Dylan M. Taylor 2833d8fc9a Merge pull request #2780 from storytold/security/raw ...

security/raw: bound hostile-memory paths in the raw decoders

2026-10-25 16:45:57 -04:00

..

catalog

Migrate LightCraft to egui 0.37 and reconcile dependency and font locks

2026-10-25 02:54:42 +01:00

codecs

security: bound codec allocation to what a hostile file declares (#2769)

2026-10-24 04:32:58 -04:00

color

Reject signed hex digits in #rrggbb colour parsing

2026-10-17 00:45:25 +00:00

denoise

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

denoise-core

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

develop

Merged develop settings are kept in range, as XMP import keeps them (fixes #1946)

2026-10-16 00:23:44 +02:00

engine

M0.37: reconcile current LightCraft main and qualify the migration

2026-10-25 07:47:22 +01:00

faces

Merge PR #1663 (rebased)

2026-10-15 03:40:17 -04:00

fetch

Merge PR #2431: Keep file name and query for fragment-only redirect Location

2026-10-22 02:38:11 +00:00

geocode

Fix offline reverse geocoding for cities at longitude exactly 180 (#2061)

2026-10-17 18:37:42 -06:00

geom

LR-CROP-RECT: a crop a handle drag filled to the tilted edges still moves (#2299)

2026-10-22 07:34:48 +09:00

gpu

Merge upstream/main (#2710 one test binary per crate, #2713) into round3a-integration

2026-10-23 21:06:33 +03:00

heif

security(heif): scan the primary item before heic_rs::probe, the alpha plane, and each thumbnail candidate

2026-10-25 16:06:39 -04:00

inpaint

…

lensdb

LR-EDIT-OPTICS-PROFILE: find the profile named by a lens specification behind a tie

2026-10-18 18:42:50 +02:00

mcp

CI: one test binary per crate, line tables only, one WASM check (#2710)

2026-10-23 13:34:30 -04:00

merge

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

meta

security(raw,meta): follow-ups from review

2026-10-25 16:12:03 -04:00

pipeline

Merge PR #1956 (with maintainer follow-up)

2026-10-24 10:20:14 -04:00

preview

Merge PR #1777

2026-10-14 22:31:41 -04:00

raster

M0.37: port LightCraft UI, input and capture lifecycle to egui 0.37

2026-10-24 08:02:12 +02:00

raw

security(raw,meta): follow-ups from review

2026-10-25 16:12:03 -04:00

scenes

Never crash: Render demo scenes at most at their own size

2026-10-13 10:46:18 -05:00

segment

CI: one test binary per crate, line tables only, one WASM check (#2710)

2026-10-23 13:34:30 -04:00

slideshow

Reject signed hex digits in #rrggbb colour parsing

2026-10-17 00:45:25 +00:00

sysmem

…

testkit

security: bounded keyword, repair and journal-recovery work (CodeRabbit) (#2763)

2026-10-23 22:45:21 -04:00

tiff

security/meta,merge,raw,tiff,denoise: bound memory sized by attacker-shaped inputs

2026-10-25 15:42:19 -04:00

ui-egui

fix(updates): localize the update status messages and format the sources

2026-10-25 15:34:06 -04:00