diff options
author | Glenn Randers-Pehrson <glennrp at users.sourceforge.net> | 2015-12-09 09:33:54 -0600 |
---|---|---|
committer | Glenn Randers-Pehrson <glennrp at users.sourceforge.net> | 2015-12-09 09:33:54 -0600 |
commit | 520b373ee53e92dce93917fea5a609b2a0291472 (patch) | |
tree | e24dac471d18711b00d9ba3d51dc22d4aee72b53 /ANNOUNCE | |
parent | 623e09d8c51cf336df2b2a6cbe907d092c1075f5 (diff) | |
download | libpng-520b373ee53e92dce93917fea5a609b2a0291472.tar.gz |
[libpng12] Fixed an out-of-range read in png_check_keyword() (Bug report from
Qixue Xiao).
Diffstat (limited to 'ANNOUNCE')
-rw-r--r-- | ANNOUNCE | 48 |
1 files changed, 22 insertions, 26 deletions
@@ -1,51 +1,47 @@ -Libpng 1.2.55 - December 3, 2015 +Libpng 1.2.56beta01 - December 9, 2015 -This is a public release of libpng, intended for use in production codes. +This is not intended to be a public release. It will be replaced +within a few weeks by a public version or by another test version. Files available for download: Source files with LF line endings (for Unix/Linux) and with a "configure" script - libpng-1.2.55.tar.xz (LZMA-compressed, recommended) - libpng-1.2.55.tar.gz + libpng-1.2.56beta01.tar.xz (LZMA-compressed, recommended) + libpng-1.2.56beta01.tar.gz Source files with LF line endings (for Unix/Linux) without the "configure" script - libpng-1.2.55-no-config.tar.xz (LZMA-compressed, recommended) - libpng-1.2.55-no-config.tar.gz + libpng-1.2.56beta01-no-config.tar.xz (LZMA-compressed, recommended) + libpng-1.2.56beta01-no-config.tar.gz Source files with CRLF line endings (for Windows), without the "configure" script - lpng1255.zip - lpng1255.7z + lp1256b01.zip + lp1256b01.7z Project files - libpng-1.2.55-project-netware.zip - libpng-1.2.55-project-wince.zip + libpng-1.2.56beta01-project-netware.zip + libpng-1.2.56beta01-project-wince.zip Other information: - libpng-1.2.55-README.txt - libpng-1.2.55-KNOWNBUGS.txt - libpng-1.2.55-LICENSE.txt - libpng-1.2.55-Y2K-compliance.txt - libpng-1.2.55-[previous version]-diff.txt - libpng-1.2.55-*.asc (armored detached GPG signatures) - -Changes since the last public release (1.2.54): - - Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(), - png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr). - Fixed incorrect implementation of png_set_PLTE() that uses png_ptr - not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126 - vulnerability. - Discontinued distributing tar.bz2 archives. - Discontinued distributing libpng-oldversion-newversion-diff.txt + libpng-1.2.56beta01-README.txt + libpng-1.2.56beta01-KNOWNBUGS.txt + libpng-1.2.56beta01-LICENSE.txt + libpng-1.2.56beta01-Y2K-compliance.txt + libpng-1.2.56beta01-[previous version]-diff.txt + libpng-1.2.56beta01-*.asc (armored detached GPG signatures) + +Changes since the last public release (1.2.55): + + Fixed an out-of-range read in png_check_keyword() (Bug report from + Qixue Xiao). Send comments/corrections/commendations to png-mng-implement at lists.sf.net (subscription required; visit |