October 2016 - openSUSE Commits - openSUSE Mailing Lists

commit kiwi for openSUSE:Factory
by root＠hilbert.suse.de 31 Oct '16

31 Oct '16

Hello community, here is the log from the commit of package kiwi for openSUSE:Factory checked in at 2016-10-31 09:53:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kiwi (Old) and /work/SRC/openSUSE:Factory/.kiwi.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "kiwi" Changes: -------- --- /work/SRC/openSUSE:Factory/kiwi/kiwi.changes 2016-10-18 10:08:37.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.kiwi.new/kiwi.changes 2016-10-31 09:53:11.000000000 +0100 @@ -1,0 +2,48 @@ +Tue Oct 25 14:38:05 CEST 2016 - ms(a)suse.de + +- v7.04.8 released + +------------------------------------------------------------------- +Tue Oct 25 14:37:35 CEST 2016 - ms(a)suse.de + +- Only one changelog section is allowed + +------------------------------------------------------------------- +Tue Oct 25 12:08:59 CEST 2016 - ms(a)suse.de + +- Make sure an empty %changelog tag exists + +------------------------------------------------------------------- +Tue Oct 25 11:33:57 CEST 2016 - ms(a)suse.de + +- No longer write a %changelog section in the spec + + For some reason the packaging concept no longer needs a changelog + section in the spec file. Most likely the build service scripts + now generates those information from the .changes file which lead + to duplicate changelog information in the package + +------------------------------------------------------------------- +Fri Oct 21 09:59:07 CEST 2016 - ms(a)suse.de + +- v7.04.7 released + +------------------------------------------------------------------- +Wed Oct 19 14:27:26 CEST 2016 - andrew.chace(a)gmail.com + +- Fixed a rounding error in partedMBToCylinder(): + + bc truncates number of cylinders to zero decimal places, which results in a + partition that is slightly smaller than the requested size. Add one cylinder + to compensate. + +------------------------------------------------------------------- +Wed Oct 19 12:53:45 CEST 2016 - adrian(a)suse.de + +- drop kiwi-instsource-plugins + + It got moved to + + https://github.com/openSUSE/kiwi-instsource-plugins + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kiwi.spec ++++++ --- /var/tmp/diff_new_pack.tmwCRY/_old 2016-10-31 09:53:12.000000000 +0100 +++ /var/tmp/diff_new_pack.tmwCRY/_new 2016-10-31 09:53:12.000000000 +0100 @@ -27,7 +27,7 @@ Name: kiwi License: GPL-2.0 Group: System/Management -Version: 7.04.6 +Version: 7.04.8 Provides: kiwi-schema = 6.2 Provides: kiwi-image:aci Provides: kiwi-image:lxc ++++++ kiwi-docu.tar.bz2 ++++++ ++++++ kiwi-repo.tar.bz2 ++++++ ++++++ kiwi.tar.bz2 ++++++ ++++ 14363 lines of diff (skipped)

1 0

commit resource-agents for openSUSE:Factory
by root＠hilbert.suse.de 31 Oct '16

31 Oct '16

Hello community, here is the log from the commit of package resource-agents for openSUSE:Factory checked in at 2016-10-31 09:52:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/resource-agents (Old) and /work/SRC/openSUSE:Factory/.resource-agents.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "resource-agents" Changes: -------- --- /work/SRC/openSUSE:Factory/resource-agents/resource-agents.changes 2016-10-10 17:28:58.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.resource-agents.new/resource-agents.changes 2016-10-31 09:53:00.000000000 +0100 @@ -1,0 +2,13 @@ +Tue Oct 18 09:29:39 UTC 2016 - kgronlund(a)suse.com + +- Update to version 3.9.7+git.1475827855.a95ea74: + * High: nfsserver: Delete the temp file correctly. + * Low: nfsserver: Prevent unnecessary log output + +------------------------------------------------------------------- +Tue Oct 18 09:27:32 UTC 2016 - kgronlund(a)suse.com + +- Revert send_arp to libnet version (bsc#985486) + * For infiniband support in IPaddr2, install ipoibtools + +------------------------------------------------------------------- Old: ---- resource-agents-3.9.7+git.1475676827.4af1003.tar.xz New: ---- resource-agents-3.9.7+git.1475827855.a95ea74.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ resource-agents.spec ++++++ --- /var/tmp/diff_new_pack.xf7Afy/_old 2016-10-31 09:53:01.000000000 +0100 +++ /var/tmp/diff_new_pack.xf7Afy/_new 2016-10-31 09:53:01.000000000 +0100 @@ -17,7 +17,7 @@ Name: resource-agents -Version: 3.9.7+git.1475676827.4af1003 +Version: 3.9.7+git.1475827855.a95ea74 Release: 0 Summary: Open Source HA Reusable Cluster Resource Scripts License: GPL-2.0 and LGPL-2.1+ and GPL-3.0+ @@ -112,8 +112,7 @@ --enable-fatal-warnings=no \ --with-systemdsystemunitdir=%{_unitdir} \ \ --with-pkg-name=%{name} \ - --with-rsctmpdir=%{_rundir}/%{name} \ - --enable-libnet=no + --with-rsctmpdir=%{_rundir}/%{name} make %{?_smp_mflags} %install ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.xf7Afy/_old 2016-10-31 09:53:02.000000000 +0100 +++ /var/tmp/diff_new_pack.xf7Afy/_new 2016-10-31 09:53:02.000000000 +0100 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">git://github.com/ClusterLabs/resource-agents.git</param> - <param name="changesrevision">e1ac560cdf37dca96b84babae11172eb9d8538ed</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">a95ea74ce7bbe721f8f063c6de3af9161e0d713a</param></service></servicedata> \ No newline at end of file ++++++ resource-agents-3.9.7+git.1475676827.4af1003.tar.xz -> resource-agents-3.9.7+git.1475827855.a95ea74.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/resource-agents-3.9.7+git.1475676827.4af1003/heartbeat/nfsserver new/resource-agents-3.9.7+git.1475827855.a95ea74/heartbeat/nfsserver --- old/resource-agents-3.9.7+git.1475676827.4af1003/heartbeat/nfsserver 2016-10-05 16:13:47.000000000 +0200 +++ new/resource-agents-3.9.7+git.1475827855.a95ea74/heartbeat/nfsserver 2016-10-07 10:10:55.000000000 +0200 @@ -310,8 +310,9 @@ { local threads_num local rc + local fn - ocf_log info "Status: rpcbind" + ocf_log debug "Status: rpcbind" rpcinfo > /dev/null 2>&1 rc=$? if [ "$rc" -ne "0" ]; then @@ -319,7 +320,7 @@ return $OCF_NOT_RUNNING fi - ocf_log info "Status: nfs-mountd" + ocf_log debug "Status: nfs-mountd" rpcinfo -t localhost 100005 > /dev/null 2>&1 rc=$? if [ "$rc" -ne "0" ]; then @@ -327,7 +328,7 @@ return $OCF_NOT_RUNNING fi - ocf_log info "Status: nfs-idmapd" + ocf_log debug "Status: nfs-idmapd" fn=`mktemp` nfs_exec status nfs-idmapd > $fn 2>&1 rc=$? @@ -338,7 +339,7 @@ return $OCF_NOT_RUNNING fi - ocf_log info "Status: rpc-statd" + ocf_log debug "Status: rpc-statd" rpcinfo -t localhost 100024 > /dev/null 2>&1 rc=$? if [ "$rc" -ne "0" ]; then @@ -371,6 +372,8 @@ nfsserver_monitor () { + local fn + set_exec_mode fn=`mktemp` case $EXEC_MODE in @@ -603,6 +606,7 @@ nfsserver_start () { local rc; + local fn if nfsserver_monitor; then ocf_log debug "NFS server is already started" @@ -731,6 +735,8 @@ nfsserver_stop () { + local fn + ocf_log info "Stopping NFS server ..." # backup the current sm state information to the ha folder before stopping.

