Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ImageMagick for openSUSE:Factory checked in at 2026-03-04 21:02:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ImageMagick (Old) and /work/SRC/openSUSE:Factory/.ImageMagick.new.561 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ImageMagick" Wed Mar 4 21:02:37 2026 rev:326 rq:1335800 version:7.1.2.15 Changes: -------- --- /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick.changes 2026-02-27 17:04:37.582983694 +0100 +++ /work/SRC/openSUSE:Factory/.ImageMagick.new.561/ImageMagick.changes 2026-03-04 21:02:43.666259424 +0100 @@ -1,0 +2,7 @@ +Mon Mar 2 10:56:53 UTC 2026 - Petr Gajdos <[email protected]> + +- apply ImageMagick_policy_etc.patch in all flavors, as intended +- don't patch upstream security policy, but SUSE default policy + instead, as intended + +------------------------------------------------------------------- @@ -41,0 +49,5 @@ + CVE-2026-24484 [bsc#1258790] + CVE-2026-27798 [bsc#1259018] + CVE-2026-25966 [bsc#1258780] +- actually patch SUSE default security policy + * modified ImageMagick-configuration-SUSE.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ImageMagick.spec ++++++ --- /var/tmp/diff_new_pack.K2dUZI/_old 2026-03-04 21:02:45.830348873 +0100 +++ /var/tmp/diff_new_pack.K2dUZI/_new 2026-03-04 21:02:45.854349866 +0100 @@ -1,6 +1,7 @@ # # spec file for package ImageMagick # +# Copyright (c) 2026 SUSE LLC # Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties @@ -264,7 +265,7 @@ %setup -q -n ImageMagick-%{source_version} %patch -P 0 -p1 # default policy (SUSE) -cp config/policy-secure.xml config/policy.xml +cp config/policy-secure.xml config/policy-SUSE.xml %patch -P 1 -p1 %patch -P 2 -p1 %ifarch s390x @@ -367,7 +368,7 @@ %install %make_install pkgdocdir=%{_defaultdocdir}/ImageMagick-7/ -cp config/policy.xml %{buildroot}%{_sysconfdir}/%{config_dir} +cp config/policy-SUSE.xml %{buildroot}%{_sysconfdir}/%{config_dir}/policy.xml # symlink header file relative to /usr/include/ImageMagick-7/ # so that inclusions like wand/*.h and magick/*.h work ln -s ./MagickCore %{buildroot}%{_includedir}/ImageMagick-7/magick @@ -504,6 +505,7 @@ %prep %setup -q -n ImageMagick-%{source_version} +%patch -P 0 -p1 %build @@ -537,6 +539,7 @@ %prep %setup -q -n ImageMagick-%{source_version} +%patch -P 0 -p1 %build @@ -574,6 +577,7 @@ %prep %setup -q -n ImageMagick-%{source_version} +%patch -P 0 -p1 %build @@ -607,6 +611,7 @@ %prep %setup -q -n ImageMagick-%{source_version} +%patch -P 0 -p1 %build ++++++ ImageMagick-configuration-SUSE.patch ++++++ --- /var/tmp/diff_new_pack.K2dUZI/_old 2026-03-04 21:02:46.302368384 +0100 +++ /var/tmp/diff_new_pack.K2dUZI/_new 2026-03-04 21:02:46.342370037 +0100 @@ -1,6 +1,6 @@ -diff -ur ImageMagick-7.1.2-15.orig/config/policy-secure.xml ImageMagick-7.1.2-15/config/policy-secure.xml ---- ImageMagick-7.1.2-15.orig/config/policy-secure.xml 2026-02-23 22:24:51.662615465 +0100 -+++ ImageMagick-7.1.2-15/config/policy-secure.xml 2026-02-23 22:39:43.613341024 +0100 +diff -ur ImageMagick-7.1.2-15.orig/config/policy-SUSE.xml ImageMagick-7.1.2-15/config/policy-SUSE +--- ImageMagick-7.1.2-15.orig/config/policy-SUSE.xml 2026-02-23 22:24:51.662615465 +0100 ++++ ImageMagick-7.1.2-15/config/policy-SUSE.xml 2026-02-23 22:39:43.613341024 +0100 @@ -62,7 +62,7 @@ <policy domain="resource" name="disk" value="2GiB"/> <!-- Set the maximum length of an image sequence. When this limit is
