# ImageMagick changelog

> ImageMagick release notes.

- Vendor: ImageMagick Studio
- Category: Media
- Language: C
- Official site: https://imagemagick.org/
- Tracked by: What's New (https://whatsnew.fyi/product/imagemagick)
- Harvested from: GitHub (ImageMagick/ImageMagick)
- Entries below: 15 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: release facts (products, versions, dates, links, CVE ids and flags) are open data under CC BY 4.0, from the API at https://whatsnew.fyi/api/v1 or the nightly dataset at https://github.com/whatsnew-fyi/dataset. The summaries, labels and curation are © What's New: quote freely with attribution and a link back; wholesale republication of them is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## Releases

### 7.1.2-34

- Date: 2026-10-14
- Version: 7.1.2-34
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-34
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-34

- **fixed** — Fix broken ImageMagick Usage link
- **added** — Add a check for libraw version 0.21 and raise a warning when dng:read-thumbnails is used
- **fixed** — Fix Q8 connected-components validation input
- **changed** — Preserve source depth when decoding HEIC sequences
- **fixed** — Fix HEIC source selection and primary image lookup
- **changed** — Read available ICC profiles for each HEIC sequence frame
- **added** — Add an option to read only the HEIC primary image
- **fixed** — Select image-sequence tracks when reading HEIC animations
- **changed** — Prefer primary images for HEIC and HEIF still-image brands
- **security** — Address a security advisory (GHSA-x48p-6655-8qgv)
- **security** — Address a security advisory (GHSA-vmj6-qx38-9gf5)
- **security** — Address a security advisory (GHSA-g5j8-ff59-wp88)
- **added** — Add support for ShuffleImages()
- **added** — Add support for the shuffle type

###### Merged
- fix broken ImageMagick Usage link #9026
- build(deps): bump ubuntu from da6fc2b to f144425 in /.devcontainer #9018
###### Commits
- beta release ef5df48
- cosmetic c271950
- eliminate compiler warning f03eacf
- eliminate compiler warning cf01b29
- https://github.com/ImageMagick/ImageMagick/issues/9011 2c1021b
- Added check for libraw version 0.21 and raise warning when dng:read-thumbnails is used. 1937e00
- Hide convert warning from test output. b88a07b
- Improved the filter even more. 1741715
- Improved filter even more. d7d6a1d
- Fix Q8 connected-components validation input 7e57af2
- https://github.com/ImageMagick/ImageMagick/issues/9015 081827b
- Preserve source depth when decoding HEIC sequences 1e2e12e
- Fix HEIC source selection and primary image lookup c2ba621
- Read available ICC profiles for each HEIC sequence frame 28f1f93
- Add an option to read only the HEIC primary image 165faf2
- Select image-sequence tracks when reading HEIC animations f1d8c90
- Prefer primary images for HEIC and HEIF still-image brands 5f543cd
- Silence warning a0dd832
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x48p-6655-8qgv 270f70f
- Allow two tests to pass when a security policy blocks it. e2ddd0d
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vmj6-qx38-9gf5 11977ca
- Also use the pre-build dependencies for the daily linux build. 59b8722
- Updated dependencies. c9932b6
- Also run daily when the configure or dependencies are updated. d9a987d
- support ShuffleImages() 3d7aaa6
- support ShuffleImages() 04cf4f7
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g5j8-ff59-wp88 5f6b60f
- eliminate compiler warning 7145ceb
- Silence warnings. 581f921
- Silence warning. 43154d4
- Corrected compiler flag in the daily build. 8920906
- support shuffle type 66ade98
- Corrected settings for the daily build. 06d1730
- Made the build file executable. c5d4ca8
- release a0c4bf7

### 7.1.2-33

- Date: 2026-10-10
- Version: 7.1.2-33
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-33
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-33

- **added** — Add dng:read-thumbnails option to read embedded thumbnails as images.
- **fixed** — Add missing list-length resource guard in ReadXPSImage.
- **fixed** — Fix LCH hue parsing and conversion of non-RGB fill colors.
- **changed** — Avoid font metrics for montages without text.
- **changed** — Scale neighborhood contrast to the quantum range.
- **fixed** — Fix decoding of JXL boxes and animations, metadata, ICC, CMYK, FLOAT16, tps and define errors.
- **fixed** — Fix inverted opacity in one-bit PAM images.
- **fixed** — Preserve Ultra HDR JPEG gain maps for the scale operator.
- **security** — Limit C2PA manifest resource use.
- **fixed** — Keep the directory when mogrify -format reads a compressed file.
- **changed** — Use a hash table to find palette entries when writing PNG.
- **fixed** — Track adjacent objects when merging connected components.
- **fixed** — Fix memory leak when SimilarityImage fails.
- **security** — Added missing cleanup in error path of the MAT decoder.
- **fixed** — Fix duplicate post-processing in redirected image reads.
- **fixed** — Honor explicit TIFF selection when reading DNG-tagged files.
- **fixed** — Fix memory leak when policy parsing stops before append.
- **security** — Stop configuration parsing when an included file fails.
- **security** — Deny authorization when policy configuration fails to load.
- **security** — Return a failure when XML comments or doctype are not terminated.
- **changed** — Replace _wrename with MoveFileExW so an existing file will be overwritten.

###### Merged
- coders/xps: add missing list-length resource guard in ReadXPSImage #9006
- build(deps): bump msys2/setup-msys2 from 2.32.0 to 2.33.0 #9002
- Fix LCH hue parsing and conversion of non-RGB fill colors #9003
- Avoid font metrics for montages without text #8998
- build(deps): bump the codeql-action group across 1 directory with 3 updates #8989
- build(deps): bump ubuntu from 9559ceb to da6fc2b in /.devcontainer #8982
- Scale neighborhood contrast to the quantum range #8996
- JXL: fix decoding of boxes/animations, metadata, ICC, CMYK, FLOAT16, tps and define errors #8992
- Fix inverted opacity in one-bit PAM images #8993
- Preserve Ultra HDR JPEG gain maps for scale operator #8986
- Limit C2PA manifest resource use #8980
- Keep the directory when mogrify -format reads a compressed file #8988
- Use a hash table to find palette entries when writing PNG #8977
- track adjacent objects when merging connected components #8978
###### Fixed
- Fix LCH hue parsing and conversion of non-RGB fill colors (#9003) #8093
###### Commits
- beta release 48c7005
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6p6q-wfrv-ffhh 09b961e
- eliminate compiler exception 7656865
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c2qq-jqw7-q4mx 68168e6
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h9g3-4qvr-rx8h 24095b7
- block PDF 33660b8
- Fix memory leak when SimilarityImage fails (GHSA-m938-565c-h9qf) 8980924
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jf2-9gcp-q234 d8d635e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7r5g-p7ff-jgcp 9108482
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vm77-q83h-5fhg e87c97d
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3 eef3af5
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pj4h-g4pf-66v3 fb8842f
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8ghq-p369-g395 33d16f3
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7438-vh5v-v52h 3882fd7
- Added missing cleanup in error path of the MAT decoder (GHSA-83w9-w85j-h9jc) 62c7876
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-83w9-w85j-h9jc af510e9
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mqmp-r5jh-jx7w 63dde0c
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8w9c-hj38-8pf9 a63bdd2
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v9q4-cm37-q2jm b41a6bc
- cosmetic f9da83e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pwpf-8799-94cj cf40ce9
- add pipes security policy 85bd7d6
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v5f5-4v9x-p3f2 d4069fe
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j657-rmv3-4m94 64645a7
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qq8x-fq3x-43h4 59071d5
- eliminate compiler warning 90bf73e
- revert for now 1636184
- restore until we redesign a879b23
- https://github.com/ImageMagick/ImageMagick/issues/8994 91dd680
- Correct exception that is thrown. fa30495
- Added missing check for the return value. 9bb2cb6
- add dmr.h to header list bfb6109
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2wwj-grp2-3fp5 8aeb8e6
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997 5b3c9dd
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vj7g-384h-64fv 06aa743
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4wfv-467j-fqh9 a75aab2
- cosmetic b270ee4
- fix undefined variable f1fb5d1
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79p5-w6jv-r997 c73f791
- increase area limit 89a61e1
- clarify comments b3fb0fb
- Replace _wrename with MoveFileExW so an existing file will be overwritten. fbc276e
- Revert changes from #8986

