diff options
| author | ManoloFLTK <41016272+ManoloFLTK@users.noreply.github.com> | 2023-07-24 20:18:05 +0200 |
|---|---|---|
| committer | ManoloFLTK <41016272+ManoloFLTK@users.noreply.github.com> | 2023-07-24 20:18:05 +0200 |
| commit | 1127ebfcd3f6f118dd1f499db1a51c5dceeddbdc (patch) | |
| tree | 0ddcb1d972ec2dcdbb25f8ec8ba0b588d5b99576 /png/ANNOUNCE | |
| parent | 2fdd1cea91bfb74d3a80ff2a5650acf7a1989f79 (diff) | |
Upgrade bundled libpng to version 1.6.40 - cont'd
Diffstat (limited to 'png/ANNOUNCE')
| -rw-r--r-- | png/ANNOUNCE | 35 |
1 files changed, 15 insertions, 20 deletions
diff --git a/png/ANNOUNCE b/png/ANNOUNCE index ecf9c7043..404cbb0de 100644 --- a/png/ANNOUNCE +++ b/png/ANNOUNCE @@ -1,5 +1,5 @@ -libpng 1.6.37 - April 14, 2019 -============================== +libpng 1.6.40 - June 21, 2023 +============================= This is a public release of libpng, intended for use in production code. @@ -9,13 +9,13 @@ Files available for download Source files with LF line endings (for Unix/Linux): - * libpng-1.6.37.tar.xz (LZMA-compressed, recommended) - * libpng-1.6.37.tar.gz + * libpng-1.6.40.tar.xz (LZMA-compressed, recommended) + * libpng-1.6.40.tar.gz Source files with CRLF line endings (for Windows): - * lp1637.7z (LZMA-compressed, recommended) - * lp1637.zip + * lpng1640.7z (LZMA-compressed, recommended) + * lpng1640.zip Other information: @@ -25,20 +25,15 @@ Other information: * TRADEMARK.md -Changes since the previous public release (version 1.6.36) ----------------------------------------------------------- - - * Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free. - * Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette. - * Fixed a memory leak in pngtest.c. - * Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in - contrib/pngminus; refactor. - * Changed the license of contrib/pngminus to MIT; refresh makefile and docs. - (Contributed by Willem van Schaik) - * Fixed a typo in the libpng license v2. - (Contributed by Miguel Ojeda) - * Added makefiles for AddressSanitizer-enabled builds. - * Cleaned up various makefiles. +Changes from version 1.6.39 to version 1.6.40 +--------------------------------------------- + + * Fixed the eXIf chunk multiplicity checks. + * Fixed a memory leak in pCAL processing. + * Corrected the validity report about tRNS inside png_get_valid(). + * Fixed various build issues on *BSD, Mac and Windows. + * Updated the configurations and the scripts for continuous integration. + * Cleaned up the code, the build scripts, and the documentation. Send comments/corrections/commendations to png-mng-implement at lists.sf.net. |