Magick.NET 14.10.1
·
73 commits
to main
since this release
Related changes in ImageMagick since the last release of Magick.NET:
- Only allow setting the data_precision to values other then 16 and 12 when quality is lossless (>= 100) in the jpeg coder.
- Revert patches to solve ImageMagick/ImageMagick#8484 and ImageMagick/ImageMagick#8506.
- Magick's failure to limit the depth of SVG file reads caused a DoS attack (GHSA-p27m-hp98-6637)
- Magick's failure to limit MVG mutual references forming a loop (GHSA-7rvh-xqp3-pr8j)
- Converting a malicious MVG file to SVG caused an integer overflow (GHSA-hrh7-j8q2-4qcw)
Library updates:
- ImageMagick 7.1.2-12 (2025-12-29)
- libjpeg-turbo 3.1.3 (2025-12-10)
- liblzma 5.8.2 (2025-12-17)
- libpng 1.6.53 (2025-12-05)
Full Changelog: 14.10.0...14.10.1