From 2a65a9586e65a8d2dbac5876ebc59aedab1740f2 Mon Sep 17 00:00:00 2001
From: Alexandru Ardelean <alex@shruggie.ro>
Date: Sun, 11 Oct 2026 19:44:58 +0300
Subject: [PATCH] graphicsmagick: update to 1.3.49

Security release: CVE-2025-55154 (integer overflow in MNG MAGN chunk
handling), CVE-2026-56379 (command injection via crafted SVG drawing
commands) and CVE-2026-103118 (stack exhaustion in the WPG reader),
plus heap buffer over-reads in GenerateIPTCAttribute() and missing
overflow detection in the PICT decoder.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
---
 multimedia/graphicsmagick/Makefile | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/multimedia/graphicsmagick/Makefile b/multimedia/graphicsmagick/Makefile
index e26893f226..8d544c95fc 100644
--- a/multimedia/graphicsmagick/Makefile
+++ b/multimedia/graphicsmagick/Makefile
@@ -5,13 +5,13 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=graphicsmagick
-PKG_VERSION:=1.3.48
+PKG_VERSION:=1.3.49
 PKG_RELEASE:=1
 
 PKG_BUILD_DIR:=$(BUILD_DIR)/GraphicsMagick-$(PKG_VERSION)
 PKG_SOURCE:=GraphicsMagick-$(PKG_VERSION).tar.xz
 PKG_SOURCE_URL:=@SF/graphicsmagick
-PKG_HASH:=9218eb78179110f91371066ab75cb3b4dd034b9bb464b29ce9bab7a11979232b
+PKG_HASH:=7efa070dc31116b4315061b39f84bc7181e8b060bf61214ec9af851131af9c81
 
 PKG_LICENSE:=MIT
 PKG_LICENSE_FILES:=Copyright.txt