libpng 1.2.8rel-5ubuntu0.4 source package in Ubuntu

Changelog

libpng (1.2.8rel-5ubuntu0.4) dapper-security; urgency=low

  * SECURITY UPDATE: denial of service and possible execution of arbitrary
    code via crafted image (LP: #338027)
    - patch applied inline: initialize pointers in pngread.c, pngrtans.c,
      pngset.c and example.c
    - CVE-2009-0040
  * SECURITY UPDATE: denial of service and possible execution of arbitrary
    code via crafted image (LP: #217128)
    - patch applied inline: initialize "unknown" chunks in pngpread.c,
      pngrutil.c and pngset.c
    - CVE-2008-1382
  * SECURITY UPDATE: denial of service via off-by-one error
    - patch applied inline: shorten tIME_string to 29 bytes in pngtest.c
    - CVE-2008-3964
  * SECURITY UPDATE: denial of service via incorrect memory assignment
    (LP: #324258)
    - patch applied inline: update pngwutil.c to properly set new_key to NULL
      string
    - CVE-2008-5907

 -- Jamie Strandboge <email address hidden>   Thu, 05 Mar 2009 08:01:06 -0600