5619 – [SECURITY] libpng

Bug 5619 - [SECURITY] libpng

Summary: [SECURITY] libpng

Status:	RESOLVED INVALID

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	New packages (show other bugs)
Hardware:	x86 Linux

Importance:	Normal major (vote)
Assignee:	Seemant Kulleen (RETIRED)

URL:	http://lwn.net/Articles/5875/
Whiteboard:
Keywords:

Depends on:
Blocks:

Reported:	2002-07-26 14:58 UTC by Christian - Manny Calavera - Neumair
Modified:	2003-02-04 19:42 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Christian - Manny Calavera - Neumair 2002-07-26 14:58:18 UTC

All versions prior to 1.2.4 should be masked.
See URL.

see you,
- Manny -

Comment 1 Maik Schreiber 2002-07-26 15:17:49 UTC

Uhm, exactly *why* should those be masked?

Comment 2 Christian - Manny Calavera - Neumair 2002-07-27 01:33:38 UTC

I've seen other packages masked due to security flaws
Have you read through the url?

see you,
- Manny -

Comment 3 Gabriele Giorgetti 2002-07-28 13:52:50 UTC

Seemant what do you think about this one ?

Comment 4 Seemant Kulleen (RETIRED) gentoo-dev

2002-07-29 11:44:47 UTC

Um, in the official portage tree, there ARE no versions prior to the safe ones.
 This security bulletin is hence a moot point.  However, I will send out a
security announcement informing users that if they have versions prior to what
is current in portage installed, then they _need_ to upgrade.