build libpng3 when binary-indep target is not called. Closes: #486415	Anibal Monsalve Sala...	1.2.35-1	15 years ago
17	* SECURITY UPDATE: denial of service and possible execution ... * SECURITY UPDATE: denial of service and possible execution of arbitrary code via crafted image (LP: #338027) - debian/patches/02-CVE-2009-0040.diff: initialize pointers in pngread.c, pngrtans.c, pngset.c and example.c - CVE-2009-0040 * SECURITY UPDATE: denial of service via incorrect memory assignment (LP: #324258) - debian/patches/02-CVE-2008-5907.diff: update pngwutil.c to properly set new_key to NULL string - CVE-2008-5907	Jamie Strandboge	1.2.27-2ubuntu2	15 years ago
16	debian/rules: Work around missing definition of ECHO. debian/rules: Work around missing definition of ECHO.	Matthias Klose	1.2.27-2ubuntu1	15 years ago
15	* Fix CVE-2008-3964: off-by-one error in pngtest.c; closes: ... * Fix CVE-2008-3964: off-by-one error in pngtest.c; closes: #501109 * Standards-Version is 3.8.0	Anibal Monsalve Sala...	1.2.27-2	15 years ago
14	* New upstream release * New upstream release * Patches merged upstream: debian/patches/02-476669-CVE-2008-1382.diff debian/patches/03-404514-png.5.diff * Run ./autogen.sh	Anibal Monsalve Sala...	1.2.27-1	16 years ago
13	* ACKed NMU. * ACKed NMU. * Fixed out-of-bounds read operations triggered by crafted png image files (CVE-2007-5269) (Closes: #446308).	Anibal Monsalve Sala...	1.2.15~beta5-3	16 years ago
12	Trigger rebuild for hppa Trigger rebuild for hppa	LaMont Jones	1.2.15~beta5-2build1	16 years ago
11	* It seems that a grayscale image with a malformed (bad CRC)... * It seems that a grayscale image with a malformed (bad CRC) tRNS chunk will crash libpng and mozilla. Closes: #424729. - CVE-2007-2445 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2007-2445 - CERT Vulnerability Note VU#684664 http://www.kb.cert.org/vuls/id/684664	Anibal Monsalve Sala...	1.2.15~beta5-2	17 years ago

Older »