OptiPNG 0.7.7

Upgraded libpng to version 1.6.34.
Upgraded zlib to version 1.2.11-optipng.
Upgraded minitiff to version 0.2.
Fixed a buffer overflow vulnerability in the GIF decoder.
Fixed an integer overflow vulnerability in the TIFF decoder.
Fixed the build on DJGPP.
Disallowed out-of-bounds values in rangeset options.

You are strongly encouraged to upgrade to the latest version 0.7.7.

• Joonun Jang reported a buffer overflow vulnerability in the GIF decoder, discovered by a fuzzer developed by the SoftSec group at KAIST. All versions prior to 0.7.7 that support GIF files (i.e. from version 0.5 to version 0.7.6) are affected.
• Jaeseung Choi reported an integer overflow vulnerability in the TIFF decoder. All versions prior to 0.7.7 that support TIFF files (i.e. from version 0.5.3 to version 0.7.6) are affected.
• Henri Salo and Hans Jerry Illikainen reported two vulnerabilities in the compressed BMP decoder, discovered by using the American Fuzzy Lop. All versions prior to 0.7.6 that support compressed BMP files (i.e. from version 0.6 to version 0.7.5) are affected.
• Gynvael Coldwind and Mateusz Jurczyk reported a use-after-free vulnerability in the palette reduction code, affecting the versions 0.7, 0.7.1 and 0.7.2, partially fixed in version 0.7.3, and fully fixed in version 0.7.4.

* Upgraded libpng to version 1.6.21.
! Fixed an assertion failure in the image reduction code.
[Fixed by upgrading libpng]
!! Fixed various security-sensitive defects in the BMP decoder.
[Reported by Henri Salo and Hans Jerry Illikainen]
[Fixed by Ramona C. Truta]
! Fixed a benign uninitialized memory read in the GIF decoder.
[Fixed by cherry-picking from the original gifread code]
! Fixed a build failure occurring under the Estonian (et_EE) locale.
[Reported by Sebastian Pipping]
[Fixed by Priit Laes]
! Fixed a build failure occurring on Mac OS X, FreeBSD, and possibly
other systems that lack POSIX-compliant high-resolution timestamps.
[Reported by Ryan Schmidt and Dmitry Egorov]
[Contributed by Sebastian Pipping]
! Fixed a typo causing build failures in 32-bit ANSI C compilation.
[Reported by various users]

Upgraded libpng to version 1.6.10-optipng.
Upgraded zlib to version 1.2.8-optipng.
Fixed various build issues with libpng-1.5 and libpng-1.6. (Thanks in part to Oliver Schneider for the contribution.)
Allowed the handling of huge image files (> millions of pixels per row or column) to be independent of the libpng version.
Fixed a build issue with Clang.
Added various enhancements to the configure script.