Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ImageMagick for openSUSE:Factory checked in at 2026-10-08 15:13:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ImageMagick (Old) and /work/SRC/openSUSE:Factory/.ImageMagick.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ImageMagick" Thu Oct 8 15:13:39 2026 rev:351 rq:1383270 version:7.1.2.32 Changes: -------- --- /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick.changes 2026-09-23 14:35:07.597778607 +0200 +++ /work/SRC/openSUSE:Factory/.ImageMagick.new.3698736/ImageMagick.changes 2026-10-08 15:14:13.016838680 +0200 @@ -1,0 +2,172 @@ +Wed Oct 7 12:54:24 UTC 2026 - Petr Gajdos <[email protected]> + gemini + +- version update to 7.1.2.32 + * Force the system version of zlib in the libjpeg-turbo build. 5f3ddea + * Preserve Ultra HDR metadata precision #8938 + * Preserve EXIF dimensions during transforms #8937 + * latest autoconf update a6ba226 + * eliminate compiler warnings 3b5dd62 + * eliminate compiler warning 7932a3c + * eliminate compiler warning ba5d752 + * eliminate compile warning 788a643 + * eliminate compile warning 2274d05 + * eliminate compiler warnings 1cea164 + * eliminate compiler warning b501c08 + * eliminate compile warnings 471d079 + * eliminate compiler warning c6eda74 + * ... f604d6d + * eliminate compiler warnings ab76ec8 + * replace deprecated -affine option 7ee5fba + * Corrected the type in the GetMagickModule define. 96cd772 + * Fixed the windows build by reverting some of the changes. f8d3f5e + * Removed unnecessary includes. e168300 + * Restored the cstring includes in Magick++. 1ef6db5 + * Pre-declare libstdc++ global types before MagickCore namespace. 2adb894 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8xmr-6q99-c4x8 af7b850 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cvgp-q487-j22w 0e82a4d + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-8x3v-wr32-qqh4 12db6f0 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jjp4-3fwf-393j 1926ccf + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9f9w-84g3-vp2c 15892fc + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v2x3-wpmg-c4w6 fb743d6 + * eliminate compiler warning ce948a1 + * https://github.com/ImageMagick/ImageMagick/issues/8939 1a0d1b7 + * eliminate compiler warning 5921a78 + * eliminate compiler warning 0fcc3eb + * Fix static libuhdr and module linking #8940 + * latest autoconf update e6eed39 + * fix: preserve destination on UHDR encoder failure #8941 + * https://github.com/ImageMagick/ImageMagick/issues/8939 3501ef3 + * revert cd53798 + * https://github.com/ImageMagick/ImageMagick/issues/8939 72b82a8 + * append random hex code to backup filename 6ace963 + * match destructor to constructor 960adad + * create a secure temporary filename caaad71 + * move O_NOFOLLOW to main IM header 989dfd4 + * fix: preserve UHDR resize filters #8942 + * https://github.com/ImageMagick/ImageMagick/issues/8939 81142c9 + * check for '>' terminator on DOCTYPE 3cb153f + * revert 08328d8 + * improve DOCTYPE block 3ca8bea + * cosmetic a5e13b9 + * more robuse DOCTYPE parser 399d4bd + * Preserve JPEG comments during automatic Ultra HDR decoding #8943 + * Reset gain-map canvas before replaying crops #8944 + * Fix grayscale Ultra HDR base encoding #8945 + * threads heuristic now based on pixel rather than row count 04fd261 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vv56-wmgw-m36w ce92ae0 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2vwg-3g4g-qprm cafc737 + * Compose gain-map crop transforms before rounding #8948 + * eliminate compiler warning 8174e9a + * eliminate compiler warning ab0c467 + * check for connection reset 1532081 + * https://github.com/ImageMagick/ImageMagick/issues/8949 9249cab + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q6h4-6f2h-8hfq 2ec49e6 + * build(deps): bump ubuntu from `2260313` to `513c074` in /.devcontainer #8951 + * Removed incorrect option. c534219 + * Disable more parts of libjpeg-turbo in the oss-fuzz build. 599ebe5 + * Honor quality settings when transforming retained gain maps #8947 + * Revert some of the oss-fuzz changes. a19ff07 + * Explicitly set the include dir in the oss-fuzz build to fix libjpeg-turbo issue. 3797e92 + * Preserve IPTC profiles during automatic Ultra HDR decoding #8952 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4h52-f5gr-2w2h 2814fa0 + * Cache distributed pixel cache shared secret. 6f04f5f + * Improved method name. ed3e3ab + * No longer include a private header file in a public header file. c9a7583 + * Correct exception throwing method. ecb4d97 + * More corrections of exception throw methods. 0369b85 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9p7q-63hw-mcr4 e4f7ad9 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f983-243h-9x4r b2d579d + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-233r-2p53-wqf5 6cfb8d8 + * eliminate compiler exception ca20b6b + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7q74-r26w-fwcx 9e78949 + * block file descriptor inheritance c9120e9 + * eliminate compiler warning 4129773 + * eliminate compiler exception 1eac014 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5j8x-vq8c-vrp9 5a5c2e5 + * Report buffered output failures when closing blobs #8954 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-58h4-rwr6-wj72 d98509b + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2fgx-26mg-j4f4 15ce9c9 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x 48c49d0 + * eliminate compiler warning 281db90 + * eliminate compiler warning 9efb94b + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-vxwm-jfjc-3r4x 2ed1b96 + * Moved unpacking of libraw image to a separate method. fef349d + * Various security and performance improvements for the ase decoder (GHSA-gwj6-pm7x-3r63) 5ecd5b0 + * Added extra security check (GHSA-gwj6-pm7x-3r63) 0691546 + * https://github.com/ImageMagick/ImageMagick/issues/8957 9bf9100 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-g6p6-3ggg-3w7j f053f77 + * build(deps): bump the codeql-action group with 3 updates #8960 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-f32c-2v6j-wvh5 da4cfd7 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w6hf-vvx5-4qmj 7d3a270 + * build(deps): bump azure/login from 3.0.2 to 3.1.0 #8961 + * build(deps): bump ubuntu from `513c074` to `cd21a4f` in /.devcontainer #8962 + * Don't use the Freetype library handle if the initialization failed #8964 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54hm-vrmh-75qj 48e5ce1 + * Move setting the shred passes to a single method. b5852a5 + * Added missing typecasts. f259c68 + * utilize GetShredPasses() 84e11a0 + * define GetShreadPasses() c1811dd + * build(deps): bump ubuntu from `cd21a4f` to `9559ceb` in /.devcontainer #8965 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-9hqg-c52m-2h83 7ed77f6 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9c7-gf3j-hx6h e9872c4 + * Added missing check for eof in DiscardBlobBytes to prevent a retry loop #8967 + * Terminate the XMP profile collected by the Ghostscript reader #8966 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-92p2-h75x-hg82 4395331 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-j39j-wmxg-j8mv 3285d69 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xxrx-rjp3-27rj aa104ff + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-rvv7-5mh8-vcfc a0ca2c7 + * revert 87d251d + * Escape the title in the CIP encoder (GHSA-3429-f84m-8qhw) 45bb732 + * continue after parsing DOCTYPE b3b8c0a + * Corrected depth check to prevent a stack overflow (GHSA-462x-739v-qvq2) 507aee2 + * https://github.com/ImageMagick/ImageMagick/issues/8969 ba4723a + * https://github.com/ImageMagick/ImageMagick/issues/8968 54fdd95 + * optimize file read checking da4ca6b + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jph3-37cg-79wg 7605c76 + * Corrected the checks in the unit tests. e2a61c6 + * eliminate compiler warnings a89dea9 + * eliminate compiler warnings d956bba + * Updated configure. 9740f6b + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pmqj-84pr-qc7c 6ff963c + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-69jx-j2x2-g5w4 493fab0 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w288-jj5x-hhvp 2eff6be + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-w68r-6fmr-cvg4 1c77632 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hvwf-wmm6-hvc3 fd1b9c8 + * revert 9f41b27 + * check for vector recursion 9bd0fea + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-54rx-5x9g-g465 f7437eb + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8 df199b7 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-h499-883p-vph8 8e80949 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pv8x-gq6w-gp4r 8caa6a0 + * always check >= max recursion depth 93b67e2 + * update coder depth 45a06aa + * Updated the dependencies. 06a4557 + * adapt to changes in the autotrace delegate library e9af328 + * https://github.com/ImageMagick/ImageMagick/issues/8972 8dff70c + * Fixed build error. 367e4fa + * build(deps): bump the codeql-action group with 3 updates #8973 + * Switch to memset to make sure this works with all compilers. 5f5fe85 + * https://github.com/ImageMagick/ImageMagick/issues/8579 d813048 + * Avoid copying the MVG text into every graphic context #8975 + * latest ImageMagick documentation b6300f2 + * Updated the dependencies. 3c76171 + * check coder nesting 02100e2 + * eleiminate compiler warning 8e1b899 + * eliminate compiler warning 92300f8 + * Allocate the dither color cache lazily in small blocks #8976 + * https://github.com/ImageMagick/ImageMagick/discussions/8971 32da2a7 + * eliminate compiler warning b7e4171 + * eliminate compiler warnings 68f8d11 +- modified patches + * ImageMagick-library-installable-in-parallel.patch (refreshed) +- fixes CVE-2026-102635 [bsc#1283768] + CVE-2026-105083 [bsc#1284217] + CVE-2026-106564 [bsc#1284661] + CVE-2026-106565 [bsc#1284662] + CVE-2026-106566 [bsc#1284663] + CVE-2026-106567 [bsc#1284664] + CVE-2026-106568 [bsc#1284665] + CVE-2026-106569 [bsc#1284666] + CVE-2026-106570 [bsc#1284667] + +------------------------------------------------------------------- @@ -64,0 +237,10 @@ + CVE-2026-106575 [bsc#1284673] + CVE-2026-106578 [bsc#1284677] + CVE-2026-106576 [bsc#1284674] + CVE-2026-106577 [bsc#1284675] + CVE-2026-106579 [bsc#1284678] + CVE-2026-106580 [bsc#1284680] + CVE-2026-106571 [bsc#1284668] + CVE-2026-106572 [bsc#1284669] + CVE-2026-106573 [bsc#1284671] + CVE-2026-106574 [bsc#1284672] @@ -130,0 +313,3 @@ + CVE-2026-107208 [bsc#1284681] + CVE-2026-107209 [bsc#1284682] + CVE-2026-107210 [bsc#1284683] Old: ---- ImageMagick-7.1.2-31.tar.xz ImageMagick-7.1.2-31.tar.xz.asc New: ---- ImageMagick-7.1.2-32.tar.xz ImageMagick-7.1.2-32.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ImageMagick.spec ++++++ --- /var/tmp/diff_new_pack.uq71pU/_old 2026-10-08 15:14:15.001921866 +0200 +++ /var/tmp/diff_new_pack.uq71pU/_new 2026-10-08 15:14:15.002921908 +0200 @@ -21,7 +21,7 @@ %define debug_build 0 %define asan_build 0 %define mfr_version 7.1.2 -%define mfr_revision 31 +%define mfr_revision 32 %define quantum_depth 16 %define source_version %{mfr_version}-%{mfr_revision} %define clibver 10 ++++++ ImageMagick-7.1.2-31.tar.xz -> ImageMagick-7.1.2-32.tar.xz ++++++ /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick-7.1.2-31.tar.xz /work/SRC/openSUSE:Factory/.ImageMagick.new.3698736/ImageMagick-7.1.2-32.tar.xz differ: char 15, line 1 ++++++ ImageMagick-configuration-SUSE.patch ++++++ --- /var/tmp/diff_new_pack.uq71pU/_old 2026-10-08 15:14:15.050923919 +0200 +++ /var/tmp/diff_new_pack.uq71pU/_new 2026-10-08 15:14:15.054924087 +0200 @@ -1,8 +1,8 @@ -Index: ImageMagick-7.1.2-27/config/policy-SUSE.xml +Index: ImageMagick-7.1.2-32/config/policy-SUSE.xml =================================================================== ---- ImageMagick-7.1.2-27.orig/config/policy-SUSE.xml -+++ ImageMagick-7.1.2-27/config/policy-SUSE.xml -@@ -65,7 +65,7 @@ +--- ImageMagick-7.1.2-32.orig/config/policy-SUSE.xml ++++ ImageMagick-7.1.2-32/config/policy-SUSE.xml +@@ -71,7 +71,7 @@ <policy domain="resource" name="disk" value="2GiB"/> <!-- Set the maximum length of an image sequence. When this limit is exceeded, an exception is thrown. --> @@ -11,7 +11,7 @@ <!-- Set the maximum width of an image. When this limit is exceeded, an exception is thrown. --> <policy domain="resource" name="width" value="8KP"/> -@@ -88,11 +88,11 @@ +@@ -94,11 +94,11 @@ <!-- Replace passphrase for secure distributed processing --> <!-- <policy domain="cache" name="shared-secret" value="secret-passphrase" stealth="true"/> --> <!-- Do not permit any delegates to execute. --> @@ -25,7 +25,7 @@ <policy domain="path" rights="none" pattern="[Ff][Dd]:*"/> <!-- Sensitive paths are not permitted. --> <policy domain="path" rights="none" pattern="/etc/*"/> -@@ -114,5 +114,21 @@ +@@ -120,5 +120,21 @@ allocation requests. --> <policy domain="system" name="max-memory-request" value="256MiB"/> <!-- If the basename of path is a symbolic link, the open fails --> ++++++ ImageMagick-library-installable-in-parallel.patch ++++++ --- /var/tmp/diff_new_pack.uq71pU/_old 2026-10-08 15:14:15.065924548 +0200 +++ /var/tmp/diff_new_pack.uq71pU/_new 2026-10-08 15:14:15.068924674 +0200 @@ -1,8 +1,8 @@ -Index: ImageMagick-7.1.2-31/configure +Index: ImageMagick-7.1.2-32/configure =================================================================== ---- ImageMagick-7.1.2-31.orig/configure -+++ ImageMagick-7.1.2-31/configure -@@ -37298,7 +37298,9 @@ fi +--- ImageMagick-7.1.2-32.orig/configure ++++ ImageMagick-7.1.2-32/configure +@@ -37448,7 +37448,9 @@ fi # Subdirectory to place architecture-dependent configuration files ++++++ ImageMagick_policy_etc.patch ++++++ --- /var/tmp/diff_new_pack.uq71pU/_old 2026-10-08 15:14:15.096925847 +0200 +++ /var/tmp/diff_new_pack.uq71pU/_new 2026-10-08 15:14:15.100926015 +0200 @@ -1,8 +1,8 @@ -Index: ImageMagick-7.1.2-27/config/policy-limited.xml +Index: ImageMagick-7.1.2-32/config/policy-limited.xml =================================================================== ---- ImageMagick-7.1.2-27.orig/config/policy-limited.xml -+++ ImageMagick-7.1.2-27/config/policy-limited.xml -@@ -85,6 +85,8 @@ +--- ImageMagick-7.1.2-32.orig/config/policy-limited.xml ++++ ImageMagick-7.1.2-32/config/policy-limited.xml +@@ -95,6 +95,8 @@ <!-- <policy domain="path" rights="none" pattern="-"/> --> <!-- don't read sensitive paths. --> <policy domain="path" rights="none" pattern="/etc/*"/> @@ -11,11 +11,11 @@ <!-- Indirect reads are not permitted. --> <policy domain="path" rights="none" pattern="@*"/> <!-- These image types are security risks on read, but write is fine --> -Index: ImageMagick-7.1.2-27/config/policy-open.xml +Index: ImageMagick-7.1.2-32/config/policy-open.xml =================================================================== ---- ImageMagick-7.1.2-27.orig/config/policy-open.xml -+++ ImageMagick-7.1.2-27/config/policy-open.xml -@@ -140,6 +140,8 @@ +--- ImageMagick-7.1.2-32.orig/config/policy-open.xml ++++ ImageMagick-7.1.2-32/config/policy-open.xml +@@ -146,6 +146,8 @@ <!-- <policy domain="path" rights="none" pattern="-"/> --> <!-- don't read sensitive paths. --> <!-- <policy domain="path" rights="none" pattern="/etc/*"/> --> @@ -24,11 +24,11 @@ <!-- Indirect reads are not permitted. --> <!-- <policy domain="path" rights="none" pattern="@*"/> --> <!-- These image types are security risks on read, but write is fine --> -Index: ImageMagick-7.1.2-27/config/policy-secure.xml +Index: ImageMagick-7.1.2-32/config/policy-secure.xml =================================================================== ---- ImageMagick-7.1.2-27.orig/config/policy-secure.xml -+++ ImageMagick-7.1.2-27/config/policy-secure.xml -@@ -96,6 +96,8 @@ +--- ImageMagick-7.1.2-32.orig/config/policy-secure.xml ++++ ImageMagick-7.1.2-32/config/policy-secure.xml +@@ -102,6 +102,8 @@ <policy domain="path" rights="none" pattern="[Ff][Dd]:*"/> <!-- Sensitive paths are not permitted. --> <policy domain="path" rights="none" pattern="/etc/*"/> @@ -37,11 +37,11 @@ <!-- Relative paths are not permitted. --> <policy domain="path" rights="none" pattern="*../*"/> <!-- Indirect reading is not permitted. --> -Index: ImageMagick-7.1.2-27/config/policy-websafe.xml +Index: ImageMagick-7.1.2-32/config/policy-websafe.xml =================================================================== ---- ImageMagick-7.1.2-27.orig/config/policy-websafe.xml -+++ ImageMagick-7.1.2-27/config/policy-websafe.xml -@@ -92,6 +92,8 @@ +--- ImageMagick-7.1.2-32.orig/config/policy-websafe.xml ++++ ImageMagick-7.1.2-32/config/policy-websafe.xml +@@ -98,6 +98,8 @@ <policy domain="path" rights="none" pattern="[Ff][Dd]:*"/> <!-- Sensitive paths are not permitted. --> <policy domain="path" rights="none" pattern="/etc/*"/> @@ -50,11 +50,11 @@ <!-- Relative paths are not permitted. --> <policy domain="path" rights="none" pattern="*../*"/> <!-- Indirect reading is not permitted. --> -Index: ImageMagick-7.1.2-27/config/policy-SUSE.xml +Index: ImageMagick-7.1.2-32/config/policy-SUSE.xml =================================================================== ---- ImageMagick-7.1.2-27.orig/config/policy-SUSE.xml -+++ ImageMagick-7.1.2-27/config/policy-SUSE.xml -@@ -96,6 +96,8 @@ +--- ImageMagick-7.1.2-32.orig/config/policy-SUSE.xml ++++ ImageMagick-7.1.2-32/config/policy-SUSE.xml +@@ -102,6 +102,8 @@ <policy domain="path" rights="none" pattern="[Ff][Dd]:*"/> <!-- Sensitive paths are not permitted. --> <policy domain="path" rights="none" pattern="/etc/*"/>
