Navigation:
Browse pkgsrc
(this page)
graphics ImageMag..
CVSweb ] [ 
Homepage ] [ 
RSS ] [ 
Required by ] [ 
Add to tracker ]| 2026-04-05 18:27:49 by Thomas Klausner | Files touched by this commit (1) |
Log message: ImageMagick: skip portability check for app-run file It's a bash script and unused by pkgsrc |
2026-02-24 07:44:25 by =?UTF-8?B?RnLDqWTDqXJpYyBGYXViZXJ0ZWF1?= | Files touched by this commit (3) |  |
Log message:
ImageMagick: Update to 7.1.2.15
pkgsrc changes:
---------------
* Fix several vulnerabilities:
o CVE-2026-25988
o CVE-2026-25987
o CVE-2026-25986
o CVE-2026-25985
o CVE-2026-25983
o CVE-2026-25982
o CVE-2026-25971
o CVE-2026-25970
o CVE-2026-25969
o CVE-2026-25968
o CVE-2026-25967
o CVE-2026-25966
o CVE-2026-25965
o CVE-2026-25898
upstream changes:
-----------------
7.1.2-15 - 2026-02-22
Commits
* Reverted changes that were committed by accident. 818ee63
* release b5fdb90
7.1.2-14 - 2026-02-22
Merged
* ICON: allow writing 256x256 icon rasters #8569
* replace MAGICK_FILTER_MODULE_PATH for MAGICK_CODER_FILTER_PATH #8561
Fixed
* ICON: allow writing 256x256 icon rasters (#8569) #1577
Commits
* beta release 915109f
* Code cleanup. 8135662
* Inline all byte buffer methods. 887a187
* Added overflow checks. 0d0752c
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pqgj-2p96-rx85 \
332c156
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pqgj-2p96-rx85 \
55c344f
* ImageMagick/ImageMagick#8538 f03ada7
* ImageMagick/ImageMagick#8537 85dc1a5
* Initialize the pixels with empty values to prevent possible heap information \
disclosure (GHSA-96pc-27rx-pr36) 51c9d33
* Also set the profile when pinging the image. 9f389d8
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wg3g-gvx5-2pmv \
0349df6
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wg3g-gvx5-2pmv \
f4525ad
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-273h-m46v-96q4 \
5b91ab6
* ImageMagick/ImageMagick#8540 d97741f
* Allow null value when calling RelinquishDeviceBenchmark. 5fd4e5a
* Restored changes that were removed by accident. 96c0f67
* Moved permissions to the job level. 53af327
* Throw exception when memory allocation fails. d052e8a
* No longer allow mutations on the first image of the list \
(GHSA-fwqw-2x5x-w566) b4f8e1a
* Fixed out of bounds read in multiple coders that read raw pixel data \
(GHSA-jv4p-gjwq-9r2j) 077b426
* Corrected patch. 05e2958
* ImageMagick/ImageMagick#8542 40e5a1b
* Updated the Windows dependencies. 0843b13
* Run checks before accessing the image (GHSA-fwqw-2x5x-w566). 257200c
* Minor change to improve the readability. db700a3
* More changes to improve the readability. 178bde9
* Corrected loop initialization to prevent out of bounds read \
(GHSA-wrhr-rf8j-r842) 0c9ffcf
* block fd: filenames in security policies 0723275
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xg29-8ghv-v4x \
266e59e
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xgm3-v4r9-wfgm \
a253d1b
* jumbo security patch: addresses memory leak, stack overflow, out-of-bounds, \
integer overflow, OOB read 6b71e2b
* fix compiler exception 17b965c
* fix compiler exception 21e2d62
* git compiler exception a2acad8
* fix compiler exception be29d5c
* fix compiler exception 907f609
* fix compile exception 7bea1ca
* fix compiler exception d3360f2
* block SVG image format ddcdcb8
* prevent infinite recursion b095ed5
* utilize a global Splay tree to guard against recursion 38bc4fa
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-543g-8grm-9cw6 \
412f3c8
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-72hf-fj62-w6j4 \
9afe96c
* eliminate compiler exception 6f6856b
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xg29-8ghv-v4xr \
