All of lore.kernel.org
 help / color / mirror / Atom feed
From: Julien Olivain <ju.o@free.fr>
To: Peter Korsgaard <peter@korsgaard.com>
Cc: buildroot@buildroot.org, Grzegorz Blach <grzegorz@blach.pl>
Subject: Re: [Buildroot] [PATCH 1/2] package/graphicsmagick: security bump to version 1.3.45
Date: Wed, 23 Apr 2025 21:24:26 +0200	[thread overview]
Message-ID: <9072c2839a83e8e64dddd94ee8c17b64@free.fr> (raw)
In-Reply-To: <20250423190643.3526208-1-peter@korsgaard.com>

On 23/04/2025 21:06, Peter Korsgaard wrote:
> 1.3.44 added the following security fixes:
> 
> * TIFF: Fixed multiple heap and stack buffer overflows (directed by
>   the source EXIF profile) while writing EXIF into the native TIFF
>   IFD.
> 
> * FITS: Fix problem that the FITS reader could return invalid image
>   frames with rows or columns set to zero. Other code in the library
>   crashes, or even asserts, if invalid image frames with rows or
>   columns set to zero are returned.
> 
> * Coverity fixes: Various fixes for Coverity issues raised after the
>   update to version 2023.12.2.
> 
> * Clang Analyzer (scan-build) fixes: Various fixes for new issues
>   discovered by Clang Analyzer.
> 
> https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/7046c344273c263a9b6e4901b910508aea3804b5
> 
> In addition 1.3.45 fixes a off-by-one issue introduced in 1.3.44:
> https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/96f765a2e3cebf0b70094da34d03b73c50c3aa63
> 
> Update the Copyright.txt hash for a change in copyright years:
> https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/f0bba104ee3859286ea8adfc2ff603fd64be5624
> https://foss.heptapod.net/graphicsmagick/graphicsmagick/-/commit/26fce892769e4a26247dd2db5b8dc0719ce20953
> 
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

Series applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

  parent reply	other threads:[~2025-04-23 19:24 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2025-04-23 19:06 [Buildroot] [PATCH 1/2] package/graphicsmagick: security bump to version 1.3.45 Peter Korsgaard
2025-04-23 19:06 ` [Buildroot] [PATCH 2/2] package/graphicsmagick: add post-1.3.45 security fixes Peter Korsgaard
2025-04-23 19:24 ` Julien Olivain [this message]
2025-05-02 11:06 ` [Buildroot] [PATCH 1/2] package/graphicsmagick: security bump to version 1.3.45 Arnout Vandecappelle via buildroot

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=9072c2839a83e8e64dddd94ee8c17b64@free.fr \
    --to=ju.o@free.fr \
    --cc=buildroot@buildroot.org \
    --cc=grzegorz@blach.pl \
    --cc=peter@korsgaard.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.