png-mng-announce — Security advisories, libpng/libmng releases, and PNG/MNG spec updates

[png-mng-announce] libpng-1.5.5 is available

[Glenn Randers-P. <gl...@gm...>]

Libpng-1.5.5 is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net/index.html

Changes since the last public release (1.5.4):

  Fixed some typos and made other minor changes in the manual.
  Updated contrib/pngminus/makefile.std (Samuli Souminen)
  Revised Makefile.am and Makefile.in to look in the right directory for
    pnglibconf.h.prebuilt
  Enabled compilation with g++ compiler.  This compiler does not recognize
    the file extension, so it always compiles with C++ rules.  Made minor
    changes to pngrutil.c to cast results where C++ expects it but C does not.
  Minor editing of libpng.3 and libpng-manual.txt.
  Revised CMakeLists.txt (Clifford Yapp)
  Updated commentary about the png_rgb_to_gray() default coefficients
    in the manual and in pngrtran.c
  Prevent unexpected API exports from non-libpng DLLs on Windows.  The "_DLL"
    is removed from the test of whether a DLL is being built (this erroneously
    caused the libpng APIs to be marked as DLL exports in static builds under
    Microsoft Visual Studio).  Almost all of the libpng building configuration
    is moved from pngconf.h to pngpriv.h, but PNG_DLL_EXPORT remains in
    pngconf.h, though, so that it is colocated with the import definition (it
    is no longer used anywhere in the installed headers).  The VStudio project
    definitions have been cleaned up: "_USRDLL" has been removed from the
    static library builds (this was incorrect), and PNG_USE_DLL has been added
    to pngvalid to test the functionality (pngtest does not supply it,
    deliberately).  The spurious "_EXPORTS" has been removed from the
    libpng build (all these errors were a result of copy/paste between project
    configurations.)
  Added new types and internal functions for CIE RGB end point handling to
    pngpriv.h (functions yet to be implemented).
  Ensure the CMAKE_LIBRARY_OUTPUT_DIRECTORY is set in CMakeLists.txt
    (Clifford Yap)
  Fixes to rgb_to_gray and cHRM XYZ APIs (John Bowler):
    The rgb_to_gray code had errors when combined with gamma correction.
    Some pixels were treated as true grey when they weren't and such pixels
    and true grey ones were not gamma corrected (the original value of the
    red component was used instead).  APIs to get and set cHRM using color
    space end points have been added and the rgb_to_gray code that defaults
    based on cHRM, and the divide-by-zero bug in png_handle_cHRM (CERT
    VU#477046, CVE-2011-3328, introduced in 1.5.4) have been corrected.
  A considerable number of tests has been added to pngvalid for the
    rgb_to_gray transform.
  Arithmetic errors in rgb_to_gray whereby the calculated gray value was
    truncated to the bit depth rather than rounded have been fixed except in
    the 8-bit non-gamma-corrected case (where consistency seems more important
    than correctness.)  The code still has considerable inaccuracies in the
    8-bit case because 8-bit linear arithmetic is used.
  Added "$(ARCH)" option to makefile.darwin
  Added SunOS support to configure.ac and Makefile.am
  Changed png_chunk_benign_error() to png_warning() in png.c, in
    png_XYZ_from_xy_checked().
  Fixed 64-bit compilation errors (gcc). The errors fixed relate
    to conditions where types that are 32 bits in the GCC 32-bit
    world (uLong and png_size_t) become 64 bits in the 64-bit
    world.  This produces potential truncation errors that the
    compiler correctly flags.
  Constant changes for 64-bit compatibility (removal of L suffixes). The
    16-bit cases still use "L" as we don't have a 16-bit test system.

Glenn

[png-mng-announce] libpng-1.2.46 and 1.0.56 are available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.2.46 and 1.0.56 are available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net/index.html

These fix a problem with Makefile.in and Makefile.am
that caused 1.2.45 and 1.0.55 to fail to build.  Also I added
some filenames (CMakeLists.txt, projects/xcode, and
pnggccrd.c) to the EXTRA_DIST list so "make distcheck"
would work properly.

I added "make distcheck" to my private build procedure for
all versions to help prevent such errors in the future.

Glenn

[png-mng-announce] libpng-1.5.4, 1.4.8, 1.2.45, and 1.0.55 are available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.5.4, 1.4.8, 1.2.45, and 1.0.55 are available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

There are no changes from the RC01's.  All of them
fix CVE-2011-2501 and some other minor security problems.

version 1.2.45 and 1.0.55  [July 7, 2011]

  Fixed uninitialized memory read in png_format_buffer() (Bug
    report by Frank Busse, related to CVE-2004-0421).
  Pass "" instead of '\0' to png_default_error() in png_err().  This mistake
    was introduced in libpng-1.2.20beta01.
  Check for up->location !PNG_AFTER_IDAT when writing unknown chunks
    before IDAT.
  Ported bugfix in pngrtran.c from 1.5.3: when expanding a paletted image,
    always expand to RGBA if transparency is present.
  Check for integer overflow in png_set_rgb_to_gray().
  Check for sCAL chunk too short.

libpng-1.4.8 changes since the last public release (1.4.7):

  Undef "_ALL_SOURCE" for AIX, to prevent "jmpbuf" from being redefined.
  Copied png_debug macros from pngpriv.h into pngtest.c and removed
    "#include pngpriv.h" from pngtest.c, to avoid setting a bad example.
  Pass "" instead of '\0' to png_default_error() in png_err().  This mistake
    was introduced in libpng-1.2.20beta01.
  Check for up->location !PNG_AFTER_IDAT when writing unknown chunks
    before IDAT.
  Ported bugfix in pngrtran.c from 1.5.3: when expanding a paletted image,
    always expand to RGBA if transparency is present.
  Ported bugfix in pngrtran.c from 1.5.3: Ensure coefficients are OK for
    png_rgb_to_gray_fixed(); check for integer overflow in
    png_set_rgb_to_gray().
  Fixed uninitialized memory read in png_format_buffer() (Bug report by
    Frank Busse, related to CVE-2004-0421).
  Fixed error in "ACCURATE" 16-to-8 scaling (John Bowler).
  Check for sCAL chunk too short.

libpng-1.5.4 changes since the last public release (1.5.2):

