8c6b002877
Update python and the installed packages in the doc-check.
2026-05-25 09:41:05 +02:00
49ea262c63
cast required
2026-05-24 17:23:25 -04:00
3703262962
fix -clip issue
2026-05-24 16:54:36 -04:00
afe78767e7
build(deps): bump ubuntu from 22.04 to 26.04 in /.devcontainer ( #8751 )
...
Bumps ubuntu from 22.04 to 26.04.
---
updated-dependencies:
- dependency-name: ubuntu
dependency-version: '26.04'
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-24 18:57:09 +02:00
a5268469a0
Close the blob before the dimensions are checked.
2026-05-24 18:29:42 +02:00
9a998b5b14
Corrected the path for docker and added pip to dependabot.yml
2026-05-24 18:20:10 +02:00
b091a083b7
Free profile when the color profile is invalid.
2026-05-24 17:19:00 +02:00
44df3a54af
Added extra checks to prevent an overflow on 32-bit systems (GHSA-4v89-6mgq-6rgc)
2026-05-24 10:01:48 +02:00
0c44b7a067
Corrected the header.
2026-05-24 09:57:25 +02:00
82e3b846fa
Use Visual Studio 2026 in the Windows build.
2026-05-24 08:59:41 +02:00
80db294b85
Updated the Windows dependencies.
2026-05-24 08:54:07 +02:00
05b8aa1da6
Updated configure.
2026-05-24 08:53:37 +02:00
4bedfd7156
directly iterate over the policy linked-list
2026-05-23 20:40:40 -04:00
e341fd91d5
remove extraneous heap check
2026-05-23 17:12:37 -04:00
b01c173c80
Also close the image blob to make sure we close it properly.
2026-05-23 17:03:01 +02:00
fc4321f0fe
Silenced warning.
2026-05-23 16:30:38 +02:00
2fd447c547
reject farbfeld files with zero columns or rows ( #8750 )
...
The header dimensions are read directly from the blob and then control
the ping early-return path, which lets a 16-byte file with width=0 or
height=0 succeed and surface as a 0x0 image to callers. SetImageExtent
already rejects this on the non-ping path. Same bug class as the recent
DCM fix in 84fbcef
2026-05-23 16:23:33 +02:00
6b0d497c9a
revert
2026-05-23 07:51:52 -04:00
aa37d0577a
make that max
2026-05-23 07:22:19 -04:00
5d7f453887
check for maximum image size limit
2026-05-23 06:57:26 -04:00
fee84f28db
adjust heap overflow check
2026-05-22 22:03:07 -04:00
6987ef0a23
increase increment
2026-05-22 22:00:00 -04:00
0ff2644320
potential heak based overflow per spartancodex
2026-05-22 21:50:47 -04:00
179b3fba80
add include statement
2026-05-22 18:55:43 -04:00
d1bf6bcf35
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xcjm-wqff-m669
2026-05-22 18:45:57 -04:00
50ffad2d7d
remove superflous assignment
2026-05-22 18:45:57 -04:00
84fbcef8a5
Added missing check for returning an image with zero columns or rows ( https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8pj9-6897-74xc )
2026-05-22 17:53:08 +02:00
4ac379a7c4
Don't raise exceptions for warnings in the constructors of CoderInfo and Color.
2026-05-22 16:10:09 +02:00
3e969e58ec
Added extra try catch in case a warning is thrown.
2026-05-22 15:59:13 +02:00
f5bd852a06
Corrected the delete.
2026-05-22 15:34:58 +02:00
f6e2074f51
build(deps): bump caphyon/advinst-github-action from 2.0.2 to 2.0.3 ( #8742 )
...
Bumps [caphyon/advinst-github-action](https://github.com/caphyon/advinst-github-action ) from 2.0.2 to 2.0.3.
- [Release notes](https://github.com/caphyon/advinst-github-action/releases )
- [Changelog](https://github.com/Caphyon/advinst-github-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/caphyon/advinst-github-action/compare/e2194c873f688a2f913ae8b71c7b42cb884b631b...7edde34c6ff935e53e3de72a5699efcfceb5f6c6 )
---
updated-dependencies:
- dependency-name: caphyon/advinst-github-action
dependency-version: 2.0.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-22 11:38:26 +02:00
490072d5d5
build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 ( #8749 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 4.35.4 to 4.35.5.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...9e0d7b8d25671d64c341c19c0152d693099fb5ba )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-22 10:56:02 +02:00
a7e0b04e2c
cosmetic
2026-05-21 13:32:02 -04:00
565ba492c8
provision paths on demand
2026-05-21 09:49:43 -04:00
0cd09b0e87
optimized
2026-05-21 08:25:03 -04:00
9023658b39
construct full path from directory + basename
2026-05-21 07:06:59 -04:00
1742ae80f1
fix poxxible memory leak
2026-05-21 06:44:56 -04:00
45d9ea7b2c
restore
2026-05-21 06:40:23 -04:00
3ad556bd05
Another correction of the version check.
2026-05-21 09:11:32 +02:00
3705205e14
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p
2026-05-20 22:26:20 -04:00
f579a0b9d6
https://github.com/ImageMagick/ImageMagick/issues/8745
2026-05-19 19:52:13 -04:00
e4505b7680
Added condition to disable msix preparation in a pull request.
2026-05-19 21:57:39 +02:00
9ee821731f
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489
2026-05-18 21:56:32 -04:00
3a12d63368
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v62-8fq6-cp9m
2026-05-18 21:52:07 -04:00
08b9f2747c
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9hqg-xf93-ghfw
2026-05-18 20:08:23 -04:00
017c7efe4d
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2hhq-c99x-492r
2026-05-18 19:44:35 -04:00
404ff84e7d
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6mwj-rp89-6j5j
2026-05-18 19:17:29 -04:00
37af6883d6
Corrected version check to fix the build error reported in #8740 .
2026-05-18 17:51:55 +02:00
cca7092157
Also set a limit on the profile size when fuzzing images.
2026-05-18 17:48:11 +02:00
dd198f960a
Make sure we free the chunk when hitting max loop.
2026-05-18 17:37:29 +02:00
Dirk Lemstra
Cristy
dependabot[bot]
dxbjavid