
Libpng 1.4.18rc01 - November 26, 2015

This is not intended to be a public release.  It will be replaced
within a few weeks by a public version or by another test version.

Files available for download:

Source files with LF line endings (for Unix/Linux) and with a
"configure" script

   1.4.18rc01.tar.xz (LZMA-compressed, recommended)
   1.4.18rc01.tar.gz
   1.4.18rc01.tar.bz2

Source files with CRLF line endings (for Windows), without the
"configure" script

   lp1418r01.7z (LZMA-compressed, recommended)
   lp1418r01.zip

Other information:

   1.4.18rc01-README.txt
   1.4.18rc01-LICENSE.txt
   libpng-1.4.18rc01-*.asc (armored detached GPG signatures)

Changes since the last public release (1.4.17):

version 1.4.18beta01 [November 20, 2015]
  Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(),
    png_handle_sPLT(), and png_handle_pCAL() (Bug report by John Regehr).

version 1.4.18beta02 [November 23, 2015]
  Fixed incorrect implementation of png_set_PLTE() that uses png_ptr
    not info_ptr, that left png_set_PLTE() open to the CVE-2015-8126
    vulnerability.

version 1.4.18rc01 [November 26, 2015]
  Discontinued distributing tar.bz2 archives.

Send comments/corrections/commendations to glennrp at users.sourceforge.net
or to png-mng-implement at lists.sf.net (subscription required; visit
https://lists.sourceforge.net/lists/listinfo/png-mng-implement).

Glenn R-P