Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package vips for openSUSE:Factory checked in at 2026-10-24 22:03:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/vips (Old) and /work/SRC/openSUSE:Factory/.vips.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "vips" Sat Oct 24 22:03:50 2026 rev:57 rq:1387179 version:8.18.7 Changes: -------- --- /work/SRC/openSUSE:Factory/vips/vips.changes 2026-08-11 17:13:22.552487784 +0200 +++ /work/SRC/openSUSE:Factory/.vips.new.2252680/vips.changes 2026-10-24 22:04:58.793487432 +0200 @@ -1,0 +2,28 @@ +Sun Oct 18 05:56:00 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 8.18.7: + * tiffload: copy colormaps on page load, check rgba settings + between directories and reject undersized jp2k tiles + * buildlut: limit the output lut size + * hough_line: improve bounds check + * pdfiumload: check for too small buffers + * uhdrload: calculate gain map scale factor with round-to-nearest + * jp2ksave: tag as UNTRUSTED + * header: only parse EXIF metadata for blob values + * jp2kload: more size validation + * openexrload: more validation + * heifload: tag as UNTRUSTED for libheif before 1.23.2 +- These CVEs were fixed upstream before 8.18.5, so this package + is not affected by them: + * CVE-2019-6976 (boo#1123273): fixed in 8.7.4 + * CVE-2019-17534 (boo#1153863): fixed in 8.8.2 + * CVE-2023-40032 (boo#1215232): fixed in 8.14.4 + * CVE-2025-59933 (boo#1250962): fixed in 8.17.2 + * CVE-2026-2913 (boo#1258702): fixed in 8.18.1 + * CVE-2026-69242 (boo#1277494): fixed in 8.18.3 + * CVE-2026-70651 (boo#1277498): fixed in 8.18.3 + * CVE-2026-70652 (boo#1277499): fixed in 8.18.3 + * CVE-2026-70654 (boo#1277501): fixed in 8.18.3 +- Drop obsolete Group: tags + +------------------------------------------------------------------- Old: ---- vips-8.18.5.tar.xz New: ---- vips-8.18.7.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ vips.spec ++++++ --- /var/tmp/diff_new_pack.hhWeD1/_old 2026-10-24 22:04:59.609521584 +0200 +++ /var/tmp/diff_new_pack.hhWeD1/_new 2026-10-24 22:04:59.611521667 +0200 @@ -23,11 +23,10 @@ %define short_version_ 8.0 %define somajor 42 Name: vips -Version: 8.18.5 +Version: 8.18.7 Release: 0 Summary: C/C++ library for processing large images License: LGPL-2.1-only -Group: Development/Libraries/C and C++ URL: https://www.libvips.org Source0: https://github.com/libvips/libvips/releases/download/v%{version}/%{name}-%{version}.tar.xz BuildRequires: cmake @@ -84,7 +83,6 @@ %package -n %{libname}%{somajor} Summary: C/C++ library for processing large images -Group: System/Libraries Requires: vips-modules-%{short_version} >= %{version} %description -n %{libname}%{somajor} @@ -95,7 +93,6 @@ %package -n typelib-1_0-Vips-%{short_version_} Summary: C/C++ library for processing large images -Group: System/Libraries %description -n typelib-1_0-Vips-%{short_version_} VIPS is an image processing system. It is good with large images @@ -105,7 +102,6 @@ %package -n %{libname}-devel Summary: Development files for the VIPS library -Group: Development/Libraries/C and C++ Requires: %{libname}%{somajor} = %{version} Requires: pkgconfig Requires: pkgconfig(gobject-2.0) @@ -119,7 +115,6 @@ %package tools Summary: Command line tools for VIPS library -Group: Productivity/Graphics/Other Requires: %{libname}%{somajor} = %{version} %description tools @@ -128,7 +123,6 @@ %package modules-%{short_version} Summary: Additional modules for libvips -Group: Productivity/Graphics/Other Requires: %{libname}%{somajor} = %{version} %description modules-%{short_version} @@ -136,7 +130,6 @@ %package doc Summary: Documentation for VIPS library -Group: Documentation/Other Requires: %{libname}%{somajor} = %{version} BuildArch: noarch @@ -146,7 +139,6 @@ %package bash-completion Summary: Bash Completion for %{name} -Group: System/Shells Requires: %{name}-tools Requires: bash-completion Supplements: (%{name}-tools and bash) @@ -205,7 +197,7 @@ %files tools %license LICENSE %{_bindir}/vips{,edit,header,thumbnail} -%{_mandir}/man1/vips{,edit,header,thumbnail}.1%{ext_man} +%{_mandir}/man1/vips{,edit,header,thumbnail}.1%{?ext_man} %files doc %license LICENSE ++++++ vips-8.18.5.tar.xz -> vips-8.18.7.tar.xz ++++++ /work/SRC/openSUSE:Factory/vips/vips-8.18.5.tar.xz /work/SRC/openSUSE:Factory/.vips.new.2252680/vips-8.18.7.tar.xz differ: char 26, line 1
