Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package jbigkit for openSUSE:Factory checked in at 2026-10-24 22:03:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/jbigkit (Old) and /work/SRC/openSUSE:Factory/.jbigkit.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "jbigkit" Sat Oct 24 22:03:49 2026 rev:13 rq:1387176 version:2.2 Changes: -------- --- /work/SRC/openSUSE:Factory/jbigkit/jbigkit.changes 2023-12-20 21:01:08.368028899 +0100 +++ /work/SRC/openSUSE:Factory/.jbigkit.new.2252680/jbigkit.changes 2026-10-24 22:04:57.490432899 +0200 @@ -1,0 +2,22 @@ +Sun Oct 18 05:59:52 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 2.2: + - Robustness release, upgrade is recommended when processing BIE + or PBM/PGM data from untrusted sources. + - The jbig.c decoder now caps the final image layer at 2 GB by + default via the new sd->maxmem limit (adjustable), mitigating + denial of service through excessive image dimensions. + - pbmtojbg and pbmtojbg85 validate PBM/PGM header dimensions and + check size calculations against integer overflow. + - Fixed jbg85_dec_finalheight() macro typo, a jbg_enc_options() + range check, jbgtopbm division by zero, and several converter + file-handling fixes. + - struct jbg_dec_state gained maxmem: libjbig consumers must be + recompiled against the new headers (soname unchanged). + - Dropped jbigkit-CVE-2022-1210.patch, superseded upstream; + rebased jbigkit-2.1-shlib.patch to the 2.2 sources, fixing + parallel-build races in the test programs and test suite. +- Spec cleanup: BuildRequires for gcc and make, + %ldconfig_scriptlets, https source URL. + +------------------------------------------------------------------- Old: ---- jbigkit-2.1.tar.gz jbigkit-CVE-2022-1210.patch New: ---- jbigkit-2.2.tar.gz ----------(Old B)---------- Old: recompiled against the new headers (soname unchanged). - Dropped jbigkit-CVE-2022-1210.patch, superseded upstream; rebased jbigkit-2.1-shlib.patch to the 2.2 sources, fixing ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jbigkit.spec ++++++ --- /var/tmp/diff_new_pack.8vHLJB/_old 2026-10-24 22:04:58.119459224 +0200 +++ /var/tmp/diff_new_pack.8vHLJB/_new 2026-10-24 22:04:58.121459308 +0200 @@ -1,7 +1,7 @@ # # spec file for package jbigkit # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,38 +16,33 @@ # -Name: jbigkit %define ver_maj 2 -%define ver_min 1 +%define ver_min 2 +%define libname libjbig +%define soversion %{ver_maj} +%define libpkg %{libname}%{soversion} +%define devpkg %{libname}-devel +Name: jbigkit Version: %{ver_maj}.