Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package SDL2_image for openSUSE:Factory checked in at 2026-04-07 16:32:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/SDL2_image (Old) and /work/SRC/openSUSE:Factory/.SDL2_image.new.21863 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "SDL2_image" Tue Apr 7 16:32:19 2026 rev:27 rq:1344646 version:2.8.10 Changes: -------- --- /work/SRC/openSUSE:Factory/SDL2_image/SDL2_image.changes 2025-07-15 16:45:28.279681583 +0200 +++ /work/SRC/openSUSE:Factory/.SDL2_image.new.21863/SDL2_image.changes 2026-04-07 16:47:15.112440506 +0200 @@ -1,0 +2,7 @@ +Sun Apr 5 08:57:37 UTC 2026 - Jan Engelhardt <[email protected]> + +- Update to release 2.8.10 + * Fixed animated WebP frame composition + * Fixed out of bounds read in XCF image loader [CVE-2026-35444] + +------------------------------------------------------------------- Old: ---- SDL2_image-2.8.8.tar.gz SDL2_image-2.8.8.tar.gz.sig New: ---- SDL2_image-2.8.10.tar.gz SDL2_image-2.8.10.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ SDL2_image.spec ++++++ --- /var/tmp/diff_new_pack.nKPEGx/_old 2026-04-07 16:47:15.984476544 +0200 +++ /var/tmp/diff_new_pack.nKPEGx/_new 2026-04-07 16:47:15.988476708 +0200 @@ -1,7 +1,7 @@ # # spec file for package SDL2_image # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ Name: SDL2_image %define lname libSDL2_image-2_0-0 -Version: 2.8.8 +Version: 2.8.10 Release: 0 Summary: Simple DirectMedia Layer 2 image loading library License: Zlib @@ -26,6 +26,7 @@ URL: https://libsdl.org/projects/SDL_image/ Source: https://github.com/libsdl-org/SDL_image/releases/download/release-%version/SDL2_image-%version.tar.gz Source2: https://github.com/libsdl-org/SDL_image/releases/download/release-%version/SDL2_image-%version.tar.gz.sig +Source8: baselibs.conf Source9: %name.keyring BuildRequires: automake BuildRequires: dos2unix ++++++ SDL2_image-2.8.8.tar.gz -> SDL2_image-2.8.10.tar.gz ++++++ /work/SRC/openSUSE:Factory/SDL2_image/SDL2_image-2.8.8.tar.gz /work/SRC/openSUSE:Factory/.SDL2_image.new.21863/SDL2_image-2.8.10.tar.gz differ: char 26, line 1 ++++++ SDL2_image.keyring ++++++ --- /var/tmp/diff_new_pack.nKPEGx/_old 2026-04-07 16:47:16.116481999 +0200 +++ /var/tmp/diff_new_pack.nKPEGx/_new 2026-04-07 16:47:16.120482163 +0200 @@ -1,6 +1,4 @@ -----BEGIN PGP PUBLIC KEY BLOCK----- -Version: GnuPG v1.0.4 (GNU/Linux) -Comment: For info see http://www.gnupg.org