News and History of the PNG Development Group from 2015
Herein lie news items and historical stuff primarily of interest to the
Portable Network Graphics Development Group itself. Feel free to poke
around even if you're not a member, though. Note that some of the links,
particularly the older ones, are broken; in some cases this is explained by
later entries. Other links (CompuServe, tcg.arl.mil) have fallen prey to
reorganizations or upgrades; should they ever reappear, the entries below
will be updated as needed.
Keep in mind that this is history here...
- current - see here
- 12 November 2015 - libpng 1.6.19
(and 1.5.24, 1.4.17, 1.2.54, and 1.0.64) is
released with fixes for an out-of-bounds read in
png_set_tIME()/png_convert_to_rfc1123()
(CVE-2015-7981)
and for an out-of-bounds write in
png_get_PLTE()/png_set_PLTE()
(CVE-2015-8126). It also includes a
huge number of code-quality fixes and improvements.
- 23 July 2015 - libpng 1.6.18 is
released with a large number of cleanups, minor bugfixes, and a pair of
new demo programs by John Bowler (contrib/examples/simpleover.c
and contrib/examples/genpng.c), the former of which shows
alpha-compositing of multiple images using the simplified API.
- 5 April 2015 - libpng 1.6.17 is
released with a number of strengthened security-related checks, a fix
for an incorrect alpha calculation in 8-bit-linear to sRGB conversion,
some build/configure updates, etc.
Here are some related PNG pages at this site:
Last modified 15 November 2015.
Copyright © 1995-2015 Greg Roelofs.