Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libraw for openSUSE:Factory checked in at 2024-01-04 15:54:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libraw (Old) and /work/SRC/openSUSE:Factory/.libraw.new.28375 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "libraw" Thu Jan 4 15:54:38 2024 rev:66 rq:1136090 version:0.21.2 Changes: -------- --- /work/SRC/openSUSE:Factory/libraw/libraw.changes 2023-12-12 19:33:05.522369242 +0100 +++ /work/SRC/openSUSE:Factory/.libraw.new.28375/libraw.changes 2024-01-04 15:54:40.286543838 +0100 @@ -1,0 +2,18 @@ +Thu Dec 28 18:09:52 UTC 2023 - Dirk Müller <dmuel...@suse.com> + +- update to 0.21.2: + * New compile-defined limit LIBRAW_MAX_PROFILE_SIZE_MB: + limits allocation/read size for embedded color profile + Embedded color profile allocation/read size: limited by input + file size. + * Multiple fixes (mostly inspired by oss-fuzz) to improve + library stability and/or input checks. + * raw-identify: use fallback if PATH_MAX not available + * Disabled color conversion for Canon 16-bit thumbnails + * docs/changelog: explained the case when no thumbnail is found + in specific file + * swapXX renamed to libraw_swapXX to avoid name conflict + * better striped thumbnails handling +- drop libraw-CVE-2023-1729.patch (upstream) + +------------------------------------------------------------------- Old: ---- LibRaw-0.21.1.tar.gz libraw-CVE-2023-1729.patch New: ---- LibRaw-0.21.2.tar.gz BETA DEBUG BEGIN: Old: * better striped thumbnails handling - drop libraw-CVE-2023-1729.patch (upstream) BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libraw.spec ++++++ --- /var/tmp/diff_new_pack.V79YsZ/_old 2024-01-04 15:54:40.846564296 +0100 +++ /var/tmp/diff_new_pack.V79YsZ/_new 2024-01-04 15:54:40.846564296 +0100 @@ -23,7 +23,7 @@ %define lver 23 %define lname libraw%{lver} Name: libraw -Version: 0.21.1 +Version: 0.21.2 Release: 0 Summary: Library for reading RAW files obtained from digital photo cameras License: CDDL-1.0 OR LGPL-2.1-only @@ -32,10 +32,8 @@ #Git-Clone: git://github.com/LibRaw/LibRaw Source0: https://www.libraw.org/data/%tar_name-%version.tar.gz Source1: baselibs.conf -# CVE-2023-1729 [bsc#1210720], a heap-buffer-overflow in raw2image_ex() -Patch0: libraw-CVE-2023-1729.patch -# CVE-2020-22628 [bsc#1215308], stretch() function in librawsrcpostprocessingspect_ratio.cpp -Patch1: libraw-CVE-2020-22628.patch +# CVE-2020-22628 [bsc#1215308], stretch() function in librawsrcpostprocessing +Patch0: libraw-CVE-2020-22628.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: fdupes ++++++ LibRaw-0.21.1.tar.gz -> LibRaw-0.21.2.tar.gz ++++++ ++++ 1997 lines of diff (skipped)