729253d
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p863-5fgm-rgq4 \
16dd315
* ImageMagick/ImageMagick#8552 cbc4273
* fix potential memory leak 6dbae0a
* prevent a possible integer overflow d7cc315
* ImageMagick/ImageMagick#8553 9095421
* Removed temporary patch. 21ccb8d
* Revert security patches so we can make them in clean separate commits and \
reference an advisory. 04caff1
* Block reading from fd: in our more secure policies by default \
(GHSA-xwc6-v6g8-pw2h) 8d4c67a
* ithub.com/ImageMagick/ImageMagick/issues/8555 71fda22
* Prevent path traversal of paths that are blocked in the security policy \
(GHSA-8jvj-p28h-9gm7) 4a9dc10
* Added checks to prevent an out of bounds read (GHSA-pmq6-8289-hx3v) 4e1f538
* Fixed memory leak when writing MSL files (GHSA-gxcx-qjqp-8vjw) 1e88fca
* Correct previous patch. 276ef52
* Patch to resolve possible out of bounds write in the msl decoder \
(GHSA-3mwp-xqp2-q6ph). 56f0295
* Keep a splay tree of read files to prevent a stack overflow \
(GHSA-8mpr-6xr2-chhc) 9313e53
* ImageMagick/ImageMagick#8555 a3d3de5
* ImageMagick/ImageMagick#8294 783af7c
* Fixed possible memory leak (GHSA-gm37-qx7w-p258) 30ce0e8
* Switch back to DestroyImage. 6a35526
* Set the count during the loop to make sure RelinquishIconDirectory frees the \
correct number of icons. fbbc4c9
* ImageMagick/ImageMagick#8556 4403def
* eliminate compiler warning b3357d6
* protect against relative paths 30fa8ba
* correct glob expression afbe0f1
* clarify path policy 795f581
* Added missing calls to DestroyImageInfo. 3d1e6fe
* Added workflow for the OpenSSF Scorecard. 89d20b0
* ImageMagick/ImageMagick#8557 7e128ba
* Pin all actions. de4e2c4
* Also update dockerfiles. 22a0933
* Pin more version. dc2303d
* Removed dockerfile updates from dependabot.yml fffcabb
* Added name to workflow. c94f0ff
* Correct pinning. 5a7452e
* Pin python versions. c53e7d2
* Corrected path. a64f30d
* Corrected install. d831c6e
* Added extra options to the pip install. 0ed22db
* Moved all windows implementations in utility-private to nt-base-private. afc7d4a
* Use CreateWidePath instead of create_wchar_path. 97500fe
* Corrected method name. 4599a45
* Improved the NTRealPathWide implementation. 9c7992e
* Added comment about the limitations of realpath. 2240bc0
* Fixed out of bound read with negative pixel index (GHSA-vpxv-r9pg-7gpr) c9c87db
* Prevent out of bounds heap write in uhdr encoder \
(https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vhqj-f5cj-9x8h) \
ffe589d
* Prevent memory leak in early exits (GHSA-g2pr-qxjg-7r2w) 93ad259
* Fixed NULL pointer dereference in ReadSFWImage (GHSA-p33r-fqw2-rqmm) 0c7d0b9
* Prevent code injection via PostScript header \
(https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rw6c-xp26-225v) \
26088a8
* Added extra check to prevent out of bounds heap write on 32-bit systems \
(GHSA-6j5f-24fw-pqp4) 23fde73
* Fixed possible memory leak (GHSA-3q5f-gmjc-38r8) e639409
* Disable multithreading when reading svg and msl files because of the splay \
tree. 410ecdd
* Corrected check to determine if the encoder supports multi threading. 764bff7
* latest autoconf/automake updates 706b179
* Fixed possible memory leak in multiple coders that write raw pixel data \
(GHSA-wfx3-6g53-9fgc) fe0a49a
* Properly escape strings when creating an MVG file in the internal SVG \
decoder (GHSA-xpg8-7m6m-jf56) f63c78b
* reset channel map when cache resources are exhausted 364606e
* revert and correct documentation instead e417d67
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7355-pwx2-pm84 \
5a545ab
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x2j6-6h5m-gjg4 \
13e1eac
