ANNOUNCE 1.4 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647
  1. libpng 1.6.37 - April 14, 2019
  2. ==============================
  3. This is a public release of libpng, intended for use in production code.
  4. Files available for download
  5. ----------------------------
  6. Source files with LF line endings (for Unix/Linux):
  7. * libpng-1.6.37.tar.xz (LZMA-compressed, recommended)
  8. * libpng-1.6.37.tar.gz
  9. Source files with CRLF line endings (for Windows):
  10. * lp1637.7z (LZMA-compressed, recommended)
  11. * lp1637.zip
  12. Other information:
  13. * README.md
  14. * LICENSE.md
  15. * AUTHORS.md
  16. * TRADEMARK.md
  17. Changes since the previous public release (version 1.6.36)
  18. ----------------------------------------------------------
  19. * Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
  20. * Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
  21. * Fixed a memory leak in pngtest.c.
  22. * Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
  23. contrib/pngminus; refactor.
  24. * Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
  25. (Contributed by Willem van Schaik)
  26. * Fixed a typo in the libpng license v2.
  27. (Contributed by Miguel Ojeda)
  28. * Added makefiles for AddressSanitizer-enabled builds.
  29. * Cleaned up various makefiles.
  30. Send comments/corrections/commendations to png-mng-implement at lists.sf.net.
  31. Subscription is required; visit
  32. https://lists.sourceforge.net/lists/listinfo/png-mng-implement
  33. to subscribe.