Re: Missing patch for CVE-2017-12652

Nat Conger via png-mng-implement <png-mng-implement-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org> Sat, 17 Apr 2021 09:16:56 -0500
Newsgroups gmane.comp.graphics.png.devel
Message-ID <[email protected]>
What is this and why am I receiving it?

Sent from my iPhone

> On Apr 17, 2021, at 9:00 AM, Bob Friesenhahn <[email protected]> wrote:
> 
> On Sat, 17 Apr 2021, Derrick McKee wrote:
> 
>>> This does sound serious and the libpng CHANGES file details
>>> considerable activity regarding this issue.  In the mean time the
>>> previous maintainer (Glenn Randers-Pehrson) died and a new maintainer
>>> (Cosmin Truta) stepped up to take over.  I have not seen any mail on
>>> this list from Cosmin for quite some time.
>>> 
>>> I assume that you are looking at Cosmin Truta's repository at
>>> https://github.com/ctruta/libpng?
>> 
>> No, I am looking at the repo at https://github.com/glennrp/libpng
>> which was linked to at https://libpng.sourceforge.io/index.html
> 
> That reposititory and web site are obviously defunct now.
> 
> Bob
> -- 
> Bob Friesenhahn
> [email protected], http://www.simplesystems.org/users/bfriesen/
> GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/
> Public Key,     http://www.simplesystems.org/users/bfriesen/public-key.txt
> 
> 
> _______________________________________________
> png-mng-implement mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/png-mng-implement


_______________________________________________
png-mng-implement mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/png-mng-implement