Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package GraphicsMagick for openSUSE:Factory checked in at 2026-06-13 18:45:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/GraphicsMagick (Old) and /work/SRC/openSUSE:Factory/.GraphicsMagick.new.1981 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "GraphicsMagick" Sat Jun 13 18:45:32 2026 rev:105 rq:1358935 version:1.3.47 Changes: -------- --- /work/SRC/openSUSE:Factory/GraphicsMagick/GraphicsMagick.changes 2026-06-11 17:26:22.447847066 +0200 +++ /work/SRC/openSUSE:Factory/.GraphicsMagick.new.1981/GraphicsMagick.changes 2026-06-13 18:46:17.502823472 +0200 @@ -1,0 +2,7 @@ +Fri Jun 12 09:15:19 UTC 2026 - Petr Gajdos <[email protected]> + +- fixed off by one [bsc#1265048] +- modified patches + * GraphicsMagick-CVE-2026-42050.patch + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ GraphicsMagick-CVE-2026-42050.patch ++++++ --- /var/tmp/diff_new_pack.CkhrsE/_old 2026-06-13 18:46:18.154850526 +0200 +++ /var/tmp/diff_new_pack.CkhrsE/_new 2026-06-13 18:46:18.158850692 +0200 @@ -8,7 +8,7 @@ q=p; - while ((*q != '\n') && (*q != '\0')) + while ((*q != '\n') && (*q != '\0') && -+ ((size_t) (q-p) < sizeof(filename))) ++ ((size_t) (q-p+1) < sizeof(filename))) q++; (void) strncpy(filename,p,q-p); filename[q-p]='\0';
