{"id":2226637,"url":"http://patchwork.ozlabs.org/api/patches/2226637/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/patch/20260422171252.3200023-1-titouan.christophe@mind.be/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260422171252.3200023-1-titouan.christophe@mind.be>","list_archive_url":null,"date":"2026-04-22T17:12:52","name":"package/imagemagick: security bump to v7.1.2-19","commit_ref":null,"pull_url":null,"state":"accepted","archived":false,"hash":"3904d73aaf3baedcbea2e4d3c1571d26e711b910","submitter":{"id":90763,"url":"http://patchwork.ozlabs.org/api/people/90763/?format=json","name":"Titouan Christophe","email":"titouan.christophe@mind.be"},"delegate":{"id":89618,"url":"http://patchwork.ozlabs.org/api/users/89618/?format=json","username":"juju","first_name":"Julien","last_name":"Olivain","email":"juju@cotds.org"},"mbox":"http://patchwork.ozlabs.org/project/buildroot/patch/20260422171252.3200023-1-titouan.christophe@mind.be/mbox/","series":[{"id":501049,"url":"http://patchwork.ozlabs.org/api/series/501049/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=501049","date":"2026-04-22T17:12:52","name":"package/imagemagick: security bump to v7.1.2-19","version":1,"mbox":"http://patchwork.ozlabs.org/series/501049/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2226637/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2226637/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=pFtDdJ1v;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=2605:bc80:3010::137; helo=smtp4.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp4.osuosl.org (smtp4.osuosl.org [IPv6:2605:bc80:3010::137])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g15Qj3tG8z1y2d\n\tfor ;\n Thu, 23 Apr 2026 03:13:16 +1000 (AEST)","from localhost (localhost [127.0.0.1])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id B3ADB42274;\n\tWed, 22 Apr 2026 17:13:14 +0000 (UTC)","from smtp4.osuosl.org ([127.0.0.1])\n by localhost (smtp4.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id ybNelazmY0HX; Wed, 22 Apr 2026 17:13:13 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp4.osuosl.org (Postfix) with ESMTP id CA164427CB;\n\tWed, 22 Apr 2026 17:13:13 +0000 (UTC)","from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n by lists1.osuosl.org (Postfix) with ESMTP id 70A0E183\n for ; Wed, 22 Apr 2026 17:13:12 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp1.osuosl.org (Postfix) with ESMTP id 5623984A91\n for ; Wed, 22 Apr 2026 17:13:12 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id QPq2J9DF2_Qb for ;\n Wed, 22 Apr 2026 17:13:11 +0000 (UTC)","from mail-wm1-x330.google.com (mail-wm1-x330.google.com\n [IPv6:2a00:1450:4864:20::330])\n by smtp1.osuosl.org (Postfix) with ESMTPS id A961784A90\n for ; Wed, 22 Apr 2026 17:13:10 +0000 (UTC)","by mail-wm1-x330.google.com with SMTP id\n 5b1f17b1804b1-4893940bb5eso22590215e9.3\n for ; Wed, 22 Apr 2026 10:13:09 -0700 (PDT)","from dragon.home ([109.136.97.112]) by smtp.gmail.com with ESMTPSA\n id\n ffacd0b85a97d-43fe4e3a7b4sm43753690f8f.22.2026.04.22.10.13.06\n for \n (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);\n Wed, 22 Apr 2026 10:13:07 -0700 (PDT)"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp4.osuosl.org CA164427CB","OpenDKIM Filter v2.11.0 smtp1.osuosl.org A961784A90"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1776877993;\n\tbh=sSbuNivizGhw4zbqzs5N1NJRX5CaHWqk35WVZ8fEPIc=;\n\th=To:Date:Subject:List-Id:List-Unsubscribe:List-Archive:List-Post:\n\t List-Help:List-Subscribe:From:Reply-To:From;\n\tb=pFtDdJ1vkuO9tqQzTuMg2VB2irEvcwsimSr8M7eCmCAg2WpoqE+8EiYQcuijVmxcS\n\t 6GN7zXByn/bvzaE9o5MUuzH7/CWrQnCHUz4Vy5fRJwKKIgpu0bHOekaldo1R2gfO4r\n\t SjFsEiZ0DoGth2ivbw20QneFqkKiEo/5YdiInHUlbPqrnOi5pwnk+6LShwcFjrTp9Q\n\t yX7zMSz1P1it4P387+h3Fe6Xb0U3ufd/HsrzDFwRCO0fwglhZnlJBmeycRMo+VVCIY\n\t Ezl2dW3u2OAz5M7EZO8RdWJdR+YfOFZQoqzIwlmvPtpW6Zsed2+e7FCK+byqrafWXA\n\t kifvALLucIEzQ==","Received-SPF":"Pass (mailfrom) identity=mailfrom;\n client-ip=2a00:1450:4864:20::330; helo=mail-wm1-x330.google.com;\n envelope-from=titouan.christophe@essensium.com; receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp1.osuosl.org A961784A90","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=1e100.net; s=20251104; t=1776877988; x=1777482788;\n h=content-transfer-encoding:mime-version:message-id:date:subject:to\n :from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id\n :reply-to;\n bh=vZwsVLLUYL0YYMfDxD1P8biewXxUYN1m/P97iXx8fQw=;\n b=WOMJNNAhlc5bAhgGdtG0vL0HlVvKG+4hpyfnpdg+n6I6ApeyWQQYmgOurVNzfyGMiG\n QEheMnJz/ODuUpk9MKQnCtUYoAMUofgEe22Tav9Z8wcFRfkFS/7ZK65ikwAVqQ7O9+ps\n hyWL7DLR1QjeX5a+n+DGuI1uyYR6QOIDaDoep3CgSGH/F9sIJy4i5q3WIFpekmJPWrng\n etTeVOLDwE3KJ+QDBjICYia3AQge8iNhuikVFq1qEObUUG+NdEQug6SsBmIARtDiAoeT\n 1i181Ic8K6qWxYqXjIbUPRl1uYHAUNIa5SA2Wvqg8DACa12bLqo1UqIQnWb2NHO64X/z\n L2iQ==","X-Gm-Message-State":"AOJu0YwE/f/5LoY8GwUDCNCUG73IzrM2XNsw9p+mLItUAijveJ3WdcMv\n YIPE5NhWEjd4W2Qmt9lxv+6YGo3nFIo2jGMLP2Q7gipHuaMTo+wkDKGt/90RUIxGuv038eZ/zwA\n 8d0sdlP8=","X-Gm-Gg":"AeBDiet3cyW5l1N623zgHxLlIPBdu0cGArhbGQZZ/KT/vEmYn/Rje3/GssCCKyq23LX\n +UUuV8Ouw0OHcMtiXVqFzXOKQDjGHap+ppkl/P1egVqPWeYzSYn4LoSnQMMrTefRiXVKUlDgyu+\n Swk4cJLMStESRZqz6J6+pKXRfTHnx3XJ0PjDwBG38aBDxXM3itCeduJldcttam5tzbsxnBXgFLh\n TYqNXaECz0LR9TEJ1y9x1C3dqivmAoG3QpnPX0MGpSNv8slR3TVPGwc4VXNWxqVxhBSgbec/Cj1\n y9NMfdSF863YEaiaQlo5IZOa/U7viZ6EMrFMzuQoul8VoT2dk5/jGHLdWAuaVZhOIFj9DMdRYBJ\n o3R6/AmVR0nHlibswvv/t6WJpwKuS6Y3eBu9ia4GTu11Lj53YdunCpQ67gCM0z1gb4YvvexCEOw\n IvzEuxNpyyZALfDYo5wF0QsVU3z5Ml7K7zV94R7af8qus=","X-Received":"by 2002:a05:600c:2e56:b0:488:d243:8da9 with SMTP id\n 5b1f17b1804b1-488fb73b2d3mr205053695e9.1.1776877988124;\n Wed, 22 Apr 2026 10:13:08 -0700 (PDT)","To":"buildroot@buildroot.org","Date":"Wed, 22 Apr 2026 19:12:52 +0200","Message-ID":"<20260422171252.3200023-1-titouan.christophe@mind.be>","X-Mailer":"git-send-email 2.53.0","MIME-Version":"1.0","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n d=mind.be; s=google; t=1776877988; x=1777482788; darn=buildroot.org;\n h=content-transfer-encoding:mime-version:message-id:date:subject:to\n :from:from:to:cc:subject:date:message-id:reply-to;\n bh=vZwsVLLUYL0YYMfDxD1P8biewXxUYN1m/P97iXx8fQw=;\n b=bNIYr1c4YtmFqlqbm1YYngedrkezL1geu8/AcKcUMKpsg5wilRFNHlRhAVfCf81Qjr\n +SBGzldlCyvOgrgC8SEdcGwi01GbpYLL/OaHsL9iAttfeU+KbM+e+Ilp2yJ5fgEa1eeb\n CoSraBFdGFcWLqUW8pd/94PjH4szyyHoCqR1gel1GMI3vFtZ40eYB99Qx+7HIgqRVsvn\n 5X4O1OXKyc1dGluP7ADEDzB+f6svvEMq11/rOD08NDhnXxynvaBWH6POafyoFPXhrtn7\n c+mUAAYM5C4aokyf/udvpismc+yZyoD1rw/RP7R6uxJRlX+C/8k1ptuniMW2dWxIl4hi\n iZYA==","X-Mailman-Original-Authentication-Results":["smtp1.osuosl.org;\n dmarc=pass (p=quarantine dis=none)\n header.from=mind.be","smtp1.