On Nov 23, 2010, at 11:27 AM, Brian Lu wrote: > The README file under modules/libimg/png says that its version > is 1.2.35 (contained in Thunderbird 3.1.6), while the bug > https://bugzilla.mozilla.org/show_bug.cgi?id=492200 says it has > upgraded to 1.2.37.
The bug _summary_ says "upgrade libpng to 1.2.37" but you have to read the bug to see what really happened. The trunk (Firefox 4 development version) did indeed get an upgraded libpng, but the branch simply took the relevant security fix on top of the 1.2.35 it already had. -Dan _______________________________________________ dev-security mailing list dev-security@lists.mozilla.org https://lists.mozilla.org/listinfo/dev-security