_[Truncated at 4000 characters — full notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-33]_

### 7.1.2-32

- Date: 2026-09-27
- Version: 7.1.2-32
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-32

- **changed** — Allocate the dither color cache lazily in small blocks
- **changed** — Avoid copying the MVG text into every graphic context
- **fixed** — Terminate the XMP profile collected by the Ghostscript reader
- **fixed** — Add missing check for eof in DiscardBlobBytes to prevent a retry loop
- **fixed** — Don't use the Freetype library handle if the initialization failed
- **fixed** — Report buffered output failures when closing blobs
- **fixed** — Preserve IPTC profiles during automatic Ultra HDR decoding
- **fixed** — Honor quality settings when transforming retained gain maps
- **fixed** — Compose gain-map crop transforms before rounding
- **fixed** — Fix grayscale Ultra HDR base encoding
- **fixed** — Reset gain-map canvas before replaying crops
- **fixed** — Preserve JPEG comments during automatic Ultra HDR decoding
- **fixed** — Preserve UHDR resize filters
- **fixed** — Preserve destination on UHDR encoder failure
- **fixed** — Fix static libuhdr and module linking
- **fixed** — Preserve EXIF dimensions during transforms
- **fixed** — Preserve Ultra HDR metadata precision
- **fixed** — Force the system version of zlib in the libjpeg-turbo build
- **security** — Address multiple security vulnerabilities including file descriptor inheritance and DOCTYPE parsing issues

###### Merged
- Allocate the dither color cache lazily in small blocks #8976
- Avoid copying the MVG text into every graphic context #8975
- build(deps): bump the codeql-action group with 3 updates #8973
- Terminate the XMP profile collected by the Ghostscript reader #8966
- Added missing check for eof in DiscardBlobBytes to prevent a retry loop #8967
- build(deps): bump ubuntu from cd21a4f to 9559ceb in /.devcontainer #8965
- Don’t use the Freetype library handle if the initialization failed #8964
- build(deps): bump ubuntu from 513c074 to cd21a4f in /.devcontainer #8962
- build(deps): bump azure/login from 3.0.2 to 3.1.0 #8961
- build(deps): bump the codeql-action group with 3 updates #8960
- Report buffered output failures when closing blobs #8954
- Preserve IPTC profiles during automatic Ultra HDR decoding #8952
- Honor quality settings when transforming retained gain maps #8947
- build(deps): bump ubuntu from 2260313 to 513c074 in /.devcontainer #8951
- Compose gain-map crop transforms before rounding #8948
- Fix grayscale Ultra HDR base encoding #8945
- Reset gain-map canvas before replaying crops #8944
- Preserve JPEG comments during automatic Ultra HDR decoding #8943
- fix: preserve UHDR resize filters #8942
- fix: preserve destination on UHDR encoder failure #8941
- Fix static libuhdr and module linking #8940
- Preserve EXIF dimensions during transforms #8937
- Preserve Ultra HDR metadata precision #8938
###### Commits
- beta release 56d965e
- Force the system version of zlib in the libjpeg-turbo build. 5f3ddea
- latest autoconf update a6ba226
- eliminate compiler warnings 3b5dd62
- eliminate compiler warning 7932a3c
- eliminate compiler warning ba5d752
- eliminate compile warning 788a643
- eliminate compile warning 2274d05
- eliminate compiler warnings 1cea164
- eliminate compiler warning b501c08
- eliminate compile warnings 471d079
- eliminate compiler warning c6eda74
- … f604d6d
- eliminate compiler warnings ab76ec8
- replace deprecated -affine option 7ee5fba
- Corrected the type in the GetMagickModule define. 96cd772
- Fixed the windows build by reverting some of the changes. f8d3f5e
- Removed unnecessary includes. e168300
- Restored the cstring includes in Magick++. 1ef6db5
- Pre-declare libstdc++ global types before MagickCore namespace. 2adb894
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8 af7b850
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w 0e82a4d
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4 12db6f0
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j 1926ccf
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c 15892fc
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6 fb743d6
- eliminate compiler warning ce948a1
- https://github.com/ImageMagick/ImageMagick/issues/8939 1a0d1b7
- eliminate compiler warning 5921a78
- eliminate compiler warning 0fcc3eb
- latest autoconf update e6eed39
- https://github.com/ImageMagick/ImageMagick/issues/8939 3501ef3
- revert cd53798
- https://github.com/ImageMagick/ImageMagick/issues/8939 72b82a8
- append random hex code to backup filename 6ace963
- match destructor to constructor 960adad
- create a secure temporary filename caaad71
- move O_NOFOLLOW to main IM header 989dfd4
- https://github.com/ImageMagick/ImageMagick/issues/8939 81142c9
- check for ‘>’ terminator on DOCTYPE 3cb153f
- revert 08328d8
- improve DOCTYPE block 3ca8bea
- cosmetic a5e13b9
- more robuse DOCTYPE parser 399d4bd
- threads heuristic now based on pixel rather than row count 04fd261
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w ce92ae0
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm cafc737
- eliminate compiler warning 8174e9a
- eliminate compiler warning ab0c467
- check for connection reset 1532081
- https://github.com

_[Truncated at 4000 characters — full notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-32]_

### 7.1.2-31

- Date: 2026-09-03
- Version: 7.1.2-31
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-31
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-31

- **changed** — Require libultrahdr 1.4.0 for UHDR support
- **fixed** — Use registered UHDR module name in policy check
- **fixed** — Fixed policy check for coders
- **fixed** — Corrected the call to CheckPrimitiveExtent to fix the use of uninitialized heap memory
- **fixed** — Escape the labels to prevent code injection
- **fixed** — Added missing check for eof when using the custom stream reader in ReadBlob
- **fixed** — Use a better algorithm to determine the numerator and denominator
- **fixed** — Added missing null check to avoid a null pointer dereference
- **added** — Initial framework for the c2pa coder
- **changed** — Limit c2pa support to decoding only
- **changed** — Trim labels to prevent code injection
- **added** — Create SBOM for portable builds

