On Nov 23, 2010, at 11:27 AM, Brian Lu wrote: > Hi, All, > > The README file under modules/libimg/png says that its version is 1.2.35 > (contained in Thunderbird 3.1.6), while the bug > https://bugzilla.mozilla.org/show_bug.cgi?id=492200 > says it has upgraded to 1.2.37. So my questions are: > 1. What's version of libpng shipped with Thunderbird 1.3.6? > 2. Does it contains security fixes of vu643615 and vu576029? vu643615 is http://www.mozilla.org/security/announce/2010/mfsa2010-41.html
vu576029 is https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2010-0205 Ginn > > Thanks > > Brian > > _______________________________________________ > dev-security mailing list > dev-security@lists.mozilla.org > https://lists.mozilla.org/listinfo/dev-security _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security
