Opened 6 months ago

Closed 6 months ago

#21983 closed enhancement (fixed)

ImageMagick-7.1.2-1

Reported by: Douglas R. Reno Owned by: Douglas R. Reno
Priority: elevated Milestone: 12.4
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

New point version

Change History (4)

comment:1 by Douglas R. Reno, 6 months ago

Owner: changed from blfs-book to Douglas R. Reno
Status: newassigned

comment:2 by Douglas R. Reno, 6 months ago

7.1.2-1 - 2025-08-11
Merged

    Bump actions/download-artifact from 4 to 5 #8296
    Use OpenMP in ashlar #8288
    Fix compressed exr reading #8285
    Fix validation issues in SF3 #8252
    Add support for Simple File Format Family (SF3) images #8243

Commits

    beta release 69f5e59
    latest autoconf/automake updates 65c443c
    use /* */ for comments ff8a80f
    eliminate compiler warning a18c2a8
    need to conditionally compile based on the availability of zlib e779f7a
    eliminate dependency on zlib dffe526
    wait until more mature before we can robustly validate SF3 77e3513
    eliminate compiler warning; check max image dimensions 649a68a
    eliminate unitialized local variable 0a24c65
    potentially uninitialized local variable ad5cf7e
    eliminate potential memory leak 0e9f472
    check for EOF 1ced145
    Use the pre-build binaries of the dependencies in the Windows build. 5ee2f01
    Added missing typecast. d0185ab
    Moved PKGBUILD file for the MSYS2 build to this project. a04b3b4
    set any image depth < 8 to 8 8f61ab8
    Corrected indentation. 5d03571
    Use the pre-build dependencies in the daily Windows build. fce56a5
    Added missing download of Configure. 0b8c801
    Consistent naming. ef7fe51
    Use the PKGBUILD file of this repository in the daily MSYS build. 1c50abb
    eliminate clang compiler warning 545fbf2
    Updated the release build to use the pre-build dependencies in the Windows build. d23355d
    Updated the windows release build to use the pre-build dependencies. 8e3dedf
    Corrected matrix settings for the Windows release build. c4f9f9e
    Corrected path for the Inno file in the Windows release build. 3169ead
    Use the sign cli to sign the files instead. 609c44a
    Only build magick with the portable release. 29c2475
    Also sign the executables and libraries. b788839
    Added missing space. c96e55c
    read TrueType Dejavu fonts 556cb31
    Use the new Windows repository for the source archive in the Windows release. 912df67
    Run autoreconf in the code-analysis pipeline. eb6a019
    Corrected path to file to upload. b798f5d
    Updated version of configure. 7cec5ee
    ImageMagick/ImageMagick#8261 8255075
    don't forget the end filename segment d46d1e5
    more boundary checks 6c7c8d5
    account for epsilon when fuzzing 544c4fd
    account for epsilon for fuzz comparison dc59667
    robust significant error detection based on fuzz 2d055c2
    eliminate compiler exception 95eb90d
    Always remove the downloaded files.zip file. e3863b6
    Unzip exits with a non zero exit code so the remove of the zip file should be as an or statement. 1c6b698
    update to latest documentation 732a718
    ImageMagick/ImageMagick#8272 305e383
    Update the pre-build dependencies. 6fa77ac
    Make scripts executable. dd8b9df
    Update the pre-build dependencies. d52f662
    cosmetic 29a0bea
    Corrected format string. e16cb77
    support dynamic cpu throttling relative to the system load average 6480914
    check return value of getloadavg() 268afe9
    ... 48e8ece
    Updated the pre-build dependencies and configure. d19bd5a
    Specify a version for the runners instead of using the latest. f86cbbd
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw 55d9705
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v393-38qx-v8fp b68bb6d
    Updated configure. 0ef6dd4
    cosmetic, use a define ecc9a5e
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qp29-wxp5-wh82 db986e4
    ImageMagick/ImageMagick#8292 e102c93
    eliminate compiler warning 11b8e53
    only update extend width/height in one thread c86f7cb
    don't thread for modest numbers of image tiles ffe4ecf
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6hgw-6x87-578x 63d8769
    Updated the pre-build dependencies and configure. 0284af8
    Updated the pre-build dependencies. 24532dd
    release 83b6fc3