  Re-initialize the zlib compressor before compressing non-IDAT chunks.
  Added API functions to set parameters for zlib compression of non-IDAT
    chunks.
  Updated scripts/symbols.def with new API functions.
  Only compile the new zlib re-initializing code when text or iCCP is
    supported, using PNG_WRITE_COMPRESSED_TEXT_SUPPORTED macro.
  Improved the optimization of the zlib CMF byte (see libpng-1.2.6).
  Optimize the zlib CMF byte in non-IDAT compressed chunks
  Fixed gcc -ansi -pedantic compile. A strict ANSI system does not have
    snprintf, and the "__STRICT_ANSI__" detects that condition more reliably
    than __STDC__ (John Bowler).
  Removed the PNG_PTR_NORETURN attribute because it too dangerous. It tells
    the compiler that a user supplied callback (the error handler) does not
    return, yet there is no guarantee in practice that the application code
    will correctly implement the error handler because the compiler only
    issues a warning if there is a mistake (John Bowler).
  Removed the no-longer-used PNG_DEPSTRUCT macro.
  Updated the zlib version to 1.2.5 in the VStudio project.
  Fixed 64-bit builds where png_uint_32 is smaller than png_size_t in
    pngwutil.c (John Bowler).
  Fixed bug with stripping the filler or alpha channel when writing, that
    was introduced in libpng-1.5.2 (bug report by Andrew Church).
  Updated pngtest.png with the new zlib CMF optimization.
  Cleaned up conditional compilation code and of background/gamma handling
    Internal changes only except a new option to avoid compiling the
    png_build_grayscale_palette API (which is not used at all internally.)
    The main change is to move the transform tests (READ_TRANSFORMS,
    WRITE_TRANSFORMS) up one level to the caller of the APIs.  This avoids
    calls to spurious functions if all transforms are disabled and slightly
    simplifies those functions.  Pngvalid modified to handle this.
    A minor change is to stop the strip_16 and expand_16 interfaces from
    disabling each other; this allows the future alpha premultiplication
    code to use 16-bit intermediate values while still producing 8-bit
output.
    png_do_background and png_do_gamma have been simplified to take a single
    pointer to the png_struct rather than pointers to every item required
    from the png_struct. This makes no practical difference to the internal
    code.
  A serious bug in the pngvalid internal routine 'standard_display_init' has
    been fixed - this failed to initialize the red channel and accidentally
    initialized the alpha channel twice.
  Changed png_struct jmp_buf member name from png_jmpbuf to tmp_jmpbuf to
    avoid a clash with the png_jmpbuf macro on some platforms.
  Added appropriate feature test macros to ensure libpng sees the correct
API
   _POSIX_SOURCE is defined in pngpriv.h, pngtest.c and pngvalid.c to ensure
    that POSIX conformant systems disable non-POSIX APIs.  _ISOC99_SOURCE is
    defined in pngpriv.h to obtain the ISO C99 snprintf definition, when
    available.
  Removed png_snprintf and added formatted warning messages.  This change
adds
    internal APIs to allow png_warning messages to have parameters without
    requiring the host OS to implement snprintf.  As a side effect the
    dependency of the tIME-supporting RFC1132 code on stdio is removed and
    PNG_NO_WARNINGS does actually work now.
  Added PNG_WRITE_OPTIMIZE_CMF_SUPPORTED macro to make the zlib "CMF" byte
    optimization configureable.
  Internal functions were added to claim/release the z_stream and,
hopefully,
    make the code more robust.  Also deflateEnd checking is added -
previously
    libpng would ignore an error at the end of the stream.
  Removed the -D_ALL_SOURCE from definitions for AIX in CMakeLists.txt
  Implemented premultiplied alpha support: png_set_alpha_mode API
  Added expand_16 support to the high level interface.
  Added named value and 'flag' gamma support to png_set_gamma.  Made a minor
    change from the previous (unreleased) ABI/API to hide the exact value
used
    for Macs - it's not a good idea to embed this in the ABI!
  Moved macro definitions for PNG_HAVE_IHDR, PNG_HAVE_PLTE, and
PNG_AFTER_IDAT
    from pngpriv.h to png.h because they must be visible to applications
    that call png_set_unknown_chunks().
  Check for up->location !PNG_AFTER_IDAT when writing unknown chunks
    before IDAT.
  Improved "pngvalid --speed" to exclude more of pngvalid from the time.
  Documented png_set_alpha_mode(), other changes in
libpng.3/libpng-manual.txt
  The cHRM chunk now sets the defaults for png_set_rgb_to_gray() (when
negative
    parameters are supplied by the caller), while in the absence of cHRM
    sRGB/Rec 709 values are still used.
  The bKGD chunk no longer overwrites the background value set by
    png_set_background(), allowing the latter to be used before the file
    header is read. It never performed any useful function to override
    the default anyway.
  Added memory overwrite and palette image checks to pngvalid.c
    Previously palette image code was poorly checked. Since the
transformation
    code has a special palette path in most cases this was a severe
weakness.
  Minor cleanup and some extra checking in pngrutil.c and pngrtran.c. When
    expanding an indexed image, always expand to RGBA if transparency is
    present.
  Reversed earlier 1.5.3 change of transformation order; move png_expand_16
    back where it was.  The change doesn't work because it requires 16-bit
    gamma tables when the code only generates 8-bit ones.  This fails
    silently; the libpng code just doesn't do any gamma correction.  Moving
    the tests back leaves the old, inaccurate, 8-bit gamma calculations, but
    these are clearly better than none!
  png_set_background() and png_expand_16() did not work together correctly.
    This problem is present in 1.5.2; if png_set_background is called with
    need_expand false and the matching 16 bit color libpng erroneously just
    treats it as an 8-bit color because of where png_do_expand_16 is in the
    transform list.  This simple fix reduces the supplied colour to 8-bits,
    so it gets smashed, but this is better than the current behavior.
  Added tests for expand16, more fixes for palette image tests to pngvalid.
    Corrects the code for palette image tests and disables attempts to
    validate palette colors.
  Fixed uninitialized memory read in png_format_buffer() (Bug report by
    Frank Busse, related to CVE-2004-0421).
  Fixed png_handle_sCAL which is broken in 1.5; added sCAL to pngtest.png
  Revised documentation about png_set_user_limits() to say that it also
affects
    png writing.
  Revised handling of png_set_user_limits() so that it can increase the
    limit beyond the PNG_USER_WIDTH|HEIGHT_MAX; previously it could only
    reduce it.
  Make the 16-to-8 scaling accurate. Dividing by 256 with no rounding is
    wrong (high by one) 25% of the time. Dividing by 257 with rounding is
    wrong in 128 out of 65536 cases. Getting the right answer all the time
    without division is easy.
  Added "_SUPPORTED" to the PNG_WRITE_CUSTOMIZE_ZTXT_COMPRESSION macro.
  Added projects/owatcom, an IDE project for OpenWatcom to replace
    scripts/makefile.watcom.  This project works with OpenWatcom 1.9. The
    IDE autogenerates appropriate makefiles (libpng.mk) for batch
processing.
    The project is configurable, unlike the Visual Studio project, so long
    as the developer has an awk.
  Changed png_set_gAMA to limit the gamma value range so that the inverse
    of the stored value cannot overflow the fixed point representation,
    and changed other things OpenWatcom warns about.
  Revised pngvalid.c to test PNG_ALPHA_MODE_SUPPORTED correctly. This allows
    pngvalid to build when ALPHA_MODE is not supported, which is required if
    it is to build on libpng 1.4.
  Removed string/memory macros that are no longer used and are not
    necessarily fully supportable, particularly png_strncpy and
png_snprintf.
  Added log option to pngvalid.c and attempted to improve gamma messages.
  People found the presence of a beta release following an rc release
    to be confusing; therefore we bump the version to libpng-1.5.4beta01
    and there will be no libpng-1.5.3 release.
  Moved definitions of PNG_HAVE_IHDR, PNG_AFTER_IDAT, and PNG_HAVE_PLTE
    outside of an unknown-chunk block in png.h because they are also
    needed for other uses.
  Added png_set_scale_16() API, to match inaccurate results from previous
    libpng versions, configurable with PNG_READ_SCALE_16_TO_8_SUPPORTED.
  Fixed a problem in png_do_expand_palette() exposed by optimization in
    1.5.3beta06
  Also removed a spurious and confusing "trans" member ("trans") from
png_info.
  The palette expand optimization prevented expansion to an intermediate
RGBA
    form if tRNS was present but alpha was marked to be stripped; this
exposed
    a check for tRNS in png_do_expand_palette() which is inconsistent with
the
    code elsewhere in libpng.
  Added PNG_TRANSFORM_SCALE_16 to the high-level read transforms.
  If PNG_READ_16_TO_8_ACCURATE_SCALE is not enabled, png_set_scale_16()
    and png_do_scale_16_to_8() aren't built.
  Revised contrib/visupng, gregbook, and pngminim to demonstrate
scale_16_to_8
  Fixed pngvalid, simplified macros, added checking for 0 in sCAL.
    The ACCURATE scale macro is no longer defined in libpng-1.5 - call the
    png_scale_16_to_8 API.  Made sure that PNG_READ_16_TO_8 is still defined
    if the png_strip_16_to_8 API is present.  png_check_fp_number now
    maintains some state so that positive, negative and zero values are
    identified.  sCAL uses these to be strictly spec conformant.
  Define PNG_ALLOCATED to "restrict" only if MSC_VER >= 1400.

