Fwd: libpng 1.0.57rc01, 1.2.47rc01, 1.4.9rc01, and 1.5.9rc01 available

png-mng-announce list, FYI:

[Please follow up to png-mng-implement at lists.sf.net]

---------- Forwarded message ----------
From: Glenn Randers-Pehrson <[email protected]>
Date: Fri, Feb 17, 2012 at 3:26 PM
Subject: libpng 1.0.57rc01, 1.2.47rc01, 1.4.9rc01, and 1.5.9rc01 available
To: PNG/MNG implementation discussion list
<png-mng-implement-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org>


libpng 1.0.57rc01, 1.2.47rc01, 1.4.9rc01, and 1.5.9rc01 are available from
ftp://ftp.simplesystems.org/pub/png-group/src
and from
http://libpng.sf.net

version 1.0.57 and 1.2.47rc01 [February 17, 2012]
=A0Fixed CVE-2011-3026 buffer overrun bug.

version 1.4.9beta01 [February 16, 2012]
=A0Added vstudio/* and CMakeLists to EXTRA_DIST in Makefile.in and Makefile=
.am
=A0Updated contrib/pngminus/makefile.std (Samuli Souminen)
=A0Added SunOS support to configure.ac and Makefile.am (but configure and
=A0 =A0Makefile.in were not updated)

version 1.4.9rc01 [February 17, 2012]
=A0Fixed CVE-2011-3026 buffer overrun bug. =A0Deal more correctly with the =
test
=A0 =A0on iCCP chunk length. Also removed spurious casts that may hide prob=
lems
=A0 =A0on 16-bit systems.

Version 1.5.9beta02 [February 16, 2012]
=A0Removed two unused definitions from scripts/pnglibconf.h.prebuilt
=A0Removed some unused arrays (with #ifdef) from png_read_push_finish_row().
=A0Removed tests for no-longer-used *_EMPTY_PLTE_SUPPORTED from pngstruct.h

Version 1.5.9rc01 [February 17, 2012]
=A0Fixed CVE-2011-3026 buffer overrun bug. =A0Deal more correctly with the =
test
=A0 =A0on iCCP chunk length. Also removed spurious casts that may hide prob=
lems
=A0 =A0on 16-bit systems.

Because the vulnerability, which we only heard about yesterday, has
been widely published by the Chromium developers, I'll release
1.0.57, 1.2.47, 1.4.9, and 1.5.9 tomorrow afternoon, which only allows us
24 hours for testing. =A0Note that our patch is not quite the same as
the chromium patch; ours preserves the ability to set a user limit
on the expansion of compressed ancillary chunks.

Glenn

---------------------------------------------------------------------------=
---
Virtualization & Cloud Management Using Capacity Planning
Cloud computing makes use of virtualization - but cloud computing =

also focuses on allowing computing to be delivered as a service.
http://www.accelacomm.com/jaw/sfnl/114/51521223/