1libpng 1.6.37 - April 14, 2019 2============================== 3 4This is a public release of libpng, intended for use in production code. 5 6 7Files available for download 8---------------------------- 9 10Source files with LF line endings (for Unix/Linux): 11 12 * libpng-1.6.37.tar.xz (LZMA-compressed, recommended) 13 * libpng-1.6.37.tar.gz 14 15Source files with CRLF line endings (for Windows): 16 17 * lp1637.7z (LZMA-compressed, recommended) 18 * lp1637.zip 19 20Other information: 21 22 * README.md 23 * LICENSE.md 24 * AUTHORS.md 25 * TRADEMARK.md 26 27 28Changes since the previous public release (version 1.6.36) 29---------------------------------------------------------- 30 31 * Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free. 32 * Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette. 33 * Fixed a memory leak in pngtest.c. 34 * Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in 35 contrib/pngminus; refactor. 36 * Changed the license of contrib/pngminus to MIT; refresh makefile and docs. 37 (Contributed by Willem van Schaik) 38 * Fixed a typo in the libpng license v2. 39 (Contributed by Miguel Ojeda) 40 * Added makefiles for AddressSanitizer-enabled builds. 41 * Cleaned up various makefiles. 42 43 44Send comments/corrections/commendations to png-mng-implement at lists.sf.net. 45Subscription is required; visit 46https://lists.sourceforge.net/lists/listinfo/png-mng-implement 47to subscribe. 48