From 77c1d30d14568f87409858a5106bd68d52cf2680 Mon Sep 17 00:00:00 2001 From: Glenn Randers-Pehrson Date: Fri, 27 Jul 2012 21:12:34 -0500 Subject: [PATCH] [libpng15] Updated CHANGES to reflect that new CVE-2012-3425 was fixed in March 2012, libpng-1.5.10 --- CHANGES | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGES b/CHANGES index 73e2ffd6a..cf2080470 100644 --- a/CHANGES +++ b/CHANGES @@ -3852,7 +3852,7 @@ Version 1.5.10beta05 [March 10, 2012] Version 1.5.10 [March 29, 2012] Prevent PNG_EXPAND+PNG_SHIFT doing the shift twice. Revised png_set_text_2() to avoid potential memory corruption (fixes - CVE-2011-3048). + CVE-2011-3048, also known as CVE-2012-3425). Version 1.5.11beta01 [April 28, 2012] Revised scripts/makefile.darwin: use system zlib; remove quotes around @@ -3896,7 +3896,7 @@ Version 1.5.12 [July 11, 2012] depends on configure, which is not included in those archives. Changed "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386. -Version 1.5.13beta01 [July 14, 2012] +Version 1.5.13beta01 [July 28, 2012] Do not compile PNG_DEPRECATED, PNG_ALLOC and PNG_PRIVATE when __GNUC__ < 3. Send comments/corrections/commendations to png-mng-implement at lists.sf.net