summaryrefslogtreecommitdiffstats
path: root/package/imagemagick
Commit message (Collapse)AuthorAgeFilesLines
* imagemagick: add upstream security fix for CVE-2017-7606Peter Korsgaard2017-04-261-0/+52
| | | | | | | | | | | | | | This is not yet part of any release. coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. For more details, see: https://blogs.gentoo.org/ago/2017/04/02/imagemagick-undefined-behavior-in-codersrle-c/ Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump version to 7.0.5-4Vicente Olivert Riera2017-03-282-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump version to 7.0.5-3Vicente Olivert Riera2017-03-222-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump version to 7.0.5-2Vicente Olivert Riera2017-03-182-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump version to 7.0.5-0 (security)Vicente Olivert Riera2017-03-103-49/+2
| | | | | | | | | | | | | | | | - Fixed memory leak when creating nested exceptions in Magick++ https://www.imagemagick.org/discourse-server/viewtopic.php?f=23&p=142634 - Fixed fd leak for webp coder https://github.com/ImageMagick/ImageMagick/pull/382 - Fixed Spurious memory allocation message https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31438 Full changelog: http://imagemagick.org/script/changelog.php Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: fix build of png support when jpeg support is disabledPeter Korsgaard2017-02-061-0/+47
| | | | | | | | | | | | | | | | | | | | | | | | | Fixes: http://autobuild.buildroot.net/results/d20/d20eecec8e7b947759185f77a6c8e610dd7393f3/ http://autobuild.buildroot.net/results/ee1/ee15efa8ae3f95244980810155ff7ba9f885a59d/ http://autobuild.buildroot.net/results/aa8/aa80f2fd4c7dd884ea8a1b55ad15a40c7bf40501/ http://autobuild.buildroot.net/results/9aa/9aaa044f78115d7f599ea09669c0d6bface5633e/ This combination is broken since 7.0.4-6. Since commit a9e228f8ac26 (Implemented a private PNG caNv (canvas) chunk), PNGsLong gets called unconditionally, but it is only defined if JPEG support is enabled (which defines JNG_SUPPORTED), breaking the build: MagickCore/.libs/libMagickCore-7.Q16HDRI.a(MagickCore_libMagickCore_7_Q16HDRI_la-png.o): In function `WriteOnePNGImage': png.c:(.text+0x748d): undefined reference to `PNGsLong' png.c:(.text+0x74b7): undefined reference to `PNGsLong' Fix it by adding a patch unconditionally defining the helper function. Patch submitted upstream. Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: security bump to version 7.0.4-6Vicente Olivert Riera2017-01-312-2/+2
| | | | | | | | | | | Fixes an use of uninitialized data issue in MAT image format that may have security impact: https://github.com/ImageMagick/ImageMagick/issues/362 [Peter: extend commit message, mention (potential) security impact] Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump version to 7.0.4-5Vicente Olivert Riera2017-01-232-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump version to 7.0.4-4Vicente Olivert Riera2017-01-162-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump version to 7.0.4-3 (security)Vicente Olivert Riera2017-01-092-2/+2
| | | | | | | | | Fixes CVE-2016-8707 (Fix possible buffer overflow when writing compressed TIFFS). This CVE fix is included since 7.0.3-9: http://git.imagemagick.org/repos/ImageMagick/commit/fde5f55af94f189f16958535a9c22b439d71ac93 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: security bump to 7.0.3-8Peter Korsgaard2016-11-272-2/+2
| | | | | | | Fixes CVE-2016-9556 (Heap buffer overflow in IsPixelGray). Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump version to 7.0.3-7 (security)Vicente Olivert Riera2016-11-162-2/+2
| | | | | | | | oss-security reference: http://www.openwall.com/lists/oss-security/2016/11/13/1 Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump version to 7.0.3-4Peter Korsgaard2016-10-132-2/+2
| | | | | | | 7.0.3-3 is no longer available upstream and has instead been replaced by -4, so use that instead. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: security bump to version 7.0.3-3Gustavo Zacarias2016-10-132-2/+2
| | | | | | | | | | | Fixes: memory allocate failure in AcquireQuantumPixels (quantum.c) heap-based buffer overflow in IsPixelMonochrome (pixel-accessor.h) No CVEs assigned yet. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: security bump to 7.0.2-9Peter Korsgaard2016-08-262-2/+2
| | | | | | | | | | | | | | | | Fixes a number of buffer overflows / use-after-free issues: http://git.imagemagick.org/repos/ImageMagick/blob/master/ChangeLog * Prevent buffer overflow in BMP & SGI coders (bug report from pwchen&rayzhong of tencent). * Prevent buffer overflow and other problems in SIXEL, PDB, MAP, TIFF and CALS coders (bug report from Donghai Zhu). * Prevent buffer overflow (bug report from Max Thrane). * Prevent memory use after free (reference https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=30245). Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/imagemagick: bump to version 7.0.2-6Jerzy Grzegorek2016-08-032-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump to version 7.0.2-5Gustavo Zacarias2016-07-232-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump version to 7.0.2-4Vicente Olivert Riera2016-07-142-3/+2
| | | | | | | Option --without-jp2 removed as it doesn't exist anymore. Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: explicitly specify ghostscript font directoryRobert Sohn2016-07-041-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It appears that Imagemagick needs to be configured with --with-gs-font-dir=/usr/share/fonts/gs else it will not find the ghostscript fonts and /etc/ImageMagick-6/type-ghostscript.xml will contain the wrong font paths. You end up with messages like: Magick: unable to read font `(null)' @ error/annotate.c/RenderFreetype/1153 They are non-fatal but could get annoying fast if you are using 'convert' on a lot of files. Without patch we end up with (depending on what is available on the host): Font Configuration: Apple fonts --with-apple-font-dir=default Dejavu fonts --with-dejavu-font-dir=default none Ghostscript fonts --with-gs-font-dir=default /usr/share/fonts/type1/gsfonts/ Windows fonts --with-windows-font-dir=default none And with the patch: Font Configuration: Apple fonts --with-apple-font-dir=default Dejavu fonts --with-dejavu-font-dir=default none Ghostscript fonts --with-gs-font-dir=/usr/share/fonts/gs /usr/share/fonts/gs/ Windows fonts --with-windows-font-dir=default none [Peter: reworked/extended commit message] Signed-off-by: Robert Sohn <grepper@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump version to 7.0.2-1Vicente Olivert Riera2016-06-242-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: add explicit lzma (xz) supportGustavo Zacarias2016-06-151-0/+7
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: add explicit pango supportGustavo Zacarias2016-06-151-0/+7
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump to version 7.0.2-0Gustavo Zacarias2016-06-152-10/+13
| | | | | | | | Add new disables for libraries that aren't supported in buildroot and sort them for ease of maintenance. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/imagemagick: bump version to 6.9.4-6Bernd Kuhls2016-06-012-2/+2
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: security bump to version 6.9.4-1Gustavo Zacarias2016-05-102-2/+2
| | | | | | | | | | | | | Fixes: Fix GetNextToken() off by one error. Check for buffer overflow in magick/draw.c/DrawStrokePolygon(). Remove support for internal ephemeral coder. These are all related to the recent ImageTragick bundle that were partially fixed in 6.9.3-10 as well. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump to version 6.9.3-10Jerzy Grzegorek2016-05-072-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump to version 6.9.3-7Jerzy Grzegorek2016-03-242-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/imagemagick: add optional support for webpBernd Kuhls2016-02-211-0/+7
| | | | | | | | | | | | | | | When webp was compiled before, imagemagick will use it as optional dependency: $ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/bin/stream | grep NEEDED 0x0000000000000001 (NEEDED) Shared library: [libMagickCore-6.Q16.so.2] 0x0000000000000001 (NEEDED) Shared library: [libMagickWand-6.Q16.so.2] 0x0000000000000001 (NEEDED) Shared library: [libjpeg.so.8] 0x0000000000000001 (NEEDED) Shared library: [libwebp.so.5] [...] Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/imagemagick: add optional support for lcms2Bernd Kuhls2016-02-211-0/+7
