Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ImageMagick for openSUSE:Factory checked in at 2026-11-04 19:43:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ImageMagick (Old) and /work/SRC/openSUSE:Factory/.ImageMagick.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ImageMagick" Wed Nov 4 19:43:27 2026 rev:357 rq:1394948 version:7.1.2.35 Changes: -------- --- /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick.changes 2026-10-30 18:04:58.679872611 +0100 +++ /work/SRC/openSUSE:Factory/.ImageMagick.new.3759290/ImageMagick.changes 2026-11-04 19:43:30.806522772 +0100 @@ -1,0 +2,111 @@ +Wed Nov 4 13:50:48 UTC 2026 - Petr Gajdos <[email protected]> + +- added patches [bsc#1282560] + https://github.com/ImageMagick/ImageMagick/issues/9095 + * ImageMagick-tiff-correct-endianess.patch + +------------------------------------------------------------------- +Tue Nov 3 10:12:10 UTC 2026 - Petr Gajdos <[email protected]> + +- version update to 7.1.2.35 + * Divide by alpha in LinearBurn, Screen, Exclusion and Difference compose #9074 + * stop montage directory walk at the terminating nul #9075 + * build(deps): bump the codeql-action group with 3 updates #9070 + * build(deps): bump ubuntu from f144425 to c098726 in /.devcontainer #9065 + * Reject incomplete MTV frame headers #9055 + * add cmyko quantum to GetQuantumExtent #9060 + * build(deps): bump the codeql-action group with 3 updates #9051 + * build(deps): bump actions/create-github-app-token from 3.2.0 to 3.3.0 #9045 + * build(deps): bump ossf/scorecard-action from 2.4.4 to 2.5.0 #9046 + * build(deps): bump the codeql-action group across 1 directory with 3 updates #9032 + * build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 #9028 + * build(deps): bump actions/download-artifact from 8.0.1 to 8.0.2 #9027 + * Draw SVG strokes in the internal SVG renderer again #9031 + * Draw SVG strokes in the internal SVG renderer again (#9031) #9030 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7f2w-c8wf-xvf8 b45a28c + * building out the shuffle images framework 955901b + * support -shuffle operator 02a8cbc + * restore switch case that was hosed 0e6ed70 + * Fixed build error on Windows. 2dc42f2 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-wvfx-g9wq-253w 139c692 + * Removed unused function for build where the distributed cache is disabled. 0054822 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-gr4q-6v79-qj3g 28c1eb3 + * add shuffle demo ea642e5 + * completing the shuffle framework b1bc241 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pp97-v3gv-9vh4 1b0cd97 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-pp97-v3gv-9vh4 a28f038 + * set reasonable max profile size ed50136 + * track parse entities exceptions 93c3733 + * throw proper exception when profile exceeds maximum 7e3e1d0 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6xcw-8jvx-wh63 58ac439 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v86v-4xf8-xjq4 3f27cc7 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v86v-4xf8-xjq4 059c7f0 + * buffer clone nexus 1ec93e4 + * https://github.com/ImageMagick/ImageMagick/pull/9042 c950f69 + * https://github.com/ImageMagick/ImageMagick/issues/9040 06f5b60 + * https://github.com/ImageMagick/ImageMagick/issues/9041 e071d8e + * https://github.com/ImageMagick/ImageMagick/issues/9039 578d94c + * https://github.com/ImageMagick/ImageMagick/issues/9038 e20d7a4 + * https://github.com/ImageMagick/ImageMagick/issues/9037 4eb3c67 + * https://github.com/ImageMagick/ImageMagick/issues/9036 c0ca7f4 + * Improve readability. dfb852c + * cosmetic ef8c025 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3pf7-cjfr-3fpq 6b833ce + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2pc3-3339-3qc9 ae72b12 + * https://github.com/ImageMagick/ImageMagick/issues/9049 e84e85b + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-mf84-8w53-2f2c 5ac0936 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-x3j8-cjwr-m4pv 00301ef + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m9p2-wqc3-mj22 d3a850a + * https://github.com/ImageMagick/ImageMagick/issues/9057 816368f + * https://github.com/ImageMagick/ImageMagick/issues/9053 a0ac982 + * Fixed build. 60de283 + * revert 949237a + * Minor optimization. 4decb21 + * Added a check for empty profiles. 2ae4e07 + * Added new security option that can be used to limit the number of profiles an image can have (GHSA-2h6m-67xh-cm4p) 11313ac + * Set the minimum limit to 1. 8f66633 + * Correct the return value. 10baa5f + * Revert local test. b72361b + * Check the number of profiles that will be added against the security policy. fa6bff5 + * add max policy count 985d464 + * Apply patch from #9061 to fix reading sixel file. c2a7577 + * Added new method to sanitize filenames and use that for GHSA-2pc3-3339-3qc9. 3a9639c + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-q66g-3m63-78mh c5f2c6c + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-p58q-7cv7-7w3m b3cb8ab + * https://github.com/ImageMagick/ImageMagick/issues/9059 62fc3c1 + * eliminate compiler exception 692124a + * improved UI/UX a9abe84 + * improved UI/UX b77302e + * Correct encoding with group4 compression in tiff coder (#9058). 07883df + * Added check to test if the tiff coder is available. f333f65 + * Corrected unit test. 915af29 + * revert 9f63ebd + * check that columns rows are not zero bdf369b + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-m2p5-qpx9-5mx6 813d6c0 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-67p3-xhc7-g797 433b039 + * https://github.com/ImageMagick/ImageMagick/issues/9069 b9d501e + * https://github.com/ImageMagick/ImageMagick/issues/9068 88cf314 + * eliminate compiler warning 7aa7b44 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hg5r-hf2p-g9xq 8c56a52 + * https://github.com/ImageMagick/ImageMagick/issues/9071 1ba75b6 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5jwm-r7f4-4m53 55a2d75 + * Updated configure. 6a30a28 + * Minor code cleanup. b456c0f + * Match both slash- and backslash-separated paths and patterns during lexical and canonical path-policy evaluation on Windows (GHSA-hpjv-7vmp-f58w) 4f3be68 + * Updated the dependencies. 96abe79 + * Updated setting the values of the SBOM. 9446665 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-c764-55gw-gj6c 3fd3608 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-5v9f-r478-x7vx 28f6586 + * https://github.com/ImageMagick/ImageMagick/issues/9077 942e86f + * add mix to pixel and meta content 8152030 + * discuss DPC security a9c4102 + * cosmetic 6ea6c0d + * https://github.com/ImageMagick/ImageMagick/pull/9062 39ad88f + * Also create a StrictReadInlineImage implementation (GHSA-h9f8-qmvx-p39m) 998773f + * more conservative coder depth 21c25b4 + * Corrected typo. c18f444 + * Switch to macos-15. 1f1e4d5 + * Updated configure. 9ec53fd + * Updated the dependencies. acaf7e4 + +------------------------------------------------------------------- @@ -37,0 +149 @@ +- CVE-2026-119124 [bsc#1289086] Old: ---- ImageMagick-7.1.2-34.tar.xz ImageMagick-7.1.2-34.tar.xz.asc New: ---- ImageMagick-7.1.2-35.tar.xz ImageMagick-7.1.2-35.tar.xz.asc ImageMagick-tiff-correct-endianess.patch ----------(New B)---------- New: https://github.com/ImageMagick/ImageMagick/issues/9095 * ImageMagick-tiff-correct-endianess.