7.1.2-0 - 2025-07-13
Merged

    Fix NULL pointer dereference in XWarning #8230
    Change 'Mac OS X' to 'macOS' in descriptions and comments #8224
    fix build when libjpeg is not in its default location #8172
    Support ICN file extension for old Windows icons #8107
    JXL: Preserve ICC profile for lossless encoding #8074
    Remove generated 'magick.sh' from repo #8075
    magick-config.h: Remove redundant block #8076

Fixed

    JXL: Preserve ICC profile for lossless encoding (#8074) #8022

Commits

    beta release de54c14
    .Renamed CastDoubleToUnsigned to CastDoubleToSizeT fd418dd
    Renamed CastDoubleToLong to CastDoubleToSsizeT. cbe4770
    Use CastDoubleToSizeT instead of doing a typecast. f0984f5
    Use CastDoubleToSizeT to make sure we avoid invalid values when casting from a double. b561299
    Added CastDoubleToUInt and used it in the coders. 6f23697
    Added CastDoubleToUShort and used it in the coders. 07a9f6c
    Minor readability improvement. 93c7efd
    Removed 32-bit MSYS build. 30cd768
    Stop using windows-latest. bc34a49
    Also target clang64 in the msys2 build. 75752fd
    Removed variable that was only assigned but not used. 84c2b58
    Use HeapOverflowSanityCheckGetSize to check for overflow instead. 6c19acd
    Show a better error message when executing "magick convert" when the project is build with exclusion of the deprecated methods. afad44e
    remove cruft e3a2f7e
    Add another link so hopefully people will first read the security policy documentation before reporting a vulnerability. 8992b76
    Code style changes. 786d8c6
    Allow BC5U as a FOURCC format to read a BC5 compressed image (#8082) 92313f5
    cosmetic a4c963a
    don't close a dash array subpath 741b0ff
    support -define compare:virtual-pixels=true define 07d1ba3
    ebale virtual pixels by default 7154d1e
    you must explicitly set compare:virtual-pixel=false 2e59567
    the values of SSIM and DSSIM were inverted 164f99c
    respect image bounds 21e324b
    Minor optimization. 14d259b
    There is no need to calculate r,g,b twice for lab compatible colorspaces. 25641f0
    possible buffer overflow when reading a PNG raw profile 61b719e
    Code cleanup. e33ec67
    Added missing checks for extent and length. dcafcdc
    Documentation fixes. 2ff77db
    Removed unused ResetMaxMemoryRequest method. 657bb13
    Make sure that calls to SetMaxMemoryRequest are only limited to the value configured in the policy. 4da0331
    Make sure that calls to SetMaxProfileSize are only limited to the value configured in the policy. 212d67c
    Move the MagickMin check to methods that get the value from the policy. f6650d1
    Initialize max_memory_request to unlimited to avoid recursion issues when getting the value from the policy. 1e924cb
    correct for ssim/dssim metric 31d5377
    affine layout is sx, ry, rx, sy, tx, ty 972629c
    export similarity and dissimilarity threshold e607844
    adjust rmse similarity metrics 59ac257
    correct PSNR metric 1afc1e5
    correct PSNR metric in the frequency domain b388380
    correct PSNR similarity 9721181
    correct PSNR metric 05e2316
    correct PSNR metric f82923c
    handle special case of log10(1) 64e6fd6
    Documentation fixes. 4134eb1
    DCP, PAE, and PHASE metrics are not valid in the spatial domain 537cf72
    PAE requires unequal target and reconstruction images 989e11d
    lastest automake/autoconf e02330c
    acknolwedge JXL CFLAGS e89f317
    revert PAE for equal image sizes b9d4ef5
    nomalize MEPP metric 573ed50
    Temporary patch to make it possible to use the development libraw snapshot. 177e561
    revert 2431784
    correct MEPP metric 63fdb71
    Check for _MSC_VER until we can do a proper version check. 75c5056
    Use GetMaxMemoryRequest to set the heic security limit for max_memory_block_size (#8109) 8f04fd0
    Use our own define until we can do a proper version check. ab38e07
    correct MEPP metric af8b716
