Bump Magick.NET-Q8-AnyCPU from 13.10.0 to 15.0.0 by dependabot[bot] · Pull Request #278 · BrandonPotter/GoogleAuthenticator

dependabot · 2026-11-01T19:46:58Z

Updated Magick.NET-Q8-AnyCPU from 13.10.0 to 15.0.0.

Release notes

Sourced from Magick.NET-Q8-AnyCPU's releases.

15.0.0

Breaking changes in Magick.NET:

Switch from net8.0 to net10.0
Switched from net462 to net47 in the Magick.NET.SystemDrawing and Magick.NET.SystemWindowsMedia
Switch from where TQuantumType : struct, IConvertible to where TQuantumType : unmanaged
Removed support for x86_64 (Intel) macOS builds
IMagickImage:
- Removed:
  - Clone(IMagickGeometry geometry)
  - Clone(uint width, uint height)
  - Clone(int x, int y, uint width, uint height)
  - InverseFloodFill(QuantumType alpha, int x, int y)
  - InverseFloodFill(IMagickColor<QuantumType> color, int x, int y)
  - InverseFloodFill(IMagickImage<QuantumType> image, int x, int y)
- No longer return null when the native call of PerceptualHash returns zero but throw an exception instead
ColorProfile:
- Removed:
  - ColorProfile(string name, byte[] data)
- Moved color profiles to ColorProfiles
Renamed AlphaOption to AlphaAction
Renamed OrientationType to Orientation
Renamed FillRule.Nonzero to FillRule.NonZero
Removed ExifParts
Reordered names alphabetically in MagickFormat

Changes in Magick.NET:

Make sure ImageMagick exceptions are thrown in the asynchronous methods (#2097)

Related changes in ImageMagick since the last release of Magick.NET:

Memory leak when parsing crafted XMP profile (GHSA-5jf2-9gcp-q234)
Incomplete fix of CVE-2026-34238 for 32-bit systems (GHSA-vm77-q83h-5fhg)
Memory Leak when hitting depth limit while parsing xml (GHSA-8ghq-p369-g395)
Memory Leak in MAT decoder in an error path (GHSA-83w9-w85j-h9jc)
Stack Buffer Over-Write when reading bzip2 compressed images (GHSA-pwpf-8799-94cj)
Heap Buffer Over-Write in MGN decoder on 32-bit systems (GHSA-j2rp-5r6m-f7x8)

Library updates:

ImageMagick 7.1.2-33 (2026-10-10)
openexr 3.5.2 (2026-10-03)
harfbuzz 14.6.0 (2026-10-05)
libheif 1.23.6 (2026-10-05)
libpng 1.6.59 (2026-09-28)

Full Changelog: dlemstra/Magick.NET@14.17.2...15.0.0

14.17.2

Related changes in ImageMagick since the last release of Magick.NET:

Fixed issue with CompositeOperator.Multiply and other composite operations (#2092)
Infinite Loop when reading a crafted XMP profile (GHSA-9p7q-63hw-mcr4)
Denial of service in ASE decoder because of missing security checks (GHSA-gwj6-pm7x-3r63)
Infinite Loop in PSD decoder on 32-bit systems (GHSA-g6p6-3ggg-3w7j)
Policy Bypass in delegate symlink cleanup due to missing check (GHSA-54hm-vrmh-75qj)
Infinite Loop in bzip2 compressed images (GHSA-m9c7-gf3j-hx6h)
Heap Buffer Over-Write in EXR decoder (GHSA-54rx-5x9g-g465)

Library updates:

ImageMagick 7.1.2-32 (2026-09-27)
aom 3.15.1 (2026-09-22)
cairo 1.18.6 (2026-09-20)
libde265 1.1.3 (2026-09-14)
openexr 3.5.1 (2026-09-26)
fribidi 1.0.17 (2026-09-20)
harfbuzz 14.5.0 (2026-09-20)
libheif 1.23.5 (2026-09-21)
liblzma 5.8.4 (2026-09-09)
openjph 0.32.0 (2026-09-17)
libxml2 2.15.4 (2026-09-01)
zstd 1.5.7 (2025-02-19)

Full Changelog: dlemstra/Magick.NET@14.17.1...14.17.2

14.17.1

What's Changed

Check if an exception was thrown to prevent a deadlock when reading the image asynchronous (#2084)

Full Changelog: dlemstra/Magick.NET@14.17.0...14.17.1

14.17.0

What's Changed

Make sure that ReadAsync and WriteAsync throw an OperationCanceledException when the task was canceled (#2066)
Fixed decoding of yuv422 tiff (#2074)
Added JFIF as a supported extension (##2075)
Report the correct error when decoding an invalid WebP file (#2076)
Make sure we clear the collection before reading in the ReadAsync and PingAsync methods (#2077)
Make sure that WriteAsync uses a stream that is both readable and writable when reading from a file path (#2081)
Fixed cancelling MagickImage.ReadAsync crashes the process with an access violation (14.16.0, 14.15.0) (#2084)

Related changes in ImageMagick since the last release of Magick.NET:

Added initial support for the aseprite format (Maybe add Aseprite file format support? ImageMagick/ImageMagick#8783)
Phase similarity now matches Fred's phase script
Amiga Workbench .info coder (image/x-amiga-icon) (Amiga Workbench .info coder (image/x-amiga-icon) ImageMagick/ImageMagick#8606)
Add c2pa coder framework
Stack Overflown CALS decoder due to missing depth check (GHSA-wxw6-98rj-hjfr)
Policy Bypass in MAT decoder when reading highly compressed data (GHSA-3j4w-pvxj-fpjc)
Denial of service with crafted XMP profile (GHSA-27m9-54jx-fgvq)
Policy Bypass in CUT encoder (GHSA-r868-pmwh-fv2c)
Invalid Memory Free in MVG decoder (GHSA-6xf5-c3jx-rp39)
Code Injection in the postscript coders (GHSA-5rg6-j44q-q892)
Policy Bypass when using coder as the domain (GHSA-vcjj-32hg-qpx5)
Denial of service possible when parsing an XMP profile (GHSA-v45j-x8p4-3mh4)
Unclosed file pointer in magick script (GHSA-2w4h-697j-4vrm)
Denial of service in MVG decoder (GHSA-qr53-hc3p-fc62)

