* [ptxdist] [PATCH] sdl2-image: Version bump. 2.8.8 -> 2.8.12
@ 2026-08-19 18:03 Christian Melki
2026-09-04 6:53 ` [ptxdist] [APPLIED] " Michael Olbrich
0 siblings, 1 reply; 2+ messages in thread
From: Christian Melki @ 2026-08-19 18:03 UTC (permalink / raw)
To: ptxdist
https://github.com/libsdl-org/SDL_image/releases/tag/release-2.8.10
https://github.com/libsdl-org/SDL_image/releases/tag/release-2.8.12
Plugs CVE:
CVE-2026-35444: Fixed out of bounds read in XCF image loader
Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
rules/sdl2-image.make | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/rules/sdl2-image.make b/rules/sdl2-image.make
index 84a0a1f44..156fc228b 100644
--- a/rules/sdl2-image.make
+++ b/rules/sdl2-image.make
@@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_SDL2_IMAGE) += sdl2-image
#
# Paths and names
#
-SDL2_IMAGE_VERSION := 2.8.8
-SDL2_IMAGE_SHA256 := 2213b56fdaff2220d0e38c8e420cbe1a83c87374190cba8c70af2156097ce30a
+SDL2_IMAGE_VERSION := 2.8.12
+SDL2_IMAGE_SHA256 := 393f5efb50536ec13ca4f4affb69cc9966d3c3f969e6c5e701faddf9f9785381
SDL2_IMAGE := SDL2_image-$(SDL2_IMAGE_VERSION)
SDL2_IMAGE_SUFFIX := tar.gz
SDL2_IMAGE_URL := https://github.com/libsdl-org/SDL_image/releases/download/release-$(SDL2_IMAGE_VERSION)/$(SDL2_IMAGE).$(SDL2_IMAGE_SUFFIX)
--
2.43.0
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [ptxdist] [APPLIED] sdl2-image: Version bump. 2.8.8 -> 2.8.12
2026-08-19 18:03 [ptxdist] [PATCH] sdl2-image: Version bump. 2.8.8 -> 2.8.12 Christian Melki
@ 2026-09-04 6:53 ` Michael Olbrich
0 siblings, 0 replies; 2+ messages in thread
From: Michael Olbrich @ 2026-09-04 6:53 UTC (permalink / raw)
To: ptxdist; +Cc: Christian Melki
Thanks, applied as 9c0b158e4fa4ed82a0677e38e372202879303cf7.
Michael
[sent from post-receive hook]
On Fri, 04 Sep 2026 08:53:02 +0200, Christian Melki <christian.melki@t2data.com> wrote:
> https://github.com/libsdl-org/SDL_image/releases/tag/release-2.8.10
> https://github.com/libsdl-org/SDL_image/releases/tag/release-2.8.12
>
> Plugs CVE:
> CVE-2026-35444: Fixed out of bounds read in XCF image loader
>
> Signed-off-by: Christian Melki <christian.melki@t2data.com>
> Message-Id: <20260819180301.3409314-1-christian.melki@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
>
> diff --git a/rules/sdl2-image.make b/rules/sdl2-image.make
> index 84a0a1f4444d..156fc228bca1 100644
> --- a/rules/sdl2-image.make
> +++ b/rules/sdl2-image.make
> @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_SDL2_IMAGE) += sdl2-image
> #
> # Paths and names
> #
> -SDL2_IMAGE_VERSION := 2.8.8
> -SDL2_IMAGE_SHA256 := 2213b56fdaff2220d0e38c8e420cbe1a83c87374190cba8c70af2156097ce30a
> +SDL2_IMAGE_VERSION := 2.8.12
> +SDL2_IMAGE_SHA256 := 393f5efb50536ec13ca4f4affb69cc9966d3c3f969e6c5e701faddf9f9785381
> SDL2_IMAGE := SDL2_image-$(SDL2_IMAGE_VERSION)
> SDL2_IMAGE_SUFFIX := tar.gz
> SDL2_IMAGE_URL := https://github.com/libsdl-org/SDL_image/releases/download/release-$(SDL2_IMAGE_VERSION)/$(SDL2_IMAGE).$(SDL2_IMAGE_SUFFIX)
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2026-09-04 6:53 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-19 18:03 [ptxdist] [PATCH] sdl2-image: Version bump. 2.8.8 -> 2.8.12 Christian Melki
2026-09-04 6:53 ` [ptxdist] [APPLIED] " Michael Olbrich
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox