libpng-1.6.20, 1.5.25, 1.4.18, 1.2.55, and 1.0.65 are available

--===============1058680988069229100==
Content-Type: multipart/alternative; boundary=001a1134ee5c001da10525ff1b05

--001a1134ee5c001da10525ff1b05
Content-Type: text/plain; charset=UTF-8

libpng-1.6.20, 1.5.25, 1.4.18, 1.2.55, and 1.0.65 are available from
ftp://ftp.simplesystems.org/pub/png/src/
and from
http://libpng.sf.net

These are security releases  The fix for CVE-8126 was incomplete in the
previous versions.

Glenn Randers-Pehrson
libpng custodian


Changes since the last public release (1.0.65, 1.2.54, 1.4.18):
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.
  Discontinued distributing tar.bz2 archives.
  Discontinued distributing libpng-oldversion-newversion-diff.txt

Changes since the last public release (1.5.24):
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.
  Backported tests from libpng-1.7.0beta69.

Changes since the last public release (1.6.19):
  Avoid potential pointer overflow/underflow in png_handle_sPLT() and
    png_handle_pCAL() (Bug report by John Regehr).
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.
  Backported tests from libpng-1.7.0beta69.
  Fixed an error in handling of bad zlib CMINFO field in pngfix, found by
    American Fuzzy Lop, reported by Brian Carpenter.  inflate() doesn't
    immediately fault a bad CMINFO field; instead a 'too far back' error
    happens later (at least some times).  pngfix failed to limit CMINFO to
    the allowed values but then assumed that window_bits was in range,
    triggering an assert. The bug is mostly harmless; the PNG file cannot
    be fixed.
  In libpng 1.6 zlib initialization was changed to use the window size
    in the zlib stream, not a fixed value. This causes some invalid images,
    where CINFO is too large, to display 'correctly' if the rest of the
    data is valid.  This provides a workaround for zlib versions where the
    error arises (ones that support the API change to use the window size
    in the stream).

--001a1134ee5c001da10525ff1b05
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><div><div><div><div><div><div>libpng-1.6.20, 1.5.25, =
1.4.18, 1.2.55, and 1.0.65 are available from<br></div><a href=3D"ftp://ftp=
.simplesystems.org/pub/png/src/">ftp://ftp.simplesystems.org/pub/png/src/</=
a><br></div>and from<br></div><a href=3D"http://libpng.sf.net">http://libpn=
g.sf.net</a><br><br></div>These are security releases=C2=A0 The fix for CVE=
-8126 was incomplete in the<br></div>previous versions.<br><br></div>Glenn =
Randers-Pehrson<br></div>libpng custodian<br><div><div><div><div><div><div>=
<div><br><br>Changes since the last public release (1.0.65, 1.2.54, 1.4.18)=
:<br>=C2=A0 Avoid potential pointer overflow in png_handle_iTXt(), png_hand=
le_zTXt(),<br>=C2=A0=C2=A0=C2=A0 png_handle_sPLT(), and png_handle_pCAL() (=
Bug report by John Regehr).<br>=C2=A0 Fixed incorrect implementation of png=
_set_PLTE() that uses png_ptr<br>=C2=A0=C2=A0=C2=A0 not info_ptr, that left=
 png_set_PLTE() open to the CVE-2015-8126<br>=C2=A0=C2=A0=C2=A0 vulnerabili=
ty.<br>=C2=A0 Discontinued distributing tar.bz2 archives.<br>=C2=A0 Discont=
inued distributing libpng-oldversion-newversion-diff.txt<br><br>Changes sin=
ce the last public release (1.5.24):<br>=C2=A0 Avoid potential pointer over=
flow in png_handle_iTXt(), png_handle_zTXt(),<br>=C2=A0=C2=A0=C2=A0 png_han=
dle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).<br>=C2=A0 Fi=
xed incorrect implementation of png_set_PLTE() that uses png_ptr<br>=C2=A0=
=C2=A0=C2=A0 not info_ptr, that left png_set_PLTE() open to the CVE-2015-81=
26<br>=C2=A0=C2=A0=C2=A0 vulnerability.<br>=C2=A0 Backported tests from lib=
png-1.7.0beta69.<br><br>Changes since the last public release (1.6.19):<br>=
=C2=A0 Avoid potential pointer overflow/underflow in png_handle_sPLT() and<=
br>=C2=A0=C2=A0=C2=A0 png_handle_pCAL() (Bug report by John Regehr).<br>=C2=
=A0 Fixed incorrect implementation of png_set_PLTE() that uses png_ptr<br>=
=C2=A0=C2=A0=C2=A0 not info_ptr, that left png_set_PLTE() open to the CVE-2=
015-8126<br>=C2=A0=C2=A0=C2=A0 vulnerability.<br>=C2=A0 Backported tests fr=
om libpng-1.7.0beta69.<br>=C2=A0 Fixed an error in handling of bad zlib CMI=
NFO field in pngfix, found by<br>=C2=A0=C2=A0=C2=A0 American Fuzzy Lop, rep=
orted by Brian Carpenter.=C2=A0 inflate() doesn&#39;t<br>=C2=A0=C2=A0=C2=A0=
 immediately fault a bad CMINFO field; instead a &#39;too far back&#39; err=
or<br>=C2=A0=C2=A0=C2=A0 happens later (at least some times).=C2=A0 pngfix =
failed to limit CMINFO to<br>=C2=A0=C2=A0=C2=A0 the allowed values but then=
 assumed that window_bits was in range,<br>=C2=A0=C2=A0=C2=A0 triggering an=
 assert. The bug is mostly harmless; the PNG file cannot<br>=C2=A0=C2=A0=C2=
=A0 be fixed.<br>=C2=A0 In libpng 1.6 zlib initialization was changed to us=
e the window size<br>=C2=A0=C2=A0=C2=A0 in the zlib stream, not a fixed val=
ue. This causes some invalid images,<br>=C2=A0=C2=A0=C2=A0 where CINFO is t=
oo large, to display &#39;correctly&#39; if the rest of the<br>=C2=A0=C2=A0=
=C2=A0 data is valid.=C2=A0 This provides a workaround for zlib versions wh=
ere the<br>=C2=A0=C2=A0=C2=A0 error arises (ones that support the API chang=
e to use the window size<br>=C2=A0=C2=A0=C2=A0 in the stream).<br><br></div=
></div></div></div></div></div></div></div>

--001a1134ee5c001da10525ff1b05--


--===============1058680988069229100==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Go from Idea to Many App Stores Faster with Intel(R) XDK
Give your users amazing mobile app experiences with Intel(R) XDK.
Use one codebase in this all-in-one HTML5 development environment.
Design, debug & build mobile apps & 2D/3D high-impact games for multiple OSs.
http://pubads.g.doubleclick.net/gampad/clk?id=254741911&iu=/4140
--===============1058680988069229100==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
png-mng-announce mailing list
png-mng-announce-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/png-mng-announce

--===============1058680988069229100==--