1libpng 1.6.37 - April 14, 2019
2==============================
3
4This is a public release of libpng, intended for use in production code.
5
6
7Files available for download
8----------------------------
9
10Source files with LF line endings (for Unix/Linux):
11
12 * libpng-1.6.37.tar.xz (LZMA-compressed, recommended)
13 * libpng-1.6.37.tar.gz
14
15Source files with CRLF line endings (for Windows):
16
17 * lp1637.7z (LZMA-compressed, recommended)
18 * lp1637.zip
19
20Other information:
21
22 * README.md
23 * LICENSE.md
24 * AUTHORS.md
25 * TRADEMARK.md
26
27
28Changes since the previous public release (version 1.6.36)
29----------------------------------------------------------
30
31 * Fixed a use-after-free vulnerability (CVE-2019-7317) in png_image_free.
32 * Fixed a memory leak in the ARM NEON implementation of png_do_expand_palette.
33 * Fixed a memory leak in pngtest.c.
34 * Fixed two vulnerabilities (CVE-2018-14048, CVE-2018-14550) in
35   contrib/pngminus; refactor.
36 * Changed the license of contrib/pngminus to MIT; refresh makefile and docs.
37   (Contributed by Willem van Schaik)
38 * Fixed a typo in the libpng license v2.
39   (Contributed by Miguel Ojeda)
40 * Added makefiles for AddressSanitizer-enabled builds.
41 * Cleaned up various makefiles.
42
43
44Send comments/corrections/commendations to png-mng-implement at lists.sf.net.
45Subscription is required; visit
46https://lists.sourceforge.net/lists/listinfo/png-mng-implement
47to subscribe.
48