Libpng-1.0.25 and libpng-1.2.17
Glenn Randers-Pehrson <[email protected]> Tue, 15 May 2007 17:05:30 -0400
| Newsgroups | gmane.comp.graphics.png.announce |
|---|---|
| Message-ID | <[email protected]> |
libpng-1.0.25 and libpng-1.2.17 are available at ftp://ftp.simplesystems.org/pub/png/src and at libpng.sf.net These releases fix a vulnerability in png_handle_tRNS() by which a malformed PNG file can crash a libpng application. The bug has existed since libpng-0.90. The vulnerability is identified as CVE-2007-2445 and CERT VU#684664. Glenn ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/