Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libjpeg-turbo for openSUSE:Factory checked in at 2024-10-01 17:11:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libjpeg-turbo (Old) and /work/SRC/openSUSE:Factory/.libjpeg-turbo.new.29891 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libjpeg-turbo" Tue Oct 1 17:11:10 2024 rev:74 rq:1204657 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/libjpeg-turbo/libjpeg-turbo.changes 2024-09-03 13:38:15.984572130 +0200 +++ /work/SRC/openSUSE:Factory/.libjpeg-turbo.new.29891/libjpeg-turbo.changes 2024-10-01 17:11:14.988306160 +0200 @@ -1,0 +2,57 @@ +Sat Sep 28 16:49:05 UTC 2024 - Dirk Müller <dmueller@suse.com> + +- update to 3.0.4: + * Fixed an issue whereby the CPU usage of the default marker + processor in the decompressor grew exponentially with the + number of markers. This caused an unreasonable slow-down in + `jpeg_read_header()` if an application called `jpeg_save_markers()` + to save markers of a particular type and then attempted to + decompress a JPEG image containing an excessive number of markers + of that type. + * Hardened the default marker processor in the decompressor to guard + against an issue (exposed by 3.0 beta2[6]) whereby attempting to + decompress a specially-crafted malformed JPEG image (specifically + an image with a complete 12-bit-per-sample Start Of Frame segment + followed by an incomplete 8-bit-per-sample Start Of Frame segment) + using buffered-image mode and input prefetching caused a segfault + if the `fill_input_buffer()` method in the calling application's + custom source manager incorrectly returned `FALSE` in response to a + prematurely-terminated JPEG data stream. + * Fixed an issue in cjpeg whereby, when generating a + 12-bit-per-sample or 16-bit-per-sample lossless JPEG image, + specifying a point transform value greater than 7 resulted in an + error ("Invalid progressive/lossless parameters") unless the + `-precision` option was specified before the `-lossless` option. + * Fixed a regression introduced by 3.0.3[3] that made it impossible + for calling applications to generate 12-bit-per-sample + arithmetic-coded lossy JPEG images using the TurboJPEG API. + * Fixed an error ("Destination buffer is not large enough") that + occurred when attempting to generate a full-color lossless JPEG + image using the TurboJPEG Java API's `byte[] + TJCompressor.compress()` method if the value of `TJ.PARAM_SUBSAMP` + was not `TJ.SAMP_444`. + * Fixed a segfault in djpeg that occurred if a negative width was + specified with the `-crop` option. Since the cropping region width + was read into an unsigned 32-bit integer, a negative width was + interpreted as a very large value. With certain negative width and + positive left boundary values, the bounds checks in djpeg and + `jpeg_crop_scanline()` overflowed and did not detect the + out-of-bounds width, which caused a buffer overrun in the + upsampling or color conversion routine. Both bounds checks now use + 64-bit integers to guard against overflow, and djpeg now checks for + negative numbers when it parses the crop specification from the + command line. + * Fixed an issue whereby the TurboJPEG lossless transformation + function and methods checked the specified cropping region against + the source image dimensions and level of chrominance subsampling + rather than the destination image dimensions and level of + chrominance subsampling, which caused some cropping regions to be + unduly rejected when performing 90-degree rotation, 270-degree + rotation, transposition, transverse transposition, or grayscale + conversion. + * Fixed an issue whereby the TurboJPEG lossless transformation + function and methods did not honor + `TJXOPT_COPYNONE`/`TJTransform.OPT_COPYNONE` unless it was + specified for all lossless transforms. + +------------------------------------------------------------------- Old: ---- libjpeg-turbo-3.0.3.tar.gz libjpeg-turbo-3.0.3.tar.gz.sig New: ---- libjpeg-turbo-3.0.4.tar.gz libjpeg-turbo-3.0.4.tar.gz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libjpeg-turbo.spec ++++++ --- /var/tmp/diff_new_pack.nMV37J/_old 2024-10-01 17:11:16.116353179 +0200 +++ /var/tmp/diff_new_pack.nMV37J/_new 2024-10-01 17:11:16.116353179 +0200 @@ -39,7 +39,7 @@ %endif %define libver %{major}.%{minor}.%{micro} Name: %{flavor} -Version: 3.0.3 +Version: 3.0.4 Release: 0 Summary: A SIMD-accelerated library for manipulating JPEG image files License: BSD-3-Clause ++++++ libjpeg-turbo-3.0.3.tar.gz -> libjpeg-turbo-3.0.4.tar.gz ++++++ ++++ 12675 lines of diff (skipped)