update

[l4.git] / l4 / pkg / libpng / lib / dist / ANNOUNCE

diff --git a/l4/pkg/libpng/lib/dist/ANNOUNCE b/l4/pkg/libpng/lib/dist/ANNOUNCE
index 17fc962d4d52100248e55721134143ce0a6c20f4..ddfd9bcbafc861367f0854f7fd182d96a74c543b 100644 (file)
--- a/l4/pkg/libpng/lib/dist/ANNOUNCE
+++ b/l4/pkg/libpng/lib/dist/ANNOUNCE
@@ -1,5 +1,5 @@
 
-Libpng 1.5.12 - July 11, 2012
+Libpng 1.5.13 - September 27, 2012
 
 This is a public release of libpng, intended for use in production codes.
 
@@ -8,26 +8,35 @@ Files available for download:
 Source files with LF line endings (for Unix/Linux) and with a
 "configure" script
 
-   libpng-1.5.12.tar.xz (LZMA-compressed, recommended)
-   libpng-1.5.12.tar.gz
-   libpng-1.5.12.tar.bz2
+   libpng-1.5.13.tar.xz (LZMA-compressed, recommended)
+   libpng-1.5.13.tar.gz
+   libpng-1.5.13.tar.bz2
 
 Source files with CRLF line endings (for Windows), without the
 "configure" script
 
-   lpng1512.7z  (LZMA-compressed, recommended)
-   lpng1512.zip
+   lpng1513.7z  (LZMA-compressed, recommended)
+   lpng1513.zip
 
 Other information:
 
-   libpng-1.5.12-README.txt
-   libpng-1.5.12-LICENSE.txt
-
-Changes since the last public release (1.5.11):
-
-  Removed scripts/makefile.cegcc from the *.zip and *.7z distributions; it
-    depends on configure, which is not included in those archives.
-  Changed "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386.
+   libpng-1.5.13-README.txt
+   libpng-1.5.13-LICENSE.txt
+
+Changes since the last public release (1.5.12):
+  Do not compile PNG_DEPRECATED, PNG_ALLOC and PNG_PRIVATE when __GNUC__ < 3.
+  Removed references to png_zalloc() and png_zfree() from the manual.
+  Revised PNG_FP_EXPORT and PNG_FIXED_EXPORT macros to avoid generating
+    lone semicolons (patch ported from libpng-1.6.0beta11).
+  Corrected handling of the image array and the row_pointers array in example.c
+  When png_set_filler is used to strip a filler channel during write, the
+    code prior to 1.5 would ignore the case where the output required an
+    alpha channel or when the output was a palettized PNG.  In libpng-1.5 the
+    ignorance was lost and libpng proceeded to strip the channel resulting
+    in a bad (potential memory overwrite) failure later.  This reverts
+    the behavior to the pre-1.5 state but issues a warning. libpng-1.6 is
+    expected to issue an error on the erroneous png_set_filler call.
+  Use png_memset() consistently (pngmem.c contained some bare "memset" calls).
 
 Send comments/corrections/commendations to png-mng-implement at lists.sf.net
 (subscription required; visit