Files
buildroot/package/sdl2_image/sdl2_image.mk
Peter Korsgaard 7769710087 package/sdl2_image: security bump to version 2.8.12
Fixes the following security issue (in 2.8.10):

CVE-2026-35444: Heap buffer overflow READ via unchecked colormap index in
XCF loader

https://github.com/libsdl-org/SDL_image/security/advisories/GHSA-gq8w-x74c-h6p7

In addition, 2.8.12 includes a number of memory related bugfixes:

Fixed memory overflow with corrupt LBM image
Fixed crash when decoding an invalid XCF image
Fixed out of bound read in GIF decoder

Update hash of license file for change of copyright year with:
281b4ebcb0

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
2026-05-31 08:06:04 +02:00

61 lines
1.4 KiB
Makefile

################################################################################
#
# sdl2_image
#
################################################################################
SDL2_IMAGE_VERSION = 2.8.12
SDL2_IMAGE_SOURCE = SDL2_image-$(SDL2_IMAGE_VERSION).tar.gz
SDL2_IMAGE_SITE = http://www.libsdl.org/projects/SDL_image/release
SDL2_IMAGE_INSTALL_STAGING = YES
SDL2_IMAGE_LICENSE = Zlib
SDL2_IMAGE_LICENSE_FILES = LICENSE.txt
SDL2_IMAGE_CPE_ID_VENDOR = libsdl
SDL2_IMAGE_CPE_ID_PRODUCT = sdl_image
# Unconditionally enable support for image formats that don't require
# any dependency.
SDL2_IMAGE_CONF_OPTS = \
--disable-sdltest \
--enable-bmp \
--enable-gif \
--enable-lbm \
--enable-pcx \
--enable-pnm \
--enable-tga \
--enable-xcf \
--enable-xpm \
--enable-xv
SDL2_IMAGE_DEPENDENCIES = sdl2 host-pkgconf
ifeq ($(BR2_PACKAGE_JPEG),y)
SDL2_IMAGE_CONF_OPTS += --enable-jpg
SDL2_IMAGE_DEPENDENCIES += jpeg
else
SDL2_IMAGE_CONF_OPTS += --disable-jpg
endif
ifeq ($(BR2_PACKAGE_LIBPNG),y)
SDL2_IMAGE_CONF_OPTS += --enable-png
SDL2_IMAGE_DEPENDENCIES += libpng
else
SDL2_IMAGE_CONF_OPTS += --disable-png
endif
ifeq ($(BR2_PACKAGE_TIFF),y)
SDL2_IMAGE_CONF_OPTS += --enable-tif
SDL2_IMAGE_DEPENDENCIES += tiff
else
SDL2_IMAGE_CONF_OPTS += --disable-tif
endif
ifeq ($(BR2_PACKAGE_WEBP),y)
SDL2_IMAGE_CONF_OPTS += --enable-webp
SDL2_IMAGE_DEPENDENCIES += webp
else
SDL2_IMAGE_CONF_OPTS += --disable-webp
endif
$(eval $(autotools-package))