png/ANNOUNCE at main · ImageMagick/png · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
libpng 1.6.55 - February 9, 2026
================================

This is a public release of libpng, intended for use in production code.


Files available for download
----------------------------

Source files:

 * libpng-1.6.55.tar.xz (LZMA-compressed, recommended)
 * libpng-1.6.55.tar.gz (deflate-compressed)
 * lpng1655.7z (LZMA-compressed)
 * lpng1655.zip (deflate-compressed)

Other information:

 * README.md
 * LICENSE.md
 * AUTHORS.md
 * TRADEMARK.md


Changes from version 1.6.54 to version 1.6.55
---------------------------------------------

 * Fixed CVE-2026-25646 (high severity):
   Heap buffer overflow in `png_set_quantize`.
   (Reported and fixed by Joshua Inscoe.)
 * Resolved an oss-fuzz build issue involving nalloc.
   (Contributed by Philippe Antoine.)

Send comments/corrections/commendations to png-mng-implement at lists.sf.net.
Subscription is required; visit
<https://lists.sourceforge.net/lists/listinfo/png-mng-implement>
to subscribe.