Re: Missing patch for CVE-2017-12652

Derrick McKee <[email protected]> Sat, 17 Apr 2021 09:54:30 -0400

Newsgroups	gmane.comp.graphics.png.devel
Message-ID	<CAJoBWHzQf2fxJtsfjJUE0mtUfwSQ5MoHnmmTE4+b+m54U5PvtA@mail.gmail.com>

> This does sound serious and the libpng CHANGES file details
> considerable activity regarding this issue.  In the mean time the
> previous maintainer (Glenn Randers-Pehrson) died and a new maintainer
> (Cosmin Truta) stepped up to take over.  I have not seen any mail on
> this list from Cosmin for quite some time.
>
> I assume that you are looking at Cosmin Truta's repository at
> https://github.com/ctruta/libpng?

No, I am looking at the repo at https://github.com/glennrp/libpng
which was linked to at https://libpng.sourceforge.io/index.html



-- 
Derrick McKee
Phone: (703) 957-9362
Email: [email protected]