| libpng 1.6.53.git | |
| ================= | |
| This is a development version, not intended to be a public release. | |
| It will be replaced by a public release, or by another development | |
| version, at a later time. | |
| libpng 1.6.52 - December 3, 2025 | |
| ================================ | |
| This is a public release of libpng, intended for use in production code. | |
| Files available for download | |
| ---------------------------- | |
| Source files: | |
| * libpng-1.6.52.tar.xz (LZMA-compressed, recommended) | |
| * libpng-1.6.52.tar.gz (deflate-compressed) | |
| * lpng1652.7z (LZMA-compressed) | |
| * lpng1652.zip (deflate-compressed) | |
| Other information: | |
| * README.md | |
| * LICENSE.md | |
| * AUTHORS.md | |
| * TRADEMARK.md | |
| Changes from version 1.6.51 to version 1.6.52 | |
| --------------------------------------------- | |
| * Fixed CVE-2025-66293 (high severity): | |
| Out-of-bounds read in `png_image_read_composite`. | |
| (Reported by flyfish101 <flyfish101@users.noreply.github.com>.) | |
| * Fixed the Paeth filter handling in the RISC-V RVV implementation. | |
| (Reported by Filip Wasil; fixed by Liang Junzhao.) | |
| * Improved the performance of the RISC-V RVV implementation. | |
| (Contributed by Liang Junzhao.) | |
| * Added allocation failure fuzzing to oss-fuzz. | |
| (Contributed by Philippe Antoine.) | |
| Send comments/corrections/commendations to png-mng-implement at lists.sf.net. | |
| Subscription is required; visit | |
| https://lists.sourceforge.net/lists/listinfo/png-mng-implement | |
| to subscribe. |