Closed
Bug 1224244
Opened 9 years ago
Closed 9 years ago
Update in-tree libpng to version 1.6.19
Categories
(Core :: Graphics: ImageLib, defect)
Core
Graphics: ImageLib
Tracking
()
RESOLVED
FIXED
mozilla45
Tracking | Status | |
---|---|---|
firefox45 | --- | fixed |
People
(Reporter: glennrp+bmo, Assigned: glennrp+bmo)
References
Details
Attachments
(1 file, 3 obsolete files)
154.26 KB,
patch
|
Details | Diff | Splinter Review |
libpng-1.6.19 has been released. Mozilla is not vulnerable to the security issues that it fixes, when using either the in-tree libpng or the system libpng.
Assignee | ||
Updated•9 years ago
|
Assignee | ||
Comment 2•9 years ago
|
||
Never mind try right now, an ARM supporting file has been moved.
Flags: needinfo?(ryanvm)
Assignee | ||
Comment 3•9 years ago
|
||
Attachment #8686958 -
Attachment is obsolete: true
Assignee | ||
Comment 4•9 years ago
|
||
Updated configure.in with new minimum libpng version
Attachment #8686970 -
Attachment is obsolete: true
Comment 6•9 years ago
|
||
Flags: needinfo?(ryanvm)
Assignee | ||
Comment 7•9 years ago
|
||
Comment on attachment 8687320 [details] [diff] [review]
V02 update embedded libpng to version 1.6.19
Try run was 100% green; looks good to go. R?
Attachment #8687320 -
Flags: review?(seth)
Assignee | ||
Comment 8•9 years ago
|
||
libpng-1.6.20 will most likely be out next week, December 3, 2015, so we might as well skip 1.6.19. Like libpng-1.6.19, libpng-1.6.20 fixes vulnerabilities that don't affect mozilla, whether using the embedded libpng or the system libpng. Cancelling "r?".
Summary: Update in-tree libpng to version 1.6.19 → Update in-tree libpng to version 1.6.20
Assignee | ||
Updated•9 years ago
|
Attachment #8687320 -
Flags: review?(seth) → review-
Comment 9•9 years ago
|
||
Comment on attachment 8687320 [details] [diff] [review]
V02 update embedded libpng to version 1.6.19
Review of attachment 8687320 [details] [diff] [review]:
-----------------------------------------------------------------
Looks good! I didn't review the changes to libpng itself, obviously, just the Gecko-specific changes (and the CHANGES file, just to familiarize myself with what had changed).
Attachment #8687320 -
Flags: review- → review+
Assignee | ||
Updated•9 years ago
|
Keywords: checkin-needed
Assignee | ||
Comment 10•9 years ago
|
||
Rebased configure.in
Attachment #8687320 -
Attachment is obsolete: true
Assignee | ||
Comment 11•9 years ago
|
||
Seth, please transfer r+ from v02 to v03 patch. The only difference is the rebase of configure.in.
Flags: needinfo?(seth)
Comment 12•9 years ago
|
||
(In reply to Glenn Randers-Pehrson from comment #11)
> Seth, please transfer r+ from v02 to v03 patch. The only difference is the
> rebase of configure.in.
i guess that means that the r+ is just carryover to the last rebased patch. so checkin this in, seth correct me if i'm wrong
Comment 13•9 years ago
|
||
Keywords: checkin-needed
Assignee | ||
Comment 14•9 years ago
|
||
Thanks, that's what I intended. I'll open a new bug for libpng-1.6.20.
Summary: Update in-tree libpng to version 1.6.20 → Update in-tree libpng to version 1.6.19
Comment 15•9 years ago
|
||
bugherder |
Status: ASSIGNED → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Target Milestone: --- → mozilla45
Assignee | ||
Updated•9 years ago
|
Flags: needinfo?(seth)
You need to log in
before you can comment on or make changes to this bug.
Description
•