1libpng 1.6.38.git 2================= 3 4This is a development version, not intended to be a public release. 5It will be replaced by a public release, or by another development 6version, at a later time. 7 8 9libpng 1.6.37 - April 14, 2019 10============================== 11 12This is a public release of libpng, intended for use in production code. 13 14 15Files available for download 16---------------------------- 17 18Source files with LF line endings (for Unix/Linux): 19 20 * libpng-1.6.37.tar.xz (LZMA-compressed, recommended) 21 * libpng-1.6.37.tar.gz 22 23Source files with CRLF line endings (for Windows): 24 25 * lp1637.7z (LZMA-compressed, recommended) 26 * lp1637.zip 27 28Other information: 29 30 * README.md 31 * LICENSE.md 32 * AUTHORS.md 33 * TRADEMARK.md 34 35 36Changes since the previous public release (version 1.6.36) 37---------------------------------------------------------- 38 39 * Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free. 40 * Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette. 41 * Fixed a memory leak in pngtest.c. 42 * Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in 43 contrib/pngminus; refactor. 44 * Changed the license of contrib/pngminus to MIT; refresh makefile and docs. 45 (Contributed by Willem van Schaik) 46 * Fixed a typo in the libpng license v2. 47 (Contributed by Miguel Ojeda) 48 * Added makefiles for AddressSanitizer-enabled builds. 49 * Cleaned up various makefiles. 50 51 52Send comments/corrections/commendations to png-mng-implement at lists.sf.net. 53Subscription is required; visit 54https://lists.sourceforge.net/lists/listinfo/png-mng-implement 55to subscribe. 56