Softpedia >Linux >Programming >Libraries >libpng >  Changelog

libpng Changelog

What's new in libpng 1.6.16

Dec 23, 2014
  • Added ".align 2" to arm/filter_neon.S to support old GAS assemblers that don't do alignment correctly.
  • Revised Makefile.am and scripts/*.dfn to work with MinGW/MSYS; renamed scripts/*.dfn to scripts/*.c (Bob Friesenhahn and John Bowler).
  • Quiet a "comparison always true" warning in pngstest.c (John Bowler).
  • Restored a test on width that was removed from png.c at libpng-1.6.9 (Bug report by Alex Eubanks).
  • Fixed an overflow in png_combine_row with very wide interlaced images.

New in libpng 1.6.9 (Feb 7, 2014)

  • This is a minor cleanup release.

New in libpng 1.6.8 (Dec 21, 2013)

  • This version has a bugfix for CVE-2013-6954 (null pointer dereference), plus some code cleanup.

New in libpng 1.6.7 (Nov 20, 2013)

  • This version adds ARMv8 support and improves unknown chunk support.

New in libpng 1.6.4 (Sep 13, 2013)

  • This version adds minor improvements in speed and footprint.

New in libpng 1.6.1 (Mar 30, 2013)

  • This is a cleanup release with no new features or significant bugfixes.
  • The default gamma handling is improved in the new simplified API.

New in libpng 1.6.0 (Feb 16, 2013)

  • This version adds a "simplified API" and removes some symbols which were deprecated in libpng15.

New in libpng 1.5.14 (Jan 29, 2013)

  • This is a cleanup release with some minor bugfixes and a major fix to compressed iTXt handling.
  • The git repository at SourceForge has been relocated.

New in libpng 1.5.13 (Sep 28, 2012)

  • This version fixes a bug in the png_set_filler function that would incorrectly strip the filler channel under some conditions while writing.

New in libpng 1.5.12 (Jul 12, 2012)

  • This version makes a one-byte change to the pre-built Makefile.in, to address CVE-2012-3386, which reports a vulnerability in automake.
  • It is not necessary to rebuild libpng applications built with earlier versions of libpng.
  • The change only protects the libpng maintainer who is running "make distcheck" after failing to set a safe umask.

New in libpng 1.5.10 (Mar 30, 2012)

  • This is a security release to fix a potential memory corruption (CVE-2011-3048).

New in libpng 1.5.9 (Feb 19, 2012)

  • This is a security release to fix a potential unlimited buffer overrun (CVE-2011-3026).

New in libpng 1.5.8 (Feb 4, 2012)

  • This version fixes a bug in pngerror.c: some long warnings were being improperly truncated and could cause a one-byte buffer overrun (CVE-2011-3464).

New in libpng 1.5.7 (Dec 16, 2011)

  • This release adds support for the ARM processor and further optimizes the code for reading interlaced PNG images.

New in libpng 1.5.6 (Nov 3, 2011)

  • The speed of decoding interlaced images has been improved.

New in libpng 1.4.4 (Sep 24, 2010)

  • This is a cleanup release with no significant changes to the source files.
  • The CMakeLists.txt script has been updated.
  • Some unwanted files were deleted.
  • The prebuilt autoconf scripts were updated.

New in libpng 1.4.3 (Jun 27, 2010)

  • This version fixes a bug in the progressive reader with reading malformed PNG files that have more row data in the IDAT chunk than is required (CVE-2010-1205) and a memory leak when reading malformed sCAL chunks.

New in libpng 1.2.40 (Sep 11, 2009)

  • An extra png_debug() statement was removed.
  • CMakeLists.txt was revised.
  • This is intended to be the last of the libpng-1.2.X series, with only security fixes from now on.

New in libpng 1.2.38 (Jul 16, 2009)

  • Rebuilt configuration files with autoconf-2.63.
  • Revised license declarations to read "libpng license".
  • Revised conditional compilation of unknown chunk support.

New in libpng 1.2.37 (Jun 4, 2009)

  • Fixed bug with new png_memset() of the big_row_buffer. Otherwise the changes are extensive but just cosmetic.

New in libpng 1.2.35 (Feb 19, 2009)

  • This release fixes a newly discovered vulnerability in which some arrays of pointers are not initialized prior to using malloc to define the pointers. If the application runs out of memory while executing the allocation loop (which can be forced by malevolent input), libpng will jump to a cleanup process that attempts to free all of the pointers, including the undefined ones.

New in libpng 1.2.34 (Dec 18, 2008)

  • This release avoids a potential double-free situation in png_check_keyword() and remedies a shortcoming in png_write_png() by adding separate PNG_TRANSFORM_FILLER_BEFORE and PNG_TRANSFORM_FILLER_AFTER transforms.

New in libpng 1.2.34 Beta 07 (Dec 10, 2008)

  • Added PNG_TRANSFORM_STRIP_FILLER_BEFORE and PNG_TRANSFORM_STRIP_FILLER_AFTER macros and deprecated PNG_TRANSFORM_STRIP_FILLER.

New in libpng 1.2.34 Beta 06 (Dec 9, 2008)

  • Respect earlier setting of png_set_filler() byte position in png_write_png().

New in libpng 1.4.0 Beta 44 (Dec 6, 2008)

  • Merged with libpng-1.2.34beta05 to remove redundant NULL tests in png_check_keyword().

New in libpng 1.2.34 Beta 03 (Dec 1, 2008)

  • Merged png_debug from with 1.4.0beta (removes
  • from messages)

New in libpng 1.2.33 (Oct 31, 2008)

  • This release eliminates a vulnerability to memory leaks after reading a malformed tEXt chunk.

New in libpng 1.2.32 (Sep 18, 2008)

  • Fixed crash bug with reading multiple zTXt chunks.