From 58f277c18ee262210ebb8e22df8fe130bc571177 Mon Sep 17 00:00:00 2001 From: Glenn Randers-Pehrson Date: Wed, 28 Mar 2012 23:37:25 -0500 Subject: [PATCH] [libpng16] Revised png_set_text_2() to avoid potential memory corruption. Fixes CVE-2011-3048. --- CHANGES | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 024c050ec..973209240 100644 --- a/CHANGES +++ b/CHANGES @@ -4097,7 +4097,7 @@ Version 1.6.0beta20 [March 29, 2012] Recognize known sRGB ICC profiles while reading; prefer writing the iCCP profile over writing the sRGB chunk, controlled by the PNG_sRGB_PROFILE_CHECKS option. - Revised png_set_text_2() to avoid potential memory corruption. + Revised png_set_text_2() to avoid a potential memory corruption. Send comments/corrections/commendations to png-mng-implement at lists.sf.net (subscription required; visit