[png-mng-announce] libpng-1.4.7 is available

[Glenn Randers-P. <gl...@gm...>]

Libpng-1.4.7 is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

Changes since the last public release (1.4.6):

  Relocated misplaced new declarations in pngwutil.c.
  Disabled PNG_PEDANTIC_WARNINGS for all MSC versions as in libpng-1.4.5.

Libpng-1.4.6 would not build on some platforms.

I suspect that libpng-1.5.3beta02 may exhibit the same failure some MSC
versions
(when not using the visualc71 project, which defines
PNG_NO_PEDANTIC_WARNINGS).

Glenn

Re: [png-mng-announce] libpng-1.4.6 is available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.4.6 doesn't compile on all systems due to
some misplaced declarations in pngwutil.c

Please wait for libpng-1.4.7

Glenn

[png-mng-announce] libpng-1.4.6 is available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.4.6 is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

There are no changes from libpng-1.4.6beta02.

Changes since the last public release (1.4.5):

  Fixed bug in background transformation handling in pngrtran.c (it was
    looking for the flag in png_ptr->transformations instead of in
    png_ptr->flags) (David Raymond).
  Fixed misspelled macros in contrib/pngminim (Cosmin)
  Updated CMakeLists.txt (Clifford Yapp)
  Fixed some typecasts in png_debug statements (Cosmin).
  Updated documentation of png_set|get_tRNS() (Thomas Klausner).
  Added png_const_structp and png_const_infop types, and used them in
    prototypes for most png_get_*() functions.
  In the manual, describe the png_get_IHDR() arguments in the correct order.
  Updated the synopses in the manual to reflect recent changes.
  Fixed a typo in the *.def files and deleted entries that are now
    declared in pngpriv.h
  Updated contrib/pngsuite/README to add the word "modify".
  Added the private PNG_UNUSED() macro definition in pngconf.h.
  ifdef out mask arrays in pngread.c when interlacing is not supported.
  Added attribute definition (warnings) for MSC_VER >= 1300 in pngconf.h
  Added -D_CRT_SECURE_NO_DEPRECATE to CFLAGS in makefile.vcwin32
  Fixed mistake in the descriptions of user read_transform and
write_transform
    function prototypes in the manual.  The row_info struct is
png_row_infop.
  Added a request in the manual that applications do not use "png_" or
    "PNG_" to begin any of their own symbols.
  Fixed incorrect examples of callback prototypes in the manual, that were
    introduced in libpng-1.0.0.
  Removed "strip" from contrib/pngminim/*/makefile.
  Fixed a bug (present since libpng-1.0.7) that makes png_handle_sPLT() fail
    to compile when PNG_NO_POINTER_INDEXING is defined (Chubanov Kirill)
  Improved the optimization of the zlib CMF byte (see libpng-1.2.6beta03).

This is expected to be the last release of 1.4.x unless
a security release becomes necessary.

