Missing patch for CVE-2017-12652

Derrick McKee <[email protected]> Fri, 16 Apr 2021 12:02:26 -0400
Newsgroups gmane.comp.graphics.png.devel
Message-ID <CAJoBWHwQiPmLtyYL1K1U3Tto6DJiBzBYtQ8_wUj7SCYpmVD61g@mail.gmail.com>
Hi,

I see that commit 347538efbdc21b8df684ebd92d37400b3ce85d55 includes a
fix for CVE-2017-12652 in pngpread.c. However, that fix appears to be
missing starting in tag v1.6.32beta10, and no longer appears in the
source.  Can anyone explain what happened?  Thanks.

-- 
Derrick McKee
Phone: (703) 957-9362
Email: [email protected]