November 2023 - openSUSE Commits - openSUSE Mailing Lists

commit open-vm-tools for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package open-vm-tools for openSUSE:Factory checked in at 2023-11-01 22:09:27 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/open-vm-tools (Old) and /work/SRC/openSUSE:Factory/.open-vm-tools.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "open-vm-tools" Wed Nov 1 22:09:27 2023 rev:120 rq:1121337 version:12.3.5 Changes: -------- --- /work/SRC/openSUSE:Factory/open-vm-tools/open-vm-tools.changes 2023-10-29 19:39:46.662961457 +0100 +++ /work/SRC/openSUSE:Factory/.open-vm-tools.new.17445/open-vm-tools.changes 2023-11-01 22:09:31.710663715 +0100 @@ -2 +2 @@ -Fri Oct 27 14:42:23 UTC 2023 - Kirk Allan <kallan(a)suse.com> +Mon Oct 30 17:16:18 UTC 2023 - Kirk Allan <kallan(a)suse.com> @@ -4,5 +4,26 @@ -- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token - signature bypass vulnerability. -- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file - descriptor hijack vulnerability -+ Add patch: +- Update to 12.3.5 (build 22544099) (boo#1216670) + - There are no new features in the open-vm-tools 12.3.5 release. This is + primarily a maintenance release that addresses a few critical problems, + including: + - This release resolves CVE-2023-34058. For more information on this + vulnerability and its impact on VMware products, see + https://www.vmware.com/security/advisories/VMSA-2023-0024.html. + - This release resolves CVE-2023-34059 which only affects open-vm-tools. + For more information on this vulnerability, please see the Resolved + Issues section of the Release Notes. + - A GitHub issue has been handled. Please see the Resolved Issues section + of the Release Notes. + - An update to the deployPkg plugin to coordinate with recent releases + of cloud-init for improvement for guest VM customization. + - For issues resolved in this release, see the Resolved Issues + <https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#…> + section of the Release Notes. + - For complete details, see: + https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5 + - Release Notes are available at + https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md + - The granular changes that have gone into the 12.3.5 release are in the + ChangeLog at + https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/Ch… + +- Drop patch now contained in 12.3.5: @@ -16,0 +38,11 @@ + +------------------------------------------------------------------- +Fri Oct 20 17:16:21 UTC 2023 - Kirk Allan <kallan(a)suse.com> + +- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token + signature bypass vulnerability. +- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file + descriptor hijack vulnerability ++ Add patch: + - CVE-2023-34058.patch + - CVE-2023-34059.patch Old: ---- CVE-2023-34058.patch CVE-2023-34059.patch open-vm-tools-12.3.0.tar.xz New: ---- open-vm-tools-12.3.5.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ open-vm-tools.spec ++++++ --- /var/tmp/diff_new_pack.AgxRgY/_old 2023-11-01 22:09:33.322722884 +0100 +++ /var/tmp/diff_new_pack.AgxRgY/_new 2023-11-01 22:09:33.330723178 +0100 @@ -38,7 +38,7 @@ %define with_X 1 Name: open-vm-tools -Version: 12.3.0 +Version: 12.3.5 Release: 0 Summary: Open Virtual Machine Tools License: BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only @@ -156,8 +156,6 @@ Supplements: modalias(pci:v000015ADd*sv*sd*bc*sc*i*) ExclusiveArch: %ix86 x86_64 aarch64 #Upstream patches -Patch2: CVE-2023-34058.patch -Patch3: CVE-2023-34059.patch #SUSE specific patches Patch0: pam-vmtoolsd.patch @@ -260,8 +258,6 @@ # fix for an rpmlint warning regarding wrong line feeds sed -i -e "s/\r//" README #Upstream patches -%patch2 -p2 -%patch3 -p2 #SUSE specific patches %patch0 -p2 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.AgxRgY/_old 2023-11-01 22:09:33.538730813 +0100 +++ /var/tmp/diff_new_pack.AgxRgY/_new 2023-11-01 22:09:33.578732281 +0100 @@ -2,9 +2,9 @@ <service name="tar_scm" mode="disabled"> <param name="scm">git</param> <param name="url">https://github.com/vmware/open-vm-tools.git</param> - <param name="revision">stable-12.3.0</param> + <param name="revision">stable-12.3.5</param> <param name="filename">open-vm-tools</param> - <param name="versionformat">12.3.0</param> + <param name="versionformat">12.3.5</param> </service> <service name="recompress" mode="disabled"> <param name="file">*.tar</param> ++++++ open-vm-tools-12.3.0.tar.xz -> open-vm-tools-12.3.5.