Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package GraphicsMagick for openSUSE:Factory
checked in at 2026-11-10 16:29:38
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/GraphicsMagick (Old)
and /work/SRC/openSUSE:Factory/.GraphicsMagick.new.3759290 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "GraphicsMagick"
Tue Nov 10 16:29:38 2026 rev:114 rq:1396319 version:1.3.49
Changes:
--------
--- /work/SRC/openSUSE:Factory/GraphicsMagick/GraphicsMagick.changes
2026-11-04 19:42:56.967106300 +0100
+++
/work/SRC/openSUSE:Factory/.GraphicsMagick.new.3759290/GraphicsMagick.changes
2026-11-10 16:29:45.355125284 +0100
@@ -1,0 +2,7 @@
+Mon Nov 9 11:44:14 UTC 2026 - Petr Gajdos <[email protected]>
+
+- added patches
+ CVE-2026-116149: Memory corruption via crafted bzip2 compressed images
[bsc#1288783]
+ * GraphicsMagick-CVE-2026-116149.patch
+
+-------------------------------------------------------------------
New:
----
GraphicsMagick-CVE-2026-116149.patch
----------(New B)----------
New: CVE-2026-116149: Memory corruption via crafted bzip2 compressed images
[bsc#1288783]
* GraphicsMagick-CVE-2026-116149.patch
----------(New E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ GraphicsMagick.spec ++++++
--- /var/tmp/diff_new_pack.cIccCZ/_old 2026-11-10 16:29:46.445170878 +0100
+++ /var/tmp/diff_new_pack.cIccCZ/_new 2026-11-10 16:29:46.448171003 +0100
@@ -34,6 +34,8 @@
Patch1: GraphicsMagick-disable-insecure-coders.patch
# CVE-2026-46523: heap-use-after-free via a crafted MSL image [bsc#1268125]
Patch8: GraphicsMagick-CVE-2026-46523.patch
+# CVE-2026-116149: Memory corruption via crafted bzip2 compressed images
[bsc#1288783]
+Patch9: GraphicsMagick-CVE-2026-116149.patch
BuildRequires: cups-client
BuildRequires: dcraw
BuildRequires: gcc-c++
++++++ GraphicsMagick-CVE-2026-116149.patch ++++++
Index: GraphicsMagick-1.3.49/magick/blob.c
===================================================================
--- GraphicsMagick-1.3.49.orig/magick/blob.c
+++ GraphicsMagick-1.3.49/magick/blob.c
@@ -3425,6 +3425,8 @@ MagickExport size_t ReadBlob(Image *imag
int
bz_count = 0;
+ if (blob->status != 0)
+ break;
for (i=0; i < length; i+=bz_count)
{
size_t
