• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1libpng 1.6.38.git
2=================
3
4This is a development version, not intended to be a public release.
5It will be replaced by a public release, or by another development
6version, at a later time.
7
8
9libpng 1.6.37 - April 14, 2019
10==============================
11
12This is a public release of libpng, intended for use in production code.
13
14
15Files available for download
16----------------------------
17
18Source files with LF line endings (for Unix/Linux):
19
20 * libpng-1.6.37.tar.xz (LZMA-compressed, recommended)
21 * libpng-1.6.37.tar.gz
22
23Source files with CRLF line endings (for Windows):
24
25 * lp1637.7z (LZMA-compressed, recommended)
26 * lp1637.zip
27
28Other information:
29
30 * README.md
31 * LICENSE.md
32 * AUTHORS.md
33 * TRADEMARK.md
34
35
36Changes since the previous public release (version 1.6.36)
37----------------------------------------------------------
38
39 * Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
40 * Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
41 * Fixed a memory leak in pngtest.c.
42 * Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
43   contrib/pngminus; refactor.
44 * Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
45   (Contributed by Willem van Schaik)
46 * Fixed a typo in the libpng license v2.
47   (Contributed by Miguel Ojeda)
48 * Added makefiles for AddressSanitizer-enabled builds.
49 * Cleaned up various makefiles.
50
51
52Send comments/corrections/commendations to png-mng-implement at lists.sf.net.
53Subscription is required; visit
54https://lists.sourceforge.net/lists/listinfo/png-mng-implement
55to subscribe.
56