Thanks, applied as 9c0b158e4fa4ed82a0677e38e372202879303cf7. Michael
[sent from post-receive hook] On Fri, 04 Sep 2026 08:53:02 +0200, Christian Melki <[email protected]> wrote: > https://github.com/libsdl-org/SDL_image/releases/tag/release-2.8.10 > https://github.com/libsdl-org/SDL_image/releases/tag/release-2.8.12 > > Plugs CVE: > CVE-2026-35444: Fixed out of bounds read in XCF image loader > > Signed-off-by: Christian Melki <[email protected]> > Message-Id: <[email protected]> > Signed-off-by: Michael Olbrich <[email protected]> > > diff --git a/rules/sdl2-image.make b/rules/sdl2-image.make > index 84a0a1f4444d..156fc228bca1 100644 > --- a/rules/sdl2-image.make > +++ b/rules/sdl2-image.make > @@ -14,8 +14,8 @@ PACKAGES-$(PTXCONF_SDL2_IMAGE) += sdl2-image > # > # Paths and names > # > -SDL2_IMAGE_VERSION := 2.8.8 > -SDL2_IMAGE_SHA256 := > 2213b56fdaff2220d0e38c8e420cbe1a83c87374190cba8c70af2156097ce30a > +SDL2_IMAGE_VERSION := 2.8.12 > +SDL2_IMAGE_SHA256 := > 393f5efb50536ec13ca4f4affb69cc9966d3c3f969e6c5e701faddf9f9785381 > SDL2_IMAGE := SDL2_image-$(SDL2_IMAGE_VERSION) > SDL2_IMAGE_SUFFIX := tar.gz > SDL2_IMAGE_URL := > https://github.com/libsdl-org/SDL_image/releases/download/release-$(SDL2_IMAGE_VERSION)/$(SDL2_IMAGE).$(SDL2_IMAGE_SUFFIX)