###### Merged
- build: require libultrahdr 1.4.0 for UHDR #8936
- fix: use registered UHDR module name in policy check #8935
- build(deps): bump azure/login from 3.0.1 to 3.0.2 #8934
- build(deps): bump the codeql-action group with 3 updates #8933
- build(deps): bump the codeql-action group with 3 updates #8925
- build(deps): bump ubuntu from 678c655 to 2260313 in /.devcontainer #8923
###### Commits
- beta release a1f2ef2
- Also create an SBOM for the portable builds. 482ae0e
- Corrected file names. c3d83c6
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c 8f62023
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm 5904641
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c 768bdd0
- Added missing include and corrected the module name. 07143f6
- Added missing coders. 7e99fb4
- Fixed the policy check for coders (GHSA-vcjj-32hg-qpx5) 82f373f
- More fixes for GHSA-vcjj-32hg-qpx5. dcdbbf4
- Corrected the call to CheckPrimitiveExtent to fix the use of uninitialized heap memory (GHSA-6xf5-c3jx-rp39) 5d29c09
- Moved EscapeParenthesis to the ghostscript-private.h header file. e2bd884
- Escape the labels to prevent code injection (GHSA-5rg6-j44q-q892) 78378cd
- Added missing define checks bd96dda
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92 c69f54e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm 86672a1
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62 c311471
- Added missing include. 5ccfb2f
- Added missing check for eof when using the custom stream reader in ReadBlob 78aff3a
- Use a better algorithm to determine the numerator and denominator (GHSA-v45j-x8p4-3mh4) f491576
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v d779ac5
- initial framework for the c2pa coder b34352d
- add header 9f2cb10
- add c2pa coder framework a4d1d62
- eliminate compiler warnings a37640f
- Removed unused argument 0e94ad4
- Added missing null check to avoid a null pointer dereference (GHSA-92rw-c5mw-27v4) c4b3c90
- https://github.com/ImageMagick/ImageMagick/issues/8927 c717095
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 282f455
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 4fe3110
- framework for c2pa coder 7d25548
- add new exception for required manifest b14e552
- add C2PA define 837ec6f
- include static header 03a79c3
- cosmetic beeb133
- c2pa decode poc 114618e
- https://github.com/ImageMagick/ImageMagick/issues/8930 a96821a
- https://github.com/ImageMagick/ImageMagick/issues/8930 c42d72d
- create symbolic link only if input file exists d4f900a
- correct c2pa delegate de7f30c
- More fixes for GHSA-89wq-f8f6-2j2v b5da5ea
- Updated the dependencies. 5f49dfb
- More fixes for GHSA-5rg6-j44q-q892. 2ba2edf
- for now, limit c2pa support to decoding only 977a278
- eliminate compile exception f557204
- eliminate compiler exception a92f423
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq 8f3a15e
- latest autoconf update 8cab7be
- check >= limit 404450e
- extra check not needed 32bbfb1
- revert e18959a
- Removed unused code. ad464d1
- Trim labels to prevent code injection (GHSA-p6j5-2qwh-6486) 8309dc9
- release fb965f1

### 7.1.2-30

- Date: 2026-08-23
- Version: 7.1.2-30
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-30
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-30

- **fixed** — Fix inline SVG style precedence
- **added** — Amiga Workbench .info coder (image/x-amiga-icon)
- **fixed** — Preserve page offsets in PCX images
- **added** — Initial support for the aseprite format
- **fixed** — Fix YCbCr TIFF images to always convert to RGB via the generic reader
- **fixed** — Return error when WebPDemuxGetFrame fails
- **fixed** — Explicitly check for read() and write() errors
- **fixed** — Fixed double free in non cairo builds
- **fixed** — Don't throw a fatal exception when hitting a recursion depth
- **security** — Report errors or return null instead of exiting the process
- **changed** — Deny inline implicit image formats

###### Merged
- Fix inline SVG style precedence #8920
- Amiga Workbench .info coder (image/x-amiga-icon) #8606
- Preserve page offsets in PCX images #8921
- build(deps): bump the codeql-action group with 3 updates #8917
- build(deps): bump the codeql-action group across 1 directory with 3 updates #8909
- build(deps): bump azure/login from 3.0.0 to 3.0.1 #8911
- build(deps): bump actions/attest from 4.2.1 to 4.2.2 #8910
- Added initial support for the aseprite format #8783
- build(deps): bump the codeql-action group with 3 updates #8907
- build(deps): bump ubuntu from 3131b4c to 678c655 in /.devcontainer #8903
- build(deps): bump actions/attest from 4.2.0 to 4.2.1 #8904
- build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 #8896
- build(deps): bump the codeql-action group with 3 updates #8895
- build(deps): bump the codeql-action group with 3 updates #8891
###### Commits
- beta release 62a8a0e
- https://github.com/ImageMagick/ImageMagick/issues/8893 c0bfa48
- Corrected method call. ac68a7c
- Fix YCbCr TIFF images to always convert to RGB via the generic reader. 6a40f26
- Moved the workflow to the Website repository. b17cb9c
- check for supported inline image formats e1394ac
- revert d14e83b
- fix exception tag 8f88a9a
- correct exception tag 4d3d052
- deny inline implicit image formats 71489bb
- eliminate compiler exception 3d7013b
- revert 0908f10
- refactor ef809e9
- refactor cc6d925
- get properties that might exceed 4096 characters a5c0521
- initialize buffer to null a8a11a2
- revert f8babcd
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wxw6-98rj-hjfr 19bce64
- https://github.com/ImageMagick/ImageMagick/issues/8901 4d9720f
- Return error when WebPDemuxGetFrame fails. 48c6d95
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-chf5-8rv9-gjqr 5bff96a
- Corrected types. b20cdc8
- Updated configure. d4847a3
- Added new ASE coder. 6de67df
- Make sure we also include the static.h header file. 9f277ec
- latest autoconf/automake update 91df48a
- symetric divide of real and imaginary components by magnitude 2b3ca93
- revert bbf4f0e
- phase similarity now matches Fred’s phase script b7794a3
- https://github.com/ImageMagick/ImageMagick/security/code-scanning/135 12174d4
- https://github.com/ImageMagick/ImageMagick/issues/8890 8d1fdcb
- use log of guassian for the correlation surface 5c4be46
- Removed variable that is only set but never read. f6f439a
- Updated the dependencies. 2c19028
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9x6f-98x9-rx6g a44ef50
- rename() does not work across partitions 332aa87
- Explicitly checks for read() and write() errors 15aafab
- earlier check for authorized path 083a4b4
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5m9j-96ff-j6qc 1d3e989
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3j4w-pvxj-fpjc ae2ed8c
- Don’t call SetImageExtent when pinging an Aseprite image. b8731aa
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x8g2-7r3w-h44p fb0b4ff
- Updated the dependencies. cbe23fb
- Correct the media type of the image that is added to the wand. 26b7e6d
- Fixed double free in non cairo builds (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f2r2-qw7g-3c8x) 326451a
- Removed unused code. 35318d3
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4mwf-mggw-29vp 6ac0755
- Don’t throw a fatal exception when hitting a recursion depth (GHSA-27m9-54jx-fgvq). 907b748
- Use AcquireCriticalMemory instead. 74ec09f
- Report errors or return null instead of exiting the process. a6b9e7f
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4jv7-q6xw-6f4x c83153d
- https://github.com/ImageMagick/ImageMagick/issues/8918 31a418a
- Use omp_set_max_active_levels on MSYS2 build instead. d7924bc
- latest autoconf/automake updates 05371c0
- Code cleanup and a bug fix. f9070c0
- Updated configure. 86e0ac6
- latest automake/autoconf up