1 0

commit apparmor for openSUSE:Factory
by root＠hilbert.suse.de 31 Oct '16

31 Oct '16

Hello community, here is the log from the commit of package apparmor for openSUSE:Factory checked in at 2016-10-31 09:52:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apparmor (Old) and /work/SRC/openSUSE:Factory/.apparmor.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "apparmor" Changes: -------- --- /work/SRC/openSUSE:Factory/apparmor/apparmor.changes 2016-10-18 10:09:03.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.apparmor.new/apparmor.changes 2016-10-31 09:52:34.000000000 +0100 @@ -1,0 +2,6 @@ +Sun Oct 23 13:18:43 UTC 2016 - suse-beta(a)cboltz.de + +- add nscd-var-lib.diff to allow /var/lib/nscd/ in the nscd profile and + abstractions/nameservice (path changed in latest nscd in Tumbleweed) + +------------------------------------------------------------------- New: ---- nscd-var-lib.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apparmor.spec ++++++ --- /var/tmp/diff_new_pack.ebjcpV/_old 2016-10-31 09:52:35.000000000 +0100 +++ /var/tmp/diff_new_pack.ebjcpV/_new 2016-10-31 09:52:35.000000000 +0100 @@ -101,6 +101,9 @@ # upstream changes/fixes from 2.10 branch r3347..3353 Patch9: changes-since-2.10.1--r3347..3353.diff +# update nscd profile and abstractions/nameservice to allow /var/lib/nscd/ paths (submitted upstream 2016-10-23) +Patch10: nscd-var-lib.diff + Url: https://launchpad.net/apparmor PreReq: sed BuildRoot: %{_tmppath}/%{name}-%{version}-build @@ -452,6 +455,7 @@ %patch7 -p1 %patch8 %patch9 +%patch10 # search for left-over multiline rules test -z "$(grep -r '^\s*$unix\|dbus$[^,]$([^)]*)$*[^,]*$' profiles/apparmor.d/)" ++++++ nscd-var-lib.diff ++++++ === modified file 'profiles/apparmor.d/abstractions/nameservice' --- profiles/apparmor.d/abstractions/nameservice 2016-06-22 22:15:49 +0000 +++ profiles/apparmor.d/abstractions/nameservice 2016-10-22 19:55:04 +0000 @@ -46,7 +46,7 @@ # to vast speed increases when working with network-based lookups. /{,var/}run/.nscd_socket rw, /{,var/}run/nscd/socket rw, - /{var/db,var/cache,var/run,run}/nscd/{passwd,group,services,hosts} r, + /{var/db,var/cache,var/lib,var/run,run}/nscd/{passwd,group,services,hosts} r, # nscd renames and unlinks files in it's operation that clients will # have open /{,var/}run/nscd/db* rmix, === modified file 'profiles/apparmor.d/usr.sbin.nscd' --- profiles/apparmor.d/usr.sbin.nscd 2016-03-21 20:30:19 +0000 +++ profiles/apparmor.d/usr.sbin.nscd 2016-10-22 19:54:36 +0000 @@ -28,7 +28,7 @@ /{,var/}run/nscd/ rw, /{,var/}run/nscd/db* rwl, /{,var/}run/nscd/socket wl, - /{var/cache,var/run,run}/nscd/{passwd,group,services,hosts,netgroup} rw, + /{var/cache,var/lib,var/run,run}/nscd/{passwd,group,services,hosts,netgroup} rw, /{,var/}run/{nscd/,}nscd.pid rwl, /var/log/nscd.log rw, @{PROC}/@{pid}/cmdline r,