Library updates:

ImageMagick 7.1.2-31 (2026-09-03)
aom 3.15.0 (2026-08-25)
openexr 3.4.15 (2026-08-22)
libffi 3.8.0 (2026-08-09)
fontconfig 2.18.3 (2026-08-06)
gdk-pixbuf 2.44.8 (2026-08-12)
harfbuzz 14.4.0 (2026-08-26)
libheif 1.23.2 (2026-08-25)
imath 3.2.3 (2026-08-20)
openjph 0.31.0 (2026-07-27)

Full Changelog: dlemstra/Magick.NET@14.16.0...14.17.0

14.16.0

What's Changed

Fixed stackoverflow when using the library in IIS (#2049)
Added support for reading the XMP profile when pinging a raw image (#2052)
Added Version to MagickFormatInfo.
Fixed thread pool starvation in AsyncStreamWrapper causing concurrent ReadAsync/WriteAsync to stall (#2056)
Fixed issue where ImportIndexedPixels would always use a GrayScale colorspace (#2057)

Related changes in ImageMagick since the last release of Magick.NET:

Corrected IsPaletteImage check.
Fix memory leak in ASHLAR coder when action fails (Fix memory leak in ASHLAR coder when action fails ImageMagick/ImageMagick#8865)
Changed spatial PHASE algorithm
Fixes for PTIF writer to re-enable default creation of pyramid levels (Fixes for PTIF writer to re-enable default creation of pyramid levels ImageMagick/ImageMagick#8884)
Set the page values when reading the x and y offset in a tga file (Round-trip PCX and TGA (X,Y) offsets. ImageMagick/ImageMagick#8847)

Library updates:

ImageMagick 7.1.2-29 (2026-07-27)
libffi 3.7.1 (2026-07-10)
fontconfig 2.18.2 (2026-07-09)
libjpeg-turbo 3.2.0 (2025-06-30)
libraqm 0.11.0 (2026-07-23)
libraw 0.22.2 (2026-07-16)

Full Changelog: dlemstra/Magick.NET@14.15.0...14.16.0

14.15.0

What's Changed

Add PingAsync to MagickImage and MagickImageCollection (#2032).
Added ImportIndexedPixels to MagickImage (#2040)

Related changes in ImageMagick since the last release of Magick.NET:

Stack Overflow in MVG decoder due to missing depth check (GHSA-mx48-2qq3-23hf)
Heap Buffer Overflow in ImageMagick MVG decoder (GHSA-wx47-rm3x-jx6p)
Policy Bypass due to an incomplete fix of CVE-2026-49219 (GHSA-56m6-8q75-f2rw)
Infinite Loop in connected-components when providing invalid arguments (GHSA-qhmf-7fc4-8q3h)
Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments (GHSA-c4v7-w88g-m6c4)
Policy Bypass in concatenate operation due to missing checks (GHSA-82mp-vp5c-9pf7)
Use-After-Free in crafted 8BIM when identifying an image (GHSA-ff5c-8x9r-8qcw)
Information Disclosure in MNG decoder because allocated memory is left unchanged (GHSA-8g53-9m3c-69xg)
Heap Buffer Over-Read in XCF decoder due to integer conversion overflow (GHSA-pjxj-pchx-4c3m)
Heap Buffer Over-Write in morphology operation when an invalid kernel is provided (GHSA-f5m7-cqgw-8hm7)
Heap Buffer Over-Read in BGR decoder due to mising end-of-file check (GHSA-7rgw-xg25-prjm)
Heap Buffer Over-Write in fx operation (GHSA-422r-8c97-xcg4)
Integer Overflow in JNX decoder causes heap buffer over-write when processing extremely large files on 32-bit builds (GHSA-h22j-f9xw-xjjm)

Library updates:

ImageMagick 7.1.2-27 (2026-07-05)
libde265 1.1.1 (2026-06-03)
openexr 3.4.13 (2026-06-19)
libffi 3.6.0 (2026-06-20)
fontconfig 2.18.1 (2026-06-02)
gdk-pixbuf 2.44.7 (2026-06-27)
harfbuzz 14.2.1 (2026-06-02)
libheif 1.23.1 (2026-06-26)
libjxl 0.12.0 (2026-07-01)
openjph 0.30.1 (2026-06-22)
libtiff 4.7.2 (2026-06-26)

Full Changelog: dlemstra/Magick.NET@14.14.0...14.15.0

14.14.0

What's Changed

Renamed ExifParts to ExifIfds and renamed ExifProfile.Parts to ExifProfile.AllowedIfds and mark the old names as obsolete.
Store the exif ifd in the ExifTag to make prevent marking a tag as duplicate when it is found in another ifd (#2017)
Fixed Regression: Clip() doesn't take the correct bounding box (#2019)
Fixed Regression: ColorType is no longer persisted (#2020)
Fixed Native DLLs (Magick.Native-Q16-*.dll) appear at project root in Solution Explorer on .NET Framework 4.8 (#2029)

Related changes in ImageMagick since the last release of Magick.NET:

Heap Buffer Underwrite in Floyd-Steinberg depth dithering (GHSA-2hhq-c99x-492r)
Stack Overflow in MVG decoder (GHSA-h36c-3666-h489)
Infinite Loop in subimage-search with crafted image (GHSA-5v62-8fq6-cp9m)
Policy Bypass in DCM decoder could result in image with invalid dimensions (GHSA-8pj9-6897-74xc)
Policy Bypass can read disallowed files (GHSA-xcjm-wqff-m669)
Heap Buffer Over-Write in MAT decoder on 32-bit systems (GHSA-4v89-6mgq-6rgc)
Policy Bypass can trigger out-of-Memory condition (GHSA-q62c-h75r-2xhc)
Heap Buffer Over-Write in ICON decoder due to incorrect loop (GHSA-g22q-f7gc-5jhr)
Use-After-Free when allocation in CheckPrimitiveExtent fails (GHSA-px7q-ggqj-hcf2)
Null Pointer Dereference in distort operation when passing incorrect arguments (GHSA-p9rq-q46c-g4x6)
Memory Leak in wand option parser when providing invalid arguments (GHSA-j989-f892-2335)
Heap Buffer Over-Write in SF3 encoder when writing multi-frame image (GHSA-44cp-c3ww-9rv5)

Library updates:

ImageMagick 7.1.2-25 (2026-06-04)
aom 3.14.1 (2026-05-22)
libde265 1.1.0 (2026-05-26)
openexr 3.4.12 (2026-05-25)
libheif 1.23.0 (2026-05-29)

Full Changelog: dlemstra/Magick.NET@14.13.1...14.14.0

14.13.1

What's Changed

Fixed loading of animated AVIF image as MagickImageCollection (#2000)
Fixed determining the number of frames when reading animated AVIF images (#2005)
Fixed loaded of indexed color PSD file (#2007)
Another fix when reading JPEG compressed TIFF files. (#2016)

Related changes in ImageMagick since the last release of Magick.NET:

Stack overflow in fx operation (GHSA-rcr6-g7jc-f57g)
Heap Buffer Over-Write of a single byte in the JP2 encoder (GHSA-533m-3wf6-c33v)
Use-After-Free in MSL decoder (GHSA-5r4x-w6p5-222q)
Infinite Loop in the MIFF decoder can lead to CPU exhaustion (GHSA-7gg8-qqx7-92g5)
Heap Buffer Over-Write in IPL decoder when reading multiple images of different dimensions (GHSA-36wm-hprc-mcf5)
Heap Buffer Over-Write in MIFF encoder when using LZMA compression (GHSA-jcqp-6r6f-3mfx)

Library updates:

ImageMagick 7.1.2-23 (2026-05-17)
aom 3.14.0 (2026-05-12)
openexr 3.4.11 (2026-04-30)
libhwy 1.4.0 (2026-04-23)
lcms 2.19.1 (2026-05-06)
openjph 0.27.3 (2026-05-14)

Full Changelog: dlemstra/Magick.NET@14.13.0...14.13.1

14.13.0

What's Changed

Added PixelDifferenceCount to ErrorMetric.

Related changes in ImageMagick since the last release of Magick.NET:

Corrected the patch that was made earlier to fix reading JPEG compressed TIFF images (#1993)
Call CloseBlob on the correct image to prevent the blob from remaining open (#1997)

Library updates:

ImageMagick 7.1.2-21 (2026-04-21)
harfbuzz 14.2.0 (2026-04-20)
libpng 1.6.58 (2026-04-15)
libraqm 0.10.5 (2026-04-11)
libraw 0.22.1 (2026-04-06)
libxml2 2.15.3 (2026-04-15)
openexr 3.4.9 (2026-04-17)
openjph 0.27.0 (2026-04-14)

Full Changelog: dlemstra/Magick.NET@14.12.0...14.13.0

14.12.0

What's Changed

Added FixByteOrder to the DcmReadDefines (#1976)
Added IconWriteDefines.

Related changes in ImageMagick since the last release of Magick.NET:

Correct bug in Composite when using CopyAlpha (#1985)
Fixed incorrect orientation of JPEG compressed TIFF images (#1991)
Heap-Buffer-Overflow write of single zero byte when parsing xml (GHSA-cr67-pvmx-2pp2)
Stack Overflow in DestroyXMLTree (GHSA-fwvm-ggf6-2p4x)
Out-of-Bounds read in sample operation (GHSA-pcvx-ph33-r5vv)
Stack Overflow via Recursive FX Expression Parsing (GHSA-f4qm-vj5j-9xpw)
Heap Buffer Overflow in ImageMagick MVG decoder (GHSA-x9h5-r9v2-vcww)
Heap overflow caused by integer overflow/wraparound in viff encoder on 32-bit builds (GHSA-v67w-737x-v2c9)
Stack-buffer-overflow in MNG encoder with oversized pallete (GHSA-98cp-rj9f-6v5g)
Integer overflow in despeckle operation causes heap buffer overflow on 32-bit builds (GHSA-26qp-ffjh-2x4v)
Off-by-One in MSL decoder could result in crash (GHSA-5xg3-585r-9jh5)
Heap buffer overflow when encoding JXL image with a 16-bit float (GHSA-jvgr-9ph5-m8v4)
Heap-use-after-free via XMP profile could result in a crash when printing the values (GHSA-r83h-crwp-3vm7)
Heap buffer overflow (WRITE) in the YAML and JSON encoders (GHSA-5592-p365-24xh)
Heap out-of-bounds write in JP2 encoder (GHSA-pwg5-6jfc-crvh)

Library updates:

ImageMagick 7.1.2-19 (2026-04-12)
aom 3.13.3 (2026-04-02)
openexr 3.4.9 (2026-04-03)
freetype 2.14.3 (2026-03-22)
gdk-pixbuf 2.44.6 (2026-03-31)
harfbuzz 14.0.0 (2026-04-01)
liblzma 5.8.3 (2026-04-31)
libpng 1.6.56 (2026-03-25)

Full Changelog: dlemstra/Magick.NET@14.11.1...14.12.0

14.11.1

Related changes in ImageMagick since the last release of Magick.NET:

Stack-buffer-overflow WRITE in InterpretImageFilename due to overflow (GHSA-8793-7xv6-82cf)

Library updates:

ImageMagick 7.1.2-18 (2026-03-23)
aom 3.13.2 (2026-03-19)
openexr 3.4.7 (2026-03-15)
harfbuzz 13.2.1 (2026-03-19)

Full Changelog: dlemstra/Magick.NET@14.11.0...14.11.1

14.11.0

What's Changed

Added DcmReadDefines.

