Packages changed: GraphicsMagick (1.3.45 -> 1.3.46) ImageMagick (7.1.2.10 -> 7.1.2.11) Imath (3.2.1 -> 3.2.2) double-conversion (3.3.1 -> 3.4.0) gnome-maps (49.2 -> 49.3) libstorage-ng (4.5.280 -> 4.5.281) ncurses (6.5.20251206 -> 6.5.20251213) openSUSE-release (20251223 -> 20251224) openexr (3.4.3 -> 3.4.4) permissions (1699_20251002 -> 1699_20251217) === Details === ==== GraphicsMagick ==== Version update (1.3.45 -> 1.3.46) Subpackages: libGraphicsMagick++-Q16-12 libGraphicsMagick-Q16-3 libGraphicsMagick3-config - versino update to 1.3.46 * MSL: Use libxml2's SAX handlers for the MVG XML-based scripting implementation. This removes a lot of archaic cruft which might suffer from security issues. * JP2: Fix Jasper max_samples calculation to avoid DOS due to huge image dimensions. * JXL: Apply image dimension resource limits. Fix heap buffer write overflow while reading image. * SVG: Use libxml2's SAX handlers for the SVG renderer. This removes a lot of archaic cruft which might suffer from security issues. * WPG: Assure that the palette buffer is allocated and the current size (SourceForge bug #750). * ColorFloodfillImage(): For floodfill, return an error if a clip-mask is present. The problem is that the algorithm may not converge if a clip-mask is present. * ThumbnailImage(): Prevent a divide by zero crash. * other bug fixes - modified patches * GraphicsMagick-disable-insecure-coders.patch (refreshed) * GraphicsMagick-perl-linkage.patch (refreshed) - deleted patches * GraphicsMagick-CVE-2025-27795.patch (upstreamed) * GraphicsMagick-CVE-2025-27796.patch (upstreamed) * GraphicsMagick-CVE-2025-32460.patch (upstreamed) * GraphicsMagick-return-value.patch (upstreamed) ==== ImageMagick ==== Version update (7.1.2.10 -> 7.1.2.11) Subpackages: ImageMagick-config-7-SUSE libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 - version update to 7.1.2.11 * no upstream changelog, see https://github.com/ImageMagick/ImageMagick/compare/7.1.2-10..7.1.2-11 - modified patches * ImageMagick-library-installable-in-parallel.patch (refreshed) ==== Imath ==== Version update (3.2.1 -> 3.2.2) - version update to 3.2.2 * fix build problem with newer versions of cmake ==== double-conversion ==== Version update (3.3.1 -> 3.4.0) - update to 3.4.0 * Add pkg-config. * Add alias double-conversion::double-conversion. * Documentation improvements. * Minor code cleanups, avoiding spurious warnings. * Increase CMake minimum required version to 3.29. * Makefile improvements. * Bazel build improvements. ==== gnome-maps ==== Version update (49.2 -> 49.3) Subpackages: gnome-maps-lang - Update to version 49.3: + Fix a bug causing a freeze when showing a route and moving the window between different screens in some occasions. + Update station icon for Great Britain National Rail stations avoiding truncating parts of the graphics. + Updated translations. ==== libstorage-ng ==== Version update (4.5.280 -> 4.5.281) Subpackages: libstorage-ng-lang libstorage-ng-ruby libstorage-ng1 - merge gh#openSUSE/libstorage-ng#1044 - avoid manual memory management - added test case - 4.5.281 ==== ncurses ==== Version update (6.5.20251206 -> 6.5.20251213) Subpackages: libncurses6 ncurses-utils terminfo terminfo-base terminfo-iterm terminfo-screen - Add ncurses patch 20251213 + in-progress work to merge MinGW/Windows port. + add a null-pointer check in tic -c option. + add a limit-check in infocmp -i option (report/example by Yixuan Cao). ==== openSUSE-release ==== Version update (20251223 -> 20251224) Subpackages: openSUSE-release-appliance-custom openSUSE-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== openexr ==== Version update (3.4.3 -> 3.4.4) Subpackages: libIex-3_4-33 libIex-3_4-33-x86-64-v3 libIlmThread-3_4-33 libIlmThread-3_4-33-x86-64-v3 libOpenEXR-3_4-33 libOpenEXR-3_4-33-x86-64-v3 libOpenEXRCore-3_4-33 libOpenEXRCore-3_4-33-x86-64-v3 - version update to 3.4.4 * OpenEXRCore: fix ILMTHREAD_THREADING_ENABLED checks * OpenEXRCore: avoid direct dependency on imath * Bump github/codeql-action from 4.31.2 to 4.31.3 * Add missing copywrite comments * Bump pypa/cibuildwheel from 3.2 to 3.3 * Bump github/codeql-action from 3.27.9 to 4.31.2 * Bump msys2/setup-msys2 from 2.27.0 to 2.29.0 * Bump actions/download-artifact from 4.1.8 to 6.0.0 * Bump ossf/scorecard-action from 2.4.0 to 2.4.3 * Bump pypa/cibuildwheel from 2.23 to 3.2 * Bump actions/cache from 4.2.0 to 4.3.0 * Bump actions/upload-artifact from 4 to 5 * Bump actions/checkout from 2.7.0 to 5.0.0 * Add recent CVEs to SECURITY.md * Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.1.0 * Bump actions/setup-python from 5.3.0 to 6.0.0 * Bump snyk/actions from 0.4.0 to 1.0.0 * Bump pypa/gh-action-pypi-publish from 1.12.3 to 1.13.0 * Imporve Bazel support * Converts asserts in internal_ht.cpp to if statement that throws an exception. * DWA: initialize linear/nonlinear tables at runtime * Update macos-13 to macos-15-intel * Properly set OpenEXR_error in legacy python API * B44: initialize exp/log tables at runtime ==== permissions ==== Version update (1699_20251002 -> 1699_20251217) Subpackages: permctl permissions-config - Update to version 1699_20251217: * profiles: drop shadow related entries (bsc#1254844)