buildroot/package/imagemagick, branch 2017.05

imagemagick: add upstream security fix for CVE-2017-7606

2017-04-26T07:20:16+00:00

This is not yet part of any release. coders/rle.c in ImageMagick 7.0.5-4 has an "outside the range of representable values of type unsigned char" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted image. For more details, see: https://blogs.gentoo.org/ago/2017/04/02/imagemagick-undefined-behavior-in-codersrle-c/ Signed-off-by: Peter Korsgaard

imagemagick: bump version to 7.0.5-4

2017-03-28T19:44:17+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

imagemagick: bump version to 7.0.5-3

2017-03-22T22:09:45+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

imagemagick: bump version to 7.0.5-2

2017-03-18T14:52:19+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

imagemagick: bump version to 7.0.5-0 (security)

2017-03-10T20:50:48+00:00

- Fixed memory leak when creating nested exceptions in Magick++ https://www.imagemagick.org/discourse-server/viewtopic.php?f=23&p=142634 - Fixed fd leak for webp coder https://github.com/ImageMagick/ImageMagick/pull/382 - Fixed Spurious memory allocation message https://www.imagemagick.org/discourse-server/viewtopic.php?f=3&t=31438 Full changelog: http://imagemagick.org/script/changelog.php Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

imagemagick: fix build of png support when jpeg support is disabled

2017-02-06T18:19:32+00:00

Fixes: http://autobuild.buildroot.net/results/d20/d20eecec8e7b947759185f77a6c8e610dd7393f3/ http://autobuild.buildroot.net/results/ee1/ee15efa8ae3f95244980810155ff7ba9f885a59d/ http://autobuild.buildroot.net/results/aa8/aa80f2fd4c7dd884ea8a1b55ad15a40c7bf40501/ http://autobuild.buildroot.net/results/9aa/9aaa044f78115d7f599ea09669c0d6bface5633e/ This combination is broken since 7.0.4-6. Since commit a9e228f8ac26 (Implemented a private PNG caNv (canvas) chunk), PNGsLong gets called unconditionally, but it is only defined if JPEG support is enabled (which defines JNG_SUPPORTED), breaking the build: MagickCore/.libs/libMagickCore-7.Q16HDRI.a(MagickCore_libMagickCore_7_Q16HDRI_la-png.o): In function `WriteOnePNGImage': png.c:(.text+0x748d): undefined reference to `PNGsLong' png.c:(.text+0x74b7): undefined reference to `PNGsLong' Fix it by adding a patch unconditionally defining the helper function. Patch submitted upstream. Signed-off-by: Peter Korsgaard Signed-off-by: Thomas Petazzoni

imagemagick: security bump to version 7.0.4-6

2017-01-31T22:48:51+00:00

Fixes an use of uninitialized data issue in MAT image format that may have security impact: https://github.com/ImageMagick/ImageMagick/issues/362 [Peter: extend commit message, mention (potential) security impact] Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

imagemagick: bump version to 7.0.4-5

2017-01-23T13:03:33+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

imagemagick: bump version to 7.0.4-4

2017-01-16T14:29:31+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard

imagemagick: bump version to 7.0.4-3 (security)

2017-01-09T15:25:15+00:00

Fixes CVE-2016-8707 (Fix possible buffer overflow when writing compressed TIFFS). This CVE fix is included since 7.0.3-9: http://git.imagemagick.org/repos/ImageMagick/commit/fde5f55af94f189f16958535a9c22b439d71ac93 Signed-off-by: Vicente Olivert Riera Signed-off-by: Peter Korsgaard