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ImageMagick.spec ++++++ --- /var/tmp/diff_new_pack.uxqZ6z/_old 2026-11-04 19:43:33.466634120 +0100 +++ /var/tmp/diff_new_pack.uxqZ6z/_new 2026-11-04 19:43:33.468634204 +0100 @@ -21,7 +21,7 @@ %define debug_build 0 %define asan_build 0 %define mfr_version 7.1.2 -%define mfr_revision 34 +%define mfr_revision 35 %define quantum_depth 16 %define source_version %{mfr_version}-%{mfr_revision} %define clibver 10 @@ -58,7 +58,10 @@ Patch1: ImageMagick-configuration-SUSE.patch # library installation Patch2: ImageMagick-library-installable-in-parallel.patch -Patch1000: ImageMagick-s390x-disable-tests.patch +Patch3: ImageMagick-s390x-disable-tests.patch +# 16-bit samples byte-swapped in PNG->TIFF [bsc#1282560] +# https://github.com/ImageMagick/ImageMagick/issues/9095 +Patch4: ImageMagick-tiff-correct-endianess.patch BuildRequires: chrpath BuildRequires: dejavu-fonts @@ -268,10 +271,7 @@ %prep %setup -q -n ImageMagick-%{source_version} cp config/policy-secure.xml config/policy-SUSE.xml -%autopatch -p1 -M 999 -%ifarch s390x -%patch -P 1000 -p1 -%endif +%autopatch -p1 %build # bsc#1088463 ++++++ ImageMagick-7.1.2-34.tar.xz -> ImageMagick-7.1.2-35.tar.xz ++++++ /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick-7.1.2-34.tar.xz /work/SRC/openSUSE:Factory/.ImageMagick.new.3759290/ImageMagick-7.1.2-35.tar.xz differ: char 15, line 1 ++++++ ImageMagick-configuration-SUSE.patch ++++++ --- /var/tmp/diff_new_pack.uxqZ6z/_old 2026-11-04 19:43:33.524636548 +0100 +++ /var/tmp/diff_new_pack.uxqZ6z/_new 2026-11-04 19:43:33.527636674 +0100 @@ -1,7 +1,7 @@ -Index: ImageMagick-7.1.2-33/config/policy-SUSE.xml +Index: ImageMagick-7.1.2-35/config/policy-SUSE.xml =================================================================== ---- ImageMagick-7.1.2-33.orig/config/policy-SUSE.xml -+++ ImageMagick-7.1.2-33/config/policy-SUSE.xml +--- ImageMagick-7.1.2-35.orig/config/policy-SUSE.xml ++++ ImageMagick-7.1.2-35/config/policy-SUSE.xml @@ -64,7 +64,7 @@ <policy domain="resource" name="disk" value="2GiB"/> @@ -27,7 +27,7 @@ <!-- Prevent access to file descriptors. --> <policy domain="path" rights="none" pattern="[Ff][Dd\]:*"/> -@@ -135,6 +135,22 @@ +@@ -139,6 +139,22 @@ <!-- Fail if the target path is a symbolic link. --> <policy domain="system" name="symlink" ++++++ ImageMagick-library-installable-in-parallel.patch ++++++ --- /var/tmp/diff_new_pack.uxqZ6z/_old 2026-11-04 19:43:33.544637385 +0100 +++ /var/tmp/diff_new_pack.uxqZ6z/_new 2026-11-04 19:43:33.549637595 +0100 @@ -1,8 +1,8 @@ -Index: ImageMagick-7.1.2-33/configure +Index: ImageMagick-7.1.2-35/configure =================================================================== ---- ImageMagick-7.1.2-33.orig/configure -+++ ImageMagick-7.1.2-33/configure -@@ -37448,7 +37448,9 @@ fi +--- ImageMagick-7.1.2-35.orig/configure ++++ ImageMagick-7.1.2-35/configure +@@ -37230,7 +37230,9 @@ fi # Subdirectory to place architecture-dependent configuration files @@ -11,6 +11,6 @@ + CONFIGURE_RELATIVE_PATH="${PACKAGE_NAME}-${MAGICK_MAJOR_VERSION}" +fi - printf "%s\n" "#define CONFIGURE_RELATIVE_PATH \"$CONFIGURE_RELATIVE_PATH\"" >>confdefs.h + printf '%s\n' "#define CONFIGURE_RELATIVE_PATH \"$CONFIGURE_RELATIVE_PATH\"" >>confdefs.h ++++++ ImageMagick-tiff-correct-endianess.patch ++++++ Index: ImageMagick-7.1.2-35/coders/tiff.c =================================================================== --- ImageMagick-7.1.2-35.orig/coders/tiff.c +++ ImageMagick-7.1.2-35/coders/tiff.c @@ -4200,7 +4200,11 @@ static MagickBooleanType WriteTIFFImage( } if (compress_tag == COMPRESSION_CCITTFAX4) (void) TIFFSetField(tiff,TIFFTAG_ROWSPERSTRIP,(uint32) image->rows); +#if defined(WORDS_BIGENDIAN) + (void) SetQuantumEndian(image,quantum_info,MSBEndian); +#else (void) SetQuantumEndian(image,quantum_info,LSBEndian); +#endif pixels=(unsigned char *) GetQuantumPixels(quantum_info); tiff_info.scanline=(unsigned char *) GetQuantumPixels(quantum_info); switch (photometric) ++++++ ImageMagick_policy_etc.patch ++++++ --- /var/tmp/diff_new_pack.uxqZ6z/_old 2026-11-04 19:43:33.589639269 +0100 +++ /var/tmp/diff_new_pack.uxqZ6z/_new 2026-11-04 19:43:33.593639437 +0100 @@ -1,7 +1,7 @@ -Index: ImageMagick-7.1.2-33/config/policy-SUSE.xml +Index: ImageMagick-7.1.2-35/config/policy-SUSE.xml =================================================================== ---- ImageMagick-7.1.2-33.orig/config/policy-SUSE.xml -+++ ImageMagick-7.1.2-33/config/policy-SUSE.xml +--- ImageMagick-7.1.2-35.orig/config/policy-SUSE.xml ++++ ImageMagick-7.1.2-35/config/policy-SUSE.xml @@ -105,6 +105,8 @@ <!-- Prevent access to sensitive system directories. --> @@ -11,10 +11,10 @@ <!-- Prevent directory traversal via relative paths. --> <policy domain="path" rights="none" pattern="*../*"/> -Index: ImageMagick-7.1.2-33/config/policy-limited.xml +Index: ImageMagick-7.1.2-35/config/policy-limited.xml =================================================================== ---- ImageMagick-7.1.2-33.orig/config/policy-limited.xml -+++ ImageMagick-7.1.2-33/config/policy-limited.xml +--- ImageMagick-7.1.2-35.orig/config/policy-limited.xml ++++ ImageMagick-7.1.2-35/config/policy-limited.xml @@ -108,6 +108,8 @@ <!-- Prevent access to sensitive system configuration files. --> @@ -24,10 +24,10 @@ <!-- Prevent indirect file reads using @filename syntax. --> <policy domain="path" rights="none" pattern="@*"/> -Index: ImageMagick-7.1.2-33/config/policy-open.xml +Index: ImageMagick-7.1.2-35/config/policy-open.xml =================================================================== ---- ImageMagick-7.1.2-33.orig/config/policy-open.xml -+++ ImageMagick-7.1.2-33/config/policy-open.xml +--- ImageMagick-7.1.2-35.orig/config/policy-open.xml ++++ ImageMagick-7.1.2-35/config/policy-open.xml @@ -167,6 +167,8 @@ <!-- Prevent access to sensitive system locations. --> @@ -37,10 +37,10 @@ <!-- Disable indirect file reads (@filename). --> <!-- <policy domain="path" rights="none" pattern="@*"/> --> -Index: ImageMagick-7.1.2-33/config/policy-secure.xml +Index: ImageMagick-7.1.2-35/config/policy-secure.xml =================================================================== ---- ImageMagick-7.1.2-33.orig/config/policy-secure.xml -+++ ImageMagick-7.1.2-33/config/policy-secure.xml +--- ImageMagick-7.1.2-35.orig/config/policy-secure.xml ++++ ImageMagick-7.1.2-35/config/policy-secure.xml @@ -105,6 +105,8 @@ <!-- Prevent access to sensitive system directories. --> @@ -50,11 +50,11 @@ <!-- Prevent directory traversal via relative paths. --> <policy domain="path" rights="none" pattern="*../*"/> -Index: ImageMagick-7.1.2-33/config/policy-websafe.xml +Index: ImageMagick-7.1.2-35/config/policy-websafe.xml =================================================================== ---- ImageMagick-7.1.2-33.orig/config/policy-websafe.xml -+++ ImageMagick-7.1.2-33/config/policy-websafe.xml -@@ -99,6 +99,8 @@ +--- ImageMagick-7.1.2-35.orig/config/policy-websafe.xml ++++ ImageMagick-7.1.2-35/config/policy-websafe.xml +@@ -103,6 +103,8 @@ <!-- Prevent access to operating system configuration files. --> <policy domain="path" rights="none" pattern="/etc/*"/>
