* [Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6
@ 2026-09-08 9:07 Michael Fischer
2026-09-22 20:40 ` Julien Olivain via buildroot
2026-10-02 10:29 ` Raphaël Mélotte via buildroot
0 siblings, 2 replies; 3+ messages in thread
From: Michael Fischer @ 2026-09-08 9:07 UTC (permalink / raw)
To: buildroot; +Cc: Michael Fischer
3.1.1 was a preview release. Among the changes since, it fixes the XCF
loader issue reported as CVE-2026-35444
The LICENSE.txt hash changes because the copyright year was updated
upstream. The license itself is unchanged (Zlib).
Signed-off-by: Michael Fischer <mf@go-sys.de>
---
package/sdl3_image/sdl3_image.hash | 4 ++--
package/sdl3_image/sdl3_image.mk | 2 +-
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/package/sdl3_image/sdl3_image.hash b/package/sdl3_image/sdl3_image.hash
index 83f5e7eaf1..e0eb2d2cc8 100644
--- a/package/sdl3_image/sdl3_image.hash
+++ b/package/sdl3_image/sdl3_image.hash
@@ -1,3 +1,3 @@
# Locally calculated
-sha256 d5685f220d5ae99439d710d808d8c478c6ccfaac539876929239b875a6723792 SDL3_image-3.1.1.tar.gz
-sha256 7826eca0a0f7e591f38dd844e207a200aac81a59b20d8a30c3af8c6282af13e6 LICENSE.txt
+sha256 d2e4637ae700f72e5196b8fbd749850ed2e5e1e09c5a5be8d06ff55aaccf3b01 SDL3_image-3.4.6.tar.gz
+sha256 e36997fe492c48e7ed873065cc3a694f38e8189a328d3709099ffdc9a8843f4c LICENSE.txt
diff --git a/package/sdl3_image/sdl3_image.mk b/package/sdl3_image/sdl3_image.mk
index 7832d38fc6..c8802a6bed 100644
--- a/package/sdl3_image/sdl3_image.mk
+++ b/package/sdl3_image/sdl3_image.mk
@@ -4,7 +4,7 @@
#
################################################################################
-SDL3_IMAGE_VERSION = 3.1.1
+SDL3_IMAGE_VERSION = 3.4.6
SDL3_IMAGE_SITE = https://www.libsdl.org/projects/SDL_image/release
SDL3_IMAGE_SOURCE = SDL3_image-$(SDL3_IMAGE_VERSION).tar.gz
SDL3_IMAGE_LICENSE = Zlib
--
2.43.0
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6
2026-09-08 9:07 [Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6 Michael Fischer
@ 2026-09-22 20:40 ` Julien Olivain via buildroot
2026-10-02 10:29 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Julien Olivain via buildroot @ 2026-09-22 20:40 UTC (permalink / raw)
To: Michael Fischer; +Cc: buildroot
On 08/09/2026 11:07, Michael Fischer wrote:
> 3.1.1 was a preview release. Among the changes since, it fixes the XCF
> loader issue reported as CVE-2026-35444
>
> The LICENSE.txt hash changes because the copyright year was updated
> upstream. The license itself is unchanged (Zlib).
>
> Signed-off-by: Michael Fischer <mf@go-sys.de>
Applied to master, thanks.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6
2026-09-08 9:07 [Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6 Michael Fischer
2026-09-22 20:40 ` Julien Olivain via buildroot
@ 2026-10-02 10:29 ` Raphaël Mélotte via buildroot
1 sibling, 0 replies; 3+ messages in thread
From: Raphaël Mélotte via buildroot @ 2026-10-02 10:29 UTC (permalink / raw)
To: buildroot, Michael Fischer; +Cc: Raphaël Mélotte
In reply of:
> 3.1.1 was a preview release. Among the changes since, it fixes the XCF
> loader issue reported as CVE-2026-35444
>
> The LICENSE.txt hash changes because the copyright year was updated
> upstream. The license itself is unchanged (Zlib).
>
> Signed-off-by: Michael Fischer <mf@go-sys.de>
Applied to 2026.08.x. Thanks
> ---
> package/sdl3_image/sdl3_image.hash | 4 ++--
> package/sdl3_image/sdl3_image.mk | 2 +-
> 2 files changed, 3 insertions(+), 3 deletions(-)
>
> diff --git a/package/sdl3_image/sdl3_image.hash b/package/sdl3_image/sdl3_image.hash
> index 83f5e7eaf1..e0eb2d2cc8 100644
> --- a/package/sdl3_image/sdl3_image.hash
> +++ b/package/sdl3_image/sdl3_image.hash
> @@ -1,3 +1,3 @@
> # Locally calculated
> -sha256 d5685f220d5ae99439d710d808d8c478c6ccfaac539876929239b875a6723792 SDL3_image-3.1.1.tar.gz
> -sha256 7826eca0a0f7e591f38dd844e207a200aac81a59b20d8a30c3af8c6282af13e6 LICENSE.txt
> +sha256 d2e4637ae700f72e5196b8fbd749850ed2e5e1e09c5a5be8d06ff55aaccf3b01 SDL3_image-3.4.6.tar.gz
> +sha256 e36997fe492c48e7ed873065cc3a694f38e8189a328d3709099ffdc9a8843f4c LICENSE.txt
> diff --git a/package/sdl3_image/sdl3_image.mk b/package/sdl3_image/sdl3_image.mk
> index 7832d38fc6..c8802a6bed 100644
> --- a/package/sdl3_image/sdl3_image.mk
> +++ b/package/sdl3_image/sdl3_image.mk
> @@ -4,7 +4,7 @@
> #
> ################################################################################
>
> -SDL3_IMAGE_VERSION = 3.1.1
> +SDL3_IMAGE_VERSION = 3.4.6
> SDL3_IMAGE_SITE = https://www.libsdl.org/projects/SDL_image/release
> SDL3_IMAGE_SOURCE = SDL3_image-$(SDL3_IMAGE_VERSION).tar.gz
> SDL3_IMAGE_LICENSE = Zlib
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2026-10-02 10:29 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2026-09-08 9:07 [Buildroot] [PATCH 01/1] package/sdl3_image: security bump to version 3.4.6 Michael Fischer
2026-09-22 20:40 ` Julien Olivain via buildroot
2026-10-02 10:29 ` Raphaël Mélotte via buildroot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox