Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libjpeg-turbo for openSUSE:Factory checked in at 2026-04-16 17:24:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libjpeg-turbo (Old) and /work/SRC/openSUSE:Factory/.libjpeg-turbo.new.11940 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libjpeg-turbo" Thu Apr 16 17:24:59 2026 rev:76 rq:1346361 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/libjpeg-turbo/libjpeg-turbo.changes 2025-09-18 21:08:13.853282616 +0200 +++ /work/SRC/openSUSE:Factory/.libjpeg-turbo.new.11940/libjpeg-turbo.changes 2026-04-16 17:25:02.842682343 +0200 @@ -1,0 +2,85 @@ +Fri Apr 10 19:09:23 UTC 2026 - Dirk Müller <[email protected]> + +- update to 3.1.4.1: + * Fixed an issue in the TurboJPEG 2.x compatibility wrapper + whereby, if a calling program attempted to decompress a + lossless JPEG image using `tjDecompress2()` with decompression + scaling, the decompressed image was unexpectedly unscaled. + * The SIMD dispatchers now use `getauxval()` or `elf_aux_info()`, + if available, to detect support for Neon and AltiVec + instructions on AArch32 and PowerPC Linux, Android, and + *BSD systems. + * Hardened the libjpeg API against hypothetical applications + that may erroneously set one of the exposed quantization + table values to 0 just before calling `jpeg_start_compress()`. + * Fixed a division-by-zero error that occurred when attempting + to use the jpegtran `-drop` option with a specially-crafted + malformed drop + * a memory leak that occurred if a pre-allocated JPEG destination + buffer was passed to `tj3Compress*()` or `tj3Transform()`, + `TJPARAM_NOREALLOC` was unset, and it was necessary for the + library to re-allocate the buffer to accommodate the + destination image + * a potential caller double free that occurred if + pre-allocated JPEG destination buffers were passed to + `tj3Transform()`, multiple lossless transform operations + were performed, and it was necessary + for the library to re-allocate the second buffer to + accommodate the second destination image. + * Fixed an issue in `tj3Transform()` whereby, if + `TJPARAM_SAVEMARKERS` was set to 2 or 4, `TJXOPT_COPYNONE` was + not specified, an ICC profile was extracted from the source image, + and another ICC profile was associated with the TurboJPEG + instance using `tj3SetICCProfile()`, both profiles were embedded + in the destination image. The documented API behavior is for + `qTJXOPT_COPYNONE` to take precedence over `TJPARAM_SAVEMARKERS` + and for `TJPARAM_SAVEMARKERS` to take precedence over the + associated ICC profile. Thus, `tj3Transform()` now + ignores the associated ICC profile unless `TJXOPT_COPYNONE` is + specified or `TJPARAM_SAVEMARKERS` is set to something other than 2 + or 4. + * Fixed an oversight in the libjpeg API whereby, if a calling + application manually set `cinfo.Ss` (the predictor selection + value) to a value less than 1 or greater than 7 after calling + `jpeg_enable_lossless()` and prior to calling + `jpeg_start_compress()`, an incorrect (all white) lossless JPEG + image was silently generated. + * Further hardened the TurboJPEG Java API against hypothetical + applications that may erroneously pass huge values to one of the + compression, YUV encoding, decompression, YUV decoding, or + packed-pixel image I/O methods, leading to signed integer + overflow in the JNI wrapper's buffer size checks that rendered + those checks ineffective. + +------------------------------------------------------------------- +Sun Dec 28 23:36:10 UTC 2025 - Dirk Müller <[email protected]> + +- update to 3.1.3: + * Hardened the TurboJPEG API against hypothetical applications + that may erroneously call `tj*Compress*()` or `tj*Transform()` + with a reused JPEG destination buffer pointer while specifying + a destination buffer size of 0. + * Hardened the TurboJPEG API against hypothetical applications + that may erroneously set `TJPARAM_LOSSLESS` or + `TJPARAM_COLORSPACE` prior to calling `tj3EncodeYUV*8()` or + `tj3CompressFromYUV*8()`. `tj3EncodeYUV*8()` and + tj3CompressFromYUV*8()` now ignore `TJPARAM_LOSSLESS` and + `TJPARAM_COLORSPACE`. + * Hardened the TurboJPEG Java API against hypothetical + applications that may erroneously pass huge X or Y offsets to + one of the compression, YUV encoding, decompression, or YUV + decoding methods, leading to signed integer overflow in the + JNI wrapper's buffer size checks that rendered those checks + ineffective. + * Fixed an issue in the TurboJPEG Java API whereby + `TJCompressor.getSourceBuf()` sometimes returned the buffer + from a previous invocation of `TJCompressor.loadSourceImage()` + if the target data precision was changed before the most + recent invocation. + * Fixed an issue in the PPM reader that caused incorrect pixels + to be generated when using `tj3LoadImage*()` or + `TJCompressor.loadSourceImage()` to load a PBMPLUS (PPM/PGM) + file into a CMYK buffer with a different data + precision than that of the file. + +------------------------------------------------------------------- Old: ---- libjpeg-turbo-3.1.2.tar.gz libjpeg-turbo-3.1.2.tar.gz.sig New: ---- libjpeg-turbo-3.1.4.1.tar.gz libjpeg-turbo-3.1.4.1.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libjpeg-turbo.spec ++++++ --- /var/tmp/diff_new_pack.rPRZgu/_old 2026-04-16 17:25:03.662716127 +0200 +++ /var/tmp/diff_new_pack.rPRZgu/_new 2026-04-16 17:25:03.666716292 +0200 @@ -1,7 +1,7 @@ # # spec file for package libjpeg-turbo # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -39,7 +39,7 @@ %endif %define libver %{major}.%{minor}.%{micro} Name: %{flavor} -Version: 3.1.2 +Version: 3.1.4.1 Release: 0 Summary: A SIMD-accelerated library for manipulating JPEG image files License: BSD-3-Clause ++++++ libjpeg-turbo-3.1.2.tar.gz -> libjpeg-turbo-3.1.4.1.tar.gz ++++++ ++++ 54465 lines of diff (skipped)