Related changes in ImageMagick since the last release of Magick.NET:

Access mode change for files created from 0666 to 0600 (Access mode change for files created from 0666 to 0600 ImageMagick/ImageMagick#8609)
Heap-buffer-overflow in NewXMLTree could result in crash (GHSA-gc62-2v5p-qpmp)

Library updates:

ImageMagick 7.1.2-17 (2026-03-16)
openexr 3.4.6 (2026-03-01)
freetype 2.14.2 (2026-03-01)
harfbuzz 13.0.1 (2026-03-07)
libxml2 2.15.2 (2026-03-03)

Full Changelog: dlemstra/Magick.NET@14.10.4...14.11.0

14.10.4

Related changes in ImageMagick since the last release of Magick.NET:

Corrected DCX conversion (#1965)
Heap use-after-free in the MSL encoder (GHSA-xxw5-m53x-j38c)
Heap Use-After-Free in ImageMagick MSL decoder (GHSA-fpvf-frm6-625q)
Write heap-buffer-overflow in PCL encoder via undersized output buffer (GHSA-467j-76j7-5885)
Path Policy TOCTOU symlink race bypass (GHSA-493f-jh8w-qhx3)
Stack write buffer overflow in MNG encoder (GHSA-7h7q-j33q-hvpf)
Uninitialized pointer dereference in JBIG decoder (GHSA-wj8w-pjxf-9g4f)
Heap buffer over-read via 32-bit integer overflow in MAT decoder (GHSA-mrmj-x24c-wwcv)
Integer overflow in DIB coder can result in out of bounds read or write (GHSA-hffp-q43q-qq76)
Heap buffer overflow in XWD encoder due to CARD32 arithmetic overflow (GHSA-qpg4-j99f-8xcg)
Integer Overflow lead to out of bounds write in SIXEL decoder (GHSA-r39q-jr8h-gcq2)
Stack corruption through long morphology kernel names or arrays (GHSA-932h-jw47-73jm)
Heap Buffer Overflow in WaveletDenoiseImage (GHSA-5ggv-92r5-cp4p)
Heap Buffer Over-Read in BilateralBlurImage (GHSA-cqw9-w2m7-r2m2)
Stack buffer overflow in MagnifyImage (GHSA-rqq8-jh93-f4vg)
Heap buffer over-write on 32-bit systems in SFW decoder (GHSA-56jp-jfqg-f8f4)
Heap-based buffer overflow in UHDR encoder (GHSA-h95r-c8c7-mrwx)
Heap buffer over-write when writing extremely large image profile in the PNG encoder (GHSA-qmw5-2p58-xvrc)
Possible stack buffer overflow in sixel encoder (GHSA-49hx-7656-jpg3)

Library updates:

ImageMagick 7.1.2-16 (2026-03-08)
openexr 3.4.5 (2026-02-21)

Full Changelog: dlemstra/Magick.NET@14.10.3...14.10.4

14.10.3

Related changes in ImageMagick since the last release of Magick.NET:

Fixed OpenCL initialization (#1954)
Heap buffer over-read in WaveletDenoise with small images (GHSA-qpgx-jfcq-r59f)
Possible infinite loop in JPEG encoder when using jpeg:extent (GHSA-gwr3-x37h-h84v)
Infinite loop when writing IPTCTEXT leads to denial of service via crafted profile (GHSA-v994-63cg-9wj3)
Invalid MSL can result in a use after free (GHSA-w8mw-frc6-r7m8)
Out of bounds read in djvu decoder (GHSA-r99p-5442-q2x2)
Memory allocation with excessive without limits in the internal SVG decoder (GHSA-v7g2-m8c5-mf84)
Integer overflow or wraparound and incorrect conversion between numeric types in the internal SVG decoder (GHSA-7355-pwx2-pm84)
Heap overflow in sun decoder on 32-bit systems can result in out of bounds write (GHSA-6j5f-24fw-pqp4)
Code injection in various encoders (GHSA-rw6c-xp26-225v)
Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer (GHSA-vpxv-r9pg-7gpr)
Heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions (GHSA-vhqj-f5cj-9x8h)
Memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths (GHSA-g2pr-qxjg-7r2w)
NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c) (GHSA-p33r-fqw2-rqmm)
Possible memory leak in ASHLAR encoder (GHSA-gm37-qx7w-p258)
Policy bypass through path traversal allows reading restricted content despite secured policy (GHSA-8jvj-p28h-9gm7)
Security Policy Bypass through config/policy-secure.xml via "fd handler" leads to stdin/stdout access (GHSA-xwc6-v6g8-pw2h)
Heap buffer overflow in YUV 4:2:2 decoder (GHSA-mqfc-82jx-3mr2)
Heap buffer over-read in MAP image decoder (GHSA-42p5-62qq-mmh7)
NULL Pointer Dereference in ClonePixelCacheRepository via crafted image (GHSA-p863-5fgm-rgq4)
Division-by-Zero in YUV sampling factor validation leads to crash (GHSA-543g-8grm-9cw6)
Stack buffer overflow in FTXT reader via oversized integer field (GHSA-72hf-fj62-w6j4)
MSL image stack index not refreshed leading to leaked images (GHSA-782x-jh29-9mf7)
MSL attribute stack buffer overflow leads to out of bounds write (GHSA-3mwp-xqp2-q6ph)
Memory leak in msl encoder (GHSA-gxcx-qjqp-8vjw)
Memory Leak in coders/ashlar.c (GHSA-xgm3-v4r9-wfgm)
Signed Integer Overflow in ImageMagick SIXEL Decoder (GHSA-xg29-8ghv-v4xr)
MSL: Stack overflow in ProcessMSLScript (GHSA-8mpr-6xr2-chhc)
Heap Out-of-Bounds Read in DCM Decoder (GHSA-pmq6-8289-hx3v)
Out of bounds read in multiple coders that read raw pixel data (GHSA-jv4p-gjwq-9r2j)
Use After Free (CWE-416) in MSLStartElement in MSL decoder (GHSA-fwqw-2x5x-w566)
Possible Heap Information Disclosure in PSD ZIP Decompression (GHSA-96pc-27rx-pr36)
Converting multi-layer nested MVG to SVG can cause DoS (GHSA-wg3g-gvx5-2pmv)
An infinite loop vulnerability when parsing a PCD file (GHSA-pqgj-2p96-rx85)
Heap overflow in pcd decoder leads to out of bounds read (GHSA-wrhr-rf8j-r842)