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/ReleaseNotes.md new/open-vm-tools-12.3.5/ReleaseNotes.md --- old/open-vm-tools-12.3.0/ReleaseNotes.md 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/ReleaseNotes.md 2023-10-26 17:39:15.000000000 +0200 @@ -1,8 +1,8 @@ -# open-vm-tools 12.3.0 Release Notes +# open-vm-tools 12.3.5 Release Notes -Updated on: 31 August 2023 +Updated on: 26 October 2023 -open-vm-tools | 31 AUGUST 2023 | Build 22234872 +open-vm-tools | 26 OCTOBER 2023 | Build 22544099 Check back for additions and updates to these release notes. @@ -10,7 +10,7 @@ The release notes cover the following topics: -- [open-vm-tools 12.3.0 Release Notes](#open-vm-tools-1230-release-notes) +- [open-vm-tools 12.3.5 Release Notes](#open-vm-tools-1235-release-notes) - [What's in the Release Notes](#whats-in-the-release-notes) - [What's New](#whats-new) - [End of Feature Support Notice](#end-of-feature-support-notice) @@ -22,13 +22,15 @@ ## <a id="whatsnew" name="whatsnew"></a>What's New -This release resolves CVE-2023-20900. For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0019.html. +* This release resolves CVE-2023-34058. For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0024.html. + +* This release resolves CVE-2023-34059 which only affects open-vm-tools. * Please see the [Resolved Issues](#resolvedissues) and [Known Issues](#knownissues) sections below. -* A complete list of the granular changes in the open-vm-tools 12.3.0 release is available at: +* A complete list of the granular changes in the open-vm-tools 12.3.5 release is available at: - [open-vm-tools ChangeLog](https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-… + [open-vm-tools ChangeLog](https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-… ## <a id="endsupport" name="endsupport"></a>End of Feature Support Notice @@ -38,7 +40,7 @@ ## <a id="i18n" name="i18n"></a>Internationalization -open-vm-tools 12.3.0 is available in the following languages: +open-vm-tools 12.3.5 is available in the following languages: * English * French @@ -60,66 +62,32 @@ ## <a id="resolvedissues" name ="resolvedissues"></a> Resolved Issues -* **This release resolves CVE-2023-20900.** - - For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0019.html. - -* **Linux quiesced snapshot: "SyncDriver: failed to freeze '_filesystem_'"** - - The open-vm-tools 12.2.0 release had an update to the Linux quiesced snapshot operation that would avoid starting a quiesced snapshot if a filesystem had already been frozen by another process. See the [Resolved Issues](https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseN… section in the open-vm-tools 12.2.0 Release Notes. That fix may have been backported into earlier versions of open-vm-tools by Linux vendors. - - It is possible that filesystems are being frozen in custom pre-freeze scripts to control the order in which those specific filesystems are to be frozen. The vmtoolsd process **must be informed** of all such filesystems with the help of "excludedFileSystems" setting of tools.conf. - - ``` - [vmbackup] - - excludedFileSystems=/opt/data,/opt/app/project-*,... - ``` - - A temporary workaround is available (starting from open-vm-tools 12.3.0) for system administrators to quickly allow a quiescing operation to succeed until the "excludedFileSystems" list can be configured. Note, if another process thaws the file system while a quiescing snapshot operation is ongoing, the snapshot may be compromised. Once the "excludedFileSystems" list is configured this setting MUST be unset (or set to false). - - ``` - [vmbackup] - - ignoreFrozenFileSystems = true - ``` - - This workaround is provided in the source file changes in - - https://github.com/vmware/open-vm-tools/commit/60c3a80ddc2b400366ed05169e16… - - and at Linux vendors' discretion, may be backported to earlier versions of open-vm-tools. - -* **A number of Coverity reported issues have been addressed.** +* **This release resolves CVE-2023-34058.** -* **Component Manager / salt-minion: New InstallStatus "UNMANAGED".** + For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0024.html. - Salt-minion added support for "ExternalInstall" (106) to indicate an older version of salt-minion is installed on the vm and cannot be managed by the svtminion.