    purge threading in SimilarityImage() method 4faaf84
    eliminate compiler exception b574087
    Also check if the define is set. 5fce16f
    correct NCC, DPC, and PHASE metrics 912b6a8
    improve exception message for spatial DPC and Phase metrics 5c247d4
    correct NCC metric a5159fb
    correct PHASH metric ed2d974
    ... e28cefe
    correct PHASH metric d9bf3ba
    Formatted document. f3fdd12
    Documentation fixes. 0e6b7fd
    Use ClampToQuantum inside ComplexImages to make sure values are clamped to the quantum for non hdri builds. e08bdcb
    Removed 512 from the default sizes. f62df4f
    Set the maximum number of sizes for icon:auto-resize back to 16 (#8047). e0cfaf2
    warn if PHASH metric is INF 3644bdb
    push a notification for some edge case metrics 67cc338
    push warning for PHASH edge case 0c1e878
    trap on equal size images for PHASH and PAE c0a0fc1
    trap for NCC working with constant color in spatial domain 2489ef6
    eliminate implicit fallthrough cba40e1
    identify metric in warning c55d4d6
    correct RMSE metric in the frequency domain f1d6259
    correct PSNR metric 417dde7
    fix max PSNR define 363a4b0
    set maximum PSNR 6e6fa1d
    move PSNR define to compare.h 30ebdc7
    change PSNR define name 44af979
    max PSNR is quantum range squared 4473074
    not need for fabs() for PSNR distortion 9888d28
    correct PSNR location a74836c
    negate correlation image for PSNR 309956e
    correct Max PSNR distortion 53a2298
    normalize PSNR distortion 1ee9088
    correct PSNR normalization f5c8c61
    Make sure we only return 1 when the docs don't match. 7e3f3ae
    clip MSE when computing PSNR 16f6e0d
    fix PSNR metric c09944c
    don't account for edge cases 95333f3
    convert nan & inf to null for JSON format bbb5192
    set maximum PSNR to 216.3 for 16-bit images a49dbf5
    set PSNR maximum to 120 8a7495a
    use log10() directly rather than macro 31b7df3
    reverse PSRN polarity f039a8e
    correct PSNR metric ea6e8e8
    Also allow bmp files that have a negative height when the compression is set to BI_BITFIELDS (#8130) 97e5cac
    Added extra checks to make sure we don't get stuck in the while loop. 229fa96
    fix -fx option to prevent divide by zero d1fe32a
    fix PSNR metric 587484e
    revert 321e2ee
    replace -nan with null ff187dd
    replace -nan with null e9d20d4
    Added parenthesis to silence warning. ea47cda
    optimize metric threading 51b33a1
    NCC, DPC, PHASE, PHASH SHOULD NOT give an error here for equal size images with subimage-search as the images are not constant color ba6614d
    PHASH should trap for equal size image for subimage-search 3bf4bbe
    Corrected assignment of difference. 40bb4d4
    the metrics NCC, PHASE and DPC will have a perfect match score (similarity value) at 1 dd3d29b
    the metrics NCC, PHASE and DPC will have a perfect match score (similarity value) at 1 3d05c79
    Corrected check. 674630c
    Removed unused file. 39ffbda
    Restored the implementation of GetImageFeatures, GetImagePerceptualHash and GetImageStatistics. e46ee50
    Minor performance improvement of the statistics by avoiding duplicate computations. 55ce945
    Use log2 instead of PerceptibleLog10 when calculating the entropy. 36eb4e6
    Use log10 again instead of PerceptibleLog10. 99e5cbf
    No longer increment the entropy when the value is a NaN. 58d35b7
    Only set the bits that we need to set, this might fix the unsupported blending mode reported in #8061. 05d0ad6
    DPC requires a square image 58e34bb
    DPC and PHASE should error 1) as no spatial equivalent when frequency domain is off and 2) with constant color images 43c2482
    correct AE metric 51d3c03
    cosmetic c282fe0
    Fixed build error. 4a5c86d
    improve exception message 24c1df1
    use reduction rather than critical 498c663
    improve equal-sized image message 34062a2
    Corrected writing the PDF header that contains the version. 345b315
