Libpng 1.2.53 - February 26, 2015 This is a public release of libpng, intended for use in production codes. Files available for download: Source files with LF line endings (for Unix/Linux) and with a "configure" script libpng-1.2.53.tar.xz (LZMA-compressed, recommended) libpng-1.2.53.tar.gz libpng-1.2.53.tar.bz2 Source files with LF line endings (for Unix/Linux) without the "configure" script libpng-1.2.53-no-config.tar.xz (LZMA-compressed, recommended) libpng-1.2.53-no-config.tar.gz libpng-1.2.53-no-config.tar.bz2 Source files with CRLF line endings (for Windows), without the "configure" script lpng1253.zip lpng1253.7z lpng1253.tar.bz2 Project files libpng-1.2.53-project-netware.zip libpng-1.2.53-project-wince.zip Other information: libpng-1.2.53-README.txt libpng-1.2.53-KNOWNBUGS.txt libpng-1.2.53-LICENSE.txt libpng-1.2.53-Y2K-compliance.txt libpng-1.2.53-[previous version]-diff.txt libpng-1.2.53-*.asc (armored detached GPG signatures) Changes since the last public release (1.2.52): Issue a png_error() instead of a png_warning() when width is potentially too large for the architecture, in case the calling application has overridden the default 1,000,000-column limit (fixes CVE-2014-9495 and CVE-2015-0973). Quieted some harmless warnings from Coverity-scan. Display user limits in the output from pngtest. Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000. This can only be changed at library-build time. It only affects the maximum memory that can be allocated to an ancillary chunk; it does not limit the size of IDAT data, which is instead limited by PNG_USER_WIDTH_MAX. Rebuilt configure scripts with automake-1.15 and libtool-2.4.6 Send comments/corrections/commendations to png-mng-implement at lists.sf.net (subscription required; visit https://lists.sourceforge.net/lists/listinfo/png-mng-implement to subscribe) or to glennrp at users.sourceforge.net Glenn R-P #endif