From df3818dff955db2dc83c98b42dad55f2873e03c2 Mon Sep 17 00:00:00 2001 From: Pierre-Yves Kerbrat Date: Mon, 29 Dec 2025 19:13:03 +0100 Subject: [PATCH] package/imagemagick: security bump to 7.1.2-12 Changelog: https://github.com/ImageMagick/Website/blob/main/ChangeLog.md CVE-2025-66628: In versions 7.1.2-9 and prior, the TIM (PSX TIM) image parser contains a critical integer overflow vulnerability in its ReadTIMImage function (coders/tim.c). For more information, see: https://www.cve.org/CVERecord?id=CVE-2025-66628 Signed-off-by: Pierre-Yves Kerbrat [Julien: mark commit as security related and add cve info] Signed-off-by: Julien Olivain (cherry picked from commit 4a315e153f120ff236f1dd63d9e097e169918c23) Signed-off-by: Thomas Perale --- package/imagemagick/imagemagick.hash | 2 +- package/imagemagick/imagemagick.mk | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package/imagemagick/imagemagick.hash b/package/imagemagick/imagemagick.hash index 3dbea6d8bc..eead3a9f97 100644 --- a/package/imagemagick/imagemagick.hash +++ b/package/imagemagick/imagemagick.hash @@ -1,3 +1,3 @@ # Locally computed -sha256 acf76a9dafbd18f4dd7b24c45ca10c77e31289fc28e4da0ce5cc3929fd0aef16 imagemagick-7.1.2-8.tar.gz +sha256 521fa7a8c0f664a3f5cf7437cbcc219f12bd6d5fe0c1fb014f212fa145076e60 imagemagick-7.1.2-12.tar.gz sha256 a556c5292c87c9a6ac795c80669b0c3660f9f729de8c476bf2b10f83ab1b34ec LICENSE diff --git a/package/imagemagick/imagemagick.mk b/package/imagemagick/imagemagick.mk index 4e6a810631..0d5eb2aa34 100644 --- a/package/imagemagick/imagemagick.mk +++ b/package/imagemagick/imagemagick.mk @@ -4,7 +4,7 @@ # ################################################################################ -IMAGEMAGICK_VERSION = 7.1.2-8 +IMAGEMAGICK_VERSION = 7.1.2-12 IMAGEMAGICK_SITE = $(call github,ImageMagick,ImageMagick,$(IMAGEMAGICK_VERSION)) IMAGEMAGICK_LICENSE = Apache-2.0 IMAGEMAGICK_LICENSE_FILES = LICENSE