diff --git a/ANNOUNCE b/ANNOUNCE index 4912dcac..96acaad9 100644 --- a/ANNOUNCE +++ b/ANNOUNCE @@ -1,5 +1,5 @@ -Libpng 1.2.54beta01 - May 9, 2015 +Libpng 1.2.54beta01 - May 15, 2015 This is not intended to be a public release. It will be replaced within a few weeks by a public version or by another test version. @@ -43,11 +43,12 @@ Other information: Changes since the last public release (1.2.53): -version 1.2.54beta01 [May 9, 2015] +version 1.2.54beta01 [May 15, 2015] Fix typecast in a png_debug2() statement in png_set_text_2() to avoid a compiler warning in PNG_DEBUG builds. Fixed printf formats in pngtest.c to avoid compiler warnings and a Coverity warning in PNG_DEBUG builds. + Avoid Coverity issue 80858 (REVERSE NULL) in pngtest.c PNG_DEBUG builds. Send comments/corrections/commendations to png-mng-implement at lists.sf.net (subscription required; visit diff --git a/CHANGES b/CHANGES index c02bb09b..ae80301b 100644 --- a/CHANGES +++ b/CHANGES @@ -1,11 +1,14 @@ #if 0 CHANGES - changes for libpng -version 0.2 +version 0.1 [March 29, 1995] + initial beta release + +version 0.2 [April 1, 1995] added reader into png.h fixed small problems in stub file -version 0.3 +version 0.3 [April 8, 1995] added pull reader split up pngwrite.c to several files added pnglib.txt @@ -16,7 +19,7 @@ version 0.3 added K&R support added check for 64 KB blocks for 16 bit machines -version 0.4 +version 0.4 [April 26, 1995] cleaned up code and commented code simplified time handling into png_time created png_color_16 and png_color_8 to handle color needs @@ -27,28 +30,29 @@ version 0.4 cleaned up zTXt reader and writer (using zlib's Reset functions) split transformations into pngrtran.c and pngwtran.c -version 0.5 +version 0.5 [April 30, 1995] interfaced with zlib 0.8 fixed many reading and writing bugs saved using 3 spaces instead of tabs -version 0.6 +version 0.6 [May 1, 1995] + first beta release added png_large_malloc() and png_large_free() added png_size_t cleaned up some compiler warnings added png_start_read_image() -version 0.7 +version 0.7 [June 24, 1995] cleaned up lots of bugs finished dithering and other stuff added test program changed name from pnglib to libpng -version 0.71 [June, 1995] +version 0.71 [June 26, 1995] changed pngtest.png for zlib 0.93 fixed error in libpng.txt and example.c -version 0.8 +version 0.8 [August 20, 1995] cleaned up some bugs added png_set_filler() split up pngstub.c into pngmem.c, pngio.c, and pngerror.c @@ -1304,8 +1308,9 @@ version 1.2.6beta4 [July 28, 2004] Removed some redundancy with #ifdef/#endif in png_malloc_default(). Use png_malloc instead of png_zalloc to allocate the pallete. version 1.0.16rc1 and 1.2.6rc1 [August 4, 2004] - Fixed buffer overflow vulnerability in png_handle_tRNS() - Fixed integer arithmetic overflow vulnerability in png_read_png(). + Fixed buffer overflow vulnerability (CVE-2004-0597) in png_handle_tRNS(). + Fixed NULL dereference vulnerability (CVE-2004-0598) in png_handle_iCCP(). + Fixed integer overflow vulnerability (CVE-2004-0599) in png_read_png(). Fixed some harmless bugs in png_handle_sBIT, etc, that would cause duplicate chunk types to go undetected. Fixed some timestamps in the -config version @@ -2852,11 +2857,12 @@ version 1.2.53rc02 [February 21, 2015] versions 1.0.63 and 1.2.53 [February 26, 2015] No changes. -version 1.2.54beta01 [May 9, 2015] +version 1.2.54beta01 [May 15, 2015] Fixed typecast in a png_debug2() statement in png_set_text_2() to avoid a compiler warning in PNG_DEBUG builds. Fixed printf formats in pngtest.c to avoid compiler warnings and a Coverity warning in PNG_DEBUG builds. + Avoid Coverity issue 80858 (REVERSE NULL) in pngtest.c PNG_DEBUG builds. Send comments/corrections/commendations to png-mng-implement at lists.sf.net (subscription required; visit