Re: Missing patch for CVE-2017-12652

On Sat, 17 Apr 2021, Derrick McKee wrote:

>> This does sound serious and the libpng CHANGES file details
>> considerable activity regarding this issue.  In the mean time the
>> previous maintainer (Glenn Randers-Pehrson) died and a new maintainer
>> (Cosmin Truta) stepped up to take over.  I have not seen any mail on
>> this list from Cosmin for quite some time.
>>
>> I assume that you are looking at Cosmin Truta's repository at
>> https://github.com/ctruta/libpng?
>
> No, I am looking at the repo at https://github.com/glennrp/libpng
> which was linked to at https://libpng.sourceforge.io/index.html

That reposititory and web site are obviously defunct now.

Bob
-- 
Bob Friesenhahn
[email protected], http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/
Public Key,     http://www.simplesystems.org/users/bfriesen/public-key.txt