1 0

commit libwps for openSUSE:Factory
by root＠hilbert.suse.de 31 Oct '16

31 Oct '16

Hello community, here is the log from the commit of package libwps for openSUSE:Factory checked in at 2016-10-31 09:52:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libwps (Old) and /work/SRC/openSUSE:Factory/.libwps.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libwps" Changes: -------- --- /work/SRC/openSUSE:Factory/libwps/libwps.changes 2016-10-20 23:05:26.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.libwps.new/libwps.changes 2016-10-31 09:52:20.000000000 +0100 @@ -1,0 +2,5 @@ +Sat Oct 22 16:59:30 UTC 2016 - jengelh(a)inai.de + +- Remove redundant pkgconfig requires + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libwps.spec ++++++ --- /var/tmp/diff_new_pack.NCQ3Wm/_old 2016-10-31 09:52:21.000000000 +0100 +++ /var/tmp/diff_new_pack.NCQ3Wm/_new 2016-10-31 09:52:21.000000000 +0100 @@ -48,8 +48,6 @@ Summary: Files for Developing with libwps Group: Development/Libraries/C and C++ Requires: %{libname} = %{version} -Requires: pkgconfig -Requires: pkgconfig(glu) %description devel libwps is a library for importing the Microsoft Works word processor

1 0

commit spdylay for openSUSE:Factory
by root＠hilbert.suse.de 31 Oct '16

31 Oct '16

Hello community, here is the log from the commit of package spdylay for openSUSE:Factory checked in at 2016-10-31 09:52:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/spdylay (Old) and /work/SRC/openSUSE:Factory/.spdylay.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "spdylay" Changes: -------- --- /work/SRC/openSUSE:Factory/spdylay/spdylay.changes 2016-10-22 13:00:31.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.spdylay.new/spdylay.changes 2016-10-31 09:52:04.000000000 +0100 @@ -1,0 +2,5 @@ +Sat Oct 22 17:27:46 UTC 2016 - jengelh(a)inai.de + +- Rectify rpm group classification and trim descriptions. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ spdylay.spec ++++++ --- /var/tmp/diff_new_pack.bvajw5/_old 2016-10-31 09:52:06.000000000 +0100 +++ /var/tmp/diff_new_pack.bvajw5/_new 2016-10-31 09:52:06.000000000 +0100 @@ -23,7 +23,7 @@ Release: 0 Summary: SPDY C Library License: MIT -Group: System/Libraries +Group: Development/Libraries/C and C++ Url: https://tatsuhiro-t.github.io/spdylay/ Source: https://github.com/tatsuhiro-t/spdylay/releases/download/v%{version}/spdyla… BuildRequires: gcc-c++ @@ -38,42 +38,39 @@ BuildRequires: pkgconfig(zlib) >= 1.2.3 %description -This is an experimental implementation of Google’s SPDY protocol in C. This -library provides SPDY version 2, 3 and 3.1 framing layer implementation. It -does not perform any I/O operations. When the library needs them, it calls the -callback functions provided by the application. It also does not include any -event polling mechanism, so the application can freely choose the way of -handling events. This library code does not depend on any particular SSL -library (except for example programs which depend on OpenSSL 1.0.1 or later). +This is an experimental implementation of Google’s SPDY protocol in +C. This library provides SPDY version 2, 3 and 3.1 framing layer +implementation. It does not perform any I/O operations but uses +callback functions provided by the application. Likewise, it includes +no event polling mechanism, so the application can freely choose. +Except for sample programs, this library code does not depend on any +particular SSL library. %package -n %{c_lib} -Summary: SPDY C Library - Shared C library +Summary: SPDY C Library Group: System/Libraries %description -n %{c_lib} -This is an experimental implementation of Google’s SPDY protocol in C. This -library provides SPDY version 2, 3 and 3.1 framing layer implementation. It -does not perform any I/O operations. When the library needs them, it calls the -callback functions provided by the application. It also does not include any -event polling mechanism, so the application can freely choose the way of -handling events. This library code does not depend on any particular SSL -library (except for example programs which depend on OpenSSL 1.0.1 or later). +This is an experimental implementation of Google’s SPDY protocol in +C. This library provides SPDY version 2, 3 and 3.1 framing layer +implementation. It does not perform any I/O operations but uses +callback functions provided by the application. Likewise, it includes +no event polling mechanism, so the application can freely choose. This package holds the shared C library. %package devel -Summary: SPDY C Library - Development Files +Summary: Development files for the SPDY C Library Group: Development/Libraries/C and C++ Requires: %{c_lib} = %{version} %description devel -This is an experimental implementation of Google’s SPDY protocol in C. This -library provides SPDY version 2, 3 and 3.1 framing layer implementation. It -does not perform any I/O operations. When the library needs them, it calls the -callback functions provided by the application. It also does not include any -event polling mechanism, so the application can freely choose the way of -handling events. This library code does not depend on any particular SSL -library (except for example programs which depend on OpenSSL 1.0.1 or later). +This is an experimental implementation of Google’s SPDY protocol in +C. This library provides SPDY version 2, 3 and 3.1 framing layer +implementation. It does not perform any I/O operations but uses +callback functions provided by the application. Likewise, it includes +no event polling mechanism, so the application can freely choose. +There is no dependency on a particular SSL library. This package holds the development files.

