Version 1.6.24 has been released on August 4: https://sourceforge.net/p/png-mng/mailman/message/35259826/ It sounds like the security issues only would impact some applications that use the APIs a certain way. We should update this when the apng patch for 1.6.24 is available. There was also a bugfix release 1.6.23: https://sourceforge.net/p/png-mng/mailman/message/35147763/
CC: (none) => marja11, pkg-bugsAssignee: bugsquad => fundawang
Updated packages uploaded for Mageia 5 and Cauldron. I'll update it again to 1.6.25: https://sourceforge.net/p/png-mng/mailman/message/35324586/ (feedback tag pending update to 1.6.25) Advisory: ---------------------------------------- The libpng package has been updated to version 1.6.25 to fix various bugs. See the release announcements for details. References: https://sourceforge.net/p/png-mng/mailman/message/35147763/ https://sourceforge.net/p/png-mng/mailman/message/35259826/ https://sourceforge.net/p/png-mng/mailman/message/35324586/ ---------------------------------------- Updated packages in core/updates_testing: ---------------------------------------- libpng16_16-1.6.25-1.mga5 libpng-devel-1.6.25-1.mga5 from libpng-1.6.25-1.mga5.src.rpm
Version: Cauldron => 5Blocks: (none) => 19441Assignee: fundawang => qa-bugsWhiteboard: (none) => feedback
Changing this to a bugfix update. The main libpng website doesn't list these as security updates, so I guess the bugs were just in the example programs and not the library.
Component: Security => RPM PackagesSummary: libpng minor security issues fixed in 1.6.24 => libpng minor bugs fixed in 1.6.25QA Contact: security => (none)
Update to 1.6.25 is now available.
Whiteboard: feedback => (none)
Testing this for x86_64 Updated the libraries from Core Updates Testing. urpmq shows that the library is required by no less than 329 packages. Used ImageMagick and gif2png to manipulate a selection of images. display *.png gif2png any.gif, display any.png Converted formats SVG, JPEG, XPM, ICO to PNG and all resultant PNG images displayed correctly. Converted a variety of PNG images to JPEG, XPM, SVG and GIF. Conversion to TIFF does not work but that may never have been supported; TIFF images contain far more information than other formats - the format was designed for high resolution content. This update is OK.
CC: (none) => tarazed25
Whiteboard: (none) => MGA5-64-OK
Keywords: (none) => validated_updateWhiteboard: MGA5-64-OK => MGA5-64-OK advisoryCC: (none) => davidwhodgins, sysadmin-bugs
An update for this issue has been pushed to the Mageia Updates repository. http://advisories.mageia.org/MGAA-2016-0115.html
Status: NEW => RESOLVEDResolution: (none) => FIXED