%{ver_min} Release: 0 Summary: JBIG1 lossless image compression tools License: GPL-2.0-or-later -Group: Productivity/Graphics/Convertors -URL: http://www.cl.cam.ac.uk/~mgk25/jbigkit/ -Source0: http://www.cl.cam.ac.uk/~mgk25/download/%{name}-%{version}.tar.gz +URL: https://www.cl.cam.ac.uk/~mgk25/jbigkit/ +Source0: https://www.cl.cam.ac.uk/~mgk25/download/%{name}-%{version}.tar.gz Source42: baselibs.conf -Patch0: %{name}-%{version}-shlib.patch -# CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler -Patch1: jbigkit-CVE-2022-1210.patch -BuildRoot: %{_tmppath}/%{name}-%{version}-build +Patch0: jbigkit-2.1-shlib.patch +BuildRequires: gcc +BuildRequires: make -%define libname libjbig -%define soversion %ver_maj -%define libpkg %{libname}%soversion -%define devpkg %{libname}-devel - -%package -n %libpkg +%package -n %{libpkg} Summary: JBIG1 lossless image compression library -Group: System/Libraries -Provides: %libname = %version +Provides: %{libname} = %{version} -%package -n %devpkg +%package -n %{devpkg} Summary: JBIG1 lossless image compression library -- development files -Group: Development/Libraries/C and C++ -Requires: %libpkg = %version +Requires: %{libpkg} = %{version} -%description -n %libpkg +%description -n %{libpkg} JBIG-KIT provides a portable library of compression and decompression functions with a documented interface that you can include very easily into your image or document processing software. In addition, JBIG-KIT @@ -62,7 +57,7 @@ which is commonly referred to as the “JBIG1 standard” -%description -n %devpkg +%description -n %{devpkg} The libjbig-devel package contains files needed for development using the JBIG-KIT image compression library. @@ -74,53 +69,49 @@ %autosetup -p1 %build -export CFLAGS="%optflags -I../libjbig" CXXFLAGS="%optflags" -# Makefile is not parallel-safe -%__make +export CFLAGS="%{optflags} -I../libjbig" CXXFLAGS="%{optflags}" +%make_build %check -%__make test +%make_build test %install -%__install -d %{buildroot}/%_libdir -%__install -m 0755 libjbig/libjbig.so.%version %{buildroot}/%_libdir -%__install -m 0755 libjbig/libjbig85.so.%version %{buildroot}/%_libdir -%__ln_s -f libjbig.so.%version %{buildroot}/%{_libdir}/libjbig.so.%soversion -%__ln_s -f libjbig85.so.%version %{buildroot}/%{_libdir}/libjbig85.so.%soversion -%__ln_s -f libjbig.so.%version %{buildroot}/%{_libdir}/libjbig.so -%__ln_s -f libjbig85.so.%version %{buildroot}/%{_libdir}/libjbig85.so - -%__install -d %{buildroot}%_includedir -%__install -m 0644 libjbig/jbig*.h %{buildroot}%_includedir - -%__install -d %{buildroot}%_bindir -%__install -m 0755 pbmtools/pbmtojbg %{buildroot}%_bindir -%__install -m 0755 pbmtools/jbgtopbm %{buildroot}%_bindir -%__install -m 0755 pbmtools/pbmtojbg85 %{buildroot}%_bindir -%__install -m 0755 pbmtools/jbgtopbm85 %{buildroot}%_bindir - -%__install -d %{buildroot}%{_mandir}/man1 -%__install -m 0644 pbmtools/*.1 %{buildroot}%{_mandir}/man1 -%__ln_s -f pbmtojbg.1 %{buildroot}%{_mandir}/man1/pbmtojbg85.1 -%__ln_s -f jbgtopbm.1 %{buildroot}%{_mandir}/man1/jbgtopbm85.1 - -%post -n %libpkg -p /sbin/ldconfig +install -d %{buildroot}/%{_libdir} +install -m 0755 libjbig/libjbig.so.%{version} %{buildroot}/%{_libdir} +install -m 0755 libjbig/libjbig85.so.%{version} %{buildroot}/%{_libdir} +ln -s -f libjbig.so.