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqfc-82jx-3mr2 \
b9c80ad
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-782x-jh29-9mf7 \
4354fc1
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-42p5-62qq-mmh7 \
bbae021
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v7g2-m8c5-mf84 \
1a51eb9
* Moved allocation to fix possible memory leak when at recursion depth. 7e63bb5
* Fixed out of bound read with negative pixel index (GHSA-vpxv-r9pg-7gpr) 21525d8
* Corrected previous patch and added more overflow checks. 31f10b1
* ImageMagick/ImageMagick#8562 7771657
* ImageMagick/ImageMagick#8563 49000e7
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x2j6-6h5m-gjg4 \
e5dcf54
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxw5-m53x-j38c \
40cfaa7
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxw5-m53x-j38c \
e2d5b4f
* Ignore the return value differently. ca3b0da
* Corrected type to avoid an overflow (GHSA-r99p-5442-q2x2) e87695b
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-fpvf-frm6-625q \
3392b4b
* fix compiler warning 8ddc98d
* Removed unused return value. a48c7cb
* Fixed possible infinite loop (GHSA-v994-63cg-9wj3) 880057c
* Updated the Windows dependencies. f584f36
* cosmetic cfa749d
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gwr3-x37h-h84v \
c448c69
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wgxp-q8xq-wpp9 \
436e5d2
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mh5h-j6mf-5vr6 \
33531ba
* avoid deadly embrace for recursive MSL/SVG 017a836
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h4rj-wc46-x92p \
f9d6311
* base recursion detection based on thread id d72e868
* standards‑compliant thread id string efd91b9
* eliminate compiler warning 7b0899b
* Restored check that was removed by accident. 2ede3c9
* Escape more strings when creating an MVG file in the internal SVG decoder \
(GHSA-xpg8-7m6m-jf56) 9db9636
* Refactored code to improve the readability. 5c611d3
* Only disable multi threading for the RSVG decoder. 0be03b0
* private method name change 8f3c54f
* ImageMagick/ImageMagick#8567 e046417
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w8mw-frc6-r7m8 \
7cfae4d
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r58-28vv-qj5p \
c12ff82
* add TEXT as a restricted module 83847c3
* \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qpgx-jfcq-r59f \
0377e60
* protect against deep glob recursion e739a38
* assign critical memory 09c8589
* Write after we have checked if the realloc failed (GHSA-3j4x-rwrx-xxj9) 168ffe1
* latest automake/autoconfig updates c95a254
* Removed unnecessary typecast. 0106750
* Also escape > 9dda5c0
* Properly escape the strings that are written as raw html \
(GHSA-rw6c-xp26-225v) 81129f7
* Corrected possible use after free when allocation fails \
(GHSA-2gq3-ww97-wfjm) f504995
* Use a consistent check. 6aa3dd7
* Updated the Windows dependencies. 7a758ee
* partial TOCTOU patch: \
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-493f-jh8w-qhx3 \
3eb1126
* Updated the code-signing action. 27e4942
* Use the full path instead. 97b82c9
* Updated configure. 9e4cd4f
* Use the Installer from the Configure artifacts instead. a7d01e0
* Added missing clone. dc468e6
* Updated configure. 48a4a53
* release ab3e1de
|
| 2026-02-06 11:06:21 by Thomas Klausner | Files touched by this commit (1305) |
Log message: *: recursive bump for nettle 4.0 shlib major bump |
| 2026-01-20 09:23:23 by =?UTF-8?B?RnLDqWTDqXJpYyBGYXViZXJ0ZWF1?= | Files touched by this commit (3) |