Glenn

[png-mng-announce] libpng-1.5.2 is available

[Glenn Randers-P. <gl...@gm...>]

Libpng-1.5.2 is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

Changes since the last public release (1.5.1):

  More -Wshadow fixes for older gcc compilers.  Older gcc versions
apparently
    check formal parameters names in function declarations (as well as
    definitions) to see if they match a name in the global namespace.
  Revised PNG_EXPORTA macro to not use an empty parameter, to accommodate
the
    old VisualC++ preprocessor.
  Turned on interlace handling in png_read_png().
  Fixed gcc pendantic warnings.
  Handle longjmp in Cygwin.
  Fixed png_get_current_row_number() in the interlaced case.
  Cleaned up ALPHA flags and transformations.
  Implemented expansion to 16 bits.
  Fixed mistake in the descriptions of user read_transform and
write_transform
    function prototypes in the manual.  The row_info struct is
png_row_infop.
  Corrected png_get_current_row_number documentation
  Fixed the read/write row callback documentation.
    This documents the current behavior, where the callback is called after
    every row with information pertaining to the next row.
  Fixed scripts/makefile.vcwin32
  Updated contrib/pngsuite/README to add the word "modify".
  Define PNG_ALLOCATED and other attributes to blank when _MSC_VER<1300.
  ifdef out mask arrays in pngread.c when interlacing is not supported.
  Added a hint to try CPP=/bin/cpp if "cpp -E" fails in
scripts/pnglibconf.mak
    and in contrib/pngminim/*/makefile, eg., on SunOS 5.10, and removed
"strip"
    from the makefiles.
  Fixed a bug (present since libpng-1.0.7) that makes png_handle_sPLT() fail
    to compile when PNG_NO_POINTER_INDEXING is defined (Chubanov Kirill)
  Don't include standard header files in png.h while building the symbol
table,
    to avoid cpp failure on SunOS (introduced PNG_BUILDING_SYMBOL_TABLE
macro).

[png-mng-announce] libpng-1.5.1 is available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.5.1 is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net


Changes since the last public release (1.5.0):

  Added description of png_set_crc_action() to the manual.
  Added a note in the manual that the type of the iCCP profile was changed
    from png_charpp to png_bytepp in png_get_iCCP().  Similarly,
    it was changed from png_charpp to png_const_bytepp in png_set_iCCP().
  Ensure that png_rgb_to_gray ignores palette mapped images, if libpng
    internally happens to call it with one.
  Fixed the failure to handle palette mapped images correctly.
  Fixed a bug in handling of interlaced images (bero at arklinux.org).
  Updated CMakeLists.txt (Clifford Yapp)
  Fixed typecasting of some png_debug() statements (Cosmin)
  Updated documentation of png_set|get_tRNS() (Thomas Klausner).
  Mentioned in the documentation that applications must #include "zlib.h"
    if they need access to anything in zlib.h, and that a number of
    macros such as png_memset() are no longer accessible by applications.
  Corrected pngvalid gamma test "sample" function to access all of the color
    samples of each pixel, instead of sampling the red channel three times.
  Changed variable names index, div, exp, and gamma to char_index, divisor,
    exp_b10, and gamma_val, respectively, to avoid "shadow" warnings.
  Prevent png_push_crc_skip() from hanging while reading an unknown chunk
    or an over-large compressed zTXt chunk with the progressive reader.
  Eliminated more GCC "shadow" warnings.
  Revised png_fixed() in png.c to avoid compiler warning about reaching the
    end without returning anything.
  In the manual, describe the png_get_IHDR() arguments in the correct order.
  Added const_png_structp and const_png_infop types, and used them in
    prototypes for most png_get_*() functions.
  Added png_get_io_chunk_type() and deprecated png_get_io_chunk_name()
  Added synopses for the IO_STATE functions and other missing synopses
    to the manual. Removed the synopses from libpngpf.3 because they
    were out of date and no longer useful.  Better information can be
    obtained by reading the prototypes and comments in pngpriv.h
  Attempted to fix cpp on Solaris with S. Studio 12 cc, fix build
    Added a make macro DFNCPP that is a CPP that will accept the tokens in
    a .dfn file and adds configure stuff to test for such a CPP.  ./configure
    should fail if one is not available.
  Corrected const_png_ in png.h to png_const_ to avoid polluting the namespace.
  Added png_get_current_row_number and png_get_current_pass_number for the
    benefit of the user transform callback.
  Added png_process_data_pause and png_process_data_skip for the benefit of
    progressive readers that need to stop data processing or want to optimize
    skipping of unread data (e.g. if the reader marks a chunk to be skipped.)
  Enhanced pngvalid, corrected an error in gray_to_rgb, corrected doc error.
    pngvalid contains tests of transforms, which tests are currently disabled
    because they are incompletely tested.  gray_to_rgb was failing to expand
    the bit depth for smaller bit depth images; this seems to be a long
    standing error and resulted, apparently, in invalid output.  The
    documentation did not accurately describe what libpng really does when
    converting RGB to gray.
  Fixed incorrect examples of callback prototypes in the manual, that were
    introduced in libpng-1.0.0.
  In addition the order of the png_get_uint macros with respect to the
    relevant function definitions has been reversed.  This helps the
    preprocessing of the symbol files be more robust.  Furthermore, the
    symbol file preprocessing now uses -DPNG_NO_USE_READ_MACROS even when
    the library may actually be built with PNG_USE_READ_MACROS; this stops
    the read macros interfering with the symbol file format.
  Made the manual, synopses, and function prototypes use the function
    argument names file_gamma, int_file_gamma, and srgb_intent consistently.
  Changed PNG_UNUSED from "param=param;" to "(void)param;".
  Added transform tests to pngvalid and simplified the arguments.
  Added a request in the manual that applications do not use "png_" or
    "PNG_" to begin any of their own symbols.

Glenn

[png-mng-announce] Release of libpng-1.5.0

[Glenn Randers-P. <gl...@gm...>]

libpng-1.5.0 is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

There are no changes from libpng-1.5.0rc07, except
for fixing a couple of tiny typos in the manual.

Read the ANNOUNCE file and the section on libpng-1.4
to 1.5 differences in libpng-manual.txt that come with libpng
to see the differences from 1.4.5.

The  major changes include moving the png and png_info
structs into their own private header files, and provision of
a new, more thorough test program (pngvalid.c), and an
awk-based system of maintaining the new pnglibconf.h
file that keeps track of how libpng was configured (i.e.,
what features were supported when libpng was built).

Most of this work was done by John Bowler.

Except for the accessibility of the png and png_info
structs (which we have been deprecating for more than
a decade), the API isn't significantly changed.  Applications
built with libpng14 without compiler warnings about using
deprecated features should also build without modification
with libpng15.

Please reply to the png-mng-implement list.