_[Truncated at 4000 characters — full notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-30]_

### 7.1.2-29

- Date: 2026-07-27
- Version: 7.1.2-29
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-29
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-29

- **added** — Add WEBP compress case when writing
- **changed** — Update dependencies
- **fixed** — Make sure we read the bits_per_sample before using it
- **fixed** — Only set the TIFFTAG_WEBP_LEVEL when the quality is not undefined
- **fixed** — Add missing typecast
- **removed** — Remove unnecessary include
- **removed** — Remove checks for values from tif_config.h that are not included, libtiff will report errors itself now

###### Commits
- beta release b8ae505
- Updated the dependencies. 90f5b91
- add WEBP compress case when writing f35294e
- Removed unnecessary include. 1e2f64f
- Removed checks for values from tif_config.h that are not included, libtiff will report errors itself now. 7cf1988
- Only set the TIFFTAG_WEBP_LEVEL when the quality is not undefined. 02ac849
- Make sure we read the bits_per_sample before using it. 0af4ede
- Added missing typecast. b919b37
- release 360eda5

### 7.1.2-28

- Date: 2026-07-27
- Version: 7.1.2-28
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-28
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-28

- **fixed** — Fix memory leak in ASHLAR coder when action fails
- **fixed** — Fix writing video output to stdout in Windows
- **fixed** — Re-add support for libheif 1.7.0
- **fixed** — Fixes for PTIF writer to re-enable default creation of pyramid levels
- **fixed** — Address remote TOCTOU issues
- **fixed** — Map Windows file identity into st_dev/st_ino
- **fixed** — Check image file identity
- **fixed** — Support ImageInfo properties member
- **fixed** — Normalize the AE metric
- **fixed** — Initialize image info properties
- **fixed** — Ensure file resource identify is valid
- **fixed** — Include file mode when validating file identity
- **fixed** — Correct IsPaletteImage check
- **fixed** — Do not divide by alpha for plus op
- **fixed** — Avoid division by 0
- **fixed** — Fix PDC metric
- **fixed** — Read DNG profiles when pinging the image
- **fixed** — Set the page values when reading the x and y offset in a tga file
- **added** — Introduce image:frames define
- **changed** — Divide honors SVG 1.2; divide-dst and divide-src are mathematical ops

###### Merged
- build(deps): bump ubuntu from b7f4819 to 3131b4c in /.devcontainer #8876
- build(deps): bump actions/checkout from 7.0.0 to 7.0.1 #8882
- Fixes for PTIF writer to re-enable default creation of pyramid levels #8884
- build(deps): bump the codeql-action group with 3 updates #8881
- build(deps): bump actions/attest from 4.1.1 to 4.2.0 #8880
- fix: upgrade http:// to https:// in README.md #8867
- Fix memory leak in ASHLAR coder when action fails #8865
- build(deps): bump github/codeql-action/upload-sarif #8862
- build(deps): bump github/codeql-action/analyze from 4.36.3 to 4.37.0 #8863
- build(deps): bump github/codeql-action/init from 4.36.3 to 4.37.0 #8861
- Fix writing video output to stdout in Windows #8860
- build(deps): bump github/codeql-action/upload-sarif #8851
- build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.36.3 #8849
- build(deps): bump github/codeql-action/init from 4.36.2 to 4.36.3 #8850
- re-add support for libheif 1.7.0 #8841
###### Fixed
- Fix writing video output to stdout in Windows (#8860) #7900
###### Commits
- beta release 3dd3215
- Make sure git is configured properly when updating the website. 2e09a16
- address remote TOCTOU issues 99d821d
- eliminate compiler warning 8e835bd
- map Windows file identity into st_dev/st_ino. a15976c
- eliminate compiler warning c36f9ed
- check image file identity da02de3
- normalize the AE metric f85632e
- eliminate compiler warning 414297f
- support ImageInfo properties member 560f000
- improve formatting 23cfa27
- eliminate compiler warning 2f7deb8
- initialize image info properties ee20b08
- cosmetic d87c54b
- revert c5a692a
- time-of-check to time-of-use check ef0eb6d
- normalize AE metric de81b9a
- if path attributes fail relinquish memory 9f18109
- ensure file resource identify is valid bbbf79e
- premature reconstruct destruction d110964
- revert similarity image patch 60c110f
- if compare:virtual-pixels is present and false then min bounds 11b86af
- restore parallelism 33e5931
- include file mode when validating file identity c081559
- eliminate compiler exception 94df319
- define POSIX file type and permission macros 4fcd510
- localize defines d99edfd
- define S_IWUSR ed17fb2
- https://github.com/ImageMagick/ImageMagick/issues/8856 2d68170
- reviewed and made subtle corrections to a few composite ops 55e52c4
- Corrected IsPaletteImage check. b93264e
- Corrected comment. 10e4271
- https://github.com/ImageMagick/ImageMagick/issues/8858 686729b
- eliminate compiler warning a73378f
- eliminate compiler warning 55a6aaf
- update to the latest ImageMagick documentation 60fcb88
- Restored icon. d551454
- Updated configure. 8714fef
- Small memory allocation optimization. 2d4d387
- Updated configure. e0c11e3
- Use max compression for all archives. 8270efa
- guarantee round-trip fidelity for IEEE‑754 doubles without printing spurious digits 676d2c3
- No longer inline the method to reduce the local stack size. d53e028
- correct cast from char to quantum 0f86975
- https://github.com/ImageMagick/ImageMagick/issues/8864 549f90b
- do not divide by alpha for plus op 31c97dd
- revert 5bbda08
- introduce image:frames define 7fd62c7
- eliminate compiler warning 4548c02
- FILE_READ_ATTRIBUTES is preferred over GENERIC_READ 63cc8c7
- Updated the dependencies. 873e31a
- safe read/write 20dcf6d
- use 1mb chunks 7618f43
- use parens in macro 7a5bc5b
- eliminate compiler warning 3744060
- https://github.com/ImageMagick/ImageMagick/issues/8436 f2e478b
- avoid division by 0 ec19dcd
- cosmetic 62da037
- revert 3e31b7f
- increase threads for PHASE metric 5a774ca
- fix PDC metric fc48f7d
- correct angle 836651e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6rvv-36hw-5rgf 297c894
- Read DNG profiles when pinging the image. eeea9da
- Cosmetic. 55c96d0
- configure distributed cache max clients and max unathenticated clients e9c84d9
- precompute the phase spectrum for all (u,v) frequency pairs simultaneously, 8470c17
- use virtual memory for phas

_[Truncated at 4000 characters — full notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-28]_

### 7.1.2-27

- Date: 2026-07-05
- Version: 7.1.2-27
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-27
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-27