Library updates:

ImageMagick 7.1.2-15 (2026-02-22)
gdk-pixbuf 2.44.5 (2026-01-29)
harfbuzz 12.3.2 (2026-01-24)
libheif 1.21.2 (2026-01-16)
libjxl 0.11.2 (2026-02-10)
libpng 1.6.55 (2026-02-09)
libraqm 0.10.4 (2026-02-05)
openjph 0.26.3 (2026-02-17)
zlib 1.3.2 (2026-02-17)

Full Changelog: dlemstra/Magick.NET@14.10.2...14.10.3

14.10.2

Related changes in ImageMagick since the last release of Magick.NET:

Check if the aspect ratio is a known ratio when density_unit is set to zero and otherwise read it as an undefined density in the jpeg coder (identify doesn't report resolution when units = undefined ImageMagick/ImageMagick#8496)
Converting a PNG to AVIFF with Alpha(AlphaOption.Deactivate) and Scale causes application crash (#1950)
Release of Invalid Pointer in BilateralBlur when memory allocation fails (GHSA-39h3-g67r-7g3c)
Memory Leak in LoadOpenCLDeviceBenchmark() when parsing malformed XML (GHSA-qp59-x883-77qv)
NULL pointer dereference in MSL parser via tag before image load (GHSA-5vx3-wx4q-6cj8)
MSL: Stack overflow via infinite recursion in ProcessMSLScript (GHSA-9vj4-wc7r-p844)
Heap buffer overflow with attacker-controlled data in XBM parser (GHSA-r49w-jqq3-3gx8)

Library updates:

ImageMagick 7.1.2-13 (2026-01-19)
harfbuzz 12.3.0 (2025-12-27)
libheif 1.21.1 (2025-12-31)
lcms 2.18.0 (2026-01-09)
openjph 0.26.0 (2025-12-24)
libraw 0.22.0 (2026-01-13)

Full Changelog: dlemstra/Magick.NET@14.10.1...14.10.2

14.10.1

Related changes in ImageMagick since the last release of Magick.NET:

Only allow setting the data_precision to values other then 16 and 12 when quality is lossless (>= 100) in the jpeg coder.
Revert patches to solve Group 4 compression not applied when converting PostScript to TIFF in single command ImageMagick/ImageMagick#8484 and Compression of Group4Compression is not getting applied with the following source code. ImageMagick/ImageMagick#8506.
Magick's failure to limit the depth of SVG file reads caused a DoS attack (GHSA-p27m-hp98-6637)
Magick's failure to limit MVG mutual references forming a loop (GHSA-7rvh-xqp3-pr8j)
Converting a malicious MVG file to SVG caused an integer overflow (GHSA-hrh7-j8q2-4qcw)

Library updates:

ImageMagick 7.1.2-12 (2025-12-29)
libjpeg-turbo 3.1.3 (2025-12-10)
liblzma 5.8.2 (2025-12-17)
libpng 1.6.53 (2025-12-05)

Full Changelog: dlemstra/Magick.NET@14.10.0...14.10.1

14.10.0

What's Changed

Allow specifying the pdf format in the constructor of the PdfWriteDefines (#1931).
Added HighBitDepth to the JpegWriteDefines.

Related changes in ImageMagick since the last release of Magick.NET:

Move writing of the IDAT chunk to the end to silence a warning in exiftool (Exiftool warns Text/EXIF chunk after PNG IDAT for simplistic file ImageMagick/ImageMagick#8400)
Added custom end of file check to the pnm encoder to allow a missing final newline (pgm P2 Format Parsing Error When Final Line Lacks Newline Character ImageMagick/ImageMagick#8425)
Close temporary file to make sure it can be opened again (Unable to read CALS file ImageMagick/ImageMagick#8420)
JPEG: Support 2-to-16-bit lossless JPEG images with libjpeg-turbo 3.1+; Support additional IDCT scaling factors with libjpeg-turbo and libjpeg v7+ (JPEG: Support 2-to-16-bit lossless JPEG images with libjpeg-turbo 3.1+; Support additional IDCT scaling factors with libjpeg-turbo and libjpeg v7+ ImageMagick/ImageMagick#8445)
Correct parsing of the density ((Regression: JPEG with density_unit=0 interpreted as 1 DPI instead of aspect ratio ImageMagick/ImageMagick#8460)
Added extra check to avoid an overflow on 32-bit machines (GHSA-6hjr-v6g4-3fm8)

Library updates:

ImageMagick 7.1.2-10 (2025-12-07)
brotli 1.2.0 (2025-10-27)
openexr 3.4.4 (2025-11-19)
harfbuzz 12.2.0 (2025-11-05)
openjph 0.25.3 (2025-11-16)
libpng 1.6.52 (2025-12-03)
REMOVED: libdeflate (#1932)

Full Changelog: dlemstra/Magick.NET@14.9.1...14.10.0

14.9.1

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

CLAHE : Unsigned underflow and division-by-zero lead to OOB pointer arithmetic and process crash (DoS) (GHSA-wpp4-vqfq-v4hp)

Library updates:

ImageMagick 7.1.2-8 (2025-10-28)
openexr 3.4.2 (2025-10-16)
gdk-pixbuf 2.44.4 (2025-10-21)
imath 3.2.2 (2025-10-08)
libxml2 2.15.1 (2025-10-16)

Full Changelog: dlemstra/Magick.NET@14.8.2...14.9.0

14.9.0

What's Changed

Converting Tif file with 2 alpha channels yields scrambled result. #1523
Embedded base64 image not rendered when converting SVG on Linux RHEL (regression since 14.7.1) #1917
Allow setting the StrokeDashArray of the DrawingSettings to null.
Moved static properties in ColorProfile to a new ColorProfiles class and mark them obsolete.

