[libpng15] Updated CHANGES to reflect that new CVE-2012-3425 was fixed

in March 2012, libpng-1.5.10
This commit is contained in:
Glenn Randers-Pehrson 2012-07-27 21:12:34 -05:00
parent ae44b27606
commit 77c1d30d14

View File

@ -3852,7 +3852,7 @@ Version 1.5.10beta05 [March 10, 2012]
Version 1.5.10 [March 29, 2012]
Prevent PNG_EXPAND+PNG_SHIFT doing the shift twice.
Revised png_set_text_2() to avoid potential memory corruption (fixes
CVE-2011-3048).
CVE-2011-3048, also known as CVE-2012-3425).
Version 1.5.11beta01 [April 28, 2012]
Revised scripts/makefile.darwin: use system zlib; remove quotes around
@ -3896,7 +3896,7 @@ Version 1.5.12 [July 11, 2012]
depends on configure, which is not included in those archives.
Changed "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386.
Version 1.5.13beta01 [July 14, 2012]
Version 1.5.13beta01 [July 28, 2012]
Do not compile PNG_DEPRECATED, PNG_ALLOC and PNG_PRIVATE when __GNUC__ < 3.
Send comments/corrections/commendations to png-mng-implement at lists.sf.net