Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libjxl for openSUSE:Factory checked in at 2026-08-18 16:35:37 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libjxl (Old) and /work/SRC/openSUSE:Factory/.libjxl.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libjxl" Tue Aug 18 16:35:37 2026 rev:27 rq:1371580 version:0.12.0 Changes: -------- --- /work/SRC/openSUSE:Factory/libjxl/libjxl.changes 2026-05-30 22:54:48.660086286 +0200 +++ /work/SRC/openSUSE:Factory/.libjxl.new.1258/libjxl.changes 2026-08-18 16:35:53.503658793 +0200 @@ -1,0 +2,27 @@ +Thu Jul 2 08:40:54 UTC 2026 - Jan Engelhardt <[email protected]> + +- Update to release 0.12 + * A new buffering flag is now available in the CLI, alongside + support for streaming input with buffered output. + * Introduced the new `jxltran` tool, which supports extracting + codestreams from `jxlp` boxes and packing raw codestreams into + `jxlc` boxes. + * Added the `--reconstruct_jpeg flag` to the `djxl` utility to + losslessly reconstruct a JPEG and fail if impossible. + * tools: added support for `ProPhoto`, and `Adobe98`/`AdobeRGB` + color space names in CLI arguments (cjxl / djxl). + * decoder API: support for out-of-order `jxlp` boxes (ftyp minor + version 1). +- jpegli tools were removed by release 0.12 +- Delete libjxl-CVE-2025-70103.patch (merged), + libjxl-CVE-2026-52584.patch (merged), + system-jpeg.diff (obsolete) +- Add notail.patch + +------------------------------------------------------------------- +Wed Jul 2 00:59:43 UTC 2026 - Jonathan Kang <[email protected]> + +- Add libjxl-CVE-2026-52584.patch: Fix possible overflow in APNG + decoder (bsc#1271810, CVE-2026-52584). + +------------------------------------------------------------------- Old: ---- b2e692629c1fb19342517d7fb61f1cf83d075492.tar.gz libjxl-CVE-2025-70103.patch system-jpeg.diff v0.11.2.tar.gz New: ---- 96d9171c94b937a1b5f0293de7309ac16311b722.tar.gz notail.patch v0.12.0.tar.gz ----------(Old B)---------- Old:- jpegli tools were removed by release 0.12 - Delete libjxl-CVE-2025-70103.patch (merged), libjxl-CVE-2026-52584.patch (merged), Old: libjxl-CVE-2026-52584.patch (merged), system-jpeg.diff (obsolete) - Add notail.patch ----------(Old E)---------- ----------(New B)---------- New: system-jpeg.diff (obsolete) - Add notail.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libjxl.spec ++++++ --- /var/tmp/diff_new_pack.8qyVB5/_old 2026-08-18 16:35:54.466693245 +0200 +++ /var/tmp/diff_new_pack.8qyVB5/_new 2026-08-18 16:35:54.468693317 +0200 @@ -16,7 +16,7 @@ # -%define lname libjxl0_11 +%define lname libjxl0_12 %if "@BUILD_FLAVOR@" == "gtk" Name: libjxl-gtk %bcond_without gtk @@ -24,7 +24,7 @@ Name: libjxl %bcond_with gtk %endif -Version: 0.11.2 +Version: 0.12.0 Release: 0 Summary: JPEG XL reference implementation License: BSD-3-Clause @@ -33,11 +33,10 @@ Source: https://github.com/libjxl/libjxl/archive/refs/tags/v%version.tar.gz Source1: baselibs.conf # `git ls-tree <jxl_tag> third_party/skcms` gives the SKCMS revision needed for a particular libjxl release -%define skcms_commit b2e692629c1fb19342517d7fb61f1cf83d075492 -#changes-too-damn-often: https://skia.googlesource.com/skcms/+archive/%skcms_commit.tar.gz +%define skcms_commit 96d9171c94b937a1b5f0293de7309ac16311b722 +#changes-too-damn-often: https://skia.googlesource.com/skcms/+archive/%%skcms_commit.tar.gz Source2: %skcms_commit.tar.gz -Patch1: system-jpeg.diff -Patch2: libjxl-CVE-2025-70103.patch +Patch1: notail.patch BuildRequires: asciidoc BuildRequires: c++_compiler BuildRequires: cmake @@ -115,10 +114,11 @@ for example, on file-browsers. %prep -%autosetup -n libjxl-%version -p1 +%setup -n libjxl-%version # can't use %%autosetup -a2 because archive has no leading path mkdir -p third_party/skcms/ tar -xf %{SOURCE2} -C third_party/skcms/ +%autopatch -p1 %build %if 0%{?sle_version} == 150700 @@ -158,7 +158,6 @@ %_libdir/libjxl*.so.* %files tools -%_bindir/?jpegli %_bindir/*xl* %_mandir/man*/*xl* ++++++ b2e692629c1fb19342517d7fb61f1cf83d075492.tar.gz -> 96d9171c94b937a1b5f0293de7309ac16311b722.tar.gz ++++++ /work/SRC/openSUSE:Factory/libjxl/b2e692629c1fb19342517d7fb61f1cf83d075492.tar.gz /work/SRC/openSUSE:Factory/.libjxl.new.1258/96d9171c94b937a1b5f0293de7309ac16311b722.tar.gz differ: char 130, line 1 ++++++ _scmsync.obsinfo ++++++ --- /var/tmp/diff_new_pack.8qyVB5/_old 2026-08-18 16:35:54.534695678 +0200 +++ /var/tmp/diff_new_pack.8qyVB5/_new 2026-08-18 16:35:54.537695785 +0200 @@ -1,5 +1,5 @@ -mtime: 1780043375 -commit: 4c4324345f5a27dfd35aacf6f5f0f7f7d23b0b58929ec0109752e0280606d97d +mtime: 1786933125 +commit: 812f7dbc68cb152b02d07f9a9c44d9f7ab1d3c5826d15276f19708459d2ff772 url: https://src.opensuse.org/jengelh/libjxl revision: master ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.8qyVB5/_old 2026-08-18 16:35:54.557696501 +0200 +++ /var/tmp/diff_new_pack.8qyVB5/_new 2026-08-18 16:35:54.560696608 +0200 @@ -1,2 +1,2 @@ -libjxl0_11 +libjxl0_12 ++++++ build.specials.obscpio ++++++ ++++++ build.specials.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/.gitignore new/.gitignore --- old/.gitignore 1970-01-01 01:00:00.000000000 +0100 +++ new/.gitignore 2026-08-17 04:18:45.000000000 +0200 @@ -0,0 +1 @@ +.osc ++++++ notail.patch ++++++ From: <[email protected]> Date: 2026-07-02 17:46:45.510543906 +0200 Workaround unnecessary compile failure on i586. (clang-22 is fine, gcc-15/16 is not) ``` In file included from ~/jxl/third_party/skcms/src/skcms_TransformBaseline.cc:47: ~/jxl/third_party/skcms/src/Transform_inl.h: In function ‘void skcms_private::baseline::Exec_swap_rb(StageList, const void**, const char*, char*, F, F, F, F, int)’: ~/jxl/third_party/skcms/src/Transform_inl.h:818:71: error: cannot tail-call: tail call production failed 818 | DECLARE_STAGE(name, arg, [[clang::musttail]] return (*list.fn)(list, ctx, src, dst, \ | ~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~ 819 | r, g, b, a, i)) | ~~~~~~~~~~~~~~ ~/jxl/third_party/skcms/src/Transform_inl.h:812:13: note: in definition of macro ‘DECLARE_STAGE’ 812 | CALL_NEXT; \ | ^~~~~~~~~ ~/jxl/third_party/skcms/src/Transform_inl.h:1082:1: note: in expansion of macro ‘STAGE’ 1082 | STAGE(swap_rb, NoCtx) { | ^~~~~ ``` --- third_party/skcms/src/Transform_inl.h | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) Index: libjxl-0.12.0/third_party/skcms/src/Transform_inl.h =================================================================== --- libjxl-0.12.0.orig/third_party/skcms/src/Transform_inl.h +++ libjxl-0.12.0/third_party/skcms/src/Transform_inl.h @@ -815,7 +815,7 @@ struct Ctx { SI void Exec_##name##_k(arg, STAGE_PARAMS(&)) #define STAGE(name, arg) \ - DECLARE_STAGE(name, arg, [[clang::musttail]] return (*list.fn)(list, ctx, src, dst, \ + DECLARE_STAGE(name, arg, return (*list.fn)(list, ctx, src, dst, \ r, g, b, a, i)) #define FINAL_STAGE(name, arg) \ ++++++ v0.11.2.tar.gz -> v0.12.0.tar.gz ++++++ ++++ 82508 lines of diff (skipped)
