Opened 2 months ago

Closed 6 weeks ago

#21110 closed enhancement (fixed)

libpng-1.6.47

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: normal Milestone: 12.4
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

New point version.

Change History (10)

comment:1 by Douglas R. Reno, 8 weeks ago

Milestone: 12.412.3

comment:2 by zeckma, 8 weeks ago

There is no apng patch for 1.6.47 yet and the 1.6.46 patch has hunks that fail. Might be a good idea to leave this for 12.4 instead of waiting for the apng patch.

comment:3 by zeckma, 8 weeks ago

Milestone: 12.312.4
Summary: libpng-1.6.47libpng-1.6.47 (wait for apng patch)

comment:4 by Bruce Dubbs, 7 weeks ago

Changes from version 1.6.46 to version 1.6.47

  • Modified the behaviour of colorspace chunks in order to adhere to the new precedence rules formulated in the latest draft of the PNG Specification.
  • Fixed a latent bug in png_write_iCCP. This would have been a read-beyond-end-of-malloc vulnerability, introduced early in the libpng-1.6.0 development, yet (fortunately!) it was inaccessible before the above-mentioned modification of the colorspace precedence rules, due to pre-existing colorspace checks.

comment:5 by Bruce Dubbs, 7 weeks ago

I tried the 1.6.46 patch on this version and got 4 hunks that failed.

comment:6 by Douglas R. Reno, 6 weeks ago

Milestone: 12.499-Waiting

comment:7 by Joe Locash, 6 weeks ago

The apng patch for 1.6.47 is now available.

comment:8 by Bruce Dubbs, 6 weeks ago

Owner: changed from blfs-book to Bruce Dubbs
Status: newassigned
Summary: libpng-1.6.47 (wait for apng patch)libpng-1.6.47

comment:9 by Bruce Dubbs, 6 weeks ago

Milestone: 99-Waiting12.4

comment:10 by Bruce Dubbs, 6 weeks ago

Resolution: fixed
Status: assignedclosed

Fixed at commit 5feff182ee.

Note: See TracTickets for help on using tickets.