Glenn

[png-mng-announce] libpng-1.4.5 is available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.4.5 is available from the usual sources:
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

Changes since the last public release (1.4.4):

  Fixed possible configure.ac bug introduced in version 1.4.4.
  Wrapped long lines in CMakeLists.txt and introduced ${libpng_public_hdrs}
  Check for out-of-range text compression mode in png_set_text().
  Removed some extraneous parentheses that appeared in pngrutil.c of
    libpng-1.4.3
  Revised png_get_uint_32, png_get_int_32, png_get_uint_16 (Cosmin)
  Moved reading of file signature into png_read_sig (Cosmin)
  Fixed atomicity of chunk header serialization (Cosmin)
  Added test for io_state in pngtest.c (Cosmin)
  Added "#!/bin/sh" at the top of contrib/pngminim/*/gather.sh scripts.
  Changes to remove gcc warnings (John Bowler)
    Certain optional gcc warning flags resulted in warnings in libpng code.
    With these changes only -Wconversion and -Wcast-qual cannot be turned on.
    Changes are trivial rearrangements of code.  -Wconversion is not possible
    for pngrutil.c (because of the widespread use of += et al on variables
    smaller than (int) or (unsigned int)) and -Wcast-qual is not possible
    with pngwio.c and pngwutil.c because the 'write' callback and zlib
    compression both fail to declare their input buffers with 'const'.
  Added comment about the potential API incompatibility of the
    png_get_uint_16() macro with libpng-1.4.0 through 1.4.4.
  Removed PNG_NO_WRITE_GAMMA from pngminim/encoder/pngusr.h

Glenn

[png-mng-announce] libpng-1.4.4 is available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.4.4 is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net/index.html

This is mostly a cleanup release.  There is little
of significance changed in the *.c and *.h files:

Changes since the last public release (1.4.3):
  Removed extraneous new_push_process_row.c file.
  Revised the "SEE ALSO" style of libpng.3, libpngpf.3, and png.5
  Removed some newly-added TAB characters from pngpread.c.
  Fixed some indentation in pngpread.c and pngrutil.c
  Changed "extern PNG_EXPORT" to "PNG_EXPORT" in png.h (Jan Nijtmans)
  Changed "extern" to "PNG_EXTERN" in pngpriv.h (except for the 'extern "C" {')
  Put "#ifndef PNG_EXTERN, #endif" around "#define PNG_EXTERN" in pngpriv.h
  Added -DNO_PNG_SNPRINTF to CFLAGS in scripts/makefile.dj2
  Moved the definition of png_snprintf() outside of the enclosing
    #ifdef blocks in pngconf.h
  Made a special case "#define PNGAPI" in pngconf.h for WATCOM.
  Removed reference to cbuilder5/* from Makefile.in and Makefile.am
  Updated the read macros and functions from 1.5.0beta38.
  Updated projects/visualc71 so it can find scripts/pnglibconf.h
  Removed unused png_mem_* defines from pngconf.h.
  Correct use of _WINDOWS_ in pngconf.h
  Don't try to use version-script with cygwin/mingw.
  Revised contrib/gregbook to work under cygwin/mingw.
  Add .dll.a to the list of extensions to be symlinked by Makefile.am (Yaakov)
  Updated CMakelists.txt to use CMAKE_INSTALL_LIBDIR variable; useful for
    installing libpng in /usr/lib64 (Funda Wang).
  Revised CMakeLists.txt to put the man pages in share/man/man* not man/man*
  Revised CMakeLists.txt to make symlinks instead of copies when installing.
  Moved "#include pngusr.h" ahead of PNG_USER_PRIVATEBUILD test in pngconf.h
  Eliminated a deprecated reference to png_ptr->io_ptr in pngtest.c
  Eliminated new unnecessary #if tests regarding the sCAL chunk from pngrutil.c
  Updated the xcode project to work with libpng-1.4.x and added iOS targets
    for simulator and device (Philippe Hausler).
  Revised autogen.sh to recognize and use $AUTOCONF, $AUTOMAKE, $AUTOHEADER,
    $AUTOPOINT, $ACLOCAL and $LIBTOOLIZE
  Rebuilt configure scripts with automake-1.11.1 instead of automake-1.11.
  Removed unused mkinstalldirs file.

Glenn

[png-mng-announce] libpng-1.4.3, 1.2.44, and 1.5.0beta31 are available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.4.3 and 1.2.44 are available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

and libpng-1.5.0beta31 is available from
ftp://ftp/simplesystems.org/pub/png-group/src

Changes include

  Added missing quotation marks in the aix block of configure.ac
  The new "vstudio" project was missing from the zip and 7z distributions.
  Rewrote png_process_IDAT_data to consistently treat extra data as warnings
    and handle end conditions more cleanly.
  Removed the now-redundant check for out-of-bounds new_row from example.c
  Changed char *msg to PNG_CONST char *msg in pngrutil.c
  Stop memory leak when reading a malformed sCAL chunk.

Glenn

Re: [png-mng-announce] libpng-1.4.1 and libpng-1.2.43 are available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.4.1 and libpng-1.2.43 are available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

Changes from 1.4.0 to 1.4.1:

 Updated CMakeLists.txt for consistent indentation and to avoid an
   unclosed if-statement warning (Philip Lowman).
Revised Makefile.am and Makefile.in to remove references to Y2KINFO,
   KNOWNBUG, and libpng.la (Robert Schwebel).
 Revised the makefiles to install the same files and symbolic
   except for libpng.la and libpng14.la.
 Make png_set|get_compression_buffer_size() available even when
   PNG_WRITE_SUPPORTED is not enabled.
 Revised Makefile.am and Makefile.in to simplify their maintenance.
 Revised the makefiles to install a link to libpng14.so.14.1
 Removed png_set_premultiply_alpha() from scripts/*.def
 Revised png_decompress_chunk() to improve speed and memory usage when
   decoding large chunks, using a two-pass method suggested by John Bowler.
 Added png_set|get_chunk_malloc_max() functions.
 Relocated "int k" declaration in pngtest.c to minimize its scope.
 Folded some long lines in the source files.
 Added defineable PNG_USER_CHUNK_CACHE_MAX and PNG_USER_CHUNK_MALLOC_MAX
 Eliminated use of png_ptr->irowbytes and reused the slot in png_ptr as
   png_ptr->png_user_chunk_malloc_max.
 Return allocated "old_buffer" in png_push_save_buffer() before calling
   png_error(), to avoid a potential memory leak.
 Removed the cbuilder5 project, which has not been updated to 1.4.0.
 Complete rewrite of two-pass png_decompress_chunk() by John Bowler.
 Removed obsolete unused MMX-querying support from contrib/gregbook
 Removed the AIX redefinition of jmpbuf in png.h
 Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt
   when using AIX compiler.
 Removed unused gzio.c from contrib/pngminim gather and makefile scripts