- **fixed** — Fix HEIC identity CICP with chroma subsampling
- **fixed** — Check profile length before reading header in GetIPTCStream
- **fixed** — Read Cairo ARGB32 in host byte order so SVG colors are correct on big-endian
- **changed** — Preserve HEIC CICP and CLLI metadata
- **fixed** — Reject otb files that declare more pixels than the file holds
- **fixed** — Revert soname change
- **security** — Fix vulnerability GHSA-422r-8c97-xcg4
- **security** — Fix vulnerability GHSA-93x9-jq8c-cwcc
- **security** — Fix vulnerability GHSA-xv2g-79vc-75qf
- **security** — Fix vulnerability GHSA-g568-j2hh-jr58
- **security** — Fix vulnerability GHSA-cvxf-g9w2-7mcx
- **security** — Fix vulnerability GHSA-h22j-f9xw-xjjm
- **security** — Fix vulnerability GHSA-cvhv-g4rq-3hmw
- **security** — Fix vulnerability GHSA-7rgw-xg25-prjm
- **added** — Add method to determine the endian of the host
- **added** — Add method to check if incrementing a value would result in an overflow
- **changed** — Improve cache I/O robustness and fix race conditions
- **changed** — Support coder strict streaming attribute
- **changed** — Require at least version 1.11.0 of the libheif library
- **fixed** — Make sure to check the length after each read

###### Merged
- Fix HEIC identity CICP with chroma subsampling #8828
- build(deps): bump actions/attest from 4.1.0 to 4.1.1 #8835
- build(deps): bump ubuntu from 53958ec to b7f4819 in /.devcontainer #8834
- build(deps): bump actions/setup-python from 6.2.0 to 6.3.0 #8830
- check profile length before reading header in GetIPTCStream #8829
- Read Cairo ARGB32 in host byte order so SVG colors are correct on big-endian #8825
- Preserve HEIC CICP and CLLI metadata #8824
- reject otb files that declare more pixels than the file holds #8826
- build(deps): bump msys2/setup-msys2 from 2.31.1 to 2.32.0 #8807
- build(deps): bump actions/checkout from 6.0.3 to 7.0.0 #8818
- Fix #8819 revert soname change #8820
- build(deps): bump ubuntu from f3d2860 to 53958ec in /.devcontainer #8814
###### Fixed
- Fix #8819 revert soname change (#8820) #8819
###### Commits
- beta release 2c6ba18
- https://github.com/ImageMagick/ImageMagick/issues/8813 71bf0b0
- eliminate compiler warning dc92169
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-422r-8c97-xcg4 be99ffa
- eliminate compiler warning 82364cf
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-93x9-jq8c-cwcc 4a3585b
- https://github.com/ImageMagick/ImageMagick/issues/8815 5e1a141
- https://github.com/ImageMagick/ImageMagick/issues/8816 532b0f5
- Revert unnecessary patch for GHSA-93x9-jq8c-cwcc e70837c
- Removed unnecessary check. 9a5c8ff
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-422r-8c97-xcg4 0bbf7e4
- remove quantization 4041062
- https://github.com/ImageMagick/ImageMagick/issues/8815 9616e88
- correct allow coder logic 634f3a9
- Use AcquireQuantumMemory instead because it already does the necessary checks. 4e96b11
- support coder strict streaming attribute 727ddc9
- change coder flag name 9f7e3cb
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xv2g-79vc-75qf 80b268c
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g568-j2hh-jr58 f8a02fa
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g568-j2hh-jr58 38b6468
- https://github.com/ImageMagick/ImageMagick/issues/8821 bc16247
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvxf-g9w2-7mcx 1b63224
- latest autoconf/automake updates 1f7213d
- Also create an xz version of the source archive. dc0965d
- https://github.com/ImageMagick/ImageMagick/issues/8823 64d2e4a
- Added job to update the website after a release. 58d6364
- Added a method that can be used to determine the endian of the host. 952c221
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvxf-g9w2-7mcx fdbe649
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h22j-f9xw-xjjm 538ad18
- Moved initialization. 42128f2
- Removed redundant checks. e587240
- Cosmetic. 42e20ab
- Added earlier exit when image type is invalid. 03a0a68
- Removed all the #if 0 blocks that have been there for ages. f379865
- Added method that can be used to check if incrementing a value would result in an overflow. b2740b9
- overflow check 325fce5
- revert ff4df37
- move add check to private header b3b8d20
- check for possible add overflow c2e84d8
- Improve cache I/O robustness and fix race conditions 92b961a
- check for overflow 0ca86fc
- Make sure we check the length after each read (GHSA-7rgw-xg25-prjm) 093f476
- Specify the current ref as an argument for the clone in the Windows source job. d0eb51a
- Disable job in pull request. c3fef03
- Updated the dependencies. 4a68839
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvhv-g4rq-3hmw e3e6911
- Updated the dependencies. c74cd62
- policies are case sensitive 0b3fa25
- check for EOF 9a38ee0
- accumulates absolute error per channel (not counts) 5848f4a
- Cosmetic 7cee9fe
- Require at least version 1.11.0 of the libheif library. c893eb2
- latest autoconf update 9993f71
- don’t normalize the AE metric 324ee77
- average composite channel ed56d9e
- sanity check 37

_[Truncated at 4000 characters — full notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-27]_

### 7.1.2-26

- Date: 2026-06-21
- Version: 7.1.2-26
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-26
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-26

- **fixed** — Check rows*columns overflow in sct ReadSCTImage
- **fixed** — Bound 8bim resolution resource read in GetProfilesFromResourceBlock
- **fixed** — Fix build errors for OSS-Fuzz
- **added** — Add primary still image to animated AVIF for Firefox compatibility in heic
- **removed** — Remove legacy vsprintf fallback in drawing-wand.c
- **added** — Detect Ultra HDR JPEGs from gain-map metadata
- **added** — Preserve Ultra HDR JPEG gain maps when transcoding
- **fixed** — Reject cineon files with an invalid bits per pixel
- **fixed** — Seek to the start of the blob if possible when opening a custom stream
- **fixed** — Auto-detect DNG image wrapped in a TIFF
- **fixed** — Detect DNG masquerading as a TIFF
- **fixed** — Patch to make sure that a file is used when using the DNG coder inside the TIFF coder
- **added** — Support ThrowPolicyException() convenience define
- **security** — Address multiple security vulnerabilities
- **fixed** — Always return dng_image because the libtiff reader was closed
- **added** — Export IsRightsAuthorizedByName()

