mirror of
https://github.com/openembedded/meta-openembedded.git
synced 2026-07-27 20:07:25 +00:00
imagemagick: patch CVE-2025-55005
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-55005 Pick the patch that mentions the related github advisory[1] in its commit message. [1]: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v393-38qx-v8fp Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
committed by
Anuj Mittal
parent
b32dcf53ce
commit
df19121bc6
@@ -0,0 +1,34 @@
|
|||||||
|
From 430c29617ce287db24872cb4e7fbb1e03d117d0a Mon Sep 17 00:00:00 2001
|
||||||
|
From: Cristy <urban-warrior@imagemagick.org>
|
||||||
|
Date: Thu, 7 Aug 2025 22:05:10 -0400
|
||||||
|
Subject: [PATCH]
|
||||||
|
https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v393-38qx-v8fp
|
||||||
|
|
||||||
|
CVE: CVE-2025-55005
|
||||||
|
Upstream-Status: Backport [https://github.com/ImageMagick/ImageMagick/commit/b68bb6d3cfe472d5bd9329b4172e2e4f63d90a57]
|
||||||
|
Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
|
||||||
|
---
|
||||||
|
MagickCore/colorspace.c | 6 ++++++
|
||||||
|
1 file changed, 6 insertions(+)
|
||||||
|
|
||||||
|
diff --git a/MagickCore/colorspace.c b/MagickCore/colorspace.c
|
||||||
|
index a87defad8..82400ce46 100644
|
||||||
|
--- a/MagickCore/colorspace.c
|
||||||
|
+++ b/MagickCore/colorspace.c
|
||||||
|
@@ -2420,10 +2420,16 @@ static MagickBooleanType TransformsRGBImage(Image *image,
|
||||||
|
value=GetImageProperty(image,"reference-black",exception);
|
||||||
|
if (value != (const char *) NULL)
|
||||||
|
reference_black=StringToDouble(value,(char **) NULL);
|
||||||
|
+ if (reference_black > 1024.0)
|
||||||
|
+ reference_black=1024.0;
|
||||||
|
reference_white=ReferenceWhite;
|
||||||
|
value=GetImageProperty(image,"reference-white",exception);
|
||||||
|
if (value != (const char *) NULL)
|
||||||
|
reference_white=StringToDouble(value,(char **) NULL);
|
||||||
|
+ if (reference_white > 1024.0)
|
||||||
|
+ reference_white=1024.0;
|
||||||
|
+ if (reference_black > reference_white)
|
||||||
|
+ reference_black=reference_white;
|
||||||
|
logmap=(Quantum *) AcquireQuantumMemory((size_t) MaxMap+1UL,
|
||||||
|
sizeof(*logmap));
|
||||||
|
if (logmap == (Quantum *) NULL)
|
||||||
@@ -17,6 +17,7 @@ SRC_URI = "git://github.com/ImageMagick/ImageMagick.git;branch=main;protocol=htt
|
|||||||
file://CVE-2025-53019.patch \
|
file://CVE-2025-53019.patch \
|
||||||
file://CVE-2025-53101.patch \
|
file://CVE-2025-53101.patch \
|
||||||
file://CVE-2025-55004.patch \
|
file://CVE-2025-55004.patch \
|
||||||
|
file://CVE-2025-55005.patch \
|
||||||
"
|
"
|
||||||
SRCREV = "82572afc879b439cbf8c9c6f3a9ac7626adf98fb"
|
SRCREV = "82572afc879b439cbf8c9c6f3a9ac7626adf98fb"
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user