From 74fe3559d6d415d30833596afdb23586c95876e4 Mon Sep 17 00:00:00 2001 From: Michael Fischer Date: Tue, 8 Sep 2026 11:07:57 +0200 Subject: [PATCH] package/sdl3_image: security bump to version 3.4.6 For release notes, see: https://github.com/libsdl-org/SDL_image/releases 3.1.1 was a preview release. Among the changes since, it fixes the XCF loader issue reported as CVE-2026-35444 (fixed in 3.4.2). See: https://github.com/libsdl-org/SDL_image/releases/tag/release-3.4.2 The LICENSE.txt hash changes because the copyright year was updated upstream. The license itself is unchanged (Zlib). Signed-off-by: Michael Fischer Signed-off-by: Julien Olivain --- package/sdl3_image/sdl3_image.hash | 4 ++-- package/sdl3_image/sdl3_image.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/sdl3_image/sdl3_image.hash b/package/sdl3_image/sdl3_image.hash index 83f5e7eaf1..e0eb2d2cc8 100644 --- a/package/sdl3_image/sdl3_image.hash +++ b/package/sdl3_image/sdl3_image.hash @@ -1,3 +1,3 @@ # Locally calculated -sha256 d5685f220d5ae99439d710d808d8c478c6ccfaac539876929239b875a6723792 SDL3_image-3.1.1.tar.gz -sha256 7826eca0a0f7e591f38dd844e207a200aac81a59b20d8a30c3af8c6282af13e6 LICENSE.txt +sha256 d2e4637ae700f72e5196b8fbd749850ed2e5e1e09c5a5be8d06ff55aaccf3b01 SDL3_image-3.4.6.tar.gz +sha256 e36997fe492c48e7ed873065cc3a694f38e8189a328d3709099ffdc9a8843f4c LICENSE.txt diff --git a/package/sdl3_image/sdl3_image.mk b/package/sdl3_image/sdl3_image.mk index fadb870b6f..43127c463c 100644 --- a/package/sdl3_image/sdl3_image.mk +++ b/package/sdl3_image/sdl3_image.mk @@ -4,7 +4,7 @@ # ################################################################################ -SDL3_IMAGE_VERSION = 3.1.1 +SDL3_IMAGE_VERSION = 3.4.6 SDL3_IMAGE_SITE = https://www.libsdl.org/projects/SDL_image/release SDL3_IMAGE_SOURCE = SDL3_image-$(SDL3_IMAGE_VERSION).tar.gz SDL3_IMAGE_LICENSE = Zlib