Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package OpenImageDenoise for
openSUSE:Factory checked in at 2026-08-19 18:00:12
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/OpenImageDenoise (Old)
and /work/SRC/openSUSE:Factory/.OpenImageDenoise.new.1258 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "OpenImageDenoise"
Wed Aug 19 18:00:12 2026 rev:12 rq:1371964 version:2.5.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/OpenImageDenoise/OpenImageDenoise.changes
2026-06-03 20:29:44.139406304 +0200
+++
/work/SRC/openSUSE:Factory/.OpenImageDenoise.new.1258/OpenImageDenoise.changes
2026-08-19 18:02:21.536692869 +0200
@@ -1,0 +2,45 @@
+Wed Aug 19 00:06:11 UTC 2026 - Marcus Rueckert <[email protected]>
+
+- Update to 2.5.1
+ - Fixed integer overflows which could cause out-of-bounds reads
+ or writes instead of an error if a very large byte offset was
+ passed to oidnReadBuffer, oidnWriteBuffer or
+ oidnSetFilterImage, or a very large pixel or row stride was
+ passed to oidnSetFilterImage or oidnSetSharedFilterImage
+ - Fixed oidnSetSharedFilterImage accepting a byte offset large
+ enough to make the address of the image overflow instead of
+ returning an error
+ - Fixed oidnSetFilterImage and oidnSetSharedFilterImage
+ truncating the width and height of the image to 32 bits, which
+ could silently denoise a much smaller image instead of
+ returning an error
+ - Fixed a crash if a null array of command queues was passed to
+ oidnNewMetalDevice, which now returns an error instead
+ - Fixed leaking the imported memory object on CUDA and HIP
+ devices if oidnNewSharedBufferFromFD or
+ oidnNewSharedBufferFromWin32Handle failed after the handle had
+ already been imported
+ - Fixed oidnReadBuffer and oidnWriteBuffer failing with an
+ out-of-memory error on Metal devices if the specified byte size
+ was 0
+ - Fixed a signed integer overflow when denoising very large
+ single-channel images, close to the maximum supported number of
+ pixels
+ - Fixed out-of-bounds reads and crashes caused by insufficient
+ validation of the weights blob set with
+ oidnSetSharedFilterData, which could occur if the blob was
+ corrupted or malicious
+ - Fixed a crash (division by zero) if the weights blob set with
+ oidnSetSharedFilterData contained a tensor with a zero
+ dimension
+ - Fixed changes to other filter parameters being discarded when
+ setting an empty data parameter with oidnSetSharedFilterData,
+ which could cause the filter to be executed with an outdated
+ model, corrupting the output image or crashing
+ - Fixed crashes and incorrect output if committing a filter
+ failed due to running out of memory, which could also break the
+ other filters of the device. Executing such a filter now
+ returns an error instead, and the filter can be recovered by
+ committing it again
+
+-------------------------------------------------------------------
Old:
----
oidn-2.5.0.src.tar.gz
New:
----
oidn-2.5.1.src.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ OpenImageDenoise.spec ++++++
--- /var/tmp/diff_new_pack.5k9uqW/_old 2026-08-19 18:02:23.572766014 +0200
+++ /var/tmp/diff_new_pack.5k9uqW/_new 2026-08-19 18:02:23.573766050 +0200
@@ -30,7 +30,7 @@
%define pkgname oidn
Name: OpenImageDenoise
-Version: 2.5.0
+Version: 2.5.1
Release: 0
Summary: Open Image Denoise library
License: Apache-2.0
++++++ oidn-2.5.0.src.tar.gz -> oidn-2.5.1.src.tar.gz ++++++
/work/SRC/openSUSE:Factory/OpenImageDenoise/oidn-2.5.0.src.tar.gz
/work/SRC/openSUSE:Factory/.OpenImageDenoise.new.1258/oidn-2.5.1.src.tar.gz
differ: char 6, line 1
