libpng-1.6.45 released and signed with a new key

Cosmin Truta <[email protected]> Fri, 10 Jan 2025 00:20:08 +0200
Newsgroups gmane.comp.graphics.png.announce,gmane.comp.graphics.png.devel
Message-ID <CAAoVtZwM3q34a0s39x4mDJxgs+3xfYNrMA7HQ0s5F9Am4+aKBQ@mail.gmail.com>
--===============6535209037341283072==
Content-Type: multipart/alternative; boundary="0000000000002546fb062b4d62c3"

--0000000000002546fb062b4d62c3
Content-Type: text/plain; charset="UTF-8"

Hello, everyone!

I tagged the newest libpng release in the 1.6 line two days ago. It would
have been business-as-usual, and it mostly is, except for this unexpected
"meta-announcement":

** IMPORTANT ** NEW PGP PUBLIC KEY **
https://github.com/ctruta.gpg

If anybody wants to know what happened to the old key, my answer is this: I
know where the old public key is, but I honestly don't know about the
private one. Or about its revocation certificate, for that matter. I wiped
out wrong files, wrong directories, and even a wrong drive AND backup drive
in the past, and I'll probably do some more of that in the future, so you
can trust me.

Ergo, brand new PGP signing, from libpng 1.6.45 onwards, with my brand new
key. Have I mentioned that you can trust me?

*****

And now, back to our business-as-usual announcement.

Thanks to the work of Lucas Chollet and John Bowler, we are on our way to
supporting the Third Edition of the PNG Specification. In v1.6.45 we bring
forth the support for cICP, which is a colorspace chunk.

https://www.w3.org/TR/png-3/#cICP-chunk

https://github.com/pnggroup/libpng/tree/v1.6.45/
https://sourceforge.net/projects/libpng/files/libpng16/1.6.45/
https://raw.githubusercontent.com/pnggroup/libpng/v1.6.45/ANNOUNCE

In the good old tradition of file authentication, here are the SHA-2-256
checksums of the published files:

libpng-1.6.45.tar.gz
7dee9e1ca8152bf52f919456f4190330aee48209887f2ec0b3d9f0ad571df11b

libpng-1.6.45.tar.xz
926485350139ffb51ef69760db35f78846c805fef3d59bfdcb2fba704663f370

lpng1645.7z
6a69737cceeabcdd50e78743caf3e38612fcb2ebb3f6e3b37c99931ad983b32b

lpng1645.zip
a66c4b1350b67776e90263e2550933067cd9ccbd318db489f84dcc0d2b033249

--

Sincerely,
Cosmin

--0000000000002546fb062b4d62c3
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hello, everyone!<br><br>I tagged the newest libpng release=
 in the 1.6 line two days ago. It would have been business-as-usual, and it=
 mostly is, except for this unexpected &quot;meta-announcement&quot;:<br><b=
r>** IMPORTANT ** NEW PGP PUBLIC KEY **<br><a href=3D"https://github.com/ct=
ruta.gpg">https://github.com/ctruta.gpg</a><br><br>If anybody wants to know=
 what happened to the old key, my answer is this: I know where the old publ=
ic key is, but I honestly don&#39;t know about the private one. Or about it=
s revocation certificate, for that matter.  I wiped out wrong files, wrong =
directories, and even a wrong drive AND backup drive in the past, and I&#39=
;ll probably do some more of that in the future, so you can trust me.<br><b=
r>Ergo, brand new PGP signing, from libpng 1.6.45 onwards, with my brand ne=
w key. Have I mentioned that you can trust me?<br><br>*****<br><br>And now,=
 back to our business-as-usual announcement.<br><br>Thanks to the work of L=
ucas Chollet and John Bowler, we are on our way to supporting the Third Edi=
tion of the PNG Specification. In v1.6.45 we bring forth the support for cI=
CP, which is a colorspace chunk.<br><br><a href=3D"https://www.w3.org/TR/pn=
g-3/#cICP-chunk">https://www.w3.org/TR/png-3/#cICP-chunk</a><br><br><a href=
=3D"https://github.com/pnggroup/libpng/tree/v1.6.45/">https://github.com/pn=
ggroup/libpng/tree/v1.6.45/</a><br><a href=3D"https://sourceforge.net/proje=
cts/libpng/files/libpng16/1.6.45/">https://sourceforge.net/projects/libpng/=
files/libpng16/1.6.45/</a><br><a href=3D"https://raw.githubusercontent.com/=
pnggroup/libpng/v1.6.45/ANNOUNCE">https://raw.githubusercontent.com/pnggrou=
p/libpng/v1.6.45/ANNOUNCE</a><br><br>In the good old tradition of file auth=
entication, here are the SHA-2-256 checksums of the published files:<br><br=
>libpng-1.6.45.tar.gz<br>7dee9e1ca8152bf52f919456f4190330aee48209887f2ec0b3=
d9f0ad571df11b<br><br>libpng-1.6.45.tar.xz<br>926485350139ffb51ef69760db35f=
78846c805fef3d59bfdcb2fba704663f370<br><br>lpng1645.7z<br>6a69737cceeabcdd5=
0e78743caf3e38612fcb2ebb3f6e3b37c99931ad983b32b<br><br>lpng1645.zip<br>a66c=
4b1350b67776e90263e2550933067cd9ccbd318db489f84dcc0d2b033249<br><br>--<br><=
br>Sincerely,<br>Cosmin</div>

--0000000000002546fb062b4d62c3--


--===============6535209037341283072==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============6535209037341283072==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
png-mng-announce mailing list
png-mng-announce-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
https://lists.sourceforge.net/lists/listinfo/png-mng-announce

--===============6535209037341283072==--