| | | | | | | | | | | | | | When lcms2 was compiled before, imagemagick will use it as optional dependency: $ output/host/usr/bin/x86_64-linux-readelf -a output/target/usr/bin/identify | grep NEEDED 0x0000000000000001 (NEEDED) Shared library: [libMagickCore-6.Q16.so.2] 0x0000000000000001 (NEEDED) Shared library: [libMagickWand-6.Q16.so.2] 0x0000000000000001 (NEEDED) Shared library: [liblcms2.so.2] [...] Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump version to 6.9.3-3Ricardo Martincoski2016-02-082-2/+2
| | | | | | | | | Signed-off-by: Ricardo Martincoski <ricardo.martincoski@gmail.com> Cc: Bernd Kuhls <bernd.kuhls@t-online.de> Cc: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Reviewed-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Tested-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/imagemagick: bump version to 6.9.3-2Bernd Kuhls2016-01-282-2/+2
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump to version 6.9.2-10Jerzy Grzegorek2015-12-212-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump version to 6.9.2-7Vicente Olivert Riera2015-11-302-2/+2
| | | | | Signed-off-by: Vicente Olivert Riera <Vincent.Riera@imgtec.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: use download location as hash sourceBaruch Siach2015-11-031-1/+1
| | | | | | | | | | | Since commit 12a6c5b12cd1 (imagemagick: use official download site, 2015-02-17) we use the official ImageMagic size. Use it also as hash source. That's the conversion we use in all other packages when upstream provides hashes. Cc: Fabio Porcedda <Fabio.Porcedda@gmail.com> Signed-off-by: Baruch Siach <baruch@tkos.co.il> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump to version 6.9.2-5Jerzy Grzegorek2015-11-022-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* package/imagemagick: bump version to 6.9.2-4Bernd Kuhls2015-10-122-2/+2
| | | | | Signed-off-by: Bernd Kuhls <bernd.kuhls@t-online.de> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump to version 6.9.2-3Gustavo Zacarias2015-10-022-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump to version 6.9.1-8Jerzy Grzegorek2015-07-182-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump to version 6.9.1-7Jerzy Grzegorek2015-07-062-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump to version 6.9.1-6Gustavo Zacarias2015-06-222-2/+2
| | | | | Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump to version 6.9.1-4Jerzy Grzegorek2015-06-012-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump to version 6.9.1-1Jerzy Grzegorek2015-04-142-2/+2
| | | | | | | Also update hash file. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump to version 6.9.1-0Jerzy Grzegorek2015-04-022-2/+2
| | | | | | | Also update hash file. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* packages: remove (non-)lfs dependencies and tweaksGustavo Zacarias2015-04-011-4/+0
| | | | | | | | Now that largefile is mandatory removes package dependencies and conditionals. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
* imagemagick: bump to version 6.9.0-10Jerzy Grzegorek2015-03-082-2/+2
| | | | | | | Also update hash file. Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* imagemagick: bump to version 6.9.0-9Jerzy Grzegorek2015-03-022-2/+2
| | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
* Merge branch 'next'Peter Korsgaard2015-03-022-2/+2
|\ | | | | | | Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
| * imagemagick: bump to version 6.9.0-7Fabio Porcedda2015-02-222-2/+2
| | | | | | | | | | Signed-off-by: Fabio Porcedda <fabio.porcedda@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
| * imagemagick: bump to version 6.9.0-6Fabio Porcedda2015-02-192-2/+2
| | | | | | | | | | Signed-off-by: Fabio Porcedda <Fabio.Porcedda@gmail.com> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
| * imagemagick: bump to version 6.9.0-5Jerzy Grzegorek2015-02-142-2/+2
| | | | | | | | | | Signed-off-by: Jerzy Grzegorek <jerzy.grzegorek@trzebnica.net> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
OpenPOWER on IntegriCloud