Hello community,
here is the log from the commit of package GraphicsMagick for openSUSE:Factory
checked in at 2016-05-31 12:25:22
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/GraphicsMagick (Old)
and /work/SRC/openSUSE:Factory/.GraphicsMagick.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "GraphicsMagick"
Changes:
--------
--- /work/SRC/openSUSE:Factory/GraphicsMagick/GraphicsMagick.changes
2016-05-12 09:33:35.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.GraphicsMagick.new/GraphicsMagick.changes
2016-05-31 12:25:24.000000000 +0200
@@ -1,0 +2,7 @@
+Mon May 30 14:19:50 UTC 2016 - pgaj...@suse.com
+
+- security update:
+ * CVE-2016-5118 [bsc#982178]
+ + GraphicsMagick-CVE-2016-5118.patch
+
+-------------------------------------------------------------------
New:
----
GraphicsMagick-CVE-2016-5118.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ GraphicsMagick.spec ++++++
--- /var/tmp/diff_new_pack.oVCcIa/_old 2016-05-31 12:25:25.000000000 +0200
+++ /var/tmp/diff_new_pack.oVCcIa/_new 2016-05-31 12:25:25.000000000 +0200
@@ -40,6 +40,7 @@
Patch12: GraphicsMagick-upstream-disable-mvg-ext.patch
Patch13: GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
Patch14: GraphicsMagick-upstream-image-sanity-check.patch
+Patch15: GraphicsMagick-CVE-2016-5118.patch
BuildRequires: cups-client
BuildRequires: dcraw
BuildRequires: freetype2-devel
@@ -239,6 +240,7 @@
%patch12 -p1
%patch13 -p1
%patch14 -p1
+%patch15 -p1
%build
export PERLOPTS="PREFIX=%{buildroot}%{_prefix}"
++++++ GraphicsMagick-CVE-2016-5118.patch ++++++
Index: GraphicsMagick-1.3.23/magick/blob.c
===================================================================
--- GraphicsMagick-1.3.23.orig/magick/blob.c 2015-10-04 21:35:34.000000000
+0200
+++ GraphicsMagick-1.3.23/magick/blob.c 2016-05-30 16:12:24.386203919 +0200
@@ -68,6 +68,7 @@
*/
#define DefaultBlobQuantum 65541
+#undef HAVE_POPEN
/*
Enum declarations.
