Ubuntu
libpng package

libpng 1.2.50-1ubuntu2.14.04.1 source package in Ubuntu

Changelog

libpng (1.2.50-1ubuntu2.14.04.1) trusty-security; urgency=medium

  [ Andrew Starr-Bochicchio ]
  * SECURITY UPDATE: Multiple buffer overflows in the (1) png_set_PLTE
    and (2) png_get_PLTE (LP: #1516592).
    - debian/patches/CVE-2015-8126.diff: Prevent writing over-length
      PLTE chunk and silently truncate over-length PLTE chunk while reading.
      Backported from upstream patch.
    - CVE-2015-8126

  [ Marc Deslauriers ]
  * SECURITY UPDATE: out of bounds read in png_set_tIME
    - debian/patches/CVE-2015-7981.patch: check bounds in png.c and
      pngset.c.
    - CVE-2015-7981

 -- Marc Deslauriers <email address hidden>  Thu, 19 Nov 2015 08:02:50 -0500

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
libs
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
libpng_1.2.50.orig.tar.xz 526.5 KiB 4724f81f8c92ac7f360ad1fbf173396ea7c535923424db9fbaff07bfd9d8e8e7
libpng_1.2.50-1ubuntu2.14.04.1.debian.tar.bz2 19.6 KiB 9d473985887f764012b8db97805d7edc31c393dcd08c8766488f5907f5eab3d1
libpng_1.2.50-1ubuntu2.14.04.1.dsc 2.1 KiB d58a00497576392d10041b28e7cf4e777350a47829766ea5f248beeba9a43ab2

View changes file

Binary packages built by this source

libpng12-0: PNG library - runtime

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package contains the runtime library files needed to run software
 using libpng.

libpng12-0-dbgsym: debug symbols for package libpng12-0

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package contains the runtime library files needed to run software
 using libpng.

libpng12-0-udeb: PNG library - minimal runtime library

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package provides the minimal libpng12 runtime library needed for
 the debian-installer.

libpng12-0-udeb-dbgsym: debug symbols for package libpng12-0-udeb

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package provides the minimal libpng12 runtime library needed for
 the debian-installer.

libpng12-dev: PNG library - development

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package contains the header and development files needed to build
 programs and packages using libpng.

libpng3: PNG library - runtime

 libpng is a library implementing an interface for reading and writing
 PNG (Portable Network Graphics) format files.
 .
 This package is superseded by libpng12-0, and is provided only for
 transitional purposes.