This is the mail archive of the cygwin-apps mailing list for the Cygwin project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: [SECURITY] libpng vulnerabilities

From: Charles Wilson <cygwin at cwilson dot fastmail dot fm>
To: Mailing List: CygWin-Apps <cygwin-apps at cygwin dot com>
Date: Sat, 05 May 2012 10:52:31 -0400
Subject: Re: [SECURITY] libpng vulnerabilities
References: <4F49E71A.9010006@gmail.com> <4F74F787.4050604@users.sourceforge.net> <4FA47298.1030206@users.sourceforge.net>

On 5/4/2012 8:21 PM, Yaakov (Cygwin/X) wrote:

I have sent notices of multiple security vulnerabilities in libpng going
back LAST JULY, with several additions and pings (no pun intended)
since. Can we *please* see some sign that you are still maintaining
these packages?

I wanted to roll out the new zlib packages first as libpng depends on it. I finished those [cygwin-native, and mingw.org-cross] yesterday, given the new zlib-1.2.7 release on Thu (and have now added the minizip lib and utilities, via additional optional subpackages). I'll be rolling out the new zlib on Monday with libpng to follow soon after.

--
Chuck

References:
- Re: [SECURITY] libpng vulnerabilities
  - From: Yaakov (Cygwin/X)

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]