Ubuntu
libpng package

  1. Bug #226009
  2. Comment #0

Comment 0 for bug 226009

Revision history for this message
Bryan Donlan (bdonlan) wrote : SRU: Please sync libpng 1.2.27-1 from debian unstable (main)

libpng 1.2.27 fixes a number of CVEs including:
    * 2006-3334
    * 2007-2445
    * 2007-5266
    * 2007-5267
    * 2007-5268
    * 2007-5269
    * 2008-1382

These are crash bugs. I don't know if they can be used for code execution.
I believe that these bugs justify a stable release update.