Related changes in ImageMagick since the last release of Magick.NET:
- Fixed issue with CompositeOperator.Multiply and other composite operations (#2092)
- Infinite Loop when reading a crafted XMP profile (GHSA-9p7q-63hw-mcr4)
- Denial of service in ASE decoder because of missing security checks (GHSA-gwj6-pm7x-3r63)
- Infinite Loop in PSD decoder on 32-bit systems (GHSA-g6p6-3ggg-3w7j)
- Policy Bypass in delegate symlink cleanup due to missing check (GHSA-54hm-vrmh-75qj)
- Infinite Loop in bzip2 compressed images (GHSA-m9c7-gf3j-hx6h)
- Heap Buffer Over-Write in EXR decoder (GHSA-54rx-5x9g-g465)
Library updates:
- ImageMagick 7.1.2-32 (2026-09-27)
- aom 3.15.1 (2026-09-22)
- cairo 1.18.6 (2026-09-20)
- libde265 1.1.3 (2026-09-14)
- openexr 3.5.1 (2026-09-26)
- fribidi 1.0.17 (2026-09-20)
- harfbuzz 14.5.0 (2026-09-20)
- libheif 1.23.5 (2026-09-21)
- liblzma 5.8.4 (2026-09-09)
- openjph 0.32.0 (2026-09-17)
- libxml2 2.15.4 (2026-09-01)
- zstd 1.5.7 (2025-02-19)
Full Changelog: 14.17.1...14.17.2