###### Merged
- check rows*columns overflow in sct ReadSCTImage #8812
- bound 8bim resolution resource read in GetProfilesFromResourceBlock #8798
- OSS-Fuzz: Fix build errors #8808
- heic: add primary still image to animated AVIF for Firefox compatibility #8804
- chore: remove legacy vsprintf fallback in drawing-wand.c #8796
- Detect Ultra HDR JPEGs from gain-map metadata #8794
- build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 #8795
- Preserve Ultra HDR JPEG gain maps when transcoding #8788
- build(deps): bump actions/checkout from 6.0.2 to 6.0.3 #8790
- build(deps): bump github/codeql-action from 4.36.0 to 4.36.1 #8789
- reject cineon files with an invalid bits per pixel #8781
###### Commits
- beta release 8ee9390
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c8r2-mc3p-4f8j fe20c95
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6vxp-gfwf-hcr9 f3ff3af
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7c7m-fpjw-gwcq 174275b
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j8rh-v2r8-v94x b535126
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hwf3-r46v-5ggx 4079949
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hv63-qgj6-7gh7 d0d8ae7
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3564-h588-56gr f80b878
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-99w9-hv66-rfv7 0bb3578
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jfq9-q63x-rc63 f34065e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h7f2-f9cc-h2gv 808506d
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r628-69v2-2f9c b2dc602
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m596-67p7-69wh fdbf39b
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h58x-r7f7-rh84 b237a4f
- Added workflow that can be used to publish a release. 126f102
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pjxj-pchx-4c3m 47ca721
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h5r4-w88w-7ccr ed143b9
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vgh5-r42g-4j44 335aadb
- fix false positive 33dc9f5
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j3pv-77gf-fw2g e4ce56a
- exif thumnail namespace convention d03cf68
- https://github.com/ImageMagick/ImageMagick/issues/8743 e5ce98c
- conform to namespace convention 74fc6bd
- conform to namespace conventions 922913a
- Seek to the start of the blob if possible when opening a custom stream. d8dc773
- encode three channels into one string ddea9d2
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8g53-9m3c-69xg#advisory-comment-224693 9d1764c
- Patch to make sure that a file is used when using the DNG coder inside the TIFF coder. 4c36330
- auto-detect DNG image wrapped in a TIFF 920718d
- set seekable stream flag e1c0129
- https://github.com/ImageMagick/ImageMagick/discussions/8716#discussioncomment-17226843 9c6f636
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6jwg-7q3p-5fqm 3fc646a
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvxh-prvr-85w2 f89d59c
- cosmetic 2537cbc
- support ThrowPolicyException() convenience define de731f3
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-ff5c-8x9r-8qcw 3bd584e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-79f6-phvj-fcxf 493d641
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pvf6-h68q-qh7g f413a88
- detect DNG masquerading as a TIFF 158171b
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2qmq-5wc5-mv8f 23362f0
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qcmw-qmh5-v9xp 8e4180d
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvm9-xf3r-5jc7 e7c72ae

_[Truncated at 4000 characters — full notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-26]_

### 7.1.2-25

- Date: 2026-06-04
- Version: 7.1.2-25
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-25
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-25

- **security** — Fix out-of-bounds read of GPS rationals in GetEXIFProperty
- **security** — Reject HDR files with a negative width or height
- **security** — Reject PGX files with invalid dimensions or precision
- **security** — Reject RLA files with an inverted active window
- **security** — Reject FITS files with an invalid bits per pixel
- **security** — Reject SGI files with zero columns or rows
- **security** — Reject DDS files with zero columns or rows
- **fixed** — Validate argument count for polynomial distortion
- **fixed** — Fix rare exception message leak
- **fixed** — Make sure the mask is properly respected when setting the alpha channel
- **changed** — Centralize checking if pinged images have a size that has zero columns or rows and removed redundant checks
- **changed** — Export SetQuantumExtent() private method so coders can leverage it

###### Merged
- validate argument count for polynomial distortion #8780
- fix oob read of gps rationals in GetEXIFProperty #8782
- reject hdr files with a negative width or height #8765
- reject pgx files with invalid dimensions or precision #8764
- reject rla files with an inverted active window #8770
- build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 #8775
- reject fits files with an invalid bits per pixel #8760
- reject sgi files with zero columns or rows #8761
- reject dds files with zero columns or rows #8762
###### Commits
- trigger a build d73fb3c
- beta release 867f838
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q62c-h75r-2xhc 960367f
- update configure 75bfcea
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g22q-f7gc-5jhr 1db660b
- https://github.com/ImageMagick/ImageMagick/issues/8774 7bbbc2d
- eliminate compiler exception 81c1296
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-px7q-ggqj-hcf2 6c8afb5
- cosmetic bc64d17
- reset primitive offset fac66fd
- Centralize checking if pinged images have a size that has zero columns or rows and removed redundant checks. a89f4e4
- eliminate compiler warning 9851324
- export exception message eba82d1
- fix rare exception message leak 94bea84
- use absolute values for PHASH logs f72f5b8
- cosmetic 092b960
- phrase correction 7b3b271
- prevent reading explicit image filenames 5c00648
- Cosmetic. dad02f4
- 2nd attempt to scale pHash 0c1cf1e
- change sign 3894eff
- revert b728346
- normalize each channel independently 7f22f9f
- Put the version in the release notes. 8d99f81
- Updated the Windows dependencies and configure. 877ba07
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p9rq-q46c-g4x6 aa288f3
- Cosmetic. 5810d75
- Added extra checks for the width and height. 271ec74
- Revert extra check that was committed by accident. 6eb7428
- https://github.com/ImageMagick/ImageMagick/issues/8766 a2bdddb
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j989-f892-2335 310e325
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-44cp-c3ww-9rv5 e8a6145
- https://github.com/ImageMagick/ImageMagick/issues/8778 a829e2e
- revert f5f5f36
- https://github.com/ImageMagick/ImageMagick/issues/8766 3fea455
- support SetQuantumExtent() private method 706439c
- need to export so coders can leverage SetQuantumExtent() 9fb23a5
- fix wrong type 22b1aac
- fix method type 6512f37
- cosmetic ec374e3
- Minor optimization of the ClipPixelCacheNexus method. e9dcf3a
- Make sure the mask is properly respected when setting the alpha channel (#8778) 1015688
- Cosmetic. 037e462
- release 04a04ea

### 7.1.2-24

- Date: 2026-05-26
- Version: 7.1.2-24
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-24
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-24

- **fixed** — reject mtv files with zero columns or rows
- **fixed** — reject tga files with zero columns or rows
- **fixed** — reject cineon files with zero columns or rows
- **fixed** — reject farbfeld files with zero columns or rows
- **added** — add profile_fuzzer for raw EXIF/XMP/IPTC/ICC parsing
- **security** — fix heap-based overflow vulnerability
- **fixed** — free the chunk when hitting max loop
- **fixed** — set a limit on the profile size when fuzzing images
- **fixed** — free profile when the color profile is invalid
- **fixed** — add extra checks to prevent an overflow on 32-bit systems
- **fixed** — add missing check for returning an image with zero columns or rows
- **fixed** — add extra checks when pinging an image with zero dimensions
- **fixed** — fix possible memory leak
- **fixed** — close the blob before the dimensions are checked
- **fixed** — construct full path from directory + basename
- **changed** — don't raise exceptions for warnings in the constructors of CoderInfo and Color
- **changed** — use Visual Studio 2026 in the Windows build
- **changed** — update Windows dependencies