* scripts. The Component Manager will track that as "UNMANAGED" and take no action. + open-vm-tools contains a SAML token signature bypass vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.5 - CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H -* **The following pull requests and issues have been addressed** + A malicious actor that has been granted Guest Operation Privileges in a target virtual machine may be able to elevate their privileges if that target virtual machine has been assigned a more privileged Guest Alias. - * Add antrea and calico interface pattern to GUESTINFO_DEFAULT_IFACE_EXCLUDES + Note: While the description and known attack vectors are very similar to CVE-2023-20900, CVE-2023-34058 has a different root cause that must be addressed. - [Issue #638](https://github.com/vmware/open-vm-tools/issues/638) - [Pull request #639](https://github.com/vmware/open-vm-tools/pull/639) + A patch for earlier versions of open-vm-tools is available at [CVE-2023-34058.patch](https://github.com/vmware/open-vm-tools/blob/CVE-2023…. - * Invalid argument with "\\" in Linux username (Active Directory user) +* **This release resolves CVE-2023-34059.** - [Issue #641](https://github.com/vmware/open-vm-tools/issues/641) + open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.4. - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - * Improve POSIX guest identification + A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs. - [Issue #647](https://github.com/vmware/open-vm-tools/issues/647) - [Issue #648](https://github.com/vmware/open-vm-tools/issues/648) + A patch for earlier versions of open-vm-tools is available at [CVE-2023-34059.patch](https://github.com/vmware/open-vm-tools/blob/CVE-2023…. - * Remove appUtil library which depends on deprecated "gdk-pixbuf-xlib" +* **The following github.com/vmware/open-vm-tools issue have been addressed** - [Issue #658](https://github.com/vmware/open-vm-tools/issues/658) + * Better cooperation between deployPkg plugin and cloud-init concerning location of 'disable_vmware_customization' flag. - * Fix build problems with grpc + [Issue #310](https://github.com/vmware/open-vm-tools/issues/310) - [Pull request #664](https://github.com/vmware/open-vm-tools/pull/664) - [Issue #676](https://github.com/vmware/open-vm-tools/issues/676) ## <a id="knownissues" name="knownissues"></a>Known Issues diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/ChangeLog new/open-vm-tools-12.3.5/open-vm-tools/ChangeLog --- old/open-vm-tools-12.3.0/open-vm-tools/ChangeLog 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/ChangeLog 2023-10-26 17:39:15.000000000 +0200 @@ -1,3 +1,119 @@ +commit 6acd1f6742a8fc0dea9cabf7ba15416a2daf5075 +Author: Katy Feng <fkaty(a)vmware.com> +Date: Thu Oct 26 08:35:59 2023 -0700 + + Update the ReleaseNotes.md for the 12.3.5 open-vm-tools release. + +commit d5a0ca16b64730507735281012bc3a4660c5b46c +Author: Katy Feng <fkaty(a)vmware.com> +Date: Wed Oct 25 11:13:15 2023 -0700 + + Prepare for the open-vm-tools 12.3.5 release. + - Update the tools version in the configure.ac. + - Update the build numbers in the buldNumber.h. + +commit ca8bde40e2bb2e03b5f3a38530f6be0d4b19de34 +Author: Katy Feng <fkaty(a)vmware.com> +Date: Tue Oct 17 15:31:51 2023 -0700 + + Update the ChangeLog file with the changes in the 12.3.5 open-vm-tools release. + - plus the 12.3.0 open-vm-tools release point in the ChangeLog. + +commit 1bfe23d728b74e08f4f65cd9b0093ca73937003a +Author: Katy Feng <fkaty(a)vmware.com> +Date: Tue Oct 17 15:24:48 2023 -0700 + + Don't accept tokens with unrelated certs + + If a SAML token has a cert that's not a part of a chain, + fail the token as invalid. + +commit 63f7c79c4aecb14d37cc4ce9da509419e31d394f +Author: Katy Feng <fkaty(a)vmware.com> +Date: Tue Oct 17 15:24:48 2023 -0700 + + File descriptor vulnerability in the open-vm-tools vmware-user-suid-wrapperx + on Linux + + Moving the privilege drop logic (dropping privilege to the real uid and + gid of the process for the vmusr service) from suidWrapper to vmtoolsd code. + Now the vmtoolsd is not executed with dropped privileges (started as setuid + program) and the dumpable attribute of the process is not reset. + The unprivileged user will not have access to the privileged file descriptors + in the vmtoolsd vmusr process. + Also, setting the FD_CLOEXEC flag for both uinputFd and