    We should always write the ID in a PDFA file. 8632b6d
    Patches to fix writing PDFA files because /Device[Colorspace] is only allowed together with a color profile. 1684b3e
    Revert incorrect patch. 48ba531
    Corrected offset calculation. b3a8ebc
    default to a depth of 32 45eb799
    Silence warning. 678f718
    Don't use the windows specific implementation of our utility methods on MSYS2. 4cb83da
    restore parallelism when computing simularity b122d25
    The last newline should not be included in the length of the color profile when writing a pdf file. 563c15c
    Corrected patch for MSYS2 build. d01fbcb
    reduction is not supported in OpenMP 2.0 4c17177
    initialize variance f701589
    eliminate compiler warning ef390c3
    correct NCC metric f29fedc
    eliminate compiler error c5d5236
    eliminate compiler warning 5143b04
    don't compute metrix for index channel 402f1d9
    don't compute the index channel statistics 98052a7
    eliminate compiler warning 21ea09d
    Code cleanup. eda6110
    AE is sensitive to fuzz c62c7bc
    check for log10 edge cases 21c6fcf
    add missing include dependency 6a684c6
    don't scale PHASH metric 2a919f9
    latest CSS 4e1af8b
    add xmlns SVG declaration 50a91b5
    scale PHASH to quantum range 7526af4
    adjust similarity metric algorithm e370538
    PHASH similarity is minimum not maximum 8d6d6ce
    don't thread similarity check 86e92e9
    Added missing return. 3863160
    trap for no spatial equivalent d08c8be
    normalize PHASH metric eb441e7
    fix PSNR metric 56bb476
    return correct location for NCC + SSIM metrics 2fce5f1
    should only get a warning for constant color images 7b3f763
    NCC (DPC, PHASE) should only get a warning for constant color images 4ded0a0
    Added missing check for the pixel mask that should be used when reading the dds file (#8146). 0ee0970
    Code cleanup. 8449ac4
    Added missing magick_fallthrough. 2dbd0cc
    correct distortion for subimage search 5097644
    Enabled -Wdeclaration-after-statement in our linux and macos build (#8156) 9085c27
    Silence warning. 96205e4
    Changed argument order. 6a4ded4
    correct NCC metric acf6ddd
    fix AE metric b0e870f
    fix AE metric 4256f87
    fix AE metric cb3ca2e
    nit 707fdb2
    correct AE metric f2e71e3
    correct AE metric ad37814
    correct SSIM metric 80b107d
    correct SSIM metric d120611
    No longer decode a bpg file to a png file (#8159). c3a66fd
    Removed specific check for SignedQuantumFormat because we should not do this (#8149). 8845b61
    add compare private header 7a01d5c
    correct SSIM metric d0b94ec
    correct PHASH metric c012d5a
    PHASH without subimage-search should show a message that it does not work well with constant color images 045f3bb
    correct SSIM metric dea8871
    distortions should always be non-negative 0361572
    RMSE is default metric d7e200e
    correct metric distortion 45d8918
    correct NCC metric 1268246
    correct %[distortion] format 57e0b9c
    correct distortion calculation 53ce42b
    revert 7dc67c3
    correct distortion computation fc2799a
    correct distortion calculation 9e82b1e
    tighten tolerance for matching maximum e333a50
    sanitize DSSIM metric ccd11e9
    correct NCC metric 20537b6
    correct DPC metric 598c3c0
    eliminate compiler exception fd106fd
    correct PHASE metric 040aa53
    correct PHASE metric c72c55f
    threading tweak fbdd6e8
    optimize range finding b3db471
    for DPC/Phase metrics, make image even and square 7097486
    correct SSIM metric afb47b6
    correct SSIM metric b667ea2
    correct SSIM metric eff6ad9
    correct SSIM metric fbaa5c3
    correct MEPP metric e776c60
    rmeove check for near-zero 1ad038c
    correct DPC/Phase metrics eaba123
    correct DPC metric 2714e2f
    correct MSE metric edf3d4a
    natural logarithm, is commonly used in mathematical and statistical applications where exponential relationships are involved 7b6224f