###### Merged
- reject mtv files with zero columns or rows #8758
- reject tga files with zero columns or rows #8756
- reject cineon files with zero columns or rows #8754
- build(deps): bump ubuntu from 22.04 to 26.04 in /.devcontainer #8751
- reject farbfeld files with zero columns or rows #8750
- build(deps): bump caphyon/advinst-github-action from 2.0.2 to 2.0.3 #8742
- build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 #8749
- Add profile_fuzzer for raw EXIF/XMP/IPTC/ICC parsing #8736
###### Commits
- beta release 48756ca
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vgh5-r42g-4j44 8fa8b81
- revert 9b3ca35
- Make sure we free the chunk when hitting max loop. dd198f9
- Also set a limit on the profile size when fuzzing images. cca7092
- Corrected version check to fix the build error reported in #8740. 37af688
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6mwj-rp89-6j5j 404ff84
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2hhq-c99x-492r 017c7ef
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9hqg-xf93-ghfw 08b9f27
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v62-8fq6-cp9m 3a12d63
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h36c-3666-h489 9ee8217
- Added condition to disable msix preparation in a pull request. e4505b7
- https://github.com/ImageMagick/ImageMagick/issues/8745 f579a0b
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gm48-c7f2-v67p 3705205
- Another correction of the version check. 3ad556b
- restore 45d9ea7
- fix poxxible memory leak 1742ae8
- construct full path from directory + basename 9023658
- optimized 0cd09b0
- provision paths on demand 565ba49
- cosmetic a7e0b04
- remove superflous assignment 50ffad2
- Corrected the delete. f5bd852
- Added extra try catch in case a warning is thrown. 3e969e5
- Don’t raise exceptions for warnings in the constructors of CoderInfo and Color. 4ac379a
- Added missing check for returning an image with zero columns or rows (https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8pj9-6897-74xc) 84fbcef
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xcjm-wqff-m669 d1bf6bc
- add include statement 179b3fb
- potential heak based overflow per spartancodex 0ff2644
- increase increment 6987ef0
- adjust heap overflow check fee84f2
- check for maximum image size limit 5d7f453
- make that max aa37d05
- revert 6b0d497
- Silenced warning. fc4321f
- Also close the image blob to make sure we close it properly. b01c173
- remove extraneous heap check e341fd9
- directly iterate over the policy linked-list 4bedfd7
- Updated configure. 05b8aa1
- Updated the Windows dependencies. 80db294
- Use Visual Studio 2026 in the Windows build. 82e3b84
- Corrected the header. 0c44b7a
- Added extra checks to prevent an overflow on 32-bit systems (GHSA-4v89-6mgq-6rgc) 44df3a5
- Free profile when the color profile is invalid. b091a08
- Corrected the path for docker and added pip to dependabot.yml 9a998b5
- Close the blob before the dimensions are checked. a526846
- fix -clip issue 3703262
- cast required 49ea262
- Update python and the installed packages in the doc-check. 8c6b002
- Added extra checks when pinging an image with zero dimensions. 6eb7297
- revert ac4a219
- https://github.com/ImageMagick/ImageMagick/issues/8753 3c45ab0
- release 271b6bc

### 7.1.2-23

- Date: 2026-05-17
- Version: 7.1.2-23
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-23
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-23

- **security** — Fixed security vulnerabilities GHSA-3rvp-mpr5-qjm9, GHSA-36wm-hprc-mcf5, GHSA-jcqp-6r6f-3mfx, GHSA-7gg8-qqx7-92g5, GHSA-533m-3wf6-c33v, GHSA-88wq-x9gc-45h8, GHSA-5r4x-w6p5-222q, GHSA-xf64-q5rg-85g5, GHSA-4g75-9r48-jf92, GHSA-p93h-f2jc-477j, GHSA-rcr6-g7jc-f57g, and GHSA-6gxq-f64p-5w6f
- **changed** — Set the mask_traits to undefined when setting masks
- **added** — Allow reading more pixel masks in the DDS decoder
- **changed** — Improved performance when pinging an animated avif image
- **changed** — Check if the TIFF file that is being read is a DNG file and then switch to the DNG decoder
- **changed** — Check the image extent before decoding the webp image and improved the error handling
- **changed** — Validate the DPC pixel cache on read
- **changed** — Only apply ignore_sequence_editlist in libheif 1.21

###### Merged
- build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 #8733
- ignore_sequence_editlist only in libheif 1.21 #8729
###### Commits
- beta release b8244a9
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rvp-mpr5-qjm9 c0d67d1
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-36wm-hprc-mcf5 3aa3574
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jcqp-6r6f-3mfx 188fcf5
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7gg8-qqx7-92g5 e8431d4
- encourage security policy testing after any configuration change a60a785
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-533m-3wf6-c33v ff2f155
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-88wq-x9gc-45h8 4fb2526
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5r4x-w6p5-222q 4d92249
- revert list length check adf173c
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xf64-q5rg-85g5 f243129
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xf64-q5rg-85g5 01b2f12
- Set the mask_traits to undefined when setting masks. 1569c1c
- Allow reading more pixel masks in the DDS decoder (#8723) 64fc55b
- Improved performance when pinging an animated avif image. 02b5cc9
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4g75-9r48-jf92 adb4b8d
- Check if the TIFF file that is being read is a DNG file and then switch to the DNG decoder. 6cee813
- Removed unused include. 58163e0
- Set the status to make sure we exit earlier. 1fc6a11
- Check the image extent before decoding the webp image and improved the error handling. 9682dab
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4g75-9r48-jf92 d954e9c
- revert 1500690
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p93h-f2jc-477j 75bcc76
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4g75-9r48-jf92 9971127
- cosmetic 5953c8e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rcr6-g7jc-f57g 06fb1aa
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6gxq-f64p-5w6f ac461f3
- Added svg version of the wand icon. 0fd5e38
- Updated the Windows dependencies. ca15b2b
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6gxq-f64p-5w6f d3b02f2
- eliminate compiler warning 468bbd6
- eliminate compiler warning 65fd7fa
- eliminate compiler warning 68ed378
- eliminate compiler warning a92d8bc
- eliminate compiler warning de23b19
- Corrected signature. 91db0b6
- validate the DPC pixel cache on read bb79e91
- fixes per minor code review c421b33
- eliminate compiler error ec88a6b
- eliminate compiler warning b5cf3d9
- eliminate compiler warning 6c51b2d
- release 6a10c82

### 7.1.2-22

- Date: 2026-05-12
- Version: 7.1.2-22
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-22
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-22

- **fixed** — Fix unsound free of uninitialized pointers in GetImageFeatures error path
- **fixed** — Reset image type after -combine to avoid incorrect output images
- **fixed** — Corrected the return value for PSD image with a color map
- **fixed** — Set a limit to the kernel order to avoid an overflow resulting in a divide by zero
- **fixed** — Decode the media timeline instead to avoid reading too many images
- **fixed** — Added missing check for the list length limit in the PSD decoder
- **fixed** — Added early exits when reading all the images would hit the list length limit
- **fixed** — Added extra conditions for when ReadGenericMethod should be used when reading a jpeg compressed tiff file
- **changed** — Extent was computed in bytes; now in element count
- **changed** — Use heif_has_compatible_filetype instead to check the file type
- **changed** — Only reset the image type when ValidatePixelCacheMorphology returns false
- **changed** — Added version check with fallback to the old implementation

