Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com From: Charles Wilson To: cygwin AT cygwin DOT com Subject: [ANNOUNCEMENT] Updated: libpng, libpng10, libpng10-devel, libpng12, libpng12-devel Reply-To: cygwin AT cygwin DOT com Message-Id: <20020723005741.B392C1B405@redhat.com> Date: Mon, 22 Jul 2002 20:57:41 -0400 (EDT) Due to a security flaw in libpng, I've been forced out of hiding to offer this update. libpng is a library that provides routines to access and manipulate Portable Network Graphics (PNG) images. PNG is a lossless, patent-unencumbered image format intended to replace GIF. CHANGES in the 1.0.x series: - packages: libpng-1.0.14-2 libpng-1.0.14-2-src libpng10-1.0.14-2 libpng10-devel-1.0.14-2 - Update from 1.0.13 codebase to 1.0.14 - smarter postinstall script, so it doesn't matter whether you update the 1.0.x series or the 1.2.x series first; the "right thing" will happen. CHANGES in the 1.2.x series - packages: libpng-1.2.4-2 libpng-1.2.4-2-src libpng12-1.2.4-2 libpng12-devel-1.2.4-2 - Update from 1.2.3 codebase to 1.2.4 - smarter postinstall script, so it doesn't matter whether you update the 1.0.x series or the 1.2.x series first; the "right thing" will happen. You should probably just update the following packages all-at-once: libpng: to 1.2.4-2 libpng10: to 1.0.14-2 libpng10-devel: to 1.0.14-2 libpng12: to 1.2.4-2 libpng12-devel: to 1.2.4-2 NOTE: in libpng-1.2.4, the png-implementers erroneously bumped the DLL version from 12 to 13. Our cygwin release correctly keeps it at 12, and the png-implementers will return the official DLL version to 12 in libpng-1.2.5. -- Charles Wilson libpng volunteer maintainer for cygwin INSTALLATION: To update your installation, click on the "Install Cygwin now" link on the http://cygwin.com/ web page. This downloads setup.exe to your system. Then, run setup and update the libpng package -- and also install the new libpng2 package. Note that we have recently stopped downloads from sources.redhat.com (aka cygwin.com) due to bandwidth limitations. This means that you will need to find a mirror which has this update. In the US, ftp://mirrors.rcn.net/mirrors/sources.redhat.com/cygwin/ is a reliable high bandwidth connection. In the UK, http://programming.ccp14.ac.uk/ftp-mirror/programming/cygwin/pub/cygwin/ is usually up-to-date within 48 hours. If one of the above doesn't have the latest version of this package then you can either wait for the site to be updated or find another mirror. If you have questions or comments, please send them to the Cygwin mailing list at: cygwin AT cygwin DOT com . I would appreciate if you would use this mailing list rather than emailing me directly. This includes ideas and comments about the setup utility or Cygwin in general. If you want to make a point or ask a question, the Cygwin mailing list is the appropriate place. *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain DOT com AT cygwin DOT com -- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Bug reporting: http://cygwin.com/bugs.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/