Hello community, here is the log from the commit of package GraphicsMagick for openSUSE:Factory checked in at 2016-05-31 12:25:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/GraphicsMagick (Old) and /work/SRC/openSUSE:Factory/.GraphicsMagick.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "GraphicsMagick" Changes: -------- --- /work/SRC/openSUSE:Factory/GraphicsMagick/GraphicsMagick.changes 2016-05-12 09:33:35.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.GraphicsMagick.new/GraphicsMagick.changes 2016-05-31 12:25:24.000000000 +0200 @@ -1,0 +2,7 @@ +Mon May 30 14:19:50 UTC 2016 - pgajdos@suse.com + +- security update: + * CVE-2016-5118 [bsc#982178] + + GraphicsMagick-CVE-2016-5118.patch + +------------------------------------------------------------------- New: ---- GraphicsMagick-CVE-2016-5118.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ GraphicsMagick.spec ++++++ --- /var/tmp/diff_new_pack.oVCcIa/_old 2016-05-31 12:25:25.000000000 +0200 +++ /var/tmp/diff_new_pack.oVCcIa/_new 2016-05-31 12:25:25.000000000 +0200 @@ -40,6 +40,7 @@ Patch12: GraphicsMagick-upstream-disable-mvg-ext.patch Patch13: GraphicsMagick-upstream-disable-tmp-magick-prefix.patch Patch14: GraphicsMagick-upstream-image-sanity-check.patch +Patch15: GraphicsMagick-CVE-2016-5118.patch BuildRequires: cups-client BuildRequires: dcraw BuildRequires: freetype2-devel @@ -239,6 +240,7 @@ %patch12 -p1 %patch13 -p1 %patch14 -p1 +%patch15 -p1 %build export PERLOPTS="PREFIX=%{buildroot}%{_prefix}" ++++++ GraphicsMagick-CVE-2016-5118.patch ++++++ Index: GraphicsMagick-1.3.23/magick/blob.c =================================================================== --- GraphicsMagick-1.3.23.orig/magick/blob.c 2015-10-04 21:35:34.000000000 +0200 +++ GraphicsMagick-1.3.23/magick/blob.c 2016-05-30 16:12:24.386203919 +0200 @@ -68,6 +68,7 @@ */ #define DefaultBlobQuantum 65541 +#undef HAVE_POPEN /* Enum declarations.