Changes from 1.2.42 to 1.2.43:

 Updated CMakeLists.txt for consistent indentation and to avoid an
   unclosed if-statement warning (Philip Lowman).
 Removed "#ifdef PNG_1_0_X / #endif" surrounding
   PNG_READ_16_TO_8_SUPPORTED and PNG_READ_GRAY_TO_RGB_SUPPORTED
   in pngconf.h.  These were added in libpng-1.2.41beta08 and libpng-1.0.51,
   which introduced a binary incompatibility with libpng-1.0.50.
 Backported two-pass png_decompress_chunk() algorithm from libpng-1.4.1
 Removed PNGAPI declaration of png_calloc() and png_write_sig() in
   1ibpng-1.2.X, introduced by mistake in libpng-1.2.41.
 Return allocated "old_buffer" in png_push_save_buffer() before png_error(),
   to avoid a potential memory leak.
 Ported rewritten png_decompress_chunk() by John Bowler from libpng-1.4.1.
 Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt
   when using AIX compiler.
 Removed unused gzio.c from contrib/pngminim gather and makefile scripts

For legacy applications that were linked with libpng-1.0.x,
libpng-1.0.53 is also available, with changes similar to those in 1.2.43.

Glenn

[png-mng-announce] libpng-1.4.1 and libpng-1.2.43 are available

[Glenn Randers-P. <gl...@gm...>]

version 1.4.1 [%DATE%]

  Updated CMakeLists.txt for consistent indentation and to avoid an
    unclosed if-statement warning (Philip Lowman).
 libpng-1.4.1 and libpng-1.2.43 are available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

Changes from 1.4.0 to 1.4.1:

Revised Makefile.am and Makefile.in to remove references to Y2KINFO,
    KNOWNBUG, and libpng.la (Robert Schwebel).
  Revised the makefiles to install the same files and symbolic
    except for libpng.la and libpng14.la.
  Make png_set|get_compression_buffer_size() available even when
    PNG_WRITE_SUPPORTED is not enabled.
  Revised Makefile.am and Makefile.in to simplify their maintenance.
  Revised the makefiles to install a link to libpng14.so.14.1
  Removed png_set_premultiply_alpha() from scripts/*.def
  Revised png_decompress_chunk() to improve speed and memory usage when
    decoding large chunks, using a two-pass method suggested by John Bowler.
  Added png_set|get_chunk_malloc_max() functions.
  Relocated "int k" declaration in pngtest.c to minimize its scope.
  Folded some long lines in the source files.
  Added defineable PNG_USER_CHUNK_CACHE_MAX and PNG_USER_CHUNK_MALLOC_MAX
  Eliminated use of png_ptr->irowbytes and reused the slot in png_ptr as
    png_ptr->png_user_chunk_malloc_max.
  Return allocated "old_buffer" in png_push_save_buffer() before calling
    png_error(), to avoid a potential memory leak.
  Removed the cbuilder5 project, which has not been updated to 1.4.0.
  Complete rewrite of two-pass png_decompress_chunk() by John Bowler.
  Removed obsolete unused MMX-querying support from contrib/gregbook
  Removed the AIX redefinition of jmpbuf in png.h
  Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt
    when using AIX compiler.
  Removed unused gzio.c from contrib/pngminim gather and makefile scripts

Changes from 1.2.42 to 1.2.43:

  Updated CMakeLists.txt for consistent indentation and to avoid an
    unclosed if-statement warning (Philip Lowman).
  Removed "#ifdef PNG_1_0_X / #endif" surrounding
    PNG_READ_16_TO_8_SUPPORTED and PNG_READ_GRAY_TO_RGB_SUPPORTED
    in pngconf.h.  These were added in libpng-1.2.41beta08 and libpng-1.0.51,
    which introduced a binary incompatibility with libpng-1.0.50.
  Backported two-pass png_decompress_chunk() algorithm from libpng-1.4.1
  Removed PNGAPI declaration of png_calloc() and png_write_sig() in
    1ibpng-1.2.X, introduced by mistake in libpng-1.2.41.
  Return allocated "old_buffer" in png_push_save_buffer() before png_error(),
    to avoid a potential memory leak.
  Ported rewritten png_decompress_chunk() by John Bowler from libpng-1.4.1.
  Define _ALL_SOURCE in configure.ac, makefile.aix, and CMakeLists.txt
    when using AIX compiler.
  Removed unused gzio.c from contrib/pngminim gather and makefile scripts

For legacy applications that were linked with libpng-1.0.x,
libpng-1.0.53 is also
available, with changes similar to those in 1.2.43.

Glenn

Re: [png-mng-announce] [png-mng-implement] libpng-1.2.X -> libpng-1.4.0 differences

[Glenn Randers-P. <gl...@gm...>]

On Sun, Jan 3, 2010 at 12:38 AM, Glenn Randers-Pehrson
<gl...@gm...> wrote:
>   Changes to Libpng from version 1.2.42 to 1.4.0, January 3, 2010

The configure script and most of the makefiles will build

    libpng10   (libpng-1.0.52, provided for legacy 1.0.x applications)
    libpng12   (libpng-1.2.42, provided for recent legacy 1.2.x apps)
    libpng14   (libpng-1.4.0, the current stable version)
    libpng       (whichever of the above was built last!)

    You should build them in order
       1) libpng10 (if you must; you probably don't need libpng10)
       2) libpng12
       3) libpng14

    If you simply want the latest version, use -lpng -lz when building
    your application.  If you need a specific version, use, e.g.,
    -lpng12 -lz.  Most applications can probably simply use -lpng -lz.

Glenn

Re: [png-mng-announce] [png-mng-implement] libpng-1.2.X -> libpng-1.4.0 differences

[Glenn Randers-P. <gl...@gm...>]

   Changes to Libpng from version 1.2.42 to 1.4.0, January 3, 2010

Libpng-1.4.0 was released by the PNG Development Group on January
3, 2010.  Important new features include support for the iTXt chunk
and a function for limiting the amount of memory that a possibly
malicious compressed chunk can consume.  Some long-deprecated functions
and features have been removed.  A new private header file that is
not visible to applications has been created, to improve our ability
to maintain binary compatibility among future libpng versions.

Specifically,

1. Private libpng prototypes and macro definitions were moved from
png.h and pngconf.h into a new pngpriv.h header file that is not
visible to applications.

