graphicsmagick: update to 1.3.49

Security release: CVE-2025-55154 (integer overflow in MNG MAGN chunk
handling), CVE-2026-56379 (command injection via crafted SVG drawing
commands) and CVE-2026-103118 (stack exhaustion in the WPG reader),
plus heap buffer over-reads in GenerateIPTCAttribute() and missing
overflow detection in the PICT decoder.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
This commit is contained in:
Alexandru Ardelean authored and Alexandru Ardelean committed 2026-10-13 16:28:36 +03:00
1 parent 2fbf88b720
commit 2a65a9586e
1 file changed
+2 -2
+2 -2
View File
@@ -5,13 +5,13 @@
include $(TOPDIR)/rules.mk
PKG_NAME:=graphicsmagick
PKG_VERSION:=1.3.48
PKG_VERSION:=1.3.49
PKG_RELEASE:=1
PKG_BUILD_DIR:=$(BUILD_DIR)/GraphicsMagick-$(PKG_VERSION)
PKG_SOURCE:=GraphicsMagick-$(PKG_VERSION).tar.xz
PKG_SOURCE_URL:=@SF/graphicsmagick
PKG_HASH:=9218eb78179110f91371066ab75cb3b4dd034b9bb464b29ce9bab7a11979232b
PKG_HASH:=7efa070dc31116b4315061b39f84bc7181e8b060bf61214ec9af851131af9c81
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=Copyright.txt