Hello community, here is the log from the commit of package GraphicsMagick for openSUSE:Factory checked in at 2018-01-31 19:54:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/GraphicsMagick (Old) and /work/SRC/openSUSE:Factory/.GraphicsMagick.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "GraphicsMagick" Wed Jan 31 19:54:13 2018 rev:63 rq:571349 version:1.3.28 Changes: -------- --- /work/SRC/openSUSE:Factory/GraphicsMagick/GraphicsMagick.changes 2018-01-13 21:46:59.099927898 +0100 +++ /work/SRC/openSUSE:Factory/.GraphicsMagick.new/GraphicsMagick.changes 2018-01-31 19:54:16.174842364 +0100 @@ -1,0 +2,53 @@ +Wed Jan 24 10:30:22 UTC 2018 - pgajdos@suse.com + +- upate to 1.3.28: + * Security Fixes: + BMP: Fix non-terminal loop due to unexpected bit-field mask + value (DOS opportunity). + PALM: Fix heap buffer underflow in builds with QuantumDepth=8. + SetNexus() Fix heap overwrite under certain conditions due to + using a wrong destination buffer. This issue impacts all + 1.3.X releases. + TIFF: Fix heap buffer read overflow in LocaleNCompare() when + parsing NEWS profile. + * Bug fixes: + DescribeImage(): Eliminate possible use of null pointer. + GIF: Fix memory leak of global colormap in error path. + GZ: Writing to gzip files with the extension ".gz" was + not working with Zlib 1.2.8. + JNG: Fix buffer read overflow (a tiny fixed overflow of just + one byte). + JPEG: Promoting certain libjpeg warnings to errors caused + much more problems than expected. The promotion of + warnings to errors is removed. Claimed pixel dimensions + are validated by file size before allocating memory for + the pixels. + IntegralRotateImage(): Assure that reported error in rotate by + 270 case does immediately terminate processing. + MNG: Fix possible null pointer reference related to DEFI chunk + parsing. Fix minor heap read overflow (constrained to just + one byte) due to an ordering issue in a limit check. Fix + memory leaks in error path. + WebP: Fix stack buffer overflow in WriteWEBPImage() which + occurs with libwebp 0.5.0 or newer due to a structure type + change in the structure passed to the progress monitor + callback. + WPG: Memory leaks fixed. + * API Updates: + InterpolateViewColor(): This function now returns MagickPassFail + (an unsigned int) rather than void so that errors can be + efficiently reported. + The magick/pixel_cache.h header is updated to add deprecation + attributes such that code using GetPixels(), GetIndexes(), + and GetOnePixel() will produce deprecation warnings for + compilers which support them. These functions will not be + removed in the 1.3.X release series and when they are + removed, pre-processor macros will be added so a replacement + function is used instead. There is a long-term objective to + eliminate functionally-redundant pixel cache functions to + only the ones with the best properties since this reduces + maintenance and may reduce the depth of the call stack + (improving performance). +* removed unneded GraphicsMagick-release-date-missing-quote.patch + +------------------------------------------------------------------- Old: ---- GraphicsMagick-1.3.27.tar.bz2 GraphicsMagick-release-date-missing-quote.patch New: ---- GraphicsMagick-1.3.28.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ GraphicsMagick.spec ++++++ --- /var/tmp/diff_new_pack.AfLdXU/_old 2018-01-31 19:54:16.854810742 +0100 +++ /var/tmp/diff_new_pack.AfLdXU/_new 2018-01-31 19:54:16.854810742 +0100 @@ -27,7 +27,7 @@ %define pp_so_ver 12 %define wand_so_ver 2 Name: GraphicsMagick -Version: 1.3.27 +Version: 1.3.28 Release: 0 Summary: Viewer and Converter for Images License: MIT @@ -42,8 +42,6 @@ %if %{bindperl} Patch0: GraphicsMagick-perl-linkage.patch %endif -# this is what makes 1.3.27a from 1.3.27, will be fixed in 1.3.28 -Patch1: GraphicsMagick-release-date-missing-quote.patch BuildRequires: cups-client BuildRequires: dcraw BuildRequires: gcc-c++ @@ -209,7 +207,6 @@ %if %{bindperl} %patch0 -p1 %endif -%patch1 -p1 %build # This shouldn't be there yet. ++++++ GraphicsMagick-1.3.27.tar.bz2 -> GraphicsMagick-1.3.28.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/GraphicsMagick/GraphicsMagick-1.3.27.tar.bz2 /work/SRC/openSUSE:Factory/.GraphicsMagick.new/GraphicsMagick-1.3.28.tar.bz2 differ: char 11, line 1