libpng-1.5.8 has been released and is available from
Changes since the last public release (1.5.7):
Removed '#include config.h"' from contrib/libtests/pngvalid.c. It's not
needed and causes trouble for VPATH building.
Moved AC_MSG_CHECKING([if libraries can be versioned]) later to the proper
location in configure.ac (Gilles Espinasse).
Fix bug in pngerror.c: some long warnings were being improperly truncated
(bug introduced in libpng-1.5.4).
Fixed Min/GW uninstall to remove libpng.dll.a
Conditionalize the install rules for MINGW and CYGWIN in CMakeLists.txt
The pngerror.c bug is a possible 1-bit overflow of long warning and
error messages, and is the subject of CVE-2011-3464 (which I have not