mbox series

[meta-oe,scarthgap,0/1] imagemagick: upgrade 7.1.1-47 -> 7.1.2-15

Message ID 20260330084119.3008435-1-naman.jain@partner.bmw.de
Headers show
Series imagemagick: upgrade 7.1.1-47 -> 7.1.2-15 | expand

Message

Naman Jain March 30, 2026, 8:41 a.m. UTC 
From: Naman Jain <namanj1@kpit.com>

Hi,
 
This patch upgrades ImageMagick from 7.1.1-47 to 7.1.2-15 to address multiple security vulnerabilities.
Do note that there are 50+ open vulnerabilities in current imagemagick version. It include 5+ CVEs with critical score. It will be very challanging to
backport all the CVE fixes.

Reference: https://lists.openembedded.org/g/openembedded-devel/message/125827?p=%2C%2C%2C20%2C0%2C0%2C0%3A%3Acreated%2C%2Cimagemagick%3A+cve%2C20%2C2%2C0%2C118574723
 
Along with the version upgrade, relevant upstream oe-core changes between these versions have been incorporated to maintain alignment and avoid regressions.
 
Key points:
 
Removal of jp2 PACKAGECONFIG
The jp2 option (previously backed by jasper) has been removed upstream and replaced by openjpeg. JPEG2000 functionality remains available via openjpeg, so there is no loss of feature.
 
Addition of 'magick' to update-alternatives
The 'magick' binary is the primary CLI interface in ImageMagick 7. This change ensures it is properly exposed via update-alternatives. This is a packaging fix that applies across ImageMagick 7 versions and avoids missing /usr/bin/magick.
 
PACKAGECONFIG additions (raw, jxl, heic)
These options are added upstream but are not enabled by default, so they do not change existing behavior.
 
All changes are derived from upstream oe-core commits within the upgraded version range and have been verified to build successfully without functional regression.
 
Please let me know if any further clarification is needed.
 
Thanks,
Naman Jain

Naman Jain (1):
  imagemagick: upgrade 7.1.1-47 -> 7.1.2-15

 .../imagemagick/CVE-2025-53014.patch          |  25 ---
 .../imagemagick/CVE-2025-53015.patch          |  51 ------
 .../imagemagick/CVE-2025-53019.patch          |  26 ---
 .../imagemagick/CVE-2025-53101.patch          |  54 ------
 .../imagemagick/CVE-2025-55004.patch          |  65 -------
 .../imagemagick/CVE-2025-55005.patch          |  34 ----
 .../imagemagick/CVE-2025-55154.patch          |  79 ---------
 .../imagemagick/CVE-2025-55160.patch          | 159 ------------------
 .../imagemagick/CVE-2025-55212.patch          |  29 ----
 .../imagemagick/CVE-2025-57803.patch          |  60 -------
 .../imagemagick/CVE-2025-57807.patch          |  45 -----
 .../imagemagick/CVE-2025-62171.patch          |  26 ---
 .../imagemagick/CVE-2025-65955.patch          |  25 ---
 .../imagemagick/CVE-2025-66628.patch          |  27 ---
 ...agick_7.1.1.bb => imagemagick_7.1.2-15.bb} |  39 ++---
 15 files changed, 15 insertions(+), 729 deletions(-)
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-53014.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-53015.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-53019.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-53101.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-55004.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-55005.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-55154.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-55160.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-55212.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-57803.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-57807.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-62171.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-65955.patch
 delete mode 100644 meta-oe/recipes-support/imagemagick/imagemagick/CVE-2025-66628.patch
 rename meta-oe/recipes-support/imagemagick/{imagemagick_7.1.1.bb => imagemagick_7.1.2-15.bb} (94%)