CVS commit: pkgsrc/graphics/ruby-RMagick

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Sun Sep  6 14:59:21 UTC 2026

Modified Files:
        pkgsrc/graphics/ruby-RMagick: Makefile distinfo

Log Message:
graphics/ruby-RMagick: update to 7.1.4

7.1.2 (2026-08-30

Bug Fixes

* Fix memory leak in Draw#annotate when a geometry argument raises by
  @OskarEichler in #1850
* Fix Steep self type crash in RVG helper by @OskarEichler in #1851
* Fix use-after-free in Draw#annotate when a callback destroys the image by
  @Watson1978 in #1852
* Fix affine matrix not being restored when Draw#annotate raises by
  @Watson1978 in #1853
* Fix memory leak in Draw#annotate when the geometry copy fails by
  @Watson1978 in #1854

New Contributors

* @OskarEichler made their first contribution in #1850

7.1.3 (2026-08-31)

Bug Fixes

* Fix Magick.limit_resource truncating 64-bit limits on 32-bit platforms by
  @Watson1978 in #1864
* Fix Magick.set_cache_threshold truncating the threshold on 32-bit
  platforms by @Watson1978 in #1865

7.1.4 (2026-09-05)

Important

Four kinds of input that used to be accepted now raise ArgumentError.

Three of them were ways for a string RMagick documents as a value to be read
back as part of an ImageMagick program: an opacity of "1%\nimage Over 0,0
80,80 'secret.png'\n1%", a Draw#pattern name carrying the same payload, and
a Caption property of "@/etc/passwd" arriving in the metadata of an uploaded
image.  ImageMagick executed the injected primitive, or read the named file
and drew its contents into the returned image.  Image#dispatch is the
fourth: a map containing a NUL byte is now rejected rather than sized with
the byte length while ImageMagick fills only what precedes the NUL.

Image#export_pixels_to_str with Magick::LongPixel also returns half as many
bytes on LP64, and Image#import_pixels takes a buffer of that size.  RMagick
reserved sizeof(unsigned long) per element while ImageMagick reads and
writes unsigned int, so the second half of the string was never written and
carried whatever the heap held.  Image#colormap returned uninitialized
memory the same way, as the previous colour of an entry it had just created.

Breaking Changes

* Reject an opacity percentage that is not a plain number from 0% to 100% by
  @Watson1978 in #1867
* Restrict a Draw#pattern name to letters, digits, hyphen, period and
  underscore by @Watson1978 in #1869
* Return LongPixel pixel data as unsigned int, without the uninitialized
  padding Image#export_pixels_to_str used to append by @Watson1978 in #1870
* Reject a Caption property beginning with '@' in Image#polaroid instead of
  reading that file by @Watson1978 in #1871


To generate a diff of this commit:
cvs rdiff -u -r1.210 -r1.211 pkgsrc/graphics/ruby-RMagick/Makefile
cvs rdiff -u -r1.92 -r1.93 pkgsrc/graphics/ruby-RMagick/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/graphics/ruby-RMagick/Makefile
diff -u pkgsrc/graphics/ruby-RMagick/Makefile:1.210 pkgsrc/graphics/ruby-RMagick/Makefile:1.211
--- pkgsrc/graphics/ruby-RMagick/Makefile:1.210 Wed Sep  2 19:02:54 2026
+++ pkgsrc/graphics/ruby-RMagick/Makefile       Sun Sep  6 14:59:20 2026
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.210 2026/09/02 19:02:54 wiz Exp $
+# $NetBSD: Makefile,v 1.211 2026/09/06 14:59:20 taca Exp $
 
-DISTNAME=      rmagick-7.1.1
+DISTNAME=      rmagick-7.1.4
 PKGNAME=       ${RUBY_PKGPREFIX}-${DISTNAME:S/rmagick/RMagick/}
-PKGREVISION=   1
 CATEGORIES=    graphics
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/graphics/ruby-RMagick/distinfo
diff -u pkgsrc/graphics/ruby-RMagick/distinfo:1.92 pkgsrc/graphics/ruby-RMagick/distinfo:1.93
--- pkgsrc/graphics/ruby-RMagick/distinfo:1.92  Tue Aug 11 16:06:51 2026
+++ pkgsrc/graphics/ruby-RMagick/distinfo       Sun Sep  6 14:59:20 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.92 2026/08/11 16:06:51 taca Exp $
+$NetBSD: distinfo,v 1.93 2026/09/06 14:59:20 taca Exp $
 
-BLAKE2s (rmagick-7.1.1.gem) = 28e53b06a3ba06ee269d507d7cc3b994489e5854c5bac253ff5f66963a48b7ce
-SHA512 (rmagick-7.1.1.gem) = 40893ef3323b0abecded10d2d46f42fb75a9fc95d6974cd11d4f680b86c579e4460cdebe15e140b50677c474fe25ac55cc72d3762d435e9f18558590bc45cb0b
-Size (rmagick-7.1.1.gem) = 265728 bytes
+BLAKE2s (rmagick-7.1.4.gem) = 90bbf1272086d79e28e290c439f555b5f3df036d14f6547ad7ff9f1140b562bd
+SHA512 (rmagick-7.1.4.gem) = d903aaecc6e1bfdb07563616e3a5b18dec79501a6055d9016bd8755689157f4ed0eaef94a7285beaa43359140e80d7dac94c55cc34190ce98fa752bbbf56348d
+Size (rmagick-7.1.4.gem) = 267264 bytes