%{version} %{buildroot}/%{_libdir}/libjbig.so.%{soversion} +ln -s -f libjbig85.so.%{version} %{buildroot}/%{_libdir}/libjbig85.so.%{soversion} +ln -s -f libjbig.so.%{version} %{buildroot}/%{_libdir}/libjbig.so +ln -s -f libjbig85.so.%{version} %{buildroot}/%{_libdir}/libjbig85.so + +install -d %{buildroot}%{_includedir} +install -m 0644 libjbig/jbig*.h %{buildroot}%{_includedir} + +install -d %{buildroot}%{_bindir} +install -m 0755 pbmtools/pbmtojbg %{buildroot}%{_bindir} +install -m 0755 pbmtools/jbgtopbm %{buildroot}%{_bindir} +install -m 0755 pbmtools/pbmtojbg85 %{buildroot}%{_bindir} +install -m 0755 pbmtools/jbgtopbm85 %{buildroot}%{_bindir} + +install -d %{buildroot}%{_mandir}/man1 +install -m 0644 pbmtools/*.1 %{buildroot}%{_mandir}/man1 +ln -s -f pbmtojbg.1 %{buildroot}%{_mandir}/man1/pbmtojbg85.1 +ln -s -f jbgtopbm.1 %{buildroot}%{_mandir}/man1/jbgtopbm85.1 -%postun -n %libpkg -p /sbin/ldconfig +%ldconfig_scriptlets -n %{libpkg} %files -%defattr(-,root,root) %{_bindir}/* -%doc %{_mandir}/man1/* -%doc COPYING ANNOUNCE TODO CHANGES pbmtools/*.txt +%{_mandir}/man1/* +%license COPYING +%doc ANNOUNCE TODO CHANGES pbmtools/*.txt -%files -n %libpkg -%defattr(-,root,root) +%files -n %{libpkg} %{_libdir}/%{libname}*.so.* -%files -n %devpkg -%defattr(-,root,root) +%files -n %{devpkg} %{_libdir}/%{libname}*.so %{_includedir}/jbig*.h -%doc COPYING ANNOUNCE TODO CHANGES libjbig/*.txt +%license COPYING +%doc ANNOUNCE TODO CHANGES libjbig/*.txt ++++++ jbigkit-2.1-shlib.patch ++++++ --- /var/tmp/diff_new_pack.8vHLJB/_old 2026-10-24 22:04:58.157460814 +0200 +++ /var/tmp/diff_new_pack.8vHLJB/_new 2026-10-24 22:04:58.161460982 +0200 @@ -1,7 +1,7 @@ -diff -ruN jbigkit-2.1/libjbig/Makefile jbigkit-2.1-shlib/libjbig/Makefile ---- jbigkit-2.1/libjbig/Makefile 2014-03-27 14:47:15.000000000 -0400 -+++ jbigkit-2.1-shlib/libjbig/Makefile 2014-04-14 19:54:00.000000000 -0400 -@@ -1,28 +1,33 @@ +diff -ruN jbigkit-2.2/libjbig/Makefile jbigkit-2.2-shlib/libjbig/Makefile +--- jbigkit-2.2/libjbig/Makefile 2026-10-10 00:28:59.000000000 +0200 ++++ jbigkit-2.2-shlib/libjbig/Makefile 2026-10-18 08:12:53.025671632 +0200 +@@ -1,32 +1,37 @@ # Unix makefile for the JBIG-KIT library # Select an ANSI/ISO C compiler here, GNU gcc is recommended @@ -11,20 +11,27 @@ # Options for the compiler: A high optimization level is suggested -CFLAGS = -g -O -W -Wall -ansi -pedantic # --coverage +CFLAGS ?= -g -O -W -Wall -ansi -pedantic # --coverage ++CFLAGS += -g +PICFLAGS := -fPIC -DPIC --all: libjbig.a libjbig85.a tstcodec tstcodec85 -+all: libjbig.so.$(SOVERSION) libjbig85.so.$(SOVERSION) tstcodec tstcodec85 +-all: libjbig.a libjbig85.a tstcodec tstcodec85 tstjoint ++all: libjbig.so.$(SOVERSION) libjbig85.so.