2. Some obsolete/deprecated macros and functions have been removed.

   a. We eliminated the obsolete, unused pnggccrd.c and pngvcrd.c files
      and related makefiles.

   b. We removed the typecasted NULL definitions such as

          #define png_voidp_NULL    (png_voidp)NULL

      If you used these in your application, just use NULL instead.

   c. We eliminated the PNG_1_0_X and PNG_1_2_X macros.

   d. We eliminated the PNG_LEGACY_SUPPORTED macro.

   e. We removed many WIN32_WCE #ifdefs.

   f. We removed the functions png_read_init(info_ptr),
      png_write_init(info_ptr), png_info_init(info_ptr),
      png_read_destroy(), and png_write_destroy().
      They have been deprecated since libpng-0.95.

   g. We removed the png_permit_empty_plte() function. It has been
      deprecated since libpng-1.0.9.  Use png_permit_mng_features() instead.

   h. We removed the obsolete stub functions png_get_mmx_flagmask(),
      png_set_mmx_thresholds(), png_get_asm_flags(),
      png_get_mmx_bitdepth_threshold(), png_get_mmx_rowbytes_threshold(),
      png_set_asm_flags(), and png_mmx_supported()

   i. We removed the obsolete png_check_sig(), png_memcpy_check(), and
      png_memset_check() functions.  Instead use !png_sig_cmp(),
      png_memcpy(), and png_memset(), respectively, i.e.,

      replace
        png_check_sig(buf, 8)
      with
        png_sig_cmp(buf, 0, 8) == 0

      replace
        png_memcpy_check(png_ptr, dest, src, length)
      with
        png_memcpy(dest, src, length)

      and replace
        png_memset_check(png_ptr, dest, value, length)
      with
        png_memset(dest, value, length)

   j. We removed support for global arrays to improve thread safety.

   k. We removed support for numbered error messages by default, since we
      never got around to actually numbering the error messages. The function
      png_set_strip_error_numbers() was removed from the library by default.

   l. The png_zalloc() and png_zfree() functions are no longer exported.
      The png_zalloc() function no longer zeroes out the memory that it
      allocates.

   m. The function png_set_gray_1_2_4_to_8() was removed. It has been
      deprecated since libpng-1.0.18 and 1.2.9, when it was replaced with
      png_set_expand_gray_1_2_4_to_8() because the former function also
      expanded palette images.

3. Several function prototypes were changed.

   a. We changed the prototype for png_malloc() from
      png_malloc(png_structp png_ptr, png_uint_32 size) to
      png_malloc(png_structp png_ptr, png_alloc_size_t size)

   b. We changed the prototypes of png_get_compression_buffer_size() and
      png_set_compression_buffer_size() to work with png_size_t instead of
      png_uint_32.

4. We added some new features:

   a. We enabled iTXt chunk support by default.  This changes the png_text
      structure by adding the itxt_length, lang, and lang_key members.

   b. We added the functions png_set_benign_errors(), png_benign_error(),
      and png_chunk_benign_error().  With these, you can choose to treat
      certain normally fatal errors as nonfatal.

   c. Support for setting the maximum amount of memory that the application
      will allocate for reading chunks was added, as a security measure.
      The functions png_set_chunk_cache_max() and png_get_chunk_cache_max()
      were added to the library.

   d. We added the png_calloc() function and used it in place of
      of "png_malloc(); png_memset();" except in the case in png_read_png()
      where the array consists of pointers; in this case a "for" loop is used
      after the png_malloc() to set the pointers to NULL, to give robust.
      behavior in case the application runs out of memory part-way through
      the process.

   e. We implemented support for I/O states by adding png_ptr member io_state
      and functions png_get_io_chunk_name() and png_get_io_state() in pngget.c

   f. We added PNG_TRANSFORM_GRAY_TO_RGB to the available high-level
      input transforms.

5. Other changes

   a. We changed the names of the png_struct and info_struct members "trans"
      and "trans_values" to "trans_alpha" and "trans_color", respectively.

   b. Checking for and reporting of errors in the IHDR chunk is more thorough.

   c. We removed the trailing '.' from the warning and error messages.

Send comments to png-mng-implement at lists.sf.net (subscription required;
visit https://lists.sourceforge.net/lists/listinfo/png-mng-implement
to subscribe) or to glennrp at users.sourceforge.net

[png-mng-announce] libpng-1.2.41 is available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.2.41 (and 1.0.51 for legacy applications) is available at
ftp://ftp.simplesystems.org/pub/png/src
and at
http://libpng.sf.net/index.html

Please direct any replies to png...@li...

The changes since 1.2.40:

  Moved redundant IHDR checking into new png_check_IHDR() in png.c
    and report all errors found in the IHDR data.
  Eliminated useless call to png_check_cHRM() from pngset.c
  Expanded TAB characters in pngrtran.c
  Added "xcode" project similar one already in libpng-1.4.0beta (Alam Arias).
  Eliminated a shadowed declaration of "pp" in png_handle_sPLT().
  Revised pngconf.h to make it easier to enable iTXt support.  From libpng
    version 1.2.9 through 1.2.40, defining PNG_iTXt_SUPPORTED did not work
    as expected.
  Converted all PNG_NO_* tests to PNG_*_SUPPORTED everywhere except pngconf.h
  Changed many "#if defined(x)" to "#ifdef x" and fixed some indentation.
  Added png_calloc() as a non-exported function.
  Relocated png_do_chop() ahead of building gamma tables in pngrtran.c
    This avoids building 16-bit gamma tables unnecessarily.
  Removed a harmless extra png_set_invert_alpha() from pngwrite.c
  Bugfixes and improvements to CMakeLists.txt (Philip Lowman)
  Moved CMakeLists.txt from scripts into the main libpng directory.
  Patched ltmain.sh for wince support.
  Added PNG_CONVERT_tIME_SUPPORTED macro.
  Make inclusion of time.h in pngconf.h depend on PNG_CONVERT_tIME_SUPPORTED
  Updated scripts/pngw32.def and projects/wince/png32ce.def
  Copied projects/wince/png32ce.def to the scripts directory.
  Added scripts/makefile.cegcc
  Added PNG_DEPSTRUCT, PNG_DEPRECATED, PNG_USE_RESULT, PNG_NORETURN, and
    PNG_ALLOCATED macros to detect deprecated direct access to the
    png_struct or info_struct members and other deprecated usage in
    applications (John Bowler).
  Removed three direct references to read_info_ptr members in pngtest.c
    that were detected by the new PNG_DEPSTRUCT macro.
  Marked deprecated function prototypes with PNG_DEPRECATED.
  Marked memory allocation function prototypes with PNG_ALLOCATED.
  Changed png_check_sig() to !png_sig_cmp() in contrib programs.
  Corrected the png_get_IHDR() call in contrib/gregbook/readpng2.c
  Marked nonexported functions with PNG_PRIVATE macro.
  Revised scripts/*.def to reflect functions actually exported by libpng.
  Updated the copyright year in scripts/pngw32.rc from 2004 to 2009.
  Moved descriptions of makefiles and other scripts out of INSTALL into
    scripts/README.txt
  Rebuilt the configure scripts with autoconf-2.65
  Disabled the new pedantic warnings about deprecated function use and
    deprecated structure access unless the user defines PNG_PEDANTIC_WARNINGS.
  Added "#define PNG_NO_PEDANTIC_WARNINGS" in the libpng source files.
  Updated the list of files and made some cosmetic changes in README.