Related changes in ImageMagick since the last release of Magick.NET:

Fix issue where the size of a line is extended to 70 characters when writing a PBM image (Restore previous PBM raster line format ImageMagick/ImageMagick#8346).
Extra images will be added as meta channels when combining images.
Added support for reading and writing meta channels in a TIFF images with separate planes of data.
Promote photometric tiff tag to required
Added extra check to resolve issue on 32-bit systems (GHSA-9pp9-cfwx-54rm)

Library updates:

ImageMagick 7.1.2-7 (2025-10-15)
aom 3.13.1 (2025-09-05)
openexr 3.4.0 (2025-09-05)
freetype 2.14.1 (2024-09-11)
gdk-pixbuf 2.44.3 (2025-09-30)
harfbuzz 12.1.0 (2025-10-01)
libjpeg-turbo 3.1.2 (2025-09-03)
openjpeg 2.5.4 (2025-09-20)
libtiff 4.7.1 (2025-09-12)
libxml2 2.15.0 (2025-09-15)

Full Changelog: dlemstra/Magick.NET@14.8.2...14.9.0

14.8.2

What's Changed

Corrected the generated version and added a unit test for it (#1894).
Fixed missing embedded resources in the native library (#1896 and #1898).

Related changes in ImageMagick since the last release of Magick.NET:

Close the blob so we can re-open it again (Cannot convert mng/jng images ImageMagick/ImageMagick#8327).

Library updates:

ImageMagick 7.1.2-3 (2025-08-31)
harfbuzz 11.4.4 (2025-08-26)

Full Changelog: dlemstra/Magick.NET@14.8.1...14.8.2

14.8.1

What's Changed

Corrected Gravity overload of the Splice method (#1881).

Related changes in ImageMagick since the last release of Magick.NET:

Fixed reading exif profiles from jpeg images (#1891 and #1809)
Added support for reading 8 bit alpha only dds images (Does not handle valid Alpha only DDS format ImageMagick/ImageMagick#8178)
Fix infinite loop when decoding JXL with -limit height/width (Fix infinite loop when decoding JXL with -limit height/width ImageMagick/ImageMagick#8303)
Corrected getting the screenshot on Windows when the screen is scaled larger than 100% (IM produces incorrect screenshots for scales larger than 100% on MS-Windows ImageMagick/ImageMagick#8278).
Change the colorspace to GrayScale when an exr image only has a single Y channel (Grayscale EXR interprets as red ImageMagick/ImageMagick#8305)

Library updates:

ImageMagick 7.1.2-2 (2025-08-24)
ffi 3.5.2 (2025-08-02)
harfbuzz 11.4.1 (2025-08-13)
heif 1.20.2 (2025-08-05)
highway 1.3.0 (2025-08-14)
imath 3.2.1 (2025-08-15)
raqm 0.10.3 (2025-08-05)

Full Changelog: dlemstra/Magick.NET@14.8.0...14.8.1

14.8.0

What's Changed

Added Sf3 to MagickFormat.
Added Gravity overload to the Splice method (#1881).
Added TrimMemory to the ResourceLimits (#1854).

Library updates:

ImageMagick 7.1.2-1 (2025-08-12)
exr 3.3.5 (2025-07-26)
ffi 3.5.1 (2025-06-10)
fontconfig 2.17.1 (2025-07-02)
gdk-pixbuf 2.43.3 (2025-06-29)
jpeg-turbo 3.1.1 (2025-06-10)
pixman 0.46.4 (2025-07-20)
png 1.6.50 (2025-07-02)
webp 1.6.0 (2025-07-09)
xml 2.14.5 (2025-07-10)
zip 1.11.4 (2025-05-23)

Full Changelog: dlemstra/Magick.NET@14.7.0...14.8.0

14.7.0

What's Changed

Added extra overload to the Resize method that allows specifying the filter (#1819).
Allow reading of clip paths without a name and give them a numeric name that can be used by ImageMagick (#1814).
Use the ArrayPool API in .NET Standard 2.1 or later to reduce the creation of LOH objects (#1812).
Allow modification of X and Y in the PointD struct (#1856).
Improved parsing of a geometry in the MagickGeometry class (#1855).
Added Icn to MagickFormat.

Related changes in ImageMagick since the last release of Magick.NET:

Fixed pageCount failure in newer versions of ghostscript (#1823).
Improved PDF/A compatibility (#1841).
Fixed reading of bmp files (#1820).
Accelerated Subimage-search Compare (Accelerated Subimage-search Compare ImageMagick/ImageMagick#3950)
Request Enhancement To Magick Compare -metric MSE (Request Enhancement To Magick Compare -metric MSE ImageMagick/ImageMagick#5750)
JXL: Preserve ICC profile for lossless encoding (JXL: Preserve ICC profile for lossless encoding ImageMagick/ImageMagick#8074)
Support ICN file extension for old Windows icons (Support ICN file extension for old Windows icons ImageMagick/ImageMagick#8107)

Library updates:

ImageMagick 7.1.2-0 (2025-07-13)
aom 3.12.1 (2025-04-11)
de265 1.0.16 (2025-05-04)
deflate 1.24.0 (2025-05-11)
ffi 3.4.8 (2025-04-10)
harfbuzz 11.2.1 (2025-05-15)
heif 1.20.1 (2025-07-02)
lzma 5.8.1 (2025-04-03)
openexr 3.3.3 (2025-03-24)
pixman 0.46.0 (2025-04-30)
png 1.6.48 (2025-04-30)
raw 0.22.0-Devel202502 (2024-02-24)
xml 2.14.3 (2025-05-13)

Full Changelog: dlemstra/Magick.NET@14.6.0...14.7.0

14.6.0

What's Changed

Added PhaseCorrelation and DotProductCorrelation to ErrorMetric.
Added MaxBayerPatternPixels, MaxChildrenPerBox, MaxComponents, MaxIlocExtentsPerItem, MaxItems, MaxNumberOfTiles and MaxSizeEntityGroup to the HeicReadDefines (#1807).
Implemented an optimization of the ToBitmap method based upon ideas from (#1777).