    cosmetic d772e3b
    correct PSNR metric f591498
    correct NCC metric 1f52076
    change in macro name 5e96ec7
    eliminate compile error 4228be8
    correct DPC metric 712eb44
    limit similarity metric to 1.0 6b55d52
    restrict distortion to 0..1 2f483aa
    yikes! reverse max and min 4075818
    Build ImageMagick on Windows with the pre-compiled configure binary dafe2ff
    fix numerical instability for perspective distort 7bffca3
    eleiminate compiler exceptions 2201218
    correct NCC metric 14e80b6
    restore threading in similarity search ba63bce
    cosmetic 248e8df
    Corrected initialization. 530512d
    correct MEPP metric 2f874a0
    correct range finding ed81dca
    fix possible race condition f76c12b
    cosmetic 289897c
    normalize mean error ff1afae
    Also include the installer in the Source archive. 6d418aa
    improve numerical stability for gauss-jordan matrix elimination c8e8062
    Removed file that was added by accident. 8a39c77
    correct MEPP metric 9da0afc
    check for negative values in sqrt() 91b2ecb
    No longer call heif_image_handle_get_context to make sure we always delete it (#8184). 175355f
    cosmetic ed67e14
    correct MSE metric 2f98f7d
    correct fuzz metric de9558d
    code review cleanup c94c096
    eliminate compiler exception ea417ac
    correct MSE metric dc40e94
    optimize threads e85e5ac
    wrong check for pivot array ed8dab9
    Use pre-compiled Configure binary instead. acf7df4
    clamp NCC metric 46e6e89
    cosmetic a06b8b7
    high precision gauss jordon elimination 732d8df
    Build on ubuntu:22.04 because ubuntu:20.04 is no longer supported. bba9115
    respect time policy 5a6f39a
    fine tune PerlMagick unit tests 92639f5
    fix image time-to-live 002f01e
    handle log rotation properly 7a4ee88
    eliminate compiler warning d77e5a5
    correct src composite operator f0a90c8
    No longer install dependencies for the AppImage build from a PPA. a323065
    Corrected settings. cf6be07
    Also install file in the release workflow. 74c5376
    Use apt-get instead of apt. 04609b4
    correct Gauss-Jorfan elimination algorithm 96d6dc4
    correct NCC metric 85ca1c3
    Also enable the _WINDOWS_SUPPORT defines when _WIN32_WINNT is set. 6e6d520
    correct NCC metric 565cbe3
    eliminate compiler warning f5f49bb
    Corrected type of variable. 2f90032
    Correct indentation. 641e60d
    Replace some of the unsafe C runtime functions with secure alternatives on Windows 4a2f932
    Introduce a utf8_close define so we can use _close on Windows. 6d9f9f9
    Added more defines to silence warnings with the Windows build. 9c455c3
    Use double instead of float. 1e73b80
    Use typecast to double instead of using PerceptibleReciprocal. b146838
    Use SOCKET_TYPE where possible. c86b1de
    Added missing typecasts. e345ab7
    Fixed build for when the distributed cache is disabled. 7799cdb
    Replace unsafe C runtime functions with secure alternatives on Windows 4855d62
    Use fopen instead of fopen_utf8. 1aa3e21
    Added missing typecasts. 058a7c1
    Added missing typecasts. 125e912
    Removed define that was only used once. d9858ff
    Use double instead of float because all calls use a double. 965c4ca
    Correct previous build fix. f826820
    Added more missing typecasts. e2c207d
    Corrected variable type. 084856f
    Another fix of the define. caea56e
    Added define for sscanf so we use sscanf_s on Windows. b2894bb
    Use defines in code instead of the start of the file. 681ba67
    Added include to make sure we use the correct version of sscanf on Windows. 5da57b8
    Use strerror_s on Windows instead of strerror. 8a4166c
    Use a define for j0 and j1 so we can use _j0 and _j1 on Windows. 43e89ec
    Added missing include. d7ebd92
    Use GetEnvironmentValue instead of getenv. cc056c9
    Added extra private method that can be used to check if SOURCE_DATE_EPOCH was used to override the time. 93aa620
