Libpng 1.2.55 - December 3, 2015 This is a public release of libpng, intended for use in production codes. Files available for download: Source files with LF line endings (for Unix/Linux) and with a "configure" script libpng-1.2.55.tar.xz (LZMA-compressed, recommended) libpng-1.2.55.tar.gz Source files with LF line endings (for Unix/Linux) without the "configure" script libpng-1.2.55-no-config.tar.xz (LZMA-compressed, recommended) libpng-1.2.55-no-config.tar.gz Source files with CRLF line endings (for Windows), without the "configure" script lpng1255.zip lpng1255.7z Project files libpng-1.2.55-project-netware.zip libpng-1.2.55-project-wince.zip Other information: libpng-1.2.55-README.txt libpng-1.2.55-KNOWNBUGS.txt libpng-1.2.55-LICENSE.txt libpng-1.2.55-Y2K-compliance.txt libpng-1.2.55-[previous version]-diff.txt libpng-1.2.55-*.asc (armored detached GPG signatures) Changes since the last public release (1.2.54): Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(), png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr). Fixed incorrect implementation of png_set_PLTE() that uses png_ptr not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126 vulnerability. Discontinued distributing tar.bz2 archives. Discontinued distributing libpng-oldversion-newversion-diff.txt Send comments/corrections/commendations to png-mng-implement at lists.sf.net (subscription required; visit https://lists.sourceforge.net/lists/listinfo/png-mng-implement to subscribe) or to glennrp at users.sourceforge.net Glenn R-P #endif