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=mind.be header.i=@mind.be header.a=rsa-sha256\n header.s=google header.b=bNIYr1c4"],"Subject":"[Buildroot] [PATCH] package/imagemagick: security bump to v7.1.2-19","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","From":"Titouan Christophe via buildroot ","Reply-To":"Titouan Christophe ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "},"content":"This fixes a large number of CVEs:\n- CVE-2026-28493 (since 7.1.2-16)\n- CVE-2026-28494 (since 7.1.2-16)\n- CVE-2026-28686 (since 7.1.2-16)\n- CVE-2026-28687 (since 7.1.2-16)\n- CVE-2026-28688 (since 7.1.2-16)\n- CVE-2026-28689 (since 7.1.2-16)\n- CVE-2026-28690 (since 7.1.2-16)\n- CVE-2026-28691 (since 7.1.2-16)\n- CVE-2026-28692 (since 7.1.2-16)\n- CVE-2026-28693 (since 7.1.2-16)\n- CVE-2026-30883 (since 7.1.2-16)\n- CVE-2026-30929 (since 7.1.2-16)\n- CVE-2026-30931 (since 7.1.2-16)\n- CVE-2026-30935 (since 7.1.2-16)\n- CVE-2026-30936 (since 7.1.2-16)\n- CVE-2026-30937 (since 7.1.2-16)\n- CVE-2026-31853 (since 7.1.2-16)\n- CVE-2026-32259 (since 7.1.2-16)\n- CVE-2026-32636 (since 7.1.2-17)\n- CVE-2026-33535 (since 7.1.2-18)\n- CVE-2026-33536 (since 7.1.2-18)\n- CVE-2026-33899 (since 7.1.2-19)\n- CVE-2026-33900 (since 7.1.2-19)\n- CVE-2026-33901 (since 7.1.2-19)\n- CVE-2026-33902 (since 7.1.2-19)\n- CVE-2026-33905 (since 7.1.2-19)\n- CVE-2026-33908 (since 7.1.2-19)\n- CVE-2026-34238 (since 7.1.2-19)\n- CVE-2026-40169 (since 7.1.2-19)\n- CVE-2026-40183 (since 7.1.2-19)\n- CVE-2026-40310 (since 7.1.2-19)\n- CVE-2026-40311 (since 7.1.2-19)\n- CVE-2026-40312 (since 7.1.2-19)\n\nSigned-off-by: Titouan Christophe \n---\n package/imagemagick/imagemagick.hash | 2 +-\n package/imagemagick/imagemagick.mk | 2 +-\n 2 files changed, 2 insertions(+), 2 deletions(-)","diff":"diff --git a/package/imagemagick/imagemagick.hash b/package/imagemagick/imagemagick.hash\nindex 90383c4d17..a308cd1f06 100644\n--- a/package/imagemagick/imagemagick.hash\n+++ b/package/imagemagick/imagemagick.hash\n@@ -1,3 +1,3 @@\n # Locally computed\n-sha256 bf646e7fffdf50b7d886eec6bbe51c3ced1c4d68fbabfcc534e014575359fe7f imagemagick-7.1.2-15.tar.gz\n+sha256 91ffe35706ef01d0fc9630e3a81b168b9bdb10b5e1e0b0983c287063cce21210 imagemagick-7.1.2-19.tar.gz\n sha256 131447ad0099069beaa32acf1700716eea294a5bdf936d8211d7026b1849e5d4 LICENSE\ndiff --git a/package/imagemagick/imagemagick.mk b/package/imagemagick/imagemagick.mk\nindex 5a03fbfd8f..d88323ca2d 100644\n--- a/package/imagemagick/imagemagick.mk\n+++ b/package/imagemagick/imagemagick.mk\n@@ -4,7 +4,7 @@\n #\n ################################################################################\n \n-IMAGEMAGICK_VERSION = 7.1.2-15\n+IMAGEMAGICK_VERSION = 7.1.2-19\n IMAGEMAGICK_SITE = $(call github,ImageMagick,ImageMagick,$(IMAGEMAGICK_VERSION))\n IMAGEMAGICK_LICENSE = Apache-2.0\n IMAGEMAGICK_LICENSE_FILES = LICENSE\n","prefixes":[]}