X-Recipient:	archive-cygwin AT delorie DOT com
X-SWARE-Spam-Status:	No, hits=-2.9 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00,TW_BP
X-Spam-Check-By:	sourceware.org
X-SWARE-Spam-Status:	No, hits=-6.3 required=5.0 tests=AWL,BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FROM,KHOP_RCVD_TRUST,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_W,RCVD_IN_HOSTKARMA_WL,TW_BP
From:	Charles Wilson <cygwin AT cwilson DOT fastmail DOT fm>
Date:	Mon, 20 Aug 2012 00:43:17 -0400
Subject:	[ANNOUNCEMENT] Updated: libpng12-1.2.50-2 Removed: libpng12-devel-1.2.50-2
To:	cygwin AT cygwin DOT com
Message-Id:	<announce.20120820052134.1D7108E01B8@frontend1.nyi.mail.srv.osa>
Reply-To:	cygwin AT cygwin DOT com
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com

The libpng packages offer the standard libraries for manipulating
PNG files, a turbo-studly lossless image format.  This is a security
update for the backwards-compatibility 1.2.x version of this library.


NOTE TO MAINTAINERS:

This DLL, cygpng12.dll, is now officially obsolete and there will be
no further updates -- not even to resolve security issues. libpng14
has been available since August 2007 (five years), so it's high time
those applications were recompiled against a more recent API version
(at this time, libpng-1.5.x).  The applications affected are:

   KDE/qt3/libqt3
   plotutils/libplotter2
   ploticus
   ming/libmingw0
   fltk/libfltk1.1
   fltk_gdi/libfltk1.1-gdi
   xemacs
   ImageMagick/libImageMagick1
   bmp2png
   gnubg
   grace
   spamprobe
   libwmf/libwmf027
   X11/xfig
   X11/libAfterImage/libAfterImage0
   X11/XmHTML/libXmHTML0
   hp2xx
   sng

[[ compiled using gcc-4.5.3-3 ]]

CHANGES (since 1.2.46-1)
========================
o update to latest official release of libpng-1.2.x
o Security update:
  + CVE-2012-3386
  + CVE-2011-3048
  + CVE-2011-3026
o still using the non-autotools-driven build process
o libpng12 now obsolete
  + libpng12-devel removed

-- 
Charles Wilson
volunteer libpng maintainer for cygwin

====================================================================

To update your installation, click on the "Install Cygwin now" link
on the http://cygwin.com/ web page.  This downloads setup.exe to
your system.  Then, run setup and answer all of the questions.

              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain DOT com AT cygwin DOT com

If you need more information on unsubscribing, start reading here:

http://sources.redhat.com/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is
available starting at this URL.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -