[Bug 608644] CVE-2010-2249 libpng: Memory leak when processing Physical Scale (sCAL) images

bugzilla at redhat.com bugzilla at redhat.com
Tue Jun 29 17:34:15 UTC 2010


Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=608644

--- Comment #10 from Glenn Randers-Pehrson <glennrp+bmo at gmail.com> 2010-06-29 13:34:14 EDT ---
(In reply to comment #9)
> This also looks like it would affect libpng10, looking quickly at the code.    

Yes, it does.  Upstream has declared end-of-life for libpng10 and does
not plan any more updates, even for security, as announced back in
February.  If that is a hardship, you can complain to png-mng-implemement at
lists.sf.net, explain why you still need libpng10, and we might revisit the
decision.

We also plan to abandon libpng12 at the end of 2010.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.


More information about the mingw mailing list