Update libpng to 1.2.38 to patch a minor security issue.

1 files changed, 33 insertions, 23 deletions

diff --git a/ANNOUNCE b/ANNOUNCE
index 48b4e96..204bbfd 100644
--- a/ANNOUNCE
+++ b/ANNOUNCE
@@ -1,5 +1,5 @@
 
-Libpng 1.2.35 - February 14, 2009
+Libpng 1.2.38 - July 16, 2009
 
 This is a public release of libpng, intended for use in production codes.
 
@@ -8,48 +8,58 @@ Files available for download:
 Source files with LF line endings (for Unix/Linux) and with a
 "configure" script
 
-   libpng-1.2.35.tar.gz
-   libpng-1.2.35.tar.lzma
+   libpng-1.2.38.tar.gz
+   libpng-1.2.38.tar.lzma
      (Get the lzma codec from <http://tukaani.org/lzma>).
-   libpng-1.2.35.tar.bz2
+   libpng-1.2.38.tar.bz2
 
 Source files with LF line endings (for Unix/Linux) without the
 "configure" script
 
-   libpng-1.2.35-no-config.tar.gz
-   libpng-1.2.35-no-config.tar.lzma
-   libpng-1.2.35-no-config.tar.bz2
+   libpng-1.2.38-no-config.tar.gz
+   libpng-1.2.38-no-config.tar.lzma
+   libpng-1.2.38-no-config.tar.bz2
 
 Source files with CRLF line endings (for Windows), without the
 "configure" script
 
-   lpng1235.zip
-   lpng1235.7z
-   lpng1235.tar.bz2
+   lpng1238.zip
+   lpng1238.7z
+   lpng1238.tar.bz2
 
 Project files
 
-   libpng-1.2.35-project-netware.zip
-   libpng-1.2.35-project-wince.zip
+   libpng-1.2.38-project-netware.zip
+   libpng-1.2.38-project-wince.zip
 
 Other information:
 
-   libpng-1.2.35-README.txt
-   libpng-1.2.35-KNOWNBUGS.txt
-   libpng-1.2.35-LICENSE.txt
-   libpng-1.2.35-Y2K-compliance.txt
-   libpng-1.2.35-[previous version]-diff.txt
+   libpng-1.2.38-README.txt
+   libpng-1.2.38-KNOWNBUGS.txt
+   libpng-1.2.38-LICENSE.txt
+   libpng-1.2.38-Y2K-compliance.txt
+   libpng-1.2.38-[previous version]-diff.txt
 
-Changes since the last public release (1.2.34):
+Changes since the last public release (1.2.37):
+
+version 1.2.38 [July 16, 2009]
+
+  Revised libpng*.txt and libpng.3 to mention calling png_set_IHDR()
+    multiple times and to specify the sample order in the tRNS chunk,
+    because the ISO PNG specification has a typo in the tRNS table.
+  Changed several PNG_UNKNOWN_CHUNK_SUPPORTED to
+    PNG_HANDLE_AS_UNKNOWN_SUPPORTED, to make the png_set_keep mechanism
+    available for ignoring known chunks even when not saving unknown chunks.
+  Added PNG_NO_HANDLE_AS_UNKNOWN in the PNG_LEGACY_SUPPORTED block of
+    pngconf.h, and moved the various unknown chunk macro definitions
+    outside of the PNG_READ|WRITE_ANCILLARY_CHUNK_SUPPORTED blocks.
+  Added a reference to the libpng license in each source file.
+  Rebuilt configure scripts with autoconf-2.63.
 
-version 1.2.35 [February 14, 2009]
 
-  Zero out all arrays of pointers after png_malloc(). (Tavis Ormandy)
-  Use png_memset() instead of a loop to intialize pointers.  We realize
-    this will not work on platforms where the NULL pointer is not all zeroes.
 
 Send comments/corrections/commendations to png-mng-implement at lists.sf.net
-(subscription required; visit 
+(subscription required; visit
 https://lists.sourceforge.net/lists/listinfo/png-mng-implement
 to subscribe) or to glennrp at users.sourceforge.net