Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package OpenImageDenoise for openSUSE:Factory checked in at 2026-10-05 13:05:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/OpenImageDenoise (Old) and /work/SRC/openSUSE:Factory/.OpenImageDenoise.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "OpenImageDenoise" Mon Oct 5 13:05:11 2026 rev:13 rq:1382116 version:2.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/OpenImageDenoise/OpenImageDenoise.changes 2026-08-19 18:02:21.536692869 +0200 +++ /work/SRC/openSUSE:Factory/.OpenImageDenoise.new.3698736/OpenImageDenoise.changes 2026-10-05 13:05:15.694966834 +0200 @@ -1,0 +2,8 @@ +Tue Sep 29 10:05:03 UTC 2026 - Tomáš Chvátal <[email protected]> + +- Add OpenImageDenoise-ssp-strong.patch: upstream appends the basic + -fstack-protector to the release flags in cmake/oidn_platform.cmake, + which downgrades the distro -fstack-protector-strong default; use + -fstack-protector-strong instead. + +------------------------------------------------------------------- New: ---- OpenImageDenoise-ssp-strong.patch ----------(New B)---------- New: - Add OpenImageDenoise-ssp-strong.patch: upstream appends the basic -fstack-protector to the release flags in cmake/oidn_platform.cmake, ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ OpenImageDenoise.spec ++++++ --- /var/tmp/diff_new_pack.5RCFbj/_old 2026-10-05 13:05:17.013021967 +0200 +++ /var/tmp/diff_new_pack.5RCFbj/_new 2026-10-05 13:05:17.017022134 +0200 @@ -39,6 +39,10 @@ Source: https://github.com/%{name}/%{pkgname}/releases/download/v%{version}/%{pkgname}-%{version}.src.tar.gz Source99: series Patch1: add-parallel-jobs.patch +# Upstream appends the basic -fstack-protector to the release flags, which +# downgrades the distro -fstack-protector-strong default; use the strong +# variant instead so binaries keep the stronger protection. +Patch2: OpenImageDenoise-ssp-strong.patch BuildRequires: cmake >= 3.1 BuildRequires: ninja %if %{with hip} ++++++ OpenImageDenoise-ssp-strong.patch ++++++ --- oidn-2.5.1.orig/cmake/oidn_platform.cmake 2026-08-13 23:50:58.990384800 +0000 +++ oidn-2.5.1/cmake/oidn_platform.cmake @@ -253,7 +253,7 @@ append(OIDN_C_CXX_FLAGS "/guard:cf") else() - append(OIDN_C_CXX_FLAGS_RELEASE "-fstack-protector") + append(OIDN_C_CXX_FLAGS_RELEASE "-fstack-protector-strong") if(UNIX) append(OIDN_C_CXX_FLAGS "-fPIC -Wformat -Wformat-security")
