diff options
| author | Eric Vannier <evannier@google.com> | 2011-07-20 17:03:29 -0700 |
|---|---|---|
| committer | Kenny Root <kroot@google.com> | 2011-07-21 10:35:54 -0700 |
| commit | 66dce0da6a5db51ee0c2875517d3a6ca6cbbe53d (patch) | |
| tree | 7a375165c96b754d82ba1b6c304084645a5197bf /CHANGES | |
| parent | 6acf3dd4a350c51fd2b72ec990b7da6d5657e52a (diff) | |
| download | external_libpng-66dce0da6a5db51ee0c2875517d3a6ca6cbbe53d.zip external_libpng-66dce0da6a5db51ee0c2875517d3a6ca6cbbe53d.tar.gz external_libpng-66dce0da6a5db51ee0c2875517d3a6ca6cbbe53d.tar.bz2 | |
Upgrading libpng to 1.2.46 to fix a few vulnerabilities.
Bug: 5057432
Bug: 5055636
Change-Id: I9e1b51881386aa9f574a38abc844e036baef9091
Diffstat (limited to 'CHANGES')
| -rw-r--r-- | CHANGES | 34 |
1 files changed, 33 insertions, 1 deletions
@@ -1478,7 +1478,7 @@ version 1.2.9beta5 [March 4, 2006] Removed trailing blanks from source files. Put version and date of latest change in each source file, and changed copyright year accordingly. - More cleanup of configure.ac, Makefile.ac, and associated scripts. + More cleanup of configure.ac, Makefile.am, and associated scripts. Restored scripts/makefile.elf which was inadvertently deleted. version 1.2.9beta6 [March 6, 2006] @@ -2704,6 +2704,38 @@ version 1.2.44rc03 [June 23, 2010] version 1.2.44 [June 26, 2010] Updated some of the "last changed" dates. +version 1.2.45beta01 [June 7, 2011] + Fixed uninitialized memory read in png_format_buffer() (Bug + report by Frank Busse, related to CVE-2004-0421). + Pass "" instead of '\0' to png_default_error() in png_err(). This mistake + was introduced in libpng-1.2.20beta01. + Check for up->location !PNG_AFTER_IDAT when writing unknown chunks + before IDAT. + Ported bugfix in pngrtran.c from 1.5.3: when expanding a paletted image, + always expand to RGBA if transparency is present. + +version 1.2.45beta02 [June 8, 2011] + Check for integer overflow in png_set_rgb_to_gray(). + +version 1.2.45beta03 [June 19, 2011] + Check for sCAL chunk too short. + +version 1.2.45rc01 and 1.0.55rc01 [June 30, 2011] + Updated "last changed" dates and copyright year. + +version 1.2.45 and 1.0.55 [July 7, 2011] + No changes. + +version 1.2.46rc01 and 1.0.56rc01 [July 8, 2011] + Reverted changes to Makefile.am and Makefile.in to libpng-1.2.44 versions. + +version 1.2.46rc02 and 1.0.56rc02 [July 8, 2011] + Added CMakeLists.txt, projects/xcode, and pnggccrd.c to EXTRA_DIST in + Makefile.am and Makefile.in + +version 1.2.46 and 1.0.56 [July 9, 2011] + Udated copyright year to 2011. + Send comments/corrections/commendations to png-mng-implement at lists.sf.net (subscription required; visit https://lists.sourceforge.net/lists/listinfo/png-mng-implement |