MendDemo-josh / Umbraco-CMS

The simple, flexible and friendly ASP.NET CMS used by more than 730.000 websites
https://umbraco.com
MIT License
0 stars 0 forks source link

Update dependency SixLabors.ImageSharp to v2.1.7 - autoclosed #36

Closed mend-for-github-com[bot] closed 5 months ago

mend-for-github-com[bot] commented 6 months ago

This PR contains the following updates:

Package Type Update Change
SixLabors.ImageSharp nuget patch 2.1.3 -> 2.1.7

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 7.1 CVE-2024-27929

Release Notes

SixLabors/ImageSharp (SixLabors.ImageSharp) ### [`v2.1.7`](https://togithub.com/SixLabors/ImageSharp/releases/tag/v2.1.7) #### What's Changed - \[release/2.1] Disallow allocation attempts of unrepresentable sizes by [@​antonfirsov](https://togithub.com/antonfirsov) in [https://github.com/SixLabors/ImageSharp/pull/2553](https://togithub.com/SixLabors/ImageSharp/pull/2553) - \[release/2.1] Tiff decoding robustness improvements ([#​2550](https://togithub.com/SixLabors/ImageSharp/issues/2550)) by [@​antonfirsov](https://togithub.com/antonfirsov) in [https://github.com/SixLabors/ImageSharp/pull/2554](https://togithub.com/SixLabors/ImageSharp/pull/2554) - \[release/2.1] PBM decoder robustness improvements and BufferedReadStream observability by [@​antonfirsov](https://togithub.com/antonfirsov) in [https://github.com/SixLabors/ImageSharp/pull/2555](https://togithub.com/SixLabors/ImageSharp/pull/2555) - Backport 2681 by [@​JimBobSquarePants](https://togithub.com/JimBobSquarePants) in [https://github.com/SixLabors/ImageSharp/pull/2688](https://togithub.com/SixLabors/ImageSharp/pull/2688) **Full Changelog**: https://github.com/SixLabors/ImageSharp/compare/v2.1.6...v2.1.7 ### [`v2.1.6`](https://togithub.com/SixLabors/ImageSharp/releases/tag/v2.1.6) #### What's Changed - Backport - Handle EOF in Jpeg bit reader when data is bad to prevent DOS attack. by [@​JimBobSquarePants](https://togithub.com/JimBobSquarePants) in [https://github.com/SixLabors/ImageSharp/pull/2524](https://togithub.com/SixLabors/ImageSharp/pull/2524) **Full Changelog**: https://github.com/SixLabors/ImageSharp/compare/v2.1.5...v2.1.6 ### [`v2.1.5`](https://togithub.com/SixLabors/ImageSharp/releases/tag/v2.1.5) #### What's Changed - Backport [#​2501](https://togithub.com/SixLabors/ImageSharp/issues/2501) by [@​JimBobSquarePants](https://togithub.com/JimBobSquarePants) in [https://github.com/SixLabors/ImageSharp/pull/2509](https://togithub.com/SixLabors/ImageSharp/pull/2509) **Full Changelog**: https://github.com/SixLabors/ImageSharp/compare/v2.1.4...v2.1.5 ### [`v2.1.4`](https://togithub.com/SixLabors/ImageSharp/releases/tag/v2.1.4) #### What's Changed - Backport WebP fix to 2.1 by [@​antonfirsov](https://togithub.com/antonfirsov) in [https://github.com/SixLabors/ImageSharp/pull/2420](https://togithub.com/SixLabors/ImageSharp/pull/2420) **Full Changelog**: https://github.com/SixLabors/ImageSharp/compare/v2.1.3...v2.1.4