Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libjpeg-turbo for openSUSE:Factory checked in at 2026-11-03 17:53:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libjpeg-turbo (Old) and /work/SRC/openSUSE:Factory/.libjpeg-turbo.new.1257 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libjpeg-turbo" Tue Nov 3 17:53:18 2026 rev:79 rq:1394434 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/libjpeg-turbo/libjpeg-turbo.changes 2026-09-04 12:36:07.472554038 +0200 +++ /work/SRC/openSUSE:Factory/.libjpeg-turbo.new.1257/libjpeg-turbo.changes 2026-11-03 17:54:11.215863187 +0100 @@ -1,0 +2,48 @@ +Sun Nov 1 22:14:47 UTC 2026 - Dirk Müller <[email protected]> + +- update to 3.2.1: + * Fixed a regression that broke Unix builds where + position-independent code was disabled for static + libraries. Workaround: set + CMAKE_POSITION_INDEPENDENT_CODE or use a toolchain that + enables PIC automatically. + * Sped up RGB-to-baseline JPEG compression by 10-17% with + the accurate integer DCT algorithm on RISC-V Vector + (RVV) hardware, using strided segment load and + multiply-accumulate intrinsics. + * Hid symbols of the in-tree zlib and libspng + implementations and renamed the zlib symbols, so static + TurboJPEG API users do not expose or call them by + accident. + * Fixed an integer overflow and buffer overrun in + tj3LoadImage12() and tj3LoadImage16() when a 32-bit + build loads a packed-pixel image with more than 2^31 + components. + * Fixed a division by zero (CVE-2026-75466) when loading + a non-grayscale indexed-color PNG image with + TJPF_UNKNOWN pixel format. + * Fixed wrong chrominance from tj3DecompressToYUV*() for + 4:2:0, 4:1:0 and 2:4 images with the fast IDCT and 1/2 + scaling. + * Fixed a buffer overrun and segfault when partially + decompressing a crafted 4:2:0 image with merged + upsampling, SIMD disabled and a crop that leaves 1-2 + samples per component plane. + * Hardened the libjpeg API against 12-bit full-color + decompression with one-pass quantization and RGB565 + conversion enabled. + * Fixed jpeg*_skip_scanlines() with non-fancy upsampling: + wrong scanline count, or skipped scanlines returned + later. + * Hardened the TurboJPEG API against an ignored fatal + error from tj3DecompressHeader() followed by a retry + with a valid image. This could report wrong dimensions + and cause a too-small output buffer. + * Made tj3DecompressHeader() always drop a previously + extracted ICC profile, so tj3GetICCProfile() and + tj3TransformBufSize() no longer see stale data. + * Made tj3TransformBufSize() account for all extra + markers copied to the destination: comments, JFIF + thumbnails and Exif data. + +------------------------------------------------------------------- Old: ---- libjpeg-turbo-3.2.0.tar.gz libjpeg-turbo-3.2.0.tar.gz.sig New: ---- libjpeg-turbo-3.2.1.tar.gz libjpeg-turbo-3.2.1.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libjpeg-turbo.spec ++++++ --- /var/tmp/diff_new_pack.Vn9LhO/_old 2026-11-03 17:54:12.568919739 +0100 +++ /var/tmp/diff_new_pack.Vn9LhO/_new 2026-11-03 17:54:12.570919823 +0100 @@ -39,7 +39,7 @@ %endif %define libver %{major}.%{minor}.%{micro} Name: %{flavor} -Version: 3.2.0 +Version: 3.2.1 Release: 0 Summary: A SIMD-accelerated library for manipulating JPEG image files License: BSD-3-Clause ++++++ libjpeg-turbo-3.2.0.tar.gz -> libjpeg-turbo-3.2.1.tar.gz ++++++ ++++ 5301 lines of diff (skipped)