$(SOVERSION) tstcodec tstcodec85 tstjoint -tstcodec: tstcodec.o jbig.o jbig_ar.o -- $(CC) $(CFLAGS) -o tstcodec tstcodec.o jbig.o jbig_ar.o +- $(CC) $(LDFLAGS) $(CFLAGS) -o tstcodec tstcodec.o jbig.o jbig_ar.o +tstcodec: tstcodec.o libjbig.so -+ $(CC) $(CFLAGS) -o tstcodec $< -L. -ljbig ++ $(CC) $(LDFLAGS) $(CFLAGS) -o tstcodec $< -L. -ljbig -tstcodec85: tstcodec85.o jbig85.o jbig_ar.o -- $(CC) $(CFLAGS) -o tstcodec85 tstcodec85.o jbig85.o jbig_ar.o -+tstcodec85: tstcodec85.o libjbig85.so -+ $(CC) $(CFLAGS) -o tstcodec85 $^ -L. -ljbig +- $(CC) $(LDFLAGS) $(CFLAGS) -o tstcodec85 tstcodec85.o jbig85.o jbig_ar.o ++tstcodec85: tstcodec85.o libjbig85.so libjbig.so ++ $(CC) $(LDFLAGS) $(CFLAGS) -o tstcodec85 $^ -L. -ljbig + +-tstjoint: tstjoint.o jbig.o jbig85.o jbig_ar.o +- $(CC) $(LDFLAGS) $(CFLAGS) -o tstjoint \ +- tstjoint.o jbig.o jbig85.o jbig_ar.o ++tstjoint: tstjoint.o libjbig.so libjbig85.so ++ $(CC) $(LDFLAGS) $(CFLAGS) -o tstjoint tstjoint.o -L. -ljbig -ljbig85 -libjbig.a: jbig.o jbig_ar.o - rm -f libjbig.a @@ -50,14 +57,16 @@ jbig.o: jbig.c jbig.h jbig_ar.h jbig85.o: jbig85.c jbig85.h jbig_ar.h -@@ -43,13 +48,13 @@ +@@ -47,14 +52,14 @@ clang --analyze *.c - test: tstcodec tstcodec85 + test: tstcodec tstcodec85 tstjoint - ./tstcodec - ./tstcodec85 +- ./tstjoint + LD_LIBRARY_PATH=`pwd` ./tstcodec + LD_LIBRARY_PATH=`pwd` ./tstcodec85 ++ LD_LIBRARY_PATH=`pwd` ./tstjoint t82test.pbm: tstcodec - ./tstcodec $@ @@ -66,11 +75,11 @@ clean: rm -f *.o *.gcda *.gcno *.gcov *.plist *~ core gmon.out dbg_d\=??.pbm rm -f t82test.pbm -- rm -f tstcodec tstcodec85 -+ rm -f tstcodec tstcodec85 libjbig*.so libjbig*.so.$(SOVERSION) libjbig*.so.$(VERSION) -diff -ruN jbigkit-2.1/Makefile jbigkit-2.1-shlib/Makefile ---- jbigkit-2.1/Makefile 2014-03-27 14:47:15.000000000 -0400 -+++ jbigkit-2.1-shlib/Makefile 2014-04-14 20:59:40.000000000 -0400 +- rm -f tstcodec tstcodec85 tstjoint ++ rm -f tstcodec tstcodec85 tstjoint libjbig*.so libjbig*.so.$(SOVERSION) libjbig*.so.$(VERSION) +diff -ruN jbigkit-2.2/Makefile jbigkit-2.2-shlib/Makefile +--- jbigkit-2.2/Makefile 2026-10-10 00:28:59.000000000 +0200 ++++ jbigkit-2.2-shlib/Makefile 2026-10-18 08:04:18.432027097 +0200 @@ -1,37 +1,39 @@ # Unix makefile for JBIG-KIT @@ -79,13 +88,13 @@ +CC ?= gcc # Options for the compiler: A high optimization level is suggested --CFLAGS = -O2 -W -Wno-unused-result -+CFLAGS ?= -O2 -W -Wno-unused-result - # CFLAGS = -O -g -W -Wall -Wno-unused-result -ansi -pedantic # -DDEBUG +-CFLAGS = -O2 -W ++CFLAGS ?= -O2 -W + # CFLAGS = -O -g -W -Wall -ansi -pedantic # -DDEBUG export CC CFLAGS - VERSION=2.1 + VERSION=2.2 +SOVERSION = $(basename $(VERSION)) +export VERSION SOVERSION @@ -121,62 +130,73 @@ distribution: rm -rf jbigkit-$(VERSION) -diff -ruN jbigkit-2.1/pbmtools/Makefile jbigkit-2.1-shlib/pbmtools/Makefile ---- jbigkit-2.1/pbmtools/Makefile 2014-03-27 14:47:15.000000000 -0400 -+++ jbigkit-2.1-shlib/pbmtools/Makefile 2014-04-14 21:04:14.000000000 -0400 -@@ -1,29 +1,29 @@ - # Unix makefile for the JBIG-KIT PBM tools +diff -ruN jbigkit-2.2/pbmtools/Makefile jbigkit-2.2-shlib/pbmtools/Makefile +--- jbigkit-2.2/pbmtools/Makefile 2026-10-10 00:28:59.000000000 +0200 ++++ jbigkit-2.2-shlib/pbmtools/Makefile 2026-10-18 08:12:53.025671632 +0200 +@@ -3,31 +3,32 @@ + .DELETE_ON_ERROR: # Select an ANSI/ISO C compiler here, e.g. GNU gcc is recommended -CC = gcc +CC ?