Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ImageMagick for openSUSE:Factory checked in at 2026-09-17 15:15:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ImageMagick (Old) and /work/SRC/openSUSE:Factory/.ImageMagick.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "ImageMagick" Thu Sep 17 15:15:24 2026 rev:349 rq:1378159 version:7.1.2.31 Changes: -------- --- /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick.changes 2026-09-01 15:47:07.761187258 +0200 +++ /work/SRC/openSUSE:Factory/.ImageMagick.new.383539/ImageMagick.changes 2026-09-17 15:15:35.151318116 +0200 @@ -1,0 +2,60 @@ +Tue Sep 15 11:47:56 UTC 2026 - Petr Gajdos <[email protected]> + +- version update to 7.1.2.31 + * fix: use registered UHDR module name in policy check #8935 + * Also create an SBOM for the portable builds. 482ae0e + * Corrected file names. c3d83c6 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4gg2-hfgh-6f5c 8f62023 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-7hjx-392p-f8cm 5904641 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-r868-pmwh-fv2c 768bdd0 + * Added missing include and corrected the module name. 07143f6 + * Added missing coders. 7e99fb4 + * Fixed the policy check for coders (GHSA-vcjj-32hg-qpx5) 82f373f + * More fixes for GHSA-vcjj-32hg-qpx5. dcdbbf4 + * Corrected the call to CheckPrimitiveExtent to fix the use of uninitialized heap memory (GHSA-6xf5-c3jx-rp39) 5d29c09 + * Moved EscapeParenthesis to the ghostscript-private.h header file. e2bd884 + * Escape the labels to prevent code injection (GHSA-5rg6-j44q-q892) 78378cd + * Added missing define checks bd96dda + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-4fq9-vrx7-gv92 c69f54e + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-2w4h-697j-4vrm 86672a1 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qr53-hc3p-fc62 c311471 + * Added missing include. 5ccfb2f + * Added missing check for eof when using the custom stream reader in ReadBlob 78aff3a + * Use a better algorithm to determine the numerator and denominator (GHSA-v45j-x8p4-3mh4) f491576 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-89wq-f8f6-2j2v d779ac5 + * initial framework for the c2pa coder b34352d + * add header 9f2cb10 + * add c2pa coder framework a4d1d62 + * eliminate compiler warnings a37640f + * Removed unused argument 0e94ad4 + * Added missing null check to avoid a null pointer dereference (GHSA-92rw-c5mw-27v4) c4b3c90 + * https://github.com/ImageMagick/ImageMagick/issues/8927 c717095 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 282f455 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-3rjr-534c-8v67 4fe3110 + * framework for c2pa coder 7d25548 + * add new exception for required manifest b14e552 + * add C2PA define 837ec6f + * include static header 03a79c3 + * cosmetic beeb133 + * c2pa decode poc 114618e + * https://github.com/ImageMagick/ImageMagick/issues/8930 a96821a + * https://github.com/ImageMagick/ImageMagick/issues/8930 c42d72d + * create symbolic link only if input file exists d4f900a + * correct c2pa delegate de7f30c + * More fixes for GHSA-89wq-f8f6-2j2v b5da5ea + * Updated the dependencies. 5f49dfb + * More fixes for GHSA-5rg6-j44q-q892. 2ba2edf + * for now, limit c2pa support to decoding only 977a278 + * eliminate compile exception f557204 + * eliminate compiler exception a92f423 + * https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-jvjm-9f73-fhpq 8f3a15e + * latest autoconf update 8cab7be + * check >= limit 404450e + * extra check not needed 32bbfb1 + * revert e18959a + * Removed unused code. ad464d1 + * Trim labels to prevent code injection (GHSA-p6j5-2qwh-6486) 8309dc9 +- modified patches + * ImageMagick-library-installable-in-parallel.patch (refreshed) + +------------------------------------------------------------------- @@ -60,0 +121,5 @@ +- fixes CVE-2026-86420 [bsc#1279696] + CVE-2026-86421 [bsc#1279711] + CVE-2026-86424 [bsc#1279785] + CVE-2026-86423 [bsc#1279794] + CVE-2026-86425 [bsc#1279797] Old: ---- ImageMagick-7.1.2-30.tar.xz ImageMagick-7.1.2-30.tar.xz.asc New: ---- ImageMagick-7.1.2-31.tar.xz ImageMagick-7.1.2-31.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ImageMagick.spec ++++++ --- /var/tmp/diff_new_pack.oSA57D/_old 2026-09-17 15:15:36.768385923 +0200 +++ /var/tmp/diff_new_pack.oSA57D/_new 2026-09-17 15:15:36.770386007 +0200 @@ -21,7 +21,7 @@ %define debug_build 0 %define asan_build 0 %define mfr_version 7.1.2 -%define mfr_revision 30 +%define mfr_revision 31 %define quantum_depth 16 %define source_version %{mfr_version}-%{mfr_revision} %define clibver 10 ++++++ ImageMagick-7.1.2-30.tar.xz -> ImageMagick-7.1.2-31.tar.xz ++++++ /work/SRC/openSUSE:Factory/ImageMagick/ImageMagick-7.1.2-30.tar.xz /work/SRC/openSUSE:Factory/.ImageMagick.new.383539/ImageMagick-7.1.2-31.tar.xz differ: char 15, line 1 ++++++ ImageMagick-library-installable-in-parallel.patch ++++++ --- /var/tmp/diff_new_pack.oSA57D/_old 2026-09-17 15:15:36.834388690 +0200 +++ /var/tmp/diff_new_pack.oSA57D/_new 2026-09-17 15:15:36.838388858 +0200 @@ -1,8 +1,8 @@ -Index: ImageMagick-7.1.2-18/configure +Index: ImageMagick-7.1.2-31/configure =================================================================== ---- ImageMagick-7.1.2-18.orig/configure -+++ ImageMagick-7.1.2-18/configure -@@ -37296,7 +37296,9 @@ fi +--- ImageMagick-7.1.2-31.orig/configure ++++ ImageMagick-7.1.2-31/configure +@@ -37298,7 +37298,9 @@ fi # Subdirectory to place architecture-dependent configuration files