Log message: ImageMagick: Update to 7.1.2.13 pkgsrc changes: --------------- * Fix CVE-2026-22770 * Fix CVE-2026-23874 upstream changes: ----------------- 7.1.2-13 - 2026-01-19 Commits * beta release 0db229e * cosmetic 0aed4e1 * Check if the aspect ratio is a known ratio when density_unit is set to zero \ and otherwise read it as an undefined density in the jpeg coder (#8496) ab2232d * Consistent code style. 4012a8c * Added -DENABLE_DECODER=off to the oss-fuzz build of libde265 to work around \ linking issue. 7bbb1e5 * Use true/false for all CMAKE defines. c59b417 * Switch to cmake with the freetype2 oss-fuzz build. 93100cc * Code cleanup. 408a183 * tune secuirty policies 9b94be4 * Correct memset initialization and add an overflow check \ (GHSA-39h3-g67r-7g3c) 3e03307 * Corrected check to determine if the alpha channel is enabled. 21485df * Disabled trim_trailing_whitespace in .c because this breaks the marker \ between methods. b1a07dd * Trim trailing whitespace. db21d54 * Updated configure. cf2ff1f * Use the new license url. 2abe65b * Improved overflow checks and added missing memset. d02ef69 * Moved permissions block in the workflows. a52c1b4 * Fixed memory leak that happens when someone creates a corrupt \ ImagemagickOpenCLDeviceProfile.xml file (GHSA-qp59-x883-77qv) 951f6b0 * Changed version check because a new version of libraw has been released \ (#8524). cbc802d * \ https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5vx3-wx4q-6cj8 \ 1eefab4 * MSL: Stack overflow via infinite recursion in ProcessMSLScript 2a09644 * ImageMagick/ImageMagick#8523 d67e65c * signed/unsigned mismatch f2dc5ef * Updated the Windows dependencies. 31347f8 * Added overflow checks. 96eb9a3 * Temporary install the TrustedSigningClientTools that is required by Advanced \ Installer. 888091f * Switch to windows-2025 because it has winget installed. 0ef3288 * Added option to winget installation. 1217b59 * Use a different method to install TrustedSigningClientTools. 33cde41 * ImageMagick/ImageMagick#8528 dce1f70 * Added overflow checks to prevent an out of bounds write \ (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r49w-jqq3-3gx8) \ 2fae241 * release dd991e2 |
| 2026-01-07 09:49:50 by Thomas Klausner | Files touched by this commit (2525) |
Log message: *: recursive bump for icu 78.1 |
| 2025-12-30 23:25:06 by =?UTF-8?B?RnLDqWTDqXJpYyBGYXViZXJ0ZWF1?= | Files touched by this commit (2) | |
Log message: ImageMagick: Update to 7.1.2.12 pkgsrc changes: --------------- * Fix CVE-2025-68618 * Fix CVE-2025-68950 * Fix CVE-2025-69204 upstream changes: ----------------- 7.1.2-12 - 2025-12-28 Merged * Bump actions/download-artifact from 6 to 7 #8497 * Bump actions/upload-artifact from 5 to 6 #8498 * Fix warnings about operations on volatiles that are deprecated in C++20. #8502 * Bump msys2/setup-msys2 from 2.29.0 to 2.30.0 #8499 * Fix autoconf syntax errors (configure.ac) #8488 Commits * beta release 22ed20a * latest autoconf update 7b8b8e9 * ImageMagick/ImageMagick#8487 16d029a * Removed const keyword. eec063c * Also remove const from the header file. a9223bb * Removed undefined private function declaration. 8b7b850 * \ https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p27m-hp98-6637 \ 6f431d4 * Removed name. ecd4edc * Fixed memory leak that happens when we hit a list limit. ad65a4c * Removed specific methods for Windows with memory allocation. 7b0bce0 * \ https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7rvh-xqp3-pr8j \ 204718c * Revert patches to solve #8484 and #8506. d6a53ce * Updated the Windows dependencies. 92dce45 * \ https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hrh7-j8q2-4qcw \ 2c08c23 * release bdd4fa5 |
| 2025-12-16 10:58:06 by =?UTF-8?B?RnLDqWTDqXJpYyBGYXViZXJ0ZWF1?= | Files touched by this commit (2) |
