News and History of the PNG Development Group from 2016
Herein lie news items and historical stuff primarily of interest to the
Portable Network Graphics Development Group itself. Feel free to poke
around even if you're not a member, though. Note that some of the links,
particularly the older ones, are broken; in some cases this is explained by
later entries. Other links (CompuServe, tcg.arl.mil) have fallen prey to
reorganizations or upgrades; should they ever reappear, the entries below
will be updated as needed.
Keep in mind that this is history here...
- current - see here
- 29 December 2016 - libpng 1.6.27
is released with a fix for a very old null-pointer dereference (potential
security vulnerability in some
image-editing apps,
CVE-2016-10087) and minor build fixes.
- 19 October 2016 - libpng 1.6.26 is
released with minor fixes, including handling of zero-length IDATs in
pngfix, plugging a memleak when encountering errors in the pCAL chunk, and
reducing the error level to "benign" when encountering an Adler-32 checksum
mismatch in IDAT chunks.
- 31 August 2016 - libpng 1.6.25 is
released with a fix to reject oversized iCCP profiles and the addition of
MIPS assembler support, and pngcp is no longer installed by default
(conflicts with one in the pngtools package).
- 4 August 2016 - libpng 1.6.24 is
released with fixes for potential vulnerabilities in apps that use the
PNG_IMAGE_SIZE macro (not used within libpng itself) or that use a custom
row_stride value (in which case PNG_IMAGE_BUFFER_SIZE could
overflow).
- 9 June 2016 - libpng 1.6.23 is
released with a fix for a potential memleak in png_set_tRNS()
and a few other minor fixes.
- 26 May 2016 - libpng 1.6.22 is
released with some new features (e.g., png_image_write_to_memory()
and SSE2 support) and the usual collection of minor fixes and improvements.
- 15 January 2016 - libpng 1.6.21 is
released with tweaks to pngvalid and some minor bugfixes.
Here are some related PNG pages at this site:
Last modified 8 January 2017.
Copyright © 1995-2017 Greg Roelofs.