    Corrected define. 6d67479
    Added missing include. e48dbd2
    Added missing typecasts. ce6b4fe
    Added missing typecasts. 2ca4edc
    Corrected typecast. c59c9fa
    correct NCC metric 349e5ec
    correct DPC metric d21eb6b
    correct PSNR metric b7dade0
    correct DPC metric c59aa30
    Use CopyMagickString instead of strncpy. 5c47897
    rename private safe recipicol and log10 macros 7e5d87f
    Use a custom implementation so we can use sscanf without defining _CRT_SECURE_NO_WARNINGS. cffddd3
    Use MagickSscanf in other locations. 56f54d1
    Use MagickSscanf in other locations. ea11d84
    fix linking exception bd0db0f
    correct AE metric 8a735ac
    correct FUZZ metric b08b969
    correct DSSIM metric 969de51
    Only use the pragma warnings for the Windows build. 8bd9298
    Use MagickSsanf in the coders. ea26044
    Added extra includes for the Windows build. 790832b
    correct SSIM metric c8354a5
    Added StringToFloat so we don't need to add a cast everywhere. 94799b9
    Added missing include. fd944f2
    Added missing call to CastDoubleToSizeT. 984b937
    Added missing include. 2b8e9b4
    Added missing typecasts. 37464bd
    Use float specific methods to avoid a typecast to a double. 642127e
    Fix build error. fefc6fd
    refactor to better distinquish similarity and distortion 0071d3a
    eliminate lint warnings 4bde249
    correct DSSIM metric 7df2f2e
    Added check for other define for the Windows build. ea1b5d6
    Removed disabling a specific warning. 608cb7d
    Removed disabling a warning and added comments for the other warnings that are disabled. b5458b4
    Removed disabling a specific warning. 9b77651
    Silence warnings in the Windows build. 1a01312
    filter image NaNs a024f05
    filter image NaNs bb48cec
    configure git revision c43362d
    correct PHASE metric ffd0b7e
    Build fix for when distributed cache is disabled. 45ac859
    cosmetic 5c006c0
    Correct the initialization. 7f99f95
    adjust distortion metrics for a few PerlMagick unit tests e104d88
    Silence warnings d799258
    fix PerlMagick unit tests 5daab91
    Corrected type of variables and fixed typecasts. 593c622
    Added missing typecasts. 03784e4
    cosmetic c6b6802
    correct PHRASE metric 1356e46
    correct DPC metric 0c79e3b
    add image compression qualtiy to JXR encoder 1123895
    correct label position for concatenated images 155ccfb
    set image type to palette for PNG8 1bbc707
    correct NCC metric 9bf5ede
    correct NCC metric 25ba699
    Removed the check for the _DLL define because we should only check for MAGICKCORE_BUILD_MODULES. d397887
    Silence warning. 2fbaa05
    correct DPC metric e67d78f
    correct NCC metric 94fee9e
    Make it more clear which build is the MSYS2 build. 16bef40
    Truncate the formatted buffer automatically. c0c41c9
    check for signed integer overflow c0d3c58
    Switch back to _vsnprintf_l to avoid strange asserts on Windows. 751b85f
    ImageMagick/ImageMagick#8213 66afdfb
    correct NCC metric e8266f9
    eliminate compiler warning e5bbd8f
    eliminate compiler warning 930f812
    correct FUZZ metric 6822f52
    eliminate compiler warning b072918
    ImageMagick/ImageMagick#8212 a2f738e
    support heic:cicp define 5f98d8a
    support heic:cicp define 9c6fe41
    Use heif_nclx_color_profile_alloc so we can use the defaults from the libheif library. 961bd97
    fix PerlMagick unit test fe2eeea
    optimize SetImageColorMetric() method cb478af
    Corrected fix for failing unit test. b11bced
    fix PerlMagick JNG unit tests e0d17c1
    limit uncompressed PBM images to 70 characters 9b86701
    eliminate compiler warning 8163f2e
    There is no need to mention the branch. 868cfac
    Silence warning that is causing issues in the daily build of PerlMagick. 02014bc
    correct DSSIM metric 33ea0d5
    Silence warning. 8fff9b4
    ImageMagick/ImageMagick#8212 44dfe7d
    check for near zero 93c32f7
