Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gegl for openSUSE:Factory checked in at 2026-09-04 12:36:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gegl (Old) and /work/SRC/openSUSE:Factory/.gegl.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "gegl" Fri Sep 4 12:36:14 2026 rev:93 rq:1375020 version:0.4.70 Changes: -------- --- /work/SRC/openSUSE:Factory/gegl/gegl.changes 2026-03-31 15:21:57.191508757 +0200 +++ /work/SRC/openSUSE:Factory/.gegl.new.1265/gegl.changes 2026-09-04 12:36:49.175018203 +0200 @@ -1,0 +2,6 @@ +Mon Aug 31 03:37:07 UTC 2026 - Xiaoguang Wang <[email protected]> + +- Add gegl-CVE-2026-18300.patch: libs/rgbe: fix >200kb report + from ZDI (bsc#1276229, CVE-2026-18300) + +------------------------------------------------------------------- New: ---- gegl-CVE-2026-18300.patch ----------(New B)---------- New: - Add gegl-CVE-2026-18300.patch: libs/rgbe: fix >200kb report from ZDI (bsc#1276229, CVE-2026-18300) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gegl.spec ++++++ --- /var/tmp/diff_new_pack.ho1By2/_old 2026-09-04 12:36:50.024048013 +0200 +++ /var/tmp/diff_new_pack.ho1By2/_new 2026-09-04 12:36:50.026048083 +0200 @@ -35,6 +35,8 @@ Source0: https://download.gimp.org/pub/gegl/0.4/%{name}-%{version}.tar.xz Source1: normalize-gir.pl Source99: baselibs.conf +# PATCH-FIX-UPSTREAM CVE-2026-18300.patch bsc#1276229 [email protected] -- libs/rgbe:fix >200kb report from ZDI +Patch0: gegl-CVE-2026-18300.patch BuildRequires: ImageMagick BuildRequires: asciidoc ++++++ gegl-CVE-2026-18300.patch ++++++ >From 84459efaa78161d129f59af5d62e26d0fd727555 Mon Sep 17 00:00:00 2001 From: Xiaoguang Wang <[email protected]> Date: Mon, 31 Aug 2026 14:22:48 +0800 Subject: [PATCH] libs/rgbe: fix >200kb report from ZDI Backport of d3d262008299341c5b032b354021632ceadb2799 to 0.4.62 (rgbe.c portion only). (cherry picked from commit d3d262008299341c5b032b354021632ceadb2799) --- libs/rgbe/rgbe.c | 4 ++++ 1 file changed, 4 insertions(+) Index: gegl-0.4.70/libs/rgbe/rgbe.c =================================================================== --- gegl-0.4.70.orig/libs/rgbe/rgbe.c +++ gegl-0.4.70/libs/rgbe/rgbe.c @@ -1036,6 +1036,10 @@ rgbe_read_scanlines (rgbe_file *file) g_return_val_if_fail (file, NULL); g_return_val_if_fail (file->scanlines, NULL); + if (file->header.x_axis.size > RGBE_MAX_SCANLINE_WIDTH || + file->header.y_axis.size > RGBE_MAX_SCANLINE_WIDTH) + return NULL; + pixels = pixel_cursor = g_new (gfloat, file->header.x_axis.size * file->header.y_axis.size * RGBE_NUM_RGBE);
