id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
2836	libpng-1.2.35	Randy McMurchy	Randy McMurchy	"Version increment to 1.2.35

    http://freshmeat.net/projects/libpng/

The changes in this release are as follows:
This release fixes a newly discovered vulnerability in which some
arrays of pointers are not initialized prior to using malloc to define
the pointers. If the application runs out of memory while executing
the allocation loop (which can be forced by malevolent input), libpng
will jump to a cleanup process that attempts to free all of the
pointers, including the undefined ones. 

Release focus:
9 - Major security fixes "	task	closed	high		BOOK	SVN	high	fixed