Glenn

[png-mng-announce] libpng-1.2.40 and 1.0.49 are available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.2.40 and libpng-1.0.49 are available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sourceforge.net/index.html

This is a minor code cleanup/bugfix version.  Changes from libpng-1.2.39 are:

 Removed an extra png_debug() recently added to png_write_find_filter().
  Fixed incorrect #ifdef in pngset.c regarding unknown chunk support.
  Various bugfixes and improvements to CMakeLists.txt (Philip Lowman)

I intend for this to be the last of the 1.0.x/1.2.x series, with only
security fixes from now on.  Look for a 1.4.0 release in the near
future.

Glenn

[png-mng-announce] libpng-1.2.39 released

[Glenn Randers-P. <gl...@gm...>]

libpng-1.2.39 (and libpng-1.0.48) is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sourceforge.net/index.html

Changes from libpng-1.2.38 include:
Added a prototype for png_64bit_product() in png.h
Rebuilt configure scripts with autoconf-2.64.
Avoid a possible NULL dereference in debug build, in png_set_text_2().
Replaced *.tar.lzma with *.tar.xz in distribution.
Reject attempt to write iCCP chunk with negative embedded profile length

Glenn

[png-mng-announce] libpng-1.0.47 and libpng-1.2.38 are available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.0.47 and libpng-1.2.38 are available from
ftp://ftp.simplesystems.org/pub/png/src/
and from
http://libpng.sourceforge.net/index.html

There are no changes from libpng-1.2.38rc03.
Since libpng-1.2.37, the license declarations were changed
to mention the "libpng license".  The configuration files were
rebuilt with autoconf-2.63.  Some "#ifdef's"
were reorganized to separate unknown chunk support from
png_set_keep_unknown_chunks() support, because the
latter is also useful for ignoring known but unused chunks.

Glenn

[png-mng-announce] libpng-1.2.37 is available

[Glenn Randers-P. <gl...@gm...>]

libpng-1.2.37 (and libpng-1.0.45) are available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sourceforge.net/index.html in the "libpng-stable" release
package and in the GIT repository "stable" and "master" branches.

Fixed bug with new png_memset() of the big_row_buffer.  Otherwise the
changes are extensive but just cosmetic.

Glenn

[png-mng-announce] libpng-1.2.36 is available

[Glenn Randers-P. <gl...@gm...>]

Belated announcement:

libpng-1.2.36 is available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net/index.html

Libpng-1.2.36 was released on May 7.
Libpng-1.2.37 will be out next Thursday June 4.

Here are the changes from 1.2.35 to 1.2.36:

 Revised comments in png_set_read_fn() and png_set_write_fn().
  Revised order of #ifdef's and indentation in png_debug definitions of png.h
    bug introduced in libpng-1.2.34.
  Use png_memset() after png_malloc() of big_row_buf when reading an
    interlaced file, to avoid a possible UMR (uninitialized memory read)
  Undid recent revision of PNG_NO_STDIO version of png_write_flush().  Users
    having trouble with fflush() can build with PNG_NO_WRITE_FLUSH defined.
  Revised libpng*.txt documentation about use of png_write_flush().
  Removed fflush() from pngtest.c.
  Added "#define PNG_NO_WRITE_FLUSH" to contrib/pngminim/encoder/pngusr.h
  Relocated misplaced PNG_1_0_X define in png.h that caused the prototype
    for png_set_strip_error_numbers() to be omitted from PNG_NO_ASSEMBLER_CODE
    builds.  This bug was introduced in libpng-1.2.15beta4.
  Added a section on differences between 1.0.x and 1.2.x to libpng.3/libpng.txt
  Fixed potential memory leak of "new_name" in png_write_iCCP() (Ralph Giles)
  Added "ifndef PNG_SKIP_SETJMP_CHECK" block in pngconf.h to allow
    application code writers to bypass the check for multiple inclusion
    of setjmp.h when they know that it is safe to ignore the situation.
  Made some cosmetic changes to whitespace in pngtest output.
  Renamed "user_chunk_data" to "my_user_chunk_data" in pngtest.c to suppress
    "shadowed declaration" warning from gcc-4.3.3.
  Renamed "gamma" to "png_gamma" in pngset.c to avoid "shadowed declaration"
    warning about a global "gamma" variable in math.h on some platforms.

[png-mng-announce] libpng git repository

[Glenn Randers-P. <gl...@gm...>]

A "git" repository has been established for libpng.

You can browse the repository at
libpng.git.sourceforge.net/git/gitweb.cgi?p=libpng

You can obtain git access at
git://libpng.git.sourceforge.net/gitroot/libpng

Glenn

[png-mng-announce] libpng-1.2.35 and libpng-1.0.43 fix security vulnerability

[Glenn Randers-P. <gl...@gm...>]

Libpng-1.0.43 and libpng-1.2.35 are available from
ftp://ftp.simplesystems.org/pub/png/src
and from
http://libpng.sf.net

These fix a vulnerability reported by Tavis Ormandy in which
some arrays of pointers are not initialized prior to using
"malloc" to define the pointers.  If the application runs out
of memory, then libpng's cleanup process will try to free
all of the pointers in the array, some of which are not
initialized.  For more details, and a patch for older libpng
versions, see libpng-1.2.34-ADVISORY.txt that is included
in the libpng-1.2.35 distribution.

Glenn

[png-mng-announce] Call for Vote on Screenshot URL keyword

[Glenn Randers-P. <gl...@gm...>]

A call for vote has been issued on png...@li...
for the proposed "Screenshot URL" text keyword.