mQGiBDpWOb0RBADQwd3d9mzt6KzqlsgXf9mikBuMbpKzYs1SBKYpdzUs9sRY0CnH vCQTrL5sI57yKLnqEl6SbIiE75ZwrSWwvUDFFTh35Jew5nPZwv64en2kw2y4qrnJ @@ -12,15 +10,62 @@ QMVuM883LPE59btNzFTAZjlzzIMiaXf5h9EkDARTGQ1wFiO3V5vIbVLh4kAoNfpT egy7bYn3UrlbKg3V2DbCdEXm1zQufZzK7T0yenA5Ps8xXX7mNrQhU2FtIExhbnRp bmdhIDxzbG91a2VuQGxpYnNkbC5vcmc+iFcEExECABcFAjpWOb0FCwcKAwQDFQMC -AxYCAQIXgAAKCRAwpZN3p3Y75t9RAJ48WI+nOPes0WK7t381Ij4JfSYxWQCgjpMa -Dg3/ah23HZhYtTKtHUzD9zi5AQ0EOlY5wxAEAPvjB0B5RNAj8hBF/Lq78w5rJ1/f +AxYCAQIXgAAKCRAwpZN3p3Y75t9RAJ4/thyz/TDdI3CruKwszF2RuHZYeACcDS0W +70JNeJ+jhA9a5j220K3d3bO5AQ0EOlY5wxAEAPvjB0B5RNAj8hBF/Lq78w5rJ1/f 5RqWXmdfxApuEE/9OEFXUSUXms9f/IWvySdyf48Pk4t2h8b8i7F0f3R+tcCp6m0P t1BSNHYumfmtonTy5FHqpwBVlEi7I0s5mD3kxO+k8PQbATHH5smFnoz2UTc+MzQj UdtTzXUkUgqvf9zTAAMGA/9Y/h6rhi3YYXeI6SmbXqcmzsQKzaWVhLew67szejnY sKIJ1ja4MefYlthCXgmIBriNftxIGtBI0Pcmzwpn0eknRNK6NgpmESbGKCWh59Je iAK5hdBPe47LSFVct5zSO9vQhRDyLzhzPPtB3XeoKTUkLWxBSLbeZVwcHPIK/wLa -l4hGBBgRAgAGBQI6VjnDAAoJEDClk3endjvmxmUAn3Ne6Z3UULpie8RJP15RBt6K -2MWFAJ9hK/Ls/FeBJ9d50qxmYdZ2RrTXNg== -=toqC +l4hGBBgRAgAGBQI6VjnDAAoJEDClk3endjvmxmUAn2Eymg8jCrRetNrdXohf4DVc +On7dAJ9L4/p6y1sGrDboDuQ+lnI+8Wbq9JkCDQRpaWQsARAAxAWObO2hQehlWV6I +y6SA++DzoQ9nUa2kq3E4dR6bUScJtMbLUfPeXM0tkyDjjA2AOa8KUYbVuBjrt25e +CevVU/BYf6UI6KxcP5M9dSePUjFRiISFPJiBEKnu4SjucrYkSUMHU5B/QIUVTDaK +oEHhqUOwmAxCdWKj+DGW3f/r/a8bNJoSTFjYX7jfuKLIGYZGqDVfjrL4ZnqW/Jco +lwMmhMidQ2vaqrI7ugAcEqQZFJ+xldNGMRwT4iA9jQ+7j341VrD+aiQYjfCxZXq4 +fi/tEV2EQh5847AlVjFursASpi0fRbfxeLnuyLMjeEkFreamS9AQtEGE8yFfyDwx +qUEjFoj2OvqJENecKCZY0SfS54iTF9VJOoJmPYBPcLjyV8YflxLjNMlDbvUUVkLU +HQ8kJuy5mrjEr9IR/wUeyWAcd3zV7lrawMtbt4ap1qtYRBzUQN+a6X4K9J868q1W +bwzP6YJtfcr6Rd7MIxxLOBThvO3mjJX89UClRvpxzhf3TeLuznuoDCVKlSuYCawk +loX/vvhypClFySGcqhtX29CcZCE0ymsopz1bcAbI8Kcx4qjgtfoAM6SNdVYcyJSa +hh0Nro/hWSifVDsM8wOVIcSibQNtESudwMNOZjmRHi2rdkXIwgAPBEQ46eWu8AtT +CfFpnAuBxlwQ5Bd8LCnR7DLrcAEAEQEAAbQhU2FtIExhbnRpbmdhIDxzbG91a2Vu +QGxpYnNkbC5vcmc+iQJUBBMBCAA+FiEECQAQQ2O0ydQiPeFJ2RP+fUth05sFAmlp +ZCwCGwMFCQPCZwAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ2RP+fUth05sw +gQ//SNS25gEBNgKjGdR/XE60QzTCL7LQwx6rDcjkpL0GtqSVAXa5eVeRdI3uZzzx +kpKJRxp3IQPAwaUtyNSpEFoTO1PDHThYrEWklJG8rgRqy6i0i8g2ZY3zKXuyWpnS +P+PJsey3eY6kJaJ0FTA5xTqZLuiw45UN17qQdlEmZ6H0N0lLEP/jKtrSHctGIULW +NEVwF+dTGNLu1+tiDAgvguQCr/nhzarja19a0jjZPSoqldGNTGXlL6cU3FC4fLVO +ybAoj98EHLL1Ax2uDRDGiYdHzmky1WJaNE7fx+sK/Q1VBpYJXuUChiNTDw5O++r6 +tniRVM5ITStc0F8kyDznynKtWuI1mw6nmijV9PP0wwqqWsROtzqmMuKcn+7NDzus +WZzyyJulaymiHreV4E/y9Zdv1MMi7SUNOWrQ5A3a8VWd94S9X1nFVNOGKqpFJgt6 +XQsf/fqE0L44Ej/gBYFhHCDxGdrSQTYlnMnX/MH4TCOdEVaN/HDpb0rCRWAbBZnq +VUds2DkdJegF37FdhLFkE4BTuknaDJ4QWtHr4QPwjytXHt5ott/0GLH4mwzU+Dqq +nmmbP5Ir/cMYyoDrHEYLAvIRM+otn9/uLsCI3iqI5rExZPjNN6PKCFBMmS+Tm6Sn +nKHVNDS/DeR1414Iccl6iqiq8VafQbPCcA1Rk1sC3UJmaa+5Ag0EaWlkLAEQAMMU +xVwtU4q9gsJZYwCQ+9jeGQ12pPsFOPN+afbkleDmqbo4RCoCvTpQMumsqhdOJLoa +TEtDbfoxwpZvP+Go8pC60fMWbK8bYr7M4l6T+RP89ppjXAjr3Opg6ubXCrQSwkE5 +hFZmGzI3I7Lv3lDI11nsWbKkbSqfeEi112ZUeIpYZSycYyl3ZlfTHB5k/8DxMd2Y +iw9g/Z1LO7IMeBBvlyU42MZ6gr5FrGLf5++ALXb6skPT+1t5FzfurANyhterzRBa +Peo0gIYVgdmkvTYn6v++KFYExk1q2M0fa8NokXPHl+VwSDjkJdugTOAc3LWY8DEo +qi3BcC7xrmnbS8Et4X/LqM8XIEcAcKRveSPytNqMbgwKn3gzUS7QKbuUQHeA2+cA +JNhRXsmj5TvlZODXhGt4RyjTue0iW8wEh2sACCAusamI+/TQmhxvpnDX4z5A9gMd +0ORMahh8YWLxRTiJt3dHvDHtLzCJJsPJ7kezXR6iOGMqWoZk25bUSsvEcyY5hHr2 +tn22ACfnTsnrX7phzW+ioXDuiaSmFkjsZKXbaRnnv4ieZdRuqXBGFEtKIBYgdyT6 +Q9c/IjrKqMUwVrh05fiBPMIDtKbWWrpj13my1UauZXRdhjkc1J/p449DMoTh8UKc +nWO92Ifo86QqMvFigaJPlNVcpS8Qn1uv7UBK7KtdABEBAAGJAjwEGAEIACYWIQQJ +ABBDY7TJ1CI94UnZE/59S2HTmwUCaWlkLAIbDAUJA8JnAAAKCRDZE/59S2HTm9Mp +D/9voRZP7MRLYrtauONvvN+iz5zxvPNwtSs9KIuB4L5F6XyVW5xy2nb1SBkZXFuo +9hEvV1Ycoj6qTzyG+mSN2b7eWqgBoL8wFCVsrOnFekQ/uIi6GT5WtZyMHa0Uc/su +xkA8XalMm0zmqPaqNk5h0W7I8NW1+AgSiomB9lUiDM6lrxwnDSF86C98iCnFzRmi +OPq9U/wvWlYkRHWiCasgE7ob/ohNNY+/SFhVnVwCoxfU7DQ6/4K5XWab9dNqCvmv +m0f2kObxtnEgxkbiMXIoVIE00T4XgocAin/7iOAHemMoBx6J+y8EkSbcXJkMdUuI +s0iMGHb6DsskkiZOGGfjuAMEpirCqNLTM8SO3IEDH1+22tz+IFjEoPx+/wPh2r5y +gK/FASoLcjOGz+gz6z1jfI0Pp5FN1uAfdAKk2ic1ooI8ofAGLtRGvQboVD5Q9HdW +Ed+il9DRDul0iTVMEUgFx+2a2YlkM0gVn7O5ChQOy0y32715qcokEI0pbn3dLpAN +3316AaQl+J1sL1/fNuHCaWtLOmUX35UxhzI9s4/S/t3iHKGZmA0fKcmvA//mJO2D +VR3y5bxByTgHzxooFGVIskpmVyMdfUoQei8354t1ZnomO6GJj6/4hWN/NcJhNEcy +yLx0PG7u6b5UX1rRcpPoUbhRYPIPolWA0Zxl64Q7zBIrSA== +=cK/M -----END PGP PUBLIC KEY BLOCK----- ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.nKPEGx/_old 2026-04-07 16:47:16.156483651 +0200 +++ /var/tmp/diff_new_pack.nKPEGx/_new 2026-04-07 16:47:16.160483816 +0200 @@ -1,5 +1,5 @@ -mtime: 1752504362 -commit: 3392a9e4eaa4da4e81804c17b80d47ed045223b5fdbf73a1346425c755c125c5 +mtime: 1775383140 +commit: 1a07ddda48a775c02a63d38f1eb65bbd99513acfc07c733e2fc3f8bf151a1df6 url: https://src.opensuse.org/jengelh/SDL2_image revision: master ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-04-05 11:59:10.000000000 +0200 @@ -0,0 +1 @@ +.osc
