This bug was fixed in the package libpng - 1.2.37-1ubuntu0.1
---------------
libpng (1.2.37-1ubuntu0.1) karmic-security; urgency=low
* SECURITY UPDATE: denial of service via decompression bomb (LP: #533140)
- debian/patches/02-CVE-2010-0205.patch: use new two-pass decompression
method in pngrutil.c.
- CVE-2010-0205
-- Marc Deslauriers <[email protected]> Fri, 12 Mar 2010 10:53:26
-0500
** Changed in: libpng (Ubuntu)
Status: Confirmed => Fix Released
--
CVE-2010-0205 libpng stalls and consumes large quantities of memory while
processing certain PNG files
https://bugs.launchpad.net/bugs/533140
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
