The following CVE has been fixed in debian as well:
1.2.26:
* Fix CVE-2008-1382 denial of service and possibly code execution
Add 02-476669-CVE-2008-1382.diff
Closes: #476669
This was merged upstream in 1.2.27
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-1382
--
Please sponsor libpng 1.2.24
https://bugs.launchpad.net/bugs/185178
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs