https://bugzilla.redhat.com/show_bug.cgi?id=1281756
--- Comment #41 from Tomas Hoger <tho...@redhat.com> --- OpenJDK 8 upstream commits: http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/817a472b15bd http://hg.openjdk.java.net/jdk8u/jdk8u/jdk/rev/23a6e0931277 Note that the first commit actually downgraded bundled libpng from 1.6.16 to 1.5.4, and only the second one upgraded it again to 1.6.20 which includes fixes for CVE-2015-8126 and CVE-2015-8472. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ mingw mailing list mingw@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/mingw@lists.fedoraproject.org