Thomas Perale 80fff34d7b package/graphicsmagick: add patch for CVE-2025-27796 ...

Fixes the following vulnerability:

- CVE-2025-27796:
    ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette
    buffer allocation, resulting in out-of-bounds access to heap memory in
    ReadBlob.

For more information, see
  - https://www.cve.org/CVERecord?id=CVE-2025-27796
  - https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/883ebf8cae6dfa5873d975fe3476b1a188ef3

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 6f9f9caa45)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>

2026-03-06 14:16:27 +01:00

..

0001-ReadJXLImage-Apply-image-dimension-resource-limits.patch

…

0002-ReadJXLImage-pixel_format-num_channels-needs-to-be.patch

…

0003-Assure-that-palette-buffer-is-allocated-and-the-current-size.patch

package/graphicsmagick: add patch for CVE-2025-27796

2026-03-06 14:16:27 +01:00

Config.in

…

graphicsmagick.hash

…

graphicsmagick.mk

package/graphicsmagick: add patch for CVE-2025-27796

2026-03-06 14:16:27 +01:00