1 0

commit python3-pyserial for openSUSE:Factory
by root＠hilbert.suse.de 31 Oct '16

31 Oct '16

Hello community, here is the log from the commit of package python3-pyserial for openSUSE:Factory checked in at 2016-10-31 09:51:43 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python3-pyserial (Old) and /work/SRC/openSUSE:Factory/.python3-pyserial.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python3-pyserial" Changes: -------- --- /work/SRC/openSUSE:Factory/python3-pyserial/python3-pyserial-doc.changes 2016-07-12 23:50:04.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.python3-pyserial.new/python3-pyserial-doc.changes 2016-10-31 09:51:44.000000000 +0100 @@ -1,0 +2,31 @@ +Sat Oct 22 15:36:48 UTC 2016 - arun(a)gmx.de + +- update to version 3.2.1: + * Improvements: + + remove "serial.aio" in favor of separate package, + "pyserial-asyncio" + + add client mode to example "tcp_serial_redirect.py" + + use of monotonic clock for timeouts, when available (Python 3.3 + and up) + + [#169] arbitrary baud rate support for BSD family + + improve tests, improve "loop://" + * Bugfixes: + + [#137] Exception while cancel in miniterm (python3) + + [#143] Class Serial in protocol_loop.py references variable + before assigning to it + + [#149] Python 3 fix for threaded.FramedPacket + * Bugfixes (posix): + + [#133] _update_dtr_state throws Inappropriate ioctl for virtual + serial port created by socat on OS X + + [#157] Broken handling of CMSPAR in serialposix.py + * Bugfixes (win32): + + [#144] Use Unicode API for list_ports + + [#145] list_ports_windows: support devices with only VID + + [#162] Write in non-blocking mode returns incorrect value on + windows + +- changes from version 3.2.0: + * See 3.2.1, this one missed a merge request related to removing + aio. + +------------------------------------------------------------------- python3-pyserial.changes: same change Old: ---- pyserial-3.1.1.tar.gz New: ---- pyserial-3.2.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python3-pyserial-doc.spec ++++++ --- /var/tmp/diff_new_pack.EcGHO7/_old 2016-10-31 09:51:45.000000000 +0100 +++ /var/tmp/diff_new_pack.EcGHO7/_new 2016-10-31 09:51:45.000000000 +0100 @@ -17,7 +17,7 @@ Name: python3-pyserial-doc -Version: 3.1.1 +Version: 3.2.1 Release: 0 Url: https://github.com/pyserial/pyserial Summary: Documentation for python3-pyserial python3-pyserial.spec: same change ++++++ pyserial-3.1.1.tar.gz -> pyserial-3.2.1.tar.gz ++++++ ++++ 2687 lines of diff (skipped)

1 0

commit patchinfo.5709 for openSUSE:13.2:Update
by root＠hilbert.suse.de 31 Oct '16

31 Oct '16

Hello community, here is the log from the commit of package patchinfo.5709 for openSUSE:13.2:Update checked in at 2016-10-31 08:53:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/patchinfo.5709 (Old) and /work/SRC/openSUSE:13.2:Update/.patchinfo.5709.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.5709" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo incident="5709"> <issue id="1003952" tracker="bnc">Dovecot 2.2: ldap auth broken when sasl bind is used</issue> <category>recommended</category> <rating>moderate</rating> <packager>matwey</packager> <description> This recommended update for dovecot22 fixes the following issue: - Fix LDAP based authentication for some setups (boo #1003952) </description> <summary>Recommended update for dovecot22</summary> </patchinfo>

1 0

commit libpng12 for openSUSE:13.2:Update
by root＠hilbert.suse.de 28 Oct '16

28 Oct '16

Hello community, here is the log from the commit of package libpng12 for openSUSE:13.2:Update checked in at 2016-10-28 17:35:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/libpng12 (Old) and /work/SRC/openSUSE:13.2:Update/.libpng12.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libpng12" Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _link ++++++ --- /var/tmp/diff_new_pack.aDUOm0/_old 2016-10-28 17:35:31.000000000 +0200 +++ /var/tmp/diff_new_pack.aDUOm0/_new 2016-10-28 17:35:31.000000000 +0200 @@ -1 +1 @@ -<link package='libpng12.4351' cicount='copy' /> +<link package='libpng12.5745' cicount='copy' />

