Update libpng to 1.2.38 to patch a minor security issue.
diff --git a/ANNOUNCE b/ANNOUNCE
index 48b4e96..204bbfd 100644
--- a/ANNOUNCE
+++ b/ANNOUNCE
@@ -1,5 +1,5 @@
-Libpng 1.2.35 - February 14, 2009
+Libpng 1.2.38 - July 16, 2009
This is a public release of libpng, intended for use in production codes.
@@ -8,48 +8,58 @@
Source files with LF line endings (for Unix/Linux) and with a
"configure" script
- libpng-1.2.35.tar.gz
- libpng-1.2.35.tar.lzma
+ libpng-1.2.38.tar.gz
+ libpng-1.2.38.tar.lzma
(Get the lzma codec from <http://tukaani.org/lzma>).
- libpng-1.2.35.tar.bz2
+ libpng-1.2.38.tar.bz2
Source files with LF line endings (for Unix/Linux) without the
"configure" script
- libpng-1.2.35-no-config.tar.gz
- libpng-1.2.35-no-config.tar.lzma
- libpng-1.2.35-no-config.tar.bz2
+ libpng-1.2.38-no-config.tar.gz
+ libpng-1.2.38-no-config.tar.lzma
+ libpng-1.2.38-no-config.tar.bz2
Source files with CRLF line endings (for Windows), without the
"configure" script
- lpng1235.zip
- lpng1235.7z
- lpng1235.tar.bz2
+ lpng1238.zip
+ lpng1238.7z
+ lpng1238.tar.bz2
Project files
- libpng-1.2.35-project-netware.zip
- libpng-1.2.35-project-wince.zip
+ libpng-1.2.38-project-netware.zip
+ libpng-1.2.38-project-wince.zip
Other information:
- libpng-1.2.35-README.txt
- libpng-1.2.35-KNOWNBUGS.txt
- libpng-1.2.35-LICENSE.txt
- libpng-1.2.35-Y2K-compliance.txt
- libpng-1.2.35-[previous version]-diff.txt
+ libpng-1.2.38-README.txt
+ libpng-1.2.38-KNOWNBUGS.txt
+ libpng-1.2.38-LICENSE.txt
+ libpng-1.2.38-Y2K-compliance.txt
+ libpng-1.2.38-[previous version]-diff.txt
-Changes since the last public release (1.2.34):
+Changes since the last public release (1.2.37):
-version 1.2.35 [February 14, 2009]
+version 1.2.38 [July 16, 2009]
- Zero out all arrays of pointers after png_malloc(). (Tavis Ormandy)
- Use png_memset() instead of a loop to intialize pointers. We realize
- this will not work on platforms where the NULL pointer is not all zeroes.
+ Revised libpng*.txt and libpng.3 to mention calling png_set_IHDR()
+ multiple times and to specify the sample order in the tRNS chunk,
+ because the ISO PNG specification has a typo in the tRNS table.
+ Changed several PNG_UNKNOWN_CHUNK_SUPPORTED to
+ PNG_HANDLE_AS_UNKNOWN_SUPPORTED, to make the png_set_keep mechanism
+ available for ignoring known chunks even when not saving unknown chunks.
+ Added PNG_NO_HANDLE_AS_UNKNOWN in the PNG_LEGACY_SUPPORTED block of
+ pngconf.h, and moved the various unknown chunk macro definitions
+ outside of the PNG_READ|WRITE_ANCILLARY_CHUNK_SUPPORTED blocks.
+ Added a reference to the libpng license in each source file.
+ Rebuilt configure scripts with autoconf-2.63.
+
+
Send comments/corrections/commendations to png-mng-implement at lists.sf.net
-(subscription required; visit
+(subscription required; visit
https://lists.sourceforge.net/lists/listinfo/png-mng-implement
to subscribe) or to glennrp at users.sourceforge.net