Re: Missing patch for CVE-2017-12652

Derrick McKee <[email protected]> Sun, 18 Apr 2021 17:14:36 -0400
Newsgroups gmane.comp.graphics.png.devel
Message-ID <CAJoBWHwgKm=5W5YTETnj683C985HA4JhmkVyBAg-gheHdzmPdw@mail.gmail.com>
On Sat, Apr 17, 2021 at 5:58 PM Ben Bullock <[email protected]> wrote:
>
>
>
> On Sat, 17 Apr 2021 at 23:01, Bob Friesenhahn <[email protected]> wrote:
>>
>> On Sat, 17 Apr 2021, Derrick McKee wrote:
>>
>> >> I assume that you are looking at Cosmin Truta's repository at
>> >> https://github.com/ctruta/libpng?
>> >
>> > No, I am looking at the repo at https://github.com/glennrp/libpng
>> > which was linked to at https://libpng.sourceforge.io/index.html
>>
>> That reposititory and web site are obviously defunct now.
>
>
> In fact that repository is where Cosmin Truta is committing and where most libpng bug reports are going:
>
> https://github.com/glennrp/libpng/issues
>
> https://github.com/glennrp/libpng/commits/libpng16

Also, the glennrp repo is the top github result in Google (number 3
overall) if you search for libpng.