Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package GraphicsMagick for openSUSE:Factory checked in at 2023-01-10 14:59:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/GraphicsMagick (Old) and /work/SRC/openSUSE:Factory/.GraphicsMagick.new.32243 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "GraphicsMagick" Tue Jan 10 14:59:05 2023 rev:82 rq:1057002 version:1.3.39 Changes: -------- --- /work/SRC/openSUSE:Factory/GraphicsMagick/GraphicsMagick.changes 2022-04-14 17:23:51.011150113 +0200 +++ /work/SRC/openSUSE:Factory/.GraphicsMagick.new.32243/GraphicsMagick.changes 2023-01-10 14:59:12.357012233 +0100 @@ -1,0 +2,112 @@ +Sun Jan 8 11:25:06 UTC 2023 - mun...@googlemail.com + +- version update to 1.3.39 + Special Issues: + * GraphicsMagick really does need some additional productive + volunteers. For several years now, the burden has entirely been on + me (Bob Friesenhahn). I have been sheparding the project for 20 + years already (and contributed to ImageMagick and GraphicsMagick + combined for 26 years already). It is not reasonable to expect + someone with a full time job (and expecting to retire in a few + years) to do all of the work. + Security Fixes: + * GraphicsMagick is participating in Google's oss-fuzz project since + February 4 2018 due to the contributions and assistance of Alex + Gaynor and Paul Kehrer. The issues list is available at + https://bugs.chromium.org/p/oss-fuzz/issues/list under search term + "graphicsmagick". Issues are available for anyone to view and + duplicate if they have been in "Verified" status for 30 days, or if + they have been in "New" status for 90 days. Please consult the + GraphicsMagick ChangeLog file, Mercurial repository commit log, and + the oss-fuzz issues list for details. + Security Fixes: + * oss-fuzz: Several security fixes originating from oss-fuzz testing. + * ALL: Replace strcpy() with strlcpy(), replace strcat() with + strlcat(), replace sprintf() with snprintf(). Prefer using bounded + string functions. This change is made for the purpose of increasing + safety than to address any existing demonstrated concern. + Bug fixes: + * Coverity: Several fixes for issues found by Coverity to reduce the + number of reported issues back down to zero. + * Clang Analyzer 12: Fix most discovered issues. + * PNG: Fix possible use of uninitialized 'ping_num_trans' value in + ReadOnePNGImage(). + * MinGW: Eliminate overwrite of existing _MSC_VER value in MinGW compile. + * MNG: Fix heap-use-after-free in CloseBlob. + * MNG: Fix indirect leak in MagickMallocCleared(). + * PS: Assure that 'bounds' structure is initialized. + * EPT: Assure that 'bounds' structure is initialized. + * HEIF: If heif_image_handle_get_metadata_size() returns 0, then + carrying on with reading image data. + * configure.ac: Fix Bashism in maintainer-mode check. + * TGA: Remove a defective validation of comment length, which blocked + reading some sample TGA files from the "Encyclopedia Of Graphics + File Formats" book. Monochromatic bilevel TGA can now be read and + written. TGA "Footers" are now read and used when logging as well + as converted to Image attributes. + * WebP: Add configure.ac updates to check for libsharpyuv so that + builds with the development version work again. + * Visual Studio Build (VisualMagick): Fix project file generation. + Improve portability of code for configure.exe. + * Fixed mixed encoding (non-UTF-8) errors in text and source files. + * DrawPrimitive(): Fix composition using "0,0" for image size. This + became broken in GraphicsMagick 1.3.36. + * Blob API: Fixed SEEK_END validation. SEEK_END was not used before, + but now it is. + New Features: + * AVIF: Support reading AVIF via libheif if it supports decoding AVIF + (still no writer support). + * LOG: Added function IsEventLogged() to report if a particular event + will be logged. Us this as much as possible throughout the software + to replace use of IsEventLogging(). This avoids a possible + performance hit if any logging is enabled at all and logging + statements are executed which are filtered and produce no output. + * FITS: Support storing multiple scenes in one file (non-standard + extension). + * JPEG: Optionally enable arithmetic coder in JPG images using + '-define jpeg:arithmetic-coding=true'. + * JPEG: Add support for reading deep gray images. + * HEIF: Support reading ICC color profiles. + * Produce ASCII armored ".asc" format GPG signature files. + * Support reading directly from .bz2, .gz, .svgz, and .Z files + (without creating a temporary file), if possible. + API Updates: + * Magick++: Provide a version of Image::colorMapSize() which is a + 'const' method. Continue to provide the non-const version in order + to avoid an ABI change. The compiler should choose the appropriate + version. + Feature improvements: + * HTML documentation generation based on Docutils is significantly + updated and improved. + * PerlMagick: Added more sample input files and changed many reader + tests to use hash signature rather than comparison to reduce the + distribution size. + * Blob: The ReadBlobString() function has been re-written to perform + better when reading from files. + * JXL: The JXL coder is updated to compile with what will likely + become JXL 0.8.0. Support for 16-bit 'short' samples, 16-bit + 'float' samples, and 32-bit float samples added. Support for + reading and writing ICC, EXIF, and XMP profiles added. + * MIME: GM "magick" to MIME mappings have been added for apng, avif, + bmp, ico, and webp (regardless of if they are supported). + * XPM: The XPM reader performance is dramatically improved and is + observed to be 32x faster when reading a medium-sized XPM file + (e.g. the GraphicsMagick logo). + * XPM: Support reading "deep" images with more pallete entries than + the maximum colormap size. + Windows Delegate Updates/Additions: + * Update bundled libjasper to version 1.900.26. Please note that 4.0.0 + is the latest version at this time and fixes a great many security + and stability issues which are present in 1.900.26. + * Update bundled libjpeg to version 9e. + * Update bundled libtiff to version 4.5.0. + Build Changes: + * MSVC: Added porting function to emulate C'99 snprintf for MSVC older + than 2015. + * MSVC: Successfully compiles using Visual Studio 2008 and 2019. + Compiles successfully using Visual Studio 2022 if optimization is + disabled (otherwise there is an internal compiler error in effect.c). + +- Enable JPEG-XL on Tumbleweed. + +------------------------------------------------------------------- Old: ---- GraphicsMagick-1.3.38.tar.xz New: ---- GraphicsMagick-1.3.39.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ GraphicsMagick.spec ++++++ --- /var/tmp/diff_new_pack.DZccK5/_old 2023-01-10 14:59:13.753019706 +0100 +++ /var/tmp/diff_new_pack.DZccK5/_new 2023-01-10 14:59:13.757019727 +0100 @@ -25,7 +25,7 @@ %define pp_so_ver 12 %define wand_so_ver 2 Name: GraphicsMagick -Version: 1.3.38 +Version: 1.3.39 Release: 0 Summary: Viewer and Converter for Images License: MIT @@ -65,6 +65,9 @@ BuildRequires: libxml-devel BuildRoot: %{_tmppath}/%{name}-%{version}-build %endif +%if 0%{?suse_version} > 1500 +BuildRequires: pkgconfig(libjxl) +%endif %description GraphicsMagick provides an image manipulation and translation ++++++ GraphicsMagick-1.3.38.tar.xz -> GraphicsMagick-1.3.39.tar.xz ++++++ ++++ 144965 lines of diff (skipped)