Ticket #2018 (closed bug: fixed)

Opened 8 months ago

Last modified 3 months ago

libpng needs update >= 1.2.28 to fix security issue

Reported by: scottmc Owned by: axeld
Priority: normal Milestone: R1
Component: - General Version: R1 development
Cc: Blocked By:
Platform: All Blocking:

Attachments

png-1.2.26-to-1.2.29.diff (22.8 kB) - added by scottmc 6 months ago.
diff file to update libpng from 1.2.26 to 1.2.29

Change History

Changed 8 months ago by korli

  • status changed from new to closed
  • resolution set to fixed

Updated to 1.2.26 in r24758

Changed 7 months ago by scottmc

Seems they fixed another security issue in 1.2.26, 1.2.28 is out as I write this.

Changed 7 months ago by scottmc

  • status changed from closed to reopened
  • resolution fixed deleted
  • summary changed from libpng needs update to 1.2.25 to fix security issue to libpng needs update to 1.2.28 to fix security issue

1.2.28 compiles and passes all tests, just need to update in tree: http://tools.assembla.com/BePorts/wiki/media-libs/libpng Reopened the ticket due to it be labeled a security fix on libpng's site.

Changed 6 months ago by scottmc

  • summary changed from libpng needs update to 1.2.28 to fix security issue to libpng needs update >= 1.2.28 to fix security issue

v1.2.29 is now out.

Changed 6 months ago by scottmc

diff file to update libpng from 1.2.26 to 1.2.29

Changed 6 months ago by scottmc

I downloaded the 1.2.29 source code files and dropped the matching ones over the 1.2.26 in my haiku source png folders, total of 19 'c' files and 2 'h' files, skipping the pngtest.c file. Then ran svn diff. output diff file attached.

Changed 3 months ago by scottmc

libpng 1.2.30 has now been released.

Changed 3 months ago by korli

  • status changed from reopened to closed
  • resolution set to fixed

Updated in r27012.

Changed 3 months ago by aldeck

  • status changed from closed to reopened
  • resolution fixed deleted

There is a problem with this new libpng version. The image in Vision's setup/(first startup) window is not loaded anymore.

Here's what i get on terminal output:

libpng error: x[9C]b[60]: invalid chunk type

Changed 3 months ago by korli

Will update with 1.2.31 ASAP.

Changed 3 months ago by korli

  • status changed from reopened to closed
  • resolution set to fixed

Updated in r27115.

Note: See TracTickets for help on using tickets.