Skip to contentSkip to conversation

package/sdl3_image: security bump to version 3.4.6

PATCH Applied Michael Fischer 2 participants 3 messages Sep 8 – Oct 2

lore
Share & tools
lore

Michael Fischer

author
#0 lore raw

PATCH 1/1 package/sdl3_image: security bump to version 3.4.6

3.1.1 was a preview release. Among the changes since, it fixes the XCF loader issue reported as CVE-2026-35444

The LICENSE.txt hash changes because the copyright year was updated upstream. The license itself is unchanged (Zlib).

Signed-off-by Michael Fischer <[email protected]>
---
 package/sdl3_image/sdl3_image.hash | 4 ++--
 package/sdl3_image/sdl3_image.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)
package/sdl3_image/sdl3_image.hash +2 -2
index 83f5e7eaf1..e0eb2d2cc8 100644
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  d5685f220d5ae99439d710d808d8c478c6ccfaac539876929239b875a6723792  SDL3_image-3.1.1.tar.gz
-sha256  7826eca0a0f7e591f38dd844e207a200aac81a59b20d8a30c3af8c6282af13e6  LICENSE.txt
+sha256  d2e4637ae700f72e5196b8fbd749850ed2e5e1e09c5a5be8d06ff55aaccf3b01  SDL3_image-3.4.6.tar.gz
+sha256  e36997fe492c48e7ed873065cc3a694f38e8189a328d3709099ffdc9a8843f4c  LICENSE.txt
package/sdl3_image/sdl3_image.mk +1 -1
index 7832d38fc6..c8802a6bed 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SDL3_IMAGE_VERSION = 3.1.1
+SDL3_IMAGE_VERSION = 3.4.6
 SDL3_IMAGE_SITE = https://www.libsdl.org/projects/SDL_image/release
 SDL3_IMAGE_SOURCE = SDL3_image-$(SDL3_IMAGE_VERSION).tar.gz
 SDL3_IMAGE_LICENSE = Zlib
Signature · 6 lines
2.43.0

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot
#1 lore raw
Quoted 7 lines · Michael Fischer

3.1.1 was a preview release. Among the changes since, it fixes the XCF loader issue reported as CVE-2026-35444

The LICENSE.txt hash changes because the copyright year was updated upstream. The license itself is unchanged (Zlib).

Signed-off-by Michael Fischer <[email protected]>

Applied to master, thanks.
_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot

Applied
#2 lore raw
In reply to Michael Fischer

In reply of:

Quoted 7 lines

3.1.1 was a preview release. Among the changes since, it fixes the XCF loader issue reported as CVE-2026-35444

The LICENSE.txt hash changes because the copyright year was updated upstream. The license itself is unchanged (Zlib).

Signed-off-by Michael Fischer <[email protected]>

Applied to 2026.08.x. Thanks

Quoted 20 lines
---
 package/sdl3_image/sdl3_image.hash | 4 ++--
 package/sdl3_image/sdl3_image.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)
package/sdl3_image/sdl3_image.hash +2 -2
index 83f5e7eaf1..e0eb2d2cc8 100644
@@ -1,3 +1,3 @@
 # Locally calculated
-sha256  d5685f220d5ae99439d710d808d8c478c6ccfaac539876929239b875a6723792  SDL3_image-3.1.1.tar.gz
-sha256  7826eca0a0f7e591f38dd844e207a200aac81a59b20d8a30c3af8c6282af13e6  LICENSE.txt
+sha256  d2e4637ae700f72e5196b8fbd749850ed2e5e1e09c5a5be8d06ff55aaccf3b01  SDL3_image-3.4.6.tar.gz
+sha256  e36997fe492c48e7ed873065cc3a694f38e8189a328d3709099ffdc9a8843f4c  LICENSE.txt
package/sdl3_image/sdl3_image.mk +0 -0
index 7832d38fc6..c8802a6bed 100644

package/sdl3_image/sdl3_image.mk line 10

Quoted 8 lines
package/sdl3_image/sdl3_image.mk +1 -1
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-SDL3_IMAGE_VERSION = 3.1.1
+SDL3_IMAGE_VERSION = 3.4.6
 SDL3_IMAGE_SITE = https://www.libsdl.org/projects/SDL_image/release
 SDL3_IMAGE_SOURCE = SDL3_image-$(SDL3_IMAGE_VERSION).tar.gz
 SDL3_IMAGE_LICENSE = Zlib

_______________________________________________
buildroot mailing list
[email protected]
https://lists.buildroot.org/mailman/listinfo/buildroot