= gcc # Options for the compiler --CFLAGS = -g -O -W -Wall -Wno-unused-result -ansi -pedantic # --coverage -+CFLAGS ?= -g -O -W -Wall -Wno-unused-result -ansi -pedantic # --coverage - CPPFLAGS = -I../libjbig +-CFLAGS = -g -O -W -Wall -ansi -pedantic # --coverage ++CFLAGS ?= -g -O -W -Wall -ansi -pedantic # --coverage ++CFLAGS += -g + CPPFLAGS = -I../libjbig + LDFLAGS = -L../libjbig - .SUFFIXES: .1 .5 .txt $(SUFFIXES) - .PHONY: txt test test82 test85 clean + .PHONY: txt pdf test test82 test85 clean -all: pbmtojbg jbgtopbm pbmtojbg85 jbgtopbm85 txt +all: pbmtojbg jbgtopbm pbmtojbg85 jbgtopbm85 # txt txt: pbmtojbg.txt jbgtopbm.txt pbm.txt pgm.txt + pdf: pbmtojbg.pdf jbgtopbm.pdf pbm.pdf pgm.pdf + -pbmtojbg: pbmtojbg.o ../libjbig/libjbig.a +pbmtojbg: pbmtojbg.o ../libjbig/libjbig.so - $(CC) $(CFLAGS) -o pbmtojbg pbmtojbg.o -L../libjbig -ljbig + $(CC) $(LDFLAGS) $(CFLAGS) -o pbmtojbg pbmtojbg.o -ljbig -jbgtopbm: jbgtopbm.o ../libjbig/libjbig.a +jbgtopbm: jbgtopbm.o ../libjbig/libjbig.so - $(CC) $(CFLAGS) -o jbgtopbm jbgtopbm.o -L../libjbig -ljbig + $(CC) $(LDFLAGS) $(CFLAGS) -o jbgtopbm jbgtopbm.o -ljbig -pbmtojbg85: pbmtojbg85.o ../libjbig/libjbig85.a +pbmtojbg85: pbmtojbg85.o ../libjbig/libjbig85.so - $(CC) $(CFLAGS) -o pbmtojbg85 pbmtojbg85.o -L../libjbig -ljbig85 + $(CC) $(LDFLAGS) $(CFLAGS) -o pbmtojbg85 pbmtojbg85.o -ljbig85 -jbgtopbm85: jbgtopbm85.o ../libjbig/libjbig85.a +jbgtopbm85: jbgtopbm85.o ../libjbig/libjbig85.so - $(CC) $(CFLAGS) -o jbgtopbm85 jbgtopbm85.o -L../libjbig -ljbig85 + $(CC) $(LDFLAGS) $(CFLAGS) -o jbgtopbm85 jbgtopbm85.o -ljbig85 jbgtopbm.o: jbgtopbm.c ../libjbig/jbig.h -@@ -31,13 +31,13 @@ +@@ -35,18 +36,20 @@ jbgtopbm85.o: jbgtopbm85.c ../libjbig/jbig85.h pbmtojbg85.o: pbmtojbg85.c ../libjbig/jbig85.h -../libjbig/libjbig.a: ../libjbig/jbig.c ../libjbig/jbig.h \ +../libjbig/libjbig.so: ../libjbig/jbig.c ../libjbig/jbig.h \ ../libjbig/jbig_ar.c ../libjbig/jbig_ar.h -- make -C ../libjbig libjbig.a -+ make -C ../libjbig libjbig.so +- $(MAKE) -C ../libjbig libjbig.a ++ $(MAKE) -C ../libjbig libjbig.so -../libjbig/libjbig85.a: ../libjbig/jbig85.c ../libjbig/jbig85.h \ +../libjbig/libjbig85.so: ../libjbig/jbig85.c ../libjbig/jbig85.h \ ../libjbig/jbig_ar.c ../libjbig/jbig_ar.h -- make -C ../libjbig libjbig85.a -+ make -C ../libjbig libjbig85.so +- $(MAKE) -C ../libjbig libjbig85.a ++ $(MAKE) -C ../libjbig libjbig85.so analyze: clang $(CPPFLAGS) --analyze *.c + +-test: test82 test85 ++test: ++ $(MAKE) test82 ++ $(MAKE) test85 + + test82: pbmtojbg jbgtopbm + $(MAKE) IMG=ccitt1 OPTIONSP= dotest1 ++++++ jbigkit-2.1.tar.gz -> jbigkit-2.2.tar.gz ++++++ ++++ 6337 lines of diff (skipped)