    cosmetic efa13d0
    ImageMagick/ImageMagick#8217 b5d1ea2
    Make it clear the return value is not used. cb3c451
    Use JxlEncoderDistanceFromQuality instead of our own implementation (#8223) e5450a6
    Fix possible memory leak. 5d74c13
    Correct out of bounds read of a single byte. 29d8272
    correct FUZZ metric f6b8ed1
    Fixed memory leak when entering StreamImage multiple times. fc3ab08
    use the mean fuzz 9910241
    use variance-style combined fuzz 482b6d4
    adjust space left after a possible reallocation a0bbad6
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qh3h-j545-h8c9 66dc8f5
    Create a copy of JxlEncoderDistanceFromQuality to allow building with older versions of libjxl. a949816
    Use default frame distance when quality is not set. e8782ac
    enhance pixel compare with tolerance to consider all channels a9ffd15
    bump minor version # ca76067
    bump version 52150ae
    correct FUZZ metric 31b5056
    cosmetic 8241921
    correct unit test cbe2eaf
    revert 6a3f8ab
    correct FUZZ metric 7ccbbb3
    Code cleanup. 4f010db
    Improve frame check in the jxl encoder to fix the crash reported in #8218. aa45d81
    correct AE metric 09f2073
    reverse highlighting polarity cd02f3f
    omp.h uses templating; it cannot appear in a C block with c++ compiler ac580db
    Corrected check. c9efb91
    Corrected initialization of the time limit. 6e55836
    return false if not path is not populated 81ea814
    correct DSSIM metric 11c97e2
    correct DSSIM distortion faf863d
    correct DSSIM metric a7c0632
    Added missing typecast. 247ad64
    correct SSIM metric 67a27ff
    initialize image pixels 95b549d
    use same metric for similarity and distortion d57b477
    correct PHASE distortion f6c0c78
    correct SSIM distortion ccaabed
    Corrected typecast. eb35aa4
    Silenced warning. c17e3e6
    Use _getcwd instead of getcwd with the Windows build. 6d97418
    Check for define that is already set with a debug build. 7f17db3
    Silenced warnings. b9bb808
    Added missing typecast. a052247
    correct DPC metric 28ea852
    Removed incorrect typecast. a136ce9
    support DPC & PHASE metrics in the spatial domain 9966c0f
    Removed pragma lib comments from the Magick++ include header file. af968ac
    correct DPC metric eab0545
    add comments describing the metrics deb4026
    correct DPC metric in the spatial domain 8670e4c
    Fixed build error. b9db7a6
    revert 2ca3314
    scale PHASE metric 8b3aaa2
    correct PHASE metric in the spatial domain 88c9d76
    cosmetic 30cc042
    adjust workload factor 554c38f
    near zero becomes zero 425ec3c
    respect alpha channel b56ed10
    account for alpha channel in the frequency domain 2a3b37f
    PHASE metric is (1-SSIM)/2 4b830fc
    cosmetic d07e397
    correct DSSIM distortion a2a4f5f
    Moved scripts to new build folder. 69f25f2
    Cosmetic rename. 5e5ea0b
    frequency methods do not require alpha blending f530431
    no alpha blending for NCC frequency f0db320
    correct distortion for subimage search 9bde76f
    release 3fcd081

comment:3 by Douglas R. Reno, 6 months ago

Priority: normalelevated

This brings several security fixes:

  • Stack Buffer Overflow in image.c (CVE-2025-53101, rated as 7.4 High)
  • Undefined Behavior (function-type-mismatch) in CloneSplayTree (CVE-2025-55160, rated as 6.4 Moderate)
  • [BIGSLEEP-435153105] imagemagick: integer overflows in MNG magnification (CVE-2025-55154, rated as 8.8 High)
  • [BIGSLEEP-435156754] imagemagick: heap-buffer overflow in log colorspace handling (CVE-2025-55005, rated as 5.5 Moderate)
  • [BIGSLEEP-436829309] imagemagick: heap-buffer overflow read in MNG magnification with alpha (CVE-2025-55004, rated as 7.6 High)

comment:4 by Douglas R. Reno, 6 months ago

Resolution: fixed
Status: assignedclosed

Fixed at e5581bf524af7354bcdd1cb18d9f5dabb464e577

SA-12.3-092 issued

Note: See TracTickets for help on using tickets.