Your message dated Mon, 16 Mar 2015 00:48:42 +0000
with message-id <e1yxjd0-0001ma...@franck.debian.org>
and subject line Bug#773823: fixed in libpng1.6 1.6.16-1
has caused the Debian Bug report #773823,
regarding [src:libpng1.6] Heap overflow
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
773823: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=773823
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: src:libpng1.6
Severity: grave
Tags: security
X-Debbugs-CC: secure-testing-t...@lists.alioth.debian.org

According to http://seclists.org/oss-sec/2014/q4/1133
libpng (embeded in your package) has an heap overlow.

Thanks

Bastien

Attachment: signature.asc
Description: This is a digitally signed message part.


--- End Message ---
--- Begin Message ---
Source: libpng1.6
Source-Version: 1.6.16-1

We believe that the bug you reported is fixed in the latest version of
libpng1.6, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 773...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Nobuhiro Iwamatsu <iwama...@debian.org> (supplier of updated libpng1.6 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 07 Mar 2015 18:33:32 +0900
Source: libpng1.6
Binary: libpng16-16 libpng16-dev libpng16-devtools libpng16-tools 
libpng16-16-udeb
Architecture: source amd64
Version: 1.6.16-1
Distribution: experimental
Urgency: medium
Maintainer: Anibal Monsalve Salazar <ani...@debian.org>
Changed-By: Nobuhiro Iwamatsu <iwama...@debian.org>
Description:
 libpng16-16 - PNG library - runtime (version 1.6)
 libpng16-16-udeb - PNG library - minimal runtime library (version 1.6) (udeb)
 libpng16-dev - PNG library - development (version 1.6)
 libpng16-devtools - PNG library - tools (version 1.6)
 libpng16-tools - PNG library - tools (version 1.6)
Closes: 773823
Changes:
 libpng1.6 (1.6.16-1) experimental; urgency=medium
 .
   * New upstream release (Closes: #773823)
   * Standards Version is 3.9.6.
   * Update debian/copyright.
     Add infomation of license for other all files.
   * Update lintian-overrides for 1.6.16.
Checksums-Sha1:
 c9b8f6eae26cd4d98e9502caed0a656a90d9f7cb 2083 libpng1.6_1.6.16-1.dsc
 31855a8438ae795d249574b0da15b34eb0922e13 907284 libpng1.6_1.6.16.orig.tar.xz
 8b927f86bdb0828ce1830ab27f5237d52c122f84 17244 
libpng1.6_1.6.16-1.debian.tar.bz2
 ee82669496e25bf10ea79f1900fc2a07beef499e 266770 libpng16-16_1.6.16-1_amd64.deb
 f397e9ce288a4cbc2fa16a61856b4f5b4cda07b3 349308 libpng16-dev_1.6.16-1_amd64.deb
 905732aa902b9def76960dd30290750cd50e74f8 101324 
libpng16-devtools_1.6.16-1_amd64.deb
 5eac2fc0dcc0dcac1a690aae6b262c6ddb6e5afc 119514 
libpng16-tools_1.6.16-1_amd64.deb
 04b2efe54a021b2c023fe1ed4133b8d987c00cfd 89262 
libpng16-16-udeb_1.6.16-1_amd64.udeb
Checksums-Sha256:
 6b4eb9e0e2c1ca837c3ff0b64df32d2db770adabeb0fee24a98a38fe0082289c 2083 
libpng1.6_1.6.16-1.dsc
 42f754df633e4e700544e5913cbe2fd4928bbfccdc07708a5cf84e59827fbe60 907284 
libpng1.6_1.6.16.orig.tar.xz
 3c0723034cfdbd173edc3ce2da724388ce767c74354028a5cb928cf6c13233b4 17244 
libpng1.6_1.6.16-1.debian.tar.bz2
 49d3f552ffa2cc3ccf8dddada326025b04fb725beb2e06d97ef69f61c1bb4591 266770 
libpng16-16_1.6.16-1_amd64.deb
 f0d1b2f22d03d1edf17e40b4881b111d8d495b9fdac0147db058562452258328 349308 
libpng16-dev_1.6.16-1_amd64.deb
 36ca6df4c28badf4b4bf1269891073a178dde9386f6b5bbf6bc7fbae6f3fe4eb 101324 
libpng16-devtools_1.6.16-1_amd64.deb
 907c3b7ff55fe8d890f49c91a6d443783be650e95a76418d8830602adeaa10f0 119514 
libpng16-tools_1.6.16-1_amd64.deb
 1402e3492633bc8e9bf6cfb4a95aea674e006ea1e93b4f561b8811ae0ad32517 89262 
libpng16-16-udeb_1.6.16-1_amd64.udeb
Files:
 a41b4e60734b70ab28ac002a78125ff0 2083 libs optional libpng1.6_1.6.16-1.dsc
 23b7286b5d4a86de950fd2ffc5cac742 907284 libs optional 
libpng1.6_1.6.16.orig.tar.xz
 0b196c83e66f880d1b33764040ce590c 17244 libs optional 
libpng1.6_1.6.16-1.debian.tar.bz2
 d00b41445c8f0e0b8ef686652f7960c8 266770 libs optional 
libpng16-16_1.6.16-1_amd64.deb
 33d35836727dc526eddd2cff08ad9925 349308 libdevel optional 
libpng16-dev_1.6.16-1_amd64.deb
 ddd54c382e43d863c07931cbed254fca 101324 libdevel optional 
libpng16-devtools_1.6.16-1_amd64.deb
 446f615ce044d7d03dced175c66796b5 119514 libdevel optional 
libpng16-tools_1.6.16-1_amd64.deb
 01896a6655b5d760d9dd05dab0b7d0fe 89262 debian-installer extra 
libpng16-16-udeb_1.6.16-1_amd64.udeb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=A87D
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to