Libpng 1.0.63 - February 6, 2014

This is a public release of libpng, intended for use in production codes.

Files available for download:

Source files with LF line endings (for Unix/Linux) and with a
"configure" script

   libpng-1.0.63.tar.xz (LZMA-compressed, recommended)
   libpng-1.0.63.tar.gz
   libpng-1.0.63.tar.bz2

Source files with LF line endings (for Unix/Linux) without the
"configure" script

   libpng-1.0.63-no-config.tar.xz (LZMA-compressed, recommended)
   libpng-1.0.63-no-config.tar.gz
   libpng-1.0.63-no-config.tar.bz2

Source files with CRLF line endings (for Windows), without the
"configure" script

   lpng1063.zip
   lpng1063.7z
   lpng1063.tar.bz2

Project files

   libpng-1.0.63-project-netware.zip
   libpng-1.0.63-project-wince.zip

Other information:

   libpng-1.0.63-README.txt
   libpng-1.0.63-KNOWNBUGS.txt
   libpng-1.0.63-LICENSE.txt
   libpng-1.0.63-Y2K-compliance.txt
   libpng-1.0.63-*.asc (armored detached GPG signatures)

Changes since the last public release (1.0.62):

  Issue a png_error() instead of a png_warning() when width is
    potentially too large for the architecture, in case the calling
    application has overridden the default 1,000,000-column limit
    (fixes CVE-2014-9495 and CVE-2015-0973).
  Quieted some harmless warnings from Coverity-scan.
  Display user limits in the output from pngtest.
  Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000.
    This can only be changed at library-build time.  It only
    affects the maximum memory that can be allocated to an
    ancillary chunk; it does not limit the size of IDAT
    data, which is instead limited by PNG_USER_WIDTH_MAX.
  Rebuilt configure scripts with automake-1.15 and libtool-2.4.6

Send comments/corrections/commendations to png-mng-implement at lists.sf.net
(subscription required; visit
https://lists.sourceforge.net/lists/listinfo/png-mng-implement
to subscribe)
or to glennrp at users.sourceforge.net

Glenn R-P
#endif