GraphicsMagick 1.3.28 is now available

GraphicsMagick 1.3.28 is now available.  This release fixes a few 
regressions added in the prior release.  There are also security and 
bug fixes.

As a special note, this will be the last release which produces a 
source RPM file.  Source RPMs may be produced from the source package 
via 'make dist; make srpm'.  RPM spec files maintained by the specific 
Linux distribution are surely a better match and better maintained 
than the generic one distributed by the GraphicsMagick project.

The following are SHA1 sums for the distribution files

ee77f9d68d6ca329eeae17e692e793dc7cf4c3df  GraphicsMagick-1.3.28-1.src.rpm
32213a71020f308fb401cfe2ead7e6e1576f28c6  GraphicsMagick-1.3.28-Q16-win32-dll.exe
e67e2c25b837ca19901874a7522ab7b1f802eaf8  GraphicsMagick-1.3.28-Q16-win64-dll.exe
95e52c2f9687344b93c36892c88020a30bf5bdc9  GraphicsMagick-1.3.28-Q8-win32-dll.exe
db2cc7e89121bf46d5cfc7e0df2c5a7d9dfdf161  GraphicsMagick-1.3.28-Q8-win64-dll.exe
2b50e3e3f49436b2b68b77c1a9a9fb3f3af366b3  GraphicsMagick-1.3.28-windows-source.7z
2e941caf1751e3b422222b328e7af741b4734b99  GraphicsMagick-1.3.28.tar.bz2
100e1b5153c03748dca473f53077c2a1ca5fb6c5  GraphicsMagick-1.3.28.tar.gz
7bbf0ccd07520853d00ab3de33ca38921c847f8d  GraphicsMagick-1.3.28.tar.lz
f72a8f3f6de27990612ee3e713b2fece1ad898ac  GraphicsMagick-1.3.28.tar.xz

The following are the release notes pertaining to this release.  See 
the ChangeLog and Mercurial commits for full details:

Special Issues:

* None

Security Fixes:

* BMP: Fix non-terminal loop due to unexpected bit-field mask value
   (DOS opportunity).

* PALM: Fix heap buffer underflow in builds with QuantumDepth=8.

* SetNexus() Fix heap overwrite under certain conditions due to using
   a wrong destination buffer.  This issue impacts all 1.3.X releases.

* TIFF: Fix heap buffer read overflow in LocaleNCompare() when parsing
   NEWS profile.

Bug fixes:

* DescribeImage(): Eliminate possible use of null pointer.

* GIF: Fix memory leak of global colormap in error path.

* GZ: Writing to gzip files with the extension ".gz" was not working
   with Zlib 1.2.8.

* JNG: Fix buffer read overflow (a tiny fixed overflow of just one byte).

* JPEG: Promoting certain libjpeg warnings to errors caused much more
   problems than expected.  The promotion of warnings to errors is
   removed.  Claimed pixel dimensions are validated by file size before
   allocating memory for the pixels.

* IntegralRotateImage(): Assure that reported error in rotate by 270
   case does immediately terminate processing.

* MNG: Fix possible null pointer reference related to DEFI chunk
   parsing.  Fix minor heap read overflow (constrained to just one
   byte) due to an ordering issue in a limit check.  Fix memory leaks
   in error path.

* WebP: Fix stack buffer overflow in WriteWEBPImage() which occurs
   with libwebp 0.5.0 or newer due to a structure type change in the
   structure passed to the progress monitor callback.

* WPG: Memory leaks fixed.

New Features:

* None

API Updates:

* InterpolateViewColor(): This function now returns MagickPassFail (an
   unsigned int) rather than void so that errors can be efficiently
   reported.

* The magick/pixel_cache.h header is updated to add deprecation
   attributes such that code using GetPixels(), GetIndexes(), and
   GetOnePixel() will produce deprecation warnings for compilers which
   support them.  These functions will not be removed in the 1.3.X
   release series and when they are removed, pre-processor macros will
   be added so a replacement function is used instead.  There is a
   long-term objective to eliminate functionally-redundant pixel cache
   functions to only the ones with the best properties since this
   reduces maintenance and may reduce the depth of the call stack
   (improving performance).

Feature improvements:

* None

Windows Delegate Updates/Additions:

* None

Build Changes:

* PerlMagick: Sanitize PACKAGE_VERSION so that Perl is not confused by
   any trailing alpha character.

* Improved symbol renaming due to adding --enable-symbol-prefix.  Some
   symbols (for static const strings) were not being included in the
   renaming.


Behavior Changes:

* None

-- 
Bob Friesenhahn
[email protected], http://www.simplesystems.org/users/bfriesen/
GraphicsMagick Maintainer,    http://www.GraphicsMagick.org/

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot