libpng 1.2.44-1+squeeze1 source package in Debian

Changelog

libpng (1.2.44-1+squeeze1) stable-security; urgency=high


  * Apply upstream patch to 1-byte uninitialized memory reference in
    png_format_buffer(). (Closes: #632786, CVE-2011-2501)
  * Apply upstream patch to buffer overwrite in png_rgb_to_gray.
    (Closes: #633871, CVE-2011-2690)
  * Apply upstream patch to crash in png_default_error due to use of
    NULL Pointer. (Closes: #633871, CVE-2011-2691)
  * Apply upstream patch to memory corruption when handling empty sCAL chunks.
    (Closes: #633871, CVE-2011-2692)

 -- Nobuhiro Iwamatsu <email address hidden>  Fri, 15 Jul 2011 13:06:17 +0900