###### Merged
- Fix unsound free of uninitialized pointers in GetImageFeatures error path #8724
- build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 #8719
- build(deps): bump msys2/setup-msys2 from 2.31.0 to 2.31.1 #8697
- build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 #8684
- build(deps): bump lxml from 6.0.2 to 6.1.0 in /.github/build/python #8683
###### Commits
- beta release 7887eae
- Added an extra job to sync the winget repository during the release. 468c9fe
- Renamed the provenance file. 945a02b
- relinquish policies on early exit 23cd08d
- eliminate compiler warning 9eeb5ae
- Run Codeql analysis with every push to main. 334f460
- Use ubuntu 22.04 in all dev containers 6b3ce06
- Added docker to dependabot.yml b28e11f
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-85r7-8qr6-54gh 8ce0eba
- https://github.com/ImageMagick/ImageMagick6/issues/420 5050796
- https://github.com/ImageMagick/ImageMagick/issues/8687 97e42a4
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7wff-wpr6-vmhm 0630159
- extent was computed in bytes; now in element count abbad01
- eliminate compiler warning 9b3eaf8
- Reset image type after -combine to avoid incorrect output images (#1835) bf95a84
- Only reset the image type when ValidatePixelCacheMorphology returns false. 7d80d09
- https://github.com/ImageMagick/ImageMagick/issues/8690 b348fac
- eliminate compiler warning 51367a1
- Corrected title. 0ba695f
- https://github.com/ImageMagick/ImageMagick6/issues/420 ab89688
- eliminate compiler warning 15c137e
- Corrected the return value for PSD image with a color map. 167c7e9
- initialize primitive type e5555f9
- Check with enum value instead. f78621a
- Use heif_has_compatible_filetype instead to check the file type. 804b062
- Added version check with fallback to the old implementation. f8d4944
- Throw exception to make sure the user knows they are hitting a limit. 76784e7
- Another fix to check for the 32-bit overflow. f028fe9
- https://github.com/ImageMagick/ImageMagick/issues/8712 c265c9b
- free primitive info text if allocation fails cef4657
- slightly more robust overflow check db127ca
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rw3g-wvj6-3p7w 6b8bf8c
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jqq5-8px3-9m6m 84a15bf
- Cosmetic 012d719
- optimized CheckPrimitiveExtent() method 41c2d47
- Set a limit to the kernel order to avoid an overflow resulting in a divide by zero (GHSA-vf33-6r7x-66xx) d67eef7
- eliminate compiler warning fd8c6c1
- Fixed build errors. f69377d
- eliminate compiler warning 1248f55
- eliminate compiler exception 428e5da
- Decode the media timeline instead to avoid reading too many images (#8706) 45e4648
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jqq5-8px3-9m6m 2657255
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v6qj-8rm4-fpgj be351d3
- Added missing check for the list length limit in the PSD decoder (GHSA-cwpj-h54c-xjpx) a96763d
- Added early exits when reading all the images would hit the list length limit. 998b3f9
- Also run the scorecard workflow in PR’s. da2b440
- Removed fetch depth. 79c3e16
- https://github.com/ImageMagick/ImageMagick/issues/8720 824aa5b
- https://github.com/ImageMagick/ImageMagick/issues/8715 b1adb0c
- stroke-antialiasing is not a valid SVG element bcbda26
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vhrh-72hq-w8m7 9f18e28
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cr6r-hmj8-pr7r 2cf3b57
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j3pv-77gf-fw2g 8def493
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hg5x-pmmv-4q7g dab73a3
- Revert patch until there is a proper fix. 34bda95
- Updated the Windows dependencies. 8e0cc06
- initialize mask trait for -region option 703f6f5
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pfvh-m9

_[Truncated at 4000 characters — full notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-22]_

### 7.1.2-21

- Date: 2026-04-21
- Version: 7.1.2-21
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-21
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-21

###### Commits
- release c86de04

### 7.1.2-20

- Date: 2026-04-21
- Version: 7.1.2-20
- Original notes: https://github.com/ImageMagick/ImageMagick/releases/tag/7.1.2-20
- Permalink: https://whatsnew.fyi/product/imagemagick/releases/7.1.2-20

- **fixed** — Fix JXL orientation when writing
- **fixed** — Correct the patch for reading JPEG compressed TIFF images
- **changed** — Eliminate deprecated omp_set_nested()
- **changed** — Update to latest autoconf/automake
- **fixed** — Eliminate compiler warnings
- **changed** — Support MSYS2
- **fixed** — Add extra checks for older version of libxml2 that can raise errors inside xmlCreatePushParserCtxt
- **fixed** — Fix missing volatile on quantum_info in WriteOnePNGImage
- **changed** — Update Windows dependencies
- **changed** — Allow namespace::pattern when checking policy rights
- **fixed** — Make another variable volatile
- **changed** — Mention symlink system policy
- **fixed** — Call CloseBlob on the correct image to prevent the blob from remaining open
- **fixed** — Check that we have enough coordinates for a round line cap
- **removed** — Remove unmaintained VMS files
- **added** — Add source archive to the release
- **changed** — Evaluate each requested right independently and combine them
- **changed** — Support pixel difference count (PDC) compare metric
- **fixed** — Use the version instead of sha in the version of the AppImage

###### Merged
- Fix JXL orientation when writing. #8673
- build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 #8677
###### Commits
- beta release f601163
- Use the version instead of sha in the version of the AppImage. 3ec02c4
- Corrected the patch that was made earlier to fix reading JPEG compressed TIFF images (dlemstra/Magick.NET/issues/1993) 3da25c6
- eliminate deprecated omp_set_nested() e529068
- latest autoconf/automake updatde 2db63fd
- eliminate compiler warning ad3d279
- eliminate compile warning 141d988
- https://github.com/ImageMagick/ImageMagick/issues/8674 1aea2ad
- support MSYS2 9848360
- Added extra checks for older version of libxml2 that can raise errors inside xmlCreatePushParserCtxt. 2d6a2bb
- support MSYS2 e9050b7
- Simplify windows (sym)link check and moved it to nt-base where the rest of the methods are. ddb2e42
- Fix missing volatile on quantum_info in WriteOnePNGImage c9ccc99
- Updated the Windows dependencies. ddb1f6c
- allow namespace::pattern when checking policy rights 7499ad0
- cosmetic b94650b
- eliminate compiler warning 3cb2bda
- Make another variable volatile. ea1d15b
- mentioned symlink system policy 313aeba
- Call CloseBlob on the correct image to prevent the blob from remaining open (dlemstra/Magick.NET/issues/1997) f7496a3
- https://github.com/ImageMagick/ImageMagick/issues/8674 9e1b9fd
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7mxf-ff4f-jj7p 2598004
- release icon directory 635006f
- check that we have enough coordinates for a round line cap 8ae4ff1
- Removed unmaintained vms files. 5e2f3f6
- Also add a source archive to the release. f7ff407
- Added missing dependency and use more consistent names. 9b7504b
- update exception message c32d3b1
- evaluate each requested right independently and combine them 9051eb4
- do not call ThrowFatalException() 0f87015
- eliminate compiler warning c4aa2a6
- cosmetic 6cbcfd6
- latest automake/autoconf updates 4ffb6c7
- check for 1 linecap point 93aac80
- support pixel difference count (PDC) compare metric bfd1fcf
- remove ceil() d5e020d
- scale the pixel distortion c92cd35
- Updated the Windows dependencies. 5e318be
- cosmetic 9bc5c37
- release 51e1d5d