1 0

commit libpng12.5745 for openSUSE:13.2:Update
by root＠hilbert.suse.de 28 Oct '16

28 Oct '16

Hello community, here is the log from the commit of package libpng12.5745 for openSUSE:13.2:Update checked in at 2016-10-28 17:35:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/libpng12.5745 (Old) and /work/SRC/openSUSE:13.2:Update/.libpng12.5745.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libpng12.5745" Changes: -------- New Changes file: --- /dev/null 2016-10-27 01:54:32.792041256 +0200 +++ /work/SRC/openSUSE:13.2:Update/.libpng12.5745.new/libpng12.changes 2016-10-28 17:35:27.000000000 +0200 @@ -0,0 +1,608 @@ +------------------------------------------------------------------- +Thu Oct 20 11:49:33 UTC 2016 - pgajdos(a)suse.com + +- security update: + * CVE-2015-8540 [bsc#958791] + + libpng12-CVE-2015-8540.patch + +------------------------------------------------------------------- +Thu Dec 3 16:16:45 UTC 2015 - pgajdos(a)suse.com + +- security update: + * CVE-2015-8126 fixed incompletely [bsc#954980] + + libpng15-CVE-2015-8126-complete.patch + +------------------------------------------------------------------- +Mon Nov 16 14:03:28 UTC 2015 - pgajdos(a)suse.com + +- security update: + * CVE-2015-8126 [bsc#954980] + * CVE-2015-7981 [bsc#952051] + +------------------------------------------------------------------- +Tue Apr 22 14:12:09 UTC 2014 - pgajdos(a)suse.com + +- security update: + * CVE-2013-7353.patch [bnc#873124] + * CVE-2013-7354.patch [bnc#873123] + +------------------------------------------------------------------- +Fri Feb 7 07:43:01 UTC 2014 - pgajdos(a)suse.com + +- updated to 1.2.51: + Ignore, with a warning, out-of-range value of num_trans in png_set_tRNS(). + Replaced AM_CONFIG_HEADER(config.h) with + AC_CONFIG_HEADERS([config.h]) in configure.ac + Changed default value of PNG_USER_CACHE_MAX from 0 to 32767 in pngconf.h. + Avoid a possible memory leak in contrib/gregbook/readpng.c + Revised libpng.3 so that "doclifter" can process it. + Changed '"%s"m' to '"%s" m' in png_debug macros to improve portability + among compilers. + Rebuilt the configure scripts with autoconf-2.69 and automake-1.14.1 + Removed potentially misleading warning from png_check_IHDR(). + Quiet set-but-not-used warnings in pngset.c + Quiet an uninitialized memory warning from VC2013 in png_get_png(). + Quiet unused variable warnings from clang by porting PNG_UNUSED() from + libpng-1.4.6. + Added -DZ_SOLO to CFLAGS in contrib/pngminim/*/makefile + Added an #ifdef PNG_FIXED_POINT_SUPPORTED/#endif in pngset.c + +------------------------------------------------------------------- +Wed Apr 17 20:38:16 UTC 2013 - coolo(a)suse.com + +- add conflicts in -32bit package + +------------------------------------------------------------------- +Mon Apr 15 13:01:16 UTC 2013 - mmeister(a)suse.com + +- Added url as source. + Please see http://en.opensuse.org/SourceUrls + +------------------------------------------------------------------- +Wed Oct 24 19:01:46 UTC 2012 - jengelh(a)inai.de + +- Add missing baselib requires for compat-devel-32bit + +------------------------------------------------------------------- +Wed Jul 11 08:14:32 UTC 2012 - pgajdos(a)suse.com + +- updated to 1.2.50: + Changed "a+w" to "u+w" in Makefile.in to fix CVE-2012-3386. + +------------------------------------------------------------------- +Thu Mar 29 13:23:52 UTC 2012 - pgajdos(a)suse.com + +- updated to 1.2.49: [bnc#754745] + Revised png_set_text_2() to avoid potential memory corruption (fixes + CVE-2011-3048). + Prevent PNG_EXPAND+PNG_SHIFT doing the shift twice. + +------------------------------------------------------------------- +Wed Mar 14 11:22:02 UTC 2012 - pgajdos(a)suse.com + +- updated to 1.2.48: + * fixed CVE-2011-3045 [bnc#752008] + +------------------------------------------------------------------- +Mon Feb 20 09:33:11 UTC 2012 - pgajdos(a)suse.com + +- updated to 1.2.47: + * fixed CVE-2011-3026 [bnc#747311] + +------------------------------------------------------------------- +Thu Dec 1 10:47:40 UTC 2011 - idoenmez(a)suse.de + +- Name field shouldn't contain a macro + +------------------------------------------------------------------- +Thu Dec 1 10:26:12 UTC 2011 - coolo(a)suse.com + +- add libtool as buildrequire to avoid implicit dependency + +------------------------------------------------------------------- +Wed Oct 5 14:00:55 UTC 2011 - uli(a)suse.com + +- cross-build fix: use %configure macro + +------------------------------------------------------------------- +Tue Jul 12 14:51:49 UTC 2011 - pgajdos(a)novell.com + +- updated to 1.2.46: + * fixed CVE-2011-2501 [bnc#702578] + +------------------------------------------------------------------- +Mon Aug 30 14:26:10 UTC 2010 - coolo(a)novell.com + +- fix baselibs.conf after previous change + +------------------------------------------------------------------- +Thu Jul 29 15:09:48 CEST 2010 - pgajdos(a)suse.cz + +- add devel packages to baselibs.conf [bnc#625883] + +------------------------------------------------------------------- +Mon Jun 28 18:43:48 CEST 2010 - pgajdos(a)suse.cz + +- updated to 1.2.44: fixed libpng overflow (CVE-2010-1205) + and memory leak [bnc#617866] + +------------------------------------------------------------------- +Fri Jun 4 13:11:14 UTC 2010 - coolo(a)novell.com + +- remove the devel packages from baselibs.conf, not convinced of + their usefulness + +------------------------------------------------------------------- +Sat Apr 24 11:38:21 UTC 2010 - coolo(a)novell.com + +- buildrequire pkg-config to fix provides + +------------------------------------------------------------------- +Thu Feb 25 09:55:15 CET 2010 - pgajdos(a)suse.cz + +- updated to 1.2.43 (fixes [bnc#585403]): + * Removed "#define PNG_NO_ERROR_NUMBERS" that was inadvertently added + to pngconf.h in version 1.2.41. + * Removed leftover "-DPNG_CONFIGURE_LIBPNG" from scripts/makefile.darwin + and contrib/pngminim/*/makefile + * Relocated png_do_chop() to its original position in pngrtran.c; the + change in version 1.2.41beta08 caused transparency to be handled wrong + in some 16-bit datastreams (Yusaku Sugai). + * Renamed libpng-pc.in back to libpng.pc.in and revised CMakeLists.txt + (revising changes made in 1.2.41) + * Swapped PNG_UNKNOWN_CHUNKS_SUPPORTED and PNG_HANDLE_AS_UNKNOWN_SUPPORTED + in pngset.c to be consistent with other changes in version 1.2.38. + * Avoid deprecated references to png_ptr-io_ptr and png_ptr->error_ptr + in pngtest.c + +------------------------------------------------------------------- +Mon Dec 14 20:31:24 CET 2009 - jengelh(a)medozas.de + +- add baselibs.conf as a source + +------------------------------------------------------------------- +Mon Dec 7 09:43:11 CET 2009 - pgajdos(a)suse.cz + +- updated to 1.2.41: + contains numerous cleanups, some new compile-time warnings about + direct struct access (define PNG_NO_PEDANTIC_WARNINGS to enable), + a new xcode build project, and a minor performance improvement + (avoid building 16-bit gamma tables when not needed) + +------------------------------------------------------------------- +Tue Nov 24 14:16:32 CET 2009 - pgajdos(a)suse.cz + +- updated to 1.2.40: + Removed an extra png_debug() recently added to png_write_find_filter(). + Fixed incorrect #ifdef in pngset.c regarding unknown chunk support. + Various bugfixes and improvements to CMakeLists.txt (Philip Lowman) + +------------------------------------------------------------------- +Tue Nov 3 19:09:28 UTC 2009 - coolo(a)novell.com + +- updated patches to apply with fuzz=0 + +------------------------------------------------------------------- +Thu Aug 13 15:56:07 CEST 2009 - pgajdos(a)suse.cz + +- updated to 1.2.39: + * Added a prototype for png_64bit_product() in png.c + * Avoid a possible NULL dereference in debug build, + in png_set_text_2() + * Relocated new png_64_bit_product() prototype into png.h + * Replaced *.tar.lzma with *.txz in distribution. + * Reject attempt to write iCCP chunk with negative embedded + profile length. + +------------------------------------------------------------------- ++++ 411 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:13.2:Update/.libpng12.5745.new/libpng12.changes New: ---- baselibs.conf libpng-1.2.51-CVE-2013-7353.patch libpng-1.2.51-CVE-2013-7354.patch libpng-1.2.51.tar.xz libpng12-CVE-2015-7981.patch libpng12-CVE-2015-8126-complete.patch libpng12-CVE-2015-8126.patch libpng12-CVE-2015-8540.patch libpng12.changes libpng12.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libpng12.spec ++++++ # # spec file for package libpng12 # # Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via http://bugs.opensuse.org/ # # %define major 1 %define minor 2 %define micro 51 %define branch %{major}%{minor} %define libname libpng%{branch}-0 Name: libpng12 Url: http://www.libpng.org/pub/png/libpng.html Version: %{major}.%{minor}.%{micro} Release: 0 Summary: Library for the Portable Network Graphics Format (PNG) License: Zlib Group: System/Libraries Source: http://downloads.sourceforge.net/project/libpng/%{name}/%{version}/libpng-%… Source2: baselibs.conf Patch0: libpng-1.2.51-CVE-2013-7353.patch Patch1: libpng-1.2.51-CVE-2013-7354.patch Patch2: libpng12-CVE-2015-8126.patch Patch3: libpng12-CVE-2015-7981.patch Patch4: libpng12-CVE-2015-8126-complete.patch Patch5: libpng12-CVE-2015-8540.patch BuildRequires: libtool BuildRequires: pkg-config BuildRequires: zlib-devel BuildRoot: %{_tmppath}/%{name}-%{version}-build %define debug_package_requires %{libname} = %{version}-%{release} %package -n %{libname} Summary: Library for the Portable Network Graphics Format (PNG) # bug437293 Group: System/Libraries %ifarch ppc64 Obsoletes: libpng-64bit %endif # Obsoletes: libpng < %{version} Provides: libpng = %{version}-%{release} %package devel Summary: Development Tools for applications which will use the Libpng Group: Development/Libraries/C and C++ Requires: %{libname} = %{version} Requires: glibc-devel Requires: pkg-config Requires: zlib-devel Recommends: libpng%{branch}-compat-devel # bug437293 %ifarch ppc64 Obsoletes: libpng-devel-64bit %endif # %package compat-devel Summary: Development Tools for applications which will use the Libpng Group: Development/Libraries/C