Hi Bob, On Sun, Jul 5, 2026 at 11:13 PM Bob Friesenhahn <[email protected]> wrote: > I am not sure what CVE-2026-13606 is specifically about. However, there are > two recent GraphicsMagick security fixes for coders/pcd.c: [...] > It is a shame that so much effort is needed for an extinct format that hardly > anyone uses any more. I heard, but not investigated myself, that some entities release CVE ids without enough information about what the correct fix is. :( My question is, is there any possibility that the mentioned 'library symbol remapping' multiple times has a chance to break other libraries or binaries? It seems the following library symbols are now missing in the 1.3.48 release: DCM_SetRescaling@Base, GetColorInfo@Base, GetColorInfoArray@Base, InsertRowHDU@Base, MagickReallocStd@Base, WriteBlobStringEOL@Base and WriteBlobStringWithEOL@Base. I know that most library symbols are used by GM itself, just want to be sure.
Thanks, Laszlo/GCS
