Publishing details

• Published on 2011-09-15
• Copied from ubuntu natty in Private PPA for Ubuntu Security Team

Changelog

libpng (1.2.44-1ubuntu3.1) natty-security; urgency=low

  * SECURITY UPDATE: denial of service via error message data
    - debian/patches/02-CVE-2011-2501.patch: correctly calculate length in
      pngerror.c.
    - CVE-2011-2501
  * SECURITY UPDATE: denial of service and possible arbitrary code
    execution via crafted PNG image
    - debian/patches/03-CVE-2011-2690.patch: validate coefficients in
      pngrtran.c.
    - CVE-2011-2690
  * SECURITY UPDATE: denial of service and possible arbitrary code
    execution via invalid sCAL chunks
    - debian/patches/04-CVE-2011-2692.patch: check sCAL chunk length in
      pngrutil.c.
    - CVE-2011-2692
 -- Marc Deslauriers <email address hidden>   Tue, 26 Jul 2011 08:29:58 -0400

Builds

Built packages

• libpng12-0 PNG library - runtime

• libpng12-0-udeb PNG library - minimal runtime library

• libpng12-dev PNG library - development

• libpng3 PNG library - runtime

Package files

• libpng12-0-udeb_1.2.44-1ubuntu3.1_i386.udeb (68.3 KiB)
• libpng12-0_1.2.44-1ubuntu3.1_i386.deb (123.5 KiB)
• libpng12-dev_1.2.44-1ubuntu3.1_i386.deb (203.4 KiB)
• libpng3_1.2.44-1ubuntu3.1_i386.deb (964 bytes)
• libpng_1.2.44-1ubuntu3.1.debian.tar.bz2 (16.2 KiB)
• libpng_1.2.44-1ubuntu3.1.dsc (1.9 KiB)
• libpng_1.2.44.orig.tar.bz2 (642.5 KiB)