and C++ Requires: libpng%{branch}-devel = %{version} Provides: libpng-devel = %{version} Obsoletes: libpng-devel < 1.2.43 Conflicts: otherproviders(libpng-devel) %description libpng is the official reference library for the Portable Network Graphics format (PNG). %description -n %{libname} libpng is the official reference library for the Portable Network Graphics format (PNG). %description devel The libpng%{branch}-devel package includes the header files, libraries, configuration files and development tools necessary for compiling and linking programs which will manipulate PNG files using libpng%{branch}. libpng is the official reference library for the Portable Network Graphics (PNG) format. %description compat-devel The libpng%{branch}-compat-devel package contains unversioned symlinks to the header files, libraries, configuration files and development tools necessary for compiling and linking programs that don't care about libpng version. %prep %setup -n libpng-%{version} %patch0 %patch1 %patch2 %patch3 %patch4 %patch5 -p1 %build # We'll never use the old pgcc-2.95.1 with the buggy -O3, so having # the -O3 that is originally used should work. # Substitute the -O2 to -O3 because I'm not sure if simply appending # it will preserve(not override) the detailed opt flags used in RPM_OPT_FLAGS: %configure CFLAGS="`echo $RPM_OPT_FLAGS|sed 's/-O2/-O3/'` -DPNG_SKIP_SETJMP_CHECK" \ --prefix=/usr \ --libdir=%{_libdir} \ --mandir=%{_mandir} \ --disable-static \ --with-libpng-compat=no %check make check %install make install DESTDIR=$RPM_BUILD_ROOT rm $RPM_BUILD_ROOT/%{_libdir}/libpng*.la %post -n %{libname} -p /sbin/ldconfig %postun -n %{libname} -p /sbin/ldconfig %files -n %{libname} %defattr(-,root,root) %{_libdir}/libpng%{branch}.so.* %files devel %defattr(-,root,root) %{_bindir}/libpng%{branch}-config %{_includedir}/libpng%{branch} %{_libdir}/libpng%{branch}.so %{_libdir}/pkgconfig/libpng%{branch}.pc %doc CHANGES README TODO ANNOUNCE LICENSE libpng-*.txt %files compat-devel %defattr(-,root,root) %{_bindir}/libpng-config %{_includedir}/*.h %{_libdir}/libpng.so %{_libdir}/pkgconfig/libpng.pc %doc %{_mandir}/man3/libpng.3.gz %doc %{_mandir}/man3/libpngpf.3.gz %doc %{_mandir}/man5/png.5.gz %changelog ++++++ baselibs.conf ++++++ libpng12-0 obsoletes "libpng-<targettype> < <version>" provides "libpng-<targettype> = <version>" libpng12-devel requires -libpng12-<targettype> requires "libpng12-0-<targettype> = <version>" libpng12-compat-devel requires -libpng12-compat-<targettype> requires "libpng12-devel-<targettype> = <version>" conflicts "libpng-devel-<targettype>" provides "libpng-devel-<targettype>" ++++++ libpng-1.2.51-CVE-2013-7353.patch ++++++ http://sourceforge.net/p/libpng/code/ci/1a3d6e3cf3082a0da998dbf402d384a5894… http://sourceforge.net/p/libpng/code/ci/77a817bfc298a221e3e623acf73c2a1e726… http://sourceforge.net/p/libpng/code/ci/bec9ca9b8aa0cf16d2cde1757379afbe9ad… Index: pngset.c =================================================================== --- pngset.c.orig 2014-04-22 16:08:23.458978035 +0200 +++ pngset.c 2014-04-22 16:09:15.921977136 +0200 @@ -986,9 +986,17 @@ if (png_ptr == NULL || info_ptr == NULL || num_unknowns == 0) return; - np = (png_unknown_chunkp)png_malloc_warn(png_ptr, - (png_uint_32)((info_ptr->unknown_chunks_num + num_unknowns) * - png_sizeof(png_unknown_chunk))); + if (num_unknowns < 0 || + num_unknowns > INT_MAX-info_ptr->unknown_chunks_num || + (unsigned int)/*SAFE*/(num_unknowns +/*SAFE*/ + info_ptr->unknown_chunks_num) >= + PNG_SIZE_MAX/png_sizeof(png_unknown_chunk)) + np=NULL; + + else + np = (png_unknown_chunkp)png_malloc_warn(png_ptr, + (png_size_t)(info_ptr->unknown_chunks_num + num_unknowns) * + png_sizeof(png_unknown_chunk)); if (np == NULL) { png_warning(png_ptr, ++++++ libpng-1.2.51-CVE-2013-7354.patch ++++++ http://sourceforge.net/p/libpng/code/ci/798d3de5f66b6df6d6605f968da641c2472… http://sourceforge.net/p/libpng/code/ci/77a0a2ea113e699c7021caf1a530d2e2dd9… Index: pngset.c =================================================================== --- pngset.c.orig 2014-04-24 14:13:43.144134631 +0200 +++ pngset.c 2014-04-24 14:23:31.461124549 +0200 @@ -664,6 +664,17 @@ /* Make sure we have enough space in the "text" array in info_struct * to hold all of the incoming text_ptr objects. */ + + if (num_text < 0 || + num_text > INT_MAX - info_ptr->num_text - 8 || + (unsigned int)/*SAFE*/(num_text +/*SAFE*/ + info_ptr->num_text + 8) >= + PNG_SIZE_MAX/png_sizeof(png_text)) + { + png_warning(png_ptr, "too many text chunks"); + return(0); + } + if (info_ptr->num_text + num_text > info_ptr->max_text) { int old_max_text = info_ptr->max_text; @@ -921,9 +932,19 @@ if (png_ptr == NULL || info_ptr == NULL) return; - np = (png_sPLT_tp)png_malloc_warn(png_ptr, - (info_ptr->splt_palettes_num + nentries) * - (png_uint_32)png_sizeof(png_sPLT_t)); + if (nentries < 0 || + nentries > INT_MAX-info_ptr->splt_palettes_num || + (unsigned int)/*SAFE*/(nentries +/*SAFE*/ + info_ptr->splt_palettes_num) >= + PNG_SIZE_MAX/png_sizeof(png_sPLT_t)) + np=NULL; + + else + + np = (png_sPLT_tp)png_malloc_warn(png_ptr, + (info_ptr->splt_palettes_num + nentries) * + (png_size_t)png_sizeof(png_sPLT_t)); + if (np == NULL) { png_warning(png_ptr, "No memory for sPLT palettes."); ++++++ libpng12-CVE-2015-7981.patch ++++++ --- pngset.c +++ pngset.c @@ -837,6 +837,15 @@ (png_ptr->mode & PNG_WROTE_tIME)) return; + if (mod_time->month == 0 || mod_time->month > 12 || + mod_time->day == 0 || mod_time->day > 31 || + mod_time->hour > 23 || mod_time->minute > 59 || + mod_time->second > 60) + { + png_warning(png_ptr, "Ignoring invalid time value"); + return; + } + png_memcpy(&(info_ptr->mod_time), mod_time, png_sizeof(png_time)); info_ptr->valid |= PNG_INFO_tIME; } ++++++ libpng12-CVE-2015-8126-complete.patch ++++++ https://github.com/glennrp/libpng/commit/0a9afc12dea0949c2040a42ad1342f7a4b… --- pngset.c +++ pngset.c @@ -520,8 +520,8 @@ png_set_PLTE(png_structrp png_ptr, png_inforp info_ptr, if (png_ptr == NULL || info_ptr == NULL) return; - max_palette_length = (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE) ? - (1 << png_ptr->bit_depth) : PNG_MAX_PALETTE_LENGTH; + max_palette_length = (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE) ? + (1 << info_ptr->bit_depth) : PNG_MAX_PALETTE_LENGTH; if (num_palette < 0 || num_palette > (int) max_palette_length) { ++++++ libpng12-CVE-2015-8126.patch ++++++ >From 81f44665cce4cb1373f049a76f3904e981b7a766 Mon Sep 17 00:00:00 2001 From: Glenn Randers-Pehrson <glennrp at users.sourceforge.net> Date: Thu, 29 Oct 2015 09:26:41 -0500 Subject: [PATCH] [libpng16] Reject attempt to write over-length PLTE chunk Index: pngwutil.c =================================================================== --- pngwutil.c.orig 2015-11-16 14:39:45.517740820 +0100 +++ pngwutil.c 2015-11-16 14:46:45.926414642 +0100 @@ -575,17 +575,20 @@ #ifdef PNG_USE_LOCAL_ARRAYS PNG_PLTE; #endif - png_uint_32 i; + png_uint_32 max_palette_length, i; png_colorp pal_ptr; png_byte buf[3]; png_debug(1, "in png_write_PLTE"); + max_palette_length = (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE) ? + (1 << png_ptr->bit_depth) : PNG_MAX_PALETTE_LENGTH; + if (( #ifdef PNG_MNG_FEATURES_SUPPORTED !(png_ptr->mng_features_permitted & PNG_FLAG_MNG_EMPTY_PLTE) && #endif - num_pal == 0) || num_pal > 256) + num_pal == 0) || num_pal > max_palette_length) { if (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE) { Index: pngrutil.c =================================================================== --- pngrutil.c.orig 2014-02-06 04:52:35.000000000 +0100 +++ pngrutil.c 2015-11-16 14:39:45.518740834 +0100 @@ -503,7 +503,7 @@ png_handle_PLTE(png_structp png_ptr, png_infop info_ptr, png_uint_32 length) { png_color palette[PNG_MAX_PALETTE_LENGTH]; - int num, i; + int max_palette_length, num, i; #ifdef PNG_POINTER_INDEXING_SUPPORTED png_colorp pal_ptr; #endif @@ -557,6 +557,19 @@ num = (int)length / 3; + /* If the palette has 256 or fewer entries but is too large for the bit + * depth, we don't issue an error, to preserve the behavior of previous + * libpng versions. We silently truncate the unused extra palette entries + * here. + */ + if (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE) + max_palette_length = (1 << png_ptr->bit_depth); + else + max_palette_length = PNG_MAX_PALETTE_LENGTH; + + if (num > max_palette_length) + num = max_palette_length; + #ifdef PNG_POINTER_INDEXING_SUPPORTED for (i = 0, pal_ptr = palette; i < num; i++, pal_ptr++) { Index: pngset.c =================================================================== --- pngset.c.orig 2015-11-16 14:39:45.509740712 +0100 +++ pngset.c 2015-11-16 14:39:45.518740834 +0100 @@ -446,12 +446,17 @@ png_colorp palette, int num_palette) { + png_uint_32 max_palette_length; + png_debug1(1, "in %s storage function", "PLTE"); if (png_ptr == NULL || info_ptr == NULL) return; - if (num_palette < 0 || num_palette > PNG_MAX_PALETTE_LENGTH) + max_palette_length = (png_ptr->color_type == PNG_COLOR_TYPE_PALETTE) ? + (1 << png_ptr->bit_depth) : PNG_MAX_PALETTE_LENGTH; + + if (num_palette < 0 || num_palette > (int) max_palette_length) { if (info_ptr->color_type == PNG_COLOR_TYPE_PALETTE) png_error(png_ptr, "Invalid palette length"); ++++++ libpng12-CVE-2015-8540.patch ++++++ --- a/pngwutil.c +++ b/pngwutil.c @@ -1580,7 +1580,7 @@ { png_warning(png_ptr, "trailing spaces removed from keyword"); - while (*kp == ' ') + while (key_len && *kp == ' ') { *(kp--) = '\0'; key_len--;

1 0

commit ImageMagick for openSUSE:13.2:Update
by root＠hilbert.suse.de 28 Oct '16

28 Oct '16

Hello community, here is the log from the commit of package ImageMagick for openSUSE:13.2:Update checked in at 2016-10-28 17:35:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:13.2:Update/ImageMagick (Old) and /work/SRC/openSUSE:13.2:Update/.ImageMagick.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "ImageMagick" Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _link ++++++ --- /var/tmp/diff_new_pack.XuZIro/_old 2016-10-28 17:35:13.000000000 +0200 +++ /var/tmp/diff_new_pack.XuZIro/_new 2016-10-28 17:35:13.000000000 +0200 @@ -1 +1 @@ -<link package='ImageMagick.5466' cicount='copy' /> +<link package='ImageMagick.5734' cicount='copy' />

1 0