[Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6

[Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6

[Michael Fischer]

3.1.1 was a preview release. Among the changes since, it fixes the XCF
loader issue reported as CVE-2026-35444

The LICENSE.txt hash changes because the copyright year was updated
upstream. The license itself is unchanged (Zlib).

Signed-off-by: Michael Fischer <mf@go-sys.de>
---
 package/sdl3_image/sdl3_image.hash | 4 ++--
 package/sdl3_image/sdl3_image.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/package/sdl3_image/sdl3_image.hash b/package/sdl3_image/sdl3_image.hash
index 83f5e7eaf1..e0eb2d2cc8 100644
--- a/package/sdl3_image/sdl3_image.hash
+++ b/package/sdl3_image/sdl3_image.hash
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  d5685f220d5ae99439d710d808d8c478c6ccfaac539876929239b875a6723792  SDL3_image-3.1.1.tar.gz
-sha256  7826eca0a0f7e591f38dd844e207a200aac81a59b20d8a30c3af8c6282af13e6  LICENSE.txt
+sha256  d2e4637ae700f72e5196b8fbd749850ed2e5e1e09c5a5be8d06ff55aaccf3b01  SDL3_image-3.4.6.tar.gz
+sha256  e36997fe492c48e7ed873065cc3a694f38e8189a328d3709099ffdc9a8843f4c  LICENSE.txt
diff --git a/package/sdl3_image/sdl3_image.mk b/package/sdl3_image/sdl3_image.mk
index 7832d38fc6..c8802a6bed 100644
--- a/package/sdl3_image/sdl3_image.mk
+++ b/package/sdl3_image/sdl3_image.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SDL3_IMAGE_VERSION = 3.1.1
+SDL3_IMAGE_VERSION = 3.4.6
 SDL3_IMAGE_SITE = https://www.libsdl.org/projects/SDL_image/release
 SDL3_IMAGE_SOURCE = SDL3_image-$(SDL3_IMAGE_VERSION).tar.gz
 SDL3_IMAGE_LICENSE = Zlib
-- 
2.43.0

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6

[Julien Olivain via buildroot]

On 08/09/2026 11:07, Michael Fischer wrote:
> 3.1.1 was a preview release. Among the changes since, it fixes the XCF
> loader issue reported as CVE-2026-35444
> 
> The LICENSE.txt hash changes because the copyright year was updated
> upstream. The license itself is unchanged (Zlib).
> 
> Signed-off-by: Michael Fischer <mf@go-sys.de>

Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6

[Raphaël Mélotte via buildroot]

In reply of:
> 3.1.1 was a preview release. Among the changes since, it fixes the XCF
> loader issue reported as CVE-2026-35444
> 
> The LICENSE.txt hash changes because the copyright year was updated
> upstream. The license itself is unchanged (Zlib).
> 
> Signed-off-by: Michael Fischer <mf@go-sys.de>

Applied to 2026.08.x. Thanks

> ---
>  package/sdl3_image/sdl3_image.hash | 4 ++--
>  package/sdl3_image/sdl3_image.mk   | 2 +-
>  2 files changed, 3 insertions(+), 3 deletions(-)
> 
> diff --git a/package/sdl3_image/sdl3_image.hash b/package/sdl3_image/sdl3_image.hash
> index 83f5e7eaf1..e0eb2d2cc8 100644
> --- a/package/sdl3_image/sdl3_image.hash
> +++ b/package/sdl3_image/sdl3_image.hash
> @@ -1,3 +1,3 @@
>  # Locally calculated
> -sha256  d5685f220d5ae99439d710d808d8c478c6ccfaac539876929239b875a6723792  SDL3_image-3.1.1.tar.gz
> -sha256  7826eca0a0f7e591f38dd844e207a200aac81a59b20d8a30c3af8c6282af13e6  LICENSE.txt
> +sha256  d2e4637ae700f72e5196b8fbd749850ed2e5e1e09c5a5be8d06ff55aaccf3b01  SDL3_image-3.4.6.tar.gz
> +sha256  e36997fe492c48e7ed873065cc3a694f38e8189a328d3709099ffdc9a8843f4c  LICENSE.txt
> diff --git a/package/sdl3_image/sdl3_image.mk b/package/sdl3_image/sdl3_image.mk
> index 7832d38fc6..c8802a6bed 100644
> --- a/package/sdl3_image/sdl3_image.mk
> +++ b/package/sdl3_image/sdl3_image.mk
> @@ -4,7 +4,7 @@
>  #
>  ################################################################################
>  
> -SDL3_IMAGE_VERSION = 3.1.1
> +SDL3_IMAGE_VERSION = 3.4.6
>  SDL3_IMAGE_SITE = https://www.libsdl.org/projects/SDL_image/release
>  SDL3_IMAGE_SOURCE = SDL3_image-$(SDL3_IMAGE_VERSION).tar.gz
>  SDL3_IMAGE_LICENSE = Zlib
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot