All, I am sponsoring this case for Laszlo (Laca) Peter from the desktop group. I have made this an automatic approval if anyone is concerned with that then I'll set a timer for next week. Just let me know. The case directory contains this proposal and a couple of documents from the community describing the changes to the library.
This project delivers the latest version of libpng, version 1.4.3 into Solaris. It also updates the legacy 1.2.x and 1.0.y versions to the latest micro releases: 1.2.44 and 1.0.54. Patch release binding is requested. Thanks, John Title: libpng 1.4.3 Case: PSARC/2010/313 Submitter: Laszlo Peter Owner: John Fischer Timeout: Automatic 1.0 Introduction 1.1 Project/Component Working Name: libpng 1.4.3 for Solaris 1.2 Purpose This project delivers the latest version of libpng, version 1.4.3 into Solaris. It also updates the legacy 1.2.x and 1.0.y versions to the latest micro releases: 1.2.44 and 1.0.54. Patch release binding is requested. 2.0 Description libpng is a widely used C library for working with Portable Network Graphics images. It has multiple mostly API-compatible, but ABI-incompatible branches. They are parallel installable, but one is the default for development purposes. Currently libpng 1.2.x is the default branch. This update makes the 1.4.x branch the default one. 2.1 Security Issues Addressed These libpng releases incorporate security fixes: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1205 An additional memory-leak bug, involving images with malformed sCAL chunks, is also present; it could lead to an application crash (denial of service) when viewing such images. 2.2 Additional Changes The differences between the 1.4 and 1.2 branches are detailed in libpng-ANNOUNCE-1.4.1.txt in the case directory. A comprehensive list of changes from release to release is in libpng-CHANGES.txt in the case directory. 3.0 Delivery This project is targetting a Patch release of the Solaris OS. Availability and file locations: +----------------------+-----------------------------------------------+ | Package name | File locations | +----------------------+-----------------------------------------------+ | SUNWpng | /usr/lib/libpng14.so.14 | | | /usr/lib/{amd64,sparcv9}/libpng14.so.14 | | IPS: | /usr/lib/libpng12.so.0 | | image/library/libpng | /usr/lib/{amd64,sparcv9}/libpng12.so.0 | | | /usr/lib/libpng10.so.0 | | | /usr/lib/{amd64,sparcv9}/libpng10.so.0 | +----------------------+-----------------------------------------------+ | SUNWpng-devel | /usr/bin/libpng-config -> libpng14-config | | | /usr/bin/{amd64,sparcv9}/libpng-config | | IPS: | /usr/bin/libpng1[024]-config | | image/library/libpng | /usr/bin/{amd64,sparcv9}/libpng1[024]-config | | | /usr/include/libpng -> libpng14 | | | /usr/include/libpng1[024] | | | /usr/lib/pkgconfig/libpng.pc -> libpng14.pc | | | /usr/lib/pkgconfig/libpng1[024].pc | | | /usr/lib/{amd64,sparcv9}/pkgconfig/libpng.pc | | | -> libpng14.pc | | | /usr/lib/{amd64,sparcv9}/pkgconfig/ | | | libpng1[024].pc | +----------------------+-----------------------------------------------+ 4.0 Interface Classification The project exports the following interfaces: +-----------------------------------------------------------------------+ | Interfaces Exported | +------------------------------+--------------------+-------------------+ | Interface Name | Classification | Comment | +------------------------------+--------------------+-------------------+ | libpng14.so.14 | Committed | | | libpng12.so.0 | Obsolete Committed | LSARC/2003/085 | | libpng10.so.0 | Obsolete Committed | LSARC/2003/085 | +------------------------------+--------------------+-------------------+ | SUNWpng | Committed | package names | | SUNWpng-devel | Committed | | | image/library/libpng | Committed | | +------------------------------+--------------------+-------------------+ 5.0 References Original ARC case: LSARC/2003/085 Upstream Web site: http://libpng.org/ _______________________________________________ opensolaris-arc mailing list opensolaris-arc@opensolaris.org