7.1.2-31
Added 2
- Initial framework for the c2pa coder
- Create SBOM for portable builds
Changed 3
- Require libultrahdr 1.4.0 for UHDR support
- Limit c2pa support to decoding only
- Trim labels to prevent code injection
Fixed 7
- Use registered UHDR module name in policy check
- Fixed policy check for coders
- Corrected the call to CheckPrimitiveExtent to fix the use of uninitialized heap memory
- Escape the labels to prevent code injection
- Added missing check for eof when using the custom stream reader in ReadBlob
- Use a better algorithm to determine the numerator and denominator
- Added missing null check to avoid a null pointer dereference
From ImageMagick
Merged
- build: require libultrahdr 1.4.0 for UHDR #8936
- fix: use registered UHDR module name in policy check #8935
- build(deps): bump azure/login from 3.0.1 to 3.0.2 #8934
- build(deps): bump the codeql-action group with 3 updates #8933
- build(deps): bump the codeql-action group with 3 updates #8925
- build(deps): bump ubuntu from 678c655 to 2260313 in /.devcontainer #8923
Commits
- beta release a1f2ef2
- Also create an SBOM for the portable builds. 482ae0e
- Corrected file names. c3d83c6
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c 8f62023
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm 5904641
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c 768bdd0
- Added missing include and corrected the module name. 07143f6
- Added missing coders. 7e99fb4
- Fixed the policy check for coders (GHSA-vcjj-32hg-qpx5) 82f373f
- More fixes for GHSA-vcjj-32hg-qpx5. dcdbbf4
- Corrected the call to CheckPrimitiveExtent to fix the use of uninitialized heap memory (GHSA-6xf5-c3jx-rp39) 5d29c09
- Moved EscapeParenthesis to the ghostscript-private.h header file. e2bd884
- Escape the labels to prevent code injection (GHSA-5rg6-j44q-q892) 78378cd
- Added missing define checks bd96dda
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92 c69f54e
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm 86672a1
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62 c311471
- Added missing include. 5ccfb2f
- Added missing check for eof when using the custom stream reader in ReadBlob 78aff3a
- Use a better algorithm to determine the numerator and denominator (GHSA-v45j-x8p4-3mh4) f491576
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v d779ac5
- initial framework for the c2pa coder b34352d
- add header 9f2cb10
- add c2pa coder framework a4d1d62
- eliminate compiler warnings a37640f
- Removed unused argument 0e94ad4
- Added missing null check to avoid a null pointer dereference (GHSA-92rw-c5mw-27v4) c4b3c90
- https://github.com/ImageMagick/ImageMagick/issues/8927 c717095
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 282f455
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 4fe3110
- framework for c2pa coder 7d25548
- add new exception for required manifest b14e552
- add C2PA define 837ec6f
- include static header 03a79c3
- cosmetic beeb133
- c2pa decode poc 114618e
- https://github.com/ImageMagick/ImageMagick/issues/8930 a96821a
- https://github.com/ImageMagick/ImageMagick/issues/8930 c42d72d
- create symbolic link only if input file exists d4f900a
- correct c2pa delegate de7f30c
- More fixes for GHSA-89wq-f8f6-2j2v b5da5ea
- Updated the dependencies. 5f49dfb
- More fixes for GHSA-5rg6-j44q-q892. 2ba2edf
- for now, limit c2pa support to decoding only 977a278
- eliminate compile exception f557204
- eliminate compiler exception a92f423
- https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq 8f3a15e
- latest autoconf update 8cab7be
- check >= limit 404450e
- extra check not needed 32bbfb1
- revert e18959a
- Removed unused code. ad464d1
- Trim labels to prevent code injection (GHSA-p6j5-2qwh-6486) 8309dc9
- release fb965f1