SRB2/libs/libpng-src/ANNOUNCE

48 lines
1.4 KiB
Plaintext
Raw Normal View History

libpng 1.6.37 - April 14, 2019
==============================
2014-03-15 09:59:03 -07:00
This is a public release of libpng, intended for use in production code.
2014-03-15 09:59:03 -07:00
Files available for download
----------------------------
2014-03-15 09:59:03 -07:00
Source files with LF line endings (for Unix/Linux):
2014-03-15 09:59:03 -07:00
* libpng-1.6.37.tar.xz (LZMA-compressed, recommended)
* libpng-1.6.37.tar.gz
2014-03-15 09:59:03 -07:00
Source files with CRLF line endings (for Windows):
2014-03-15 09:59:03 -07:00
* lp1637.7z (LZMA-compressed, recommended)
* lp1637.zip
2014-03-15 09:59:03 -07:00
Other information:
* README.md
* LICENSE.md
* AUTHORS.md
* TRADEMARK.md
2014-03-15 09:59:03 -07:00
Changes since the previous public release (version 1.6.36)
----------------------------------------------------------
2014-03-15 09:59:03 -07:00
* Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
* Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
* Fixed a memory leak in pngtest.c.
* Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
contrib/pngminus; refactor.
* Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
(Contributed by Willem van Schaik)
* Fixed a typo in the libpng license v2.
(Contributed by Miguel Ojeda)
* Added makefiles for AddressSanitizer-enabled builds.
* Cleaned up various makefiles.
Send comments/corrections/commendations to png-mng-implement at lists.sf.net.
Subscription is required; visit
https://lists.sourceforge.net/lists/listinfo/png-mng-implement
to subscribe.