Related changes in ImageMagick since the last release of Magick.NET:

Also print the requested sizes in the error message when width or height exceeds the limits (#1798).
mime:type is not automatically injected, you must request it.
Optimized Oklab and JzAzBz colorspace transformation
Support epoch() and magicktime() FX functions

Library updates:

ImageMagick 7.1.1-46 (2025-03-18)
aom 3.12.0 (2025-02-07)
cairo 1.18.4 (2025-03-08)
harfbuzz 10.4.0 (2025-03-01)
heif 1.19.7 (2025-03-03)
openh264 2.6.0 (2025-02-12)
png 1.6.47 (2025-02-18)
xml 2.13.6 (2025-02-18)

Full Changelog: dlemstra/Magick.NET@14.5.0...14.6.0

14.5.0 What's Changed

Added ToWriteableBitmapWithDensity and changed the default DPI to 96 (#1781)
Use CallerArgumentExpressionAttribute in throw helpers (#1788)
Added CAT02LMSC to ColorSpace.

Related changes in ImageMagick since the last release of Magick.NET:

Improved error message when reading or writing png data files.
No longer set TIFFTAG_STRIPBYTECOUNTS to fix the issue reported in TIFF - StripByteCounts modified after write has started ImageMagick/ImageMagick#7917.
Increased accuracy for XYZ color conversion.
Compensate for any NAN's in the Jzazbz colorspace transformation
Added extra information to the reported error when the width or height exceed the limits.

Library updates:

ImageMagick 7.1.1-44 (2025-02-22)
deflate 1.23.0 (2024-12-15)
ffi 3.4.7 (2025-02-08)
harfbuzz 10.2.0 (2025-01-11)
jpeg-turbo 3.1.0 (2024-12-12)
lcms 2.17.0 (2025-02-09)
lzma 5.6.4 (2025-01-23)
openh264 2.5.0 (2024-11-08)
openjpeg 2.5.3 (2024-12-09)
png 1.6.46 (2025-01-23)
raw 0.22.0-Devel202403 (2024-03-30)
webp 1.5.0 (2024-12-20)
zip 1.11.3 (2025-01-20)

New Contributors

@Ruben2776 made their first contribution in Change DPI to 96 dlemstra/Magick.NET#1781
@IliaBrahinets made their first contribution in Use CallerArgumentExpressionAttribute in throw helpers dlemstra/Magick.NET#1788

Full Changelog: dlemstra/Magick.NET@14.4.0...14.5.0

14.4.0 What's Changed

Added missing interface inheritance (#1776).

Full Changelog: dlemstra/Magick.NET@14.3.0...14.4.0

14.3.0 What's Changed

Make sure FrameCount is 1 when reading a MagickImage (#1761).
Make the constructor of ColorProfile that has a name obsolete and only use icc as the name in the future.
Fixed memory leak with the return value of MagickImage.FormatExpression.
~~Added missing interface inheritance (#1776)~~.
Created Magick.NET.AvaloniaMediaImaging (#1743).

Related changes in ImageMagick since the last release of Magick.NET:

Make sure we can write jpeg files with an exif profile that has a length of 65533 (#1764).
Move jpeg specific exif detection of profiles with the name app1 to a more generic spot (#1766).

Library updates:

ImageMagick 7.1.1-43 (2024-12-22)
aom 3.11.0 (2024-11-14)
heif 1.19.5 (2024-11-19)
jpeg-xl 0.11.1 (2024-11-26)
pixman 0.44.2 (2024-12-03)
xml 2.13.5 (2024-11-12)

Full Changelog: dlemstra/Magick.NET@14.2.0...14.3.0

14.2.0 What's Changed

Added MagicKernelSharp2013 and MagicKernelSharp2021 to FilterType.
Fixed MagickCorruptImageErrorException with iOS 18 HEIC (#1753)

Related changes in ImageMagick since the last release of Magick.NET:

Improved decoding speed of the jp2 decoder by storing some values that won't change per image or row. (#1748)
The extra_samples should not be subtracted from the samples_per_pixel when calculating the padding in the tiff coder.

Library updates:

ImageMagick 7.1.1-41 (2024-11-16)
openexr 3.3.2 (2024-11-11)
harfbuzz 10.1.0 (2024-11-05)
heif 1.19.3 (2024-11-11)
pixman 0.44.0 (2024-11-05)

Full Changelog: dlemstra/Magick.NET@14.1.0...14.2.0

14.1.0 What's Changed

Changed the implementation of how the AnyCPU implementation calls the native methods and throw an exception when an unsupported architecture is detected.
No longer throw an argument exception for a negative bias value in AdaptiveThreshold (#1717)
Added CloneArea to IMagickImage that will replace the Clone overload with a MagickGeometry.
Added CloneAndMutate to IMagickImage that can be used to efficiently clone and mutate an image (#1577).
Enabled trim analyzer for net8.0

Related changes in ImageMagick since the last release of Magick.NET:

Also treat the group and element being zero as the end of data in a dicom file (Cannot read certain dicom images - identify: improper image header @ error/dcm.c/ReadDCMImage/3204 ImageMagick/ImageMagick#7610).
Make sure we read the last xmp profile inside the pdf file.
Support ICON size of 512 (Request .ico size support of 768px and 512px ImageMagick/ImageMagick#7684)
Restored support for reading tiled images with the new openexr api (#1732).
Corrected check for indexed channels in PSD files (#1735).
Respect alpha Update trait (#One more command example in the docs doesn't work as intended ImageMagick/ImageMagick#7709)
Lab translation not required for HDRI support (Inconsistent results converting between color profiles, notably involving the Lab color space ImageMagick/ImageMagick#7724)
.cut (Dr Halo) reading when run count in header (.cut (Dr Halo) reading when run count in header ImageMagick/ImageMagick#7734)
Patch that ignores the layer and/or view of an exr channel name when all channels start with that prefix (Montage, mode Concatenate, tile, exr ImageMagick/ImageMagick#7751).
Don't write the null terminator in pdf values to fix the bug reported in NUL byte in PDF metadata ImageMagick/ImageMagick#7756.

