Ubuntu
libpng package

libpng 1.2.46-3ubuntu4.1 source package in Ubuntu

Changelog

libpng (1.2.46-3ubuntu4.1) precise-security; urgency=medium

  [ Andrew Starr-Bochicchio ]
  * SECURITY UPDATE: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE (LP: #1516592).
    - debian/patches/CVE-2015-8126.diff: Prevent writing over-length
      PLTE chunk and silently truncate over-length PLTE chunk while reading.
      Backported from upstream patch.
    - CVE-2015-8126

  [ Marc Deslauriers ]
  * SECURITY UPDATE: out of bounds read in png_set_tIME
    - debian/patches/CVE-2015-7981.patch: check bounds in png.c and
      pngset.c.
    - CVE-2015-7981
  * SECURITY UPDATE: out of bounds read in png_push_read_zTXt
    - debian/patches/CVE-2012-3425.patch: check for truncated chunk in
      pngpread.c.
    - CVE-2012-3425

 -- Marc Deslauriers <email address hidden>  Thu, 19 Nov 2015 08:05:59 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Precise
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libpng_1.2.46.orig.tar.bz2 624.7 KiB a5e796e1802b2e221498bda09ff9850bc7ec9068b6788948cc2c42af213914d8
libpng_1.2.46-3ubuntu4.1.debian.tar.bz2 19.3 KiB 75eb65d9f1ca02c45c1d40236d8b91d5ebb5f7a637c258725aed087ea0a4e3b3
libpng_1.2.46-3ubuntu4.1.dsc 2.0 KiB 1fa899f3204b19392331c94a0843de9f5f1b19da6a01f4b16d844023dd5eadc2

View changes file

Binary packages built by this source

libpng12-0: PNG library - runtime

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package contains the runtime library files needed to run software
 using libpng.

libpng12-0-dbgsym: debug symbols for package libpng12-0

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package contains the runtime library files needed to run software
 using libpng.

libpng12-0-udeb: PNG library - minimal runtime library

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package provides the minimal libpng12 runtime library needed for
 the debian-installer.

libpng12-0-udeb-dbgsym: debug symbols for package libpng12-0-udeb

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package provides the minimal libpng12 runtime library needed for
 the debian-installer.

libpng12-dev: PNG library - development

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package contains the header and development files needed to build
 programs and packages using libpng.

libpng3: PNG library - runtime

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package is superseded by libpng12-0, and is provided only for
 transitional purposes.