From 055547ff126fb359d94c5c0d8e838320deff84f2 Mon Sep 17 00:00:00 2001 From: Peter Korsgaard Date: Wed, 23 Apr 2025 21:06:42 +0200 Subject: [PATCH] package/graphicsmagick: security bump to version 1.3.45 1.3.44 added the following security fixes: * TIFF: Fixed multiple heap and stack buffer overflows (directed by the source EXIF profile) while writing EXIF into the native TIFF IFD. * FITS: Fix problem that the FITS reader could return invalid image frames with rows or columns set to zero. Other code in the library crashes, or even asserts, if invalid image frames with rows or columns set to zero are returned. * Coverity fixes: Various fixes for Coverity issues raised after the update to version 2023.12.2. * Clang Analyzer (scan-build) fixes: Various fixes for new issues discovered by Clang Analyzer. https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/7046c344273c263a9b6e4901b910508aea3804b5 In addition 1.3.45 fixes a off-by-one issue introduced in 1.3.44: https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/96f765a2e3cebf0b70094da34d03b73c50c3aa63 Update the Copyright.txt hash for a change in copyright years: https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/f0bba104ee3859286ea8adfc2ff603fd64be5624 https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/26fce892769e4a26247dd2db5b8dc0719ce20953 Signed-off-by: Peter Korsgaard Signed-off-by: Julien Olivain --- package/graphicsmagick/graphicsmagick.hash | 4 ++-- package/graphicsmagick/graphicsmagick.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/graphicsmagick/graphicsmagick.hash b/package/graphicsmagick/graphicsmagick.hash index a894aedf11..044214c8fc 100644 --- a/package/graphicsmagick/graphicsmagick.hash +++ b/package/graphicsmagick/graphicsmagick.hash @@ -1,3 +1,3 @@ # Locally computed: -sha256 97dc1a9d4e89c77b25a3b24505e7ff1653b88f9bfe31f189ce10804b8efa7746 GraphicsMagick-1.3.40.tar.xz -sha256 0a20e661de942ebe115a354d0ec6d1d42b93856ea765f813f350a5ce5024cdb7 Copyright.txt +sha256 dcea5167414f7c805557de2d7a47a9b3147bcbf617b91f5f0f4afe5e6543026b GraphicsMagick-1.3.45.tar.xz +sha256 27d121f97ad71ff506ac5a6a9539e969154f3a66f3da24fd5b6f268acd106295 Copyright.txt diff --git a/package/graphicsmagick/graphicsmagick.mk b/package/graphicsmagick/graphicsmagick.mk index 76b826ceef..baaa9bcb02 100644 --- a/package/graphicsmagick/graphicsmagick.mk +++ b/package/graphicsmagick/graphicsmagick.mk @@ -4,7 +4,7 @@ # ################################################################################ -GRAPHICSMAGICK_VERSION = 1.3.40 +GRAPHICSMAGICK_VERSION = 1.3.45 GRAPHICSMAGICK_SOURCE = GraphicsMagick-$(GRAPHICSMAGICK_VERSION).tar.xz GRAPHICSMAGICK_SITE = https://downloads.sourceforge.net/project/graphicsmagick/graphicsmagick/$(GRAPHICSMAGICK_VERSION) GRAPHICSMAGICK_LICENSE = MIT