3.19.25

FreeImage 3.19.25 release notes:

• Bundle pinned HEIF/AVIF and JPEG XL codecs and dependencies for offline builds, while retaining optional system-library support.
• Add FreeImage_GetChannelsNumber for bitmap and typed image formats.
• Fix GIF playback bounds so malformed frames cannot write outside the logical screen. Add regression tests.

These notes cover the changes since 3.19.24.

Security

• Security hardening: Fix out-of-bounds access in the Sun Raster (RAS), IFF/LBM PBM RLE, and GIF playback loaders. IFF decoding also now handles truncated input safely and cannot hang on no-op runs. The IFF fixes follow the heap-overflow fix in #156 and PR #161. No CVE identifiers have been assigned to these fixes (yet, to do added)
• Reported-by: Tristan Madani (Talence Security) @TristanInSec

What's Changed

• Bundle optional HEIF/AVIF and JPEG XL sources for offline builds by @danoli3 in #179
• Clip GIF playback frames to logical screen by @danoli3 in #183
• Add image channel count query API by @danoli3 in #180
• Fix Linux release checksums and attach Ubuntu .ddeb by @danoli3 in #185
• Prepare FreeImage 3.19.25 release by @danoli3 in #186

Full Changelog: 3.19.24...3.19.25