Library updates:

ImageMagick 7.1.1-40 (2024-11-09)
cairo 1.18.2 (2024-09-01)
deflate 1.22.0 (2024-10-05)
imath 3.1.12 (2024-09-11)
fribidi 1.0.16 (2024-09-25)
harfbuzz 10.0.1 (2024-09-24)
heif 1.19.1 (2024-11-01)
jpeg-xl 0.11.0 (2024-09-13)
lzma 5.6.3 (2024-10-01)
openexr 3.3.1 (2024-10-09)
png 1.6.44 (2024-09-12)
raqm 0.10.2 (2024-09-23)
raw 0.21.3 (2024-09-24)
tiff 4.7.0 (2024-09-11)
xml 2.13.4 (2024-09-18)
zip 1.11.2 (2024-10-31)

New Contributors

@aleksvujic made their first contribution in Added double backslashes inside file name dlemstra/Magick.NET#1707

Full Changelog: dlemstra/Magick.NET@14.0.0...14.1.0

14.0.0

Breaking changes in Magick.NET:

Removed netstandard21 support and changed this to net8.0 instead.
IMagickImage:
- Removed the EncodingGeometry, IsDisposed.
- Removed the FormatInfo property (use MagickFormatInfo.Create(image.Format) instead).
- Removed the ChromaBluePrimary, ChromaGreenPrimary, ChromaRedPrimary, ChromaWhitePoint properties (use Chromaticity instead).
- Removed the Distort overload that had both a DistortMethod and IDistortSettings because the settings now contain a DistortMethod property.
- Removed the Deskew overload that had IDeskewSettings and renamed it to DeskewAndCrop because that was the only setting. And this also means that IDeskewSettings and DeskewSettings have been removed from the library.
- Renamed Map to Remap.
- Renamed RePage to ResetPage.
- Removed all Morphology overloads and only keep the method that uses MorphologySettings.
- The Interlace property is now readonly and MagickSettings.Interlace should be used to set this setting.
- The ColorType property no longer returns the value of the MagickSettings.
- Return IMagickImage instead of double in the Compare method overloads that had an IMagickImage and changed the double return value to an out param instead.
- Changed the default colorspaces for PerceptualHash from sRGB and HCLp to XyY and HSB.
IMagickImageCollection:
- Renamed Map to Remap.
- Renamed RePage to ResetPage.
IChannelPerceptualHash:
- Removed SrgbHuPhash and HclpHuPhash (HuPhash(colorspace, index) should be used instead).
IEightBimValue:
- Removed the ID property (Id should be used instead)
IExifProfile:
- The CreateThumbnail method is no longer be available for the netstandard20 target.
IImageProfile:
- Removed GetData (ToByteArray or ToReadOnlySpan should be used instead).
- The ToByteArray method will no longer return null.
IPixelCollection:
- Removed GetIndex (GetChannelIndex should be used instead).
Channels:
- Removed Default, Grays and Sync.
CompareSettings:
- Made the ErrorMetric property mandatory (through constructor) and immutable.
ComplexSettings:
- Made the ComplexOperator property mandatory (through constructor) and immutable.
DngReadDefines
- Removed the UseAutoWhitebalance property (UseAutoWhiteBalance should be used instead).
- Removed the UseCameraWhitebalance property (UseCameraWhiteBalance should be used instead).
DdsWriteDefines:
- Removed the Mipmaps property (MipmapCount should be used instead).
DrawableComposite:
- All constructors now require specifying the CompositeOperator.
DrawablePushPattern:
- Removed the ID property (Id should be used instead).
ExifTag:
- Corrected type of TimeZoneOffset to short[].
LogEventArgs:
- The Message property will no longer return null.
OpenCLKernelProfileRecord
- Removed the AverageDuration property.
  ... (truncated)

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

--- updated-dependencies: - dependency-name: Magick.NET-Q8-AnyCPU dependency-version: 15.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

Bump Magick.NET-Q8-AnyCPU from 13.10.0 to 15.0.0

a705c6a

--- updated-dependencies: - dependency-name: Magick.NET-Q8-AnyCPU dependency-version: 15.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added .NET Pull requests that update .NET code dependencies Pull requests that update a dependency file labels Nov 1, 2026

Navigation Menu

Repository navigation

Bump Magick.NET-Q8-AnyCPU from 13.10.0 to 15.0.0 - #278

Bump Magick.NET-Q8-AnyCPU from 13.10.0 to 15.0.0#278
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/nuget/Google.Authenticator.Tests/Magick.NET-Q8-AnyCPU-15.0.0

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

15.0.0

14.17.2

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.17.1

What's Changed

14.17.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.16.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.15.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.14.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.13.1

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.13.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.12.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.11.1

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.11.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.10.4

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.10.3

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.10.2

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.10.1

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.10.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.9.1

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.9.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates:

14.8.2

What's Changed

Library updates:

14.8.1

What's Changed

Library updates:

14.8.0

What's Changed

Library updates:

14.7.0

What's Changed

Related changes in ImageMagick since the last release of Magick.NET:

Library updates: