Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package CharLS for openSUSE:Factory checked in at 2026-10-18 19:26:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/CharLS (Old) and /work/SRC/openSUSE:Factory/.CharLS.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "CharLS" Sun Oct 18 19:26:34 2026 rev:17 rq:1385984 version:2.4.5 Changes: -------- --- /work/SRC/openSUSE:Factory/CharLS/CharLS.changes 2023-07-19 19:10:29.500516190 +0200 +++ /work/SRC/openSUSE:Factory/.CharLS.new.3698736/CharLS.changes 2026-10-18 19:27:14.067575217 +0200 @@ -1,0 +2,16 @@ +Sun Oct 18 05:54:58 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 2.4.5: + * Security: heap buffer overflow (write) in jpeg_stream_reader::decode + when a later scan uses a different interleave mode than the first + one (GHSA-vx55-856r-qqxw). No CVE assigned. + * Security: enforce upper bound of 100000 pixels on image width and + height, fixing an out-of-bounds memory access in the decoder via a + crafted oversize_image_dimension marker (GHSA-mqrg-gfc8-73ff). + No CVE assigned. + * Fixed #365: non-conforming padding before EOI prevented decoding. + * Fixed endless loop when the encoded bit stream ends in the middle + of a unary code. +- Drop obsolete Group: tags. + +------------------------------------------------------------------- Old: ---- charls-2.4.2.tar.gz New: ---- charls-2.4.5.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ CharLS.spec ++++++ --- /var/tmp/diff_new_pack.W7ZOFb/_old 2026-10-18 19:27:14.993614016 +0200 +++ /var/tmp/diff_new_pack.W7ZOFb/_new 2026-10-18 19:27:14.994614058 +0200 @@ -1,7 +1,7 @@ # # spec file for package CharLS # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,11 +18,10 @@ %define so_ver 2 Name: CharLS -Version: 2.4.2 +Version: 2.4.5 Release: 0 Summary: A JPEG-LS library License: BSD-3-Clause -Group: Development/Libraries/C and C++ URL: https://github.com/team-charls/charls/ Source0: https://github.com/team-charls/charls/archive/refs/tags/%{version}.tar.gz#/charls-%{version}.tar.gz BuildRequires: cmake @@ -37,7 +36,6 @@ %package devel Summary: Libraries and headers for CharLS -Group: Development/Libraries/C and C++ Requires: libcharls%{so_ver} = %{version} %description devel @@ -45,7 +43,6 @@ %package -n libcharls%{so_ver} Summary: A JPEG-LS library -Group: System/Libraries %description -n libcharls%{so_ver} An optimized implementation of the JPEG-LS standard for lossless and ++++++ charls-2.4.2.tar.gz -> charls-2.4.5.tar.gz ++++++ /work/SRC/openSUSE:Factory/CharLS/charls-2.4.2.tar.gz /work/SRC/openSUSE:Factory/.CharLS.new.3698736/charls-2.4.5.tar.gz differ: char 13, line 1