Log message: ImageMagick: Update to 7.1.2.11 upstream changes: ----------------- 7.1.2-11 - 2025-12-14 Commits * beta release e97f8c1 * Only allow setting the data_precision to values other then 16 and 12 when \ quality is lossless (>= 100). 4d7581a * Switch to macos-15-intel for the x64 MacOS build. 3f47b60 * Removed old debug statements. 281adfc * Added extra checks to prevent overflows on 32-bit systems and do an earlier \ exit. 1dc1fc9 * release 578d60d |
| 2025-12-12 21:07:44 by =?UTF-8?B?RnLDqWTDqXJpYyBGYXViZXJ0ZWF1?= | Files touched by this commit (2) | |
Log message: ImageMagick: Update to 7.1.2.10 upstream changes: ----------------- 7.1.2-10 - 2025-12-07 Commits * beta release cfbeef4 * Added extra check to make sure don't read after an empty string. f83765c * Added extra check to avoid an overflow on 32-bit machines \ (GHSA-6hjr-v6g4-3fm8) bdae068 * Use HeapOverflowSanityCheckGetSize to make it more clear what is happening. \ 351bbc8 * Added define to make sure we don't always write a jpeg in a high bit depth \ (#8445) 245b84f * Use intermediate variable to silence 32-bit build error on Windows. ba1fcf9 * Code cleanup. 567321b * Updated the Windows dependencies and configure. 53b1fb9 * Disable creation of msix in pull requests. 537db6b * Updated the checkout actions. e956d72 * Check for quality instead of compression to avoid Unsupported JPEG data \ precision error message (#8445). 1269cf5 * The quality of the image_info should be used instead. 69f7ced * release f4ce623 7.1.2-9 - 2025-11-30 Merged * JPEG: Support 2-to-16-bit lossless JPEG images with libjpeg-turbo 3.1+; \ Support additional IDCT scaling factors with libjpeg-turbo and libjpeg v7+ #8445 * Add ALImageMagick (Delphi) to the list of ImageMagick language bindings #8444 * Update Doc #8442 Commits * beta release a5ad8fb * ImageMagick/ImageMagick#8410 5735e8c * Bumped versions of download and upload artifacts actions. ab36309 * ImageMagick/ImageMagick#8416 e8c31c9 * Move writing of the IDAT chunk to the end to silence a warning in exiftool \ (#8400) fe6925d * ImageMagick/ImageMagick#8422 d0b07ac * Minor refactor. 47a94a3 * Only use output values from environment variables. aa13999 * Changed indentation. dcd54a5 * Pin actions. 6cf8cfc * Changed indentation. 1beebc9 * No longer persist credentials on checkout. 44525f4 * Added cooldown to dependabot.yml 9d6611b * No longer persist credentials on checkout. 62357f9 * Also pin the version of the msys2 action. 6d4f89d * Removed duplicate eof check. d356c51 * Added custom end of file check to the pnm encoder to allow a missing final \ newline (#8425) 7404bd0 * Updated the Windows dependencies. 72c1050 * Close temporary file to make sure it can be opened again (#8420) be66a21 * latest autoconf/automake updates 81eb8eb * Use the colorspace when writing images that have a color map in the pnm \ coder (#8429). 2a9f7c6 * Use if statements instead. 389238f * Allow reading old Quickdraw PICT files that directly start with the size of \ the image (#8381). 9002a93 * Clone the correct repositories for the release. 77a2c99 * Improved the jpeg coder by calculating the range only once instead of every \ pixel channel. 602c436 * Updated the Windows dependencies. 9c0546a * Correct incorrect free (GHSA-q3hc-j9x5-mp9m) 6f81eb1 * Removed incorrect format specifier. a5ac3c1 * Switch to cmake with the oss-fuzz build of libde265. cf149f5 * Correct parsing of the density (#8460) f46647c * Added Visual Studio 2026. 67f7f33 * enable coder policy "write" rights for MVG coder 85c04c1 * Silence macos warning. a70f4b8 * Disabling a module will now also disable all the coders in that module. 061b7b2 * Updated the Windows dependencies. 5cff2fc * release a90c050 |
New packages: