Accepting request 1302932 from devel:libraries:c_c++

- add 0001-Fix-a-heap-buffer-overflow-problem-reported-by-err2z.patch
  (bsc#1248454, CVE-2025-9300)

OBS-URL: https://build.opensuse.org/request/show/1302932
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libsixel?expand=0&rev=3

0001-Fix-a-heap-buffer-overflow-problem-reported-by-err2z.patch

@@ -0,0 +1,18 @@
+From 316c086e79d66b62c0c4bc66229ee894e4fdb7d1 Mon Sep 17 00:00:00 2001
+From: Hayaki Saito <saitoha@me.com>
+Date: Tue, 12 Aug 2025 21:30:24 +0900
+Subject: [PATCH] Fix a heap-buffer-overflow problem reported by @err2zero
+
+--- a/src/encoder.c
++++ b/src/encoder.c
+@@ -744,9 +744,9 @@ sixel_debug_print_palette(
+     fprintf(stderr, "palette:\n");
+     for (i = 0; i < sixel_dither_get_num_of_palette_colors(dither); ++i) {
+         fprintf(stderr, "%d: #%02x%02x%02x\n", i,
++                palette[i * 3 + 0],
+                 palette[i * 3 + 1],
+-                palette[i * 3 + 2],
+-                palette[i * 3 + 3]);
++                palette[i * 3 + 2]);
+     }
+ }

libsixel-1.10.3.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:028552eb8f2a37c6effda88ee5e8f6d87b5d9601182ddec784a9728865f821e0
-size 4272940

libsixel.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Fri Sep  5 12:46:55 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- add 0001-Fix-a-heap-buffer-overflow-problem-reported-by-err2z.patch
+  (bsc#1248454, CVE-2025-9300)
+
 -------------------------------------------------------------------
 Thu Feb 27 20:25:06 UTC 2025 - Enrico Belleri <kilgore.trout@idesmi.eu>
 

libsixel.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libsixel
 #
-# Copyright (c) 2022 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -26,6 +26,8 @@ Group:          Development/Libraries/C and C++
 URL:            https://github.com/libsixel/libsixel
 Source:         https://github.com/libsixel/libsixel/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
 Patch0:         meson.patch
+# CVE-2025-9300
+Patch1:         0001-Fix-a-heap-buffer-overflow-problem-reported-by-err2z.patch
 BuildRequires:  bash
 BuildRequires:  meson
 BuildRequires:  pkgconfig

static-libs.patch

@@ -1,17 +0,0 @@
----
- src/meson.build |    2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-Index: b/src/meson.build
-===================================================================
---- a/src/meson.build
-+++ b/src/meson.build
-@@ -21,7 +21,7 @@ sources = [
-   'writer.c'
- ]
- 
--libsixel = both_libraries('sixel',
-+libsixel = shared_library('sixel',
-   sources,
-   include_directories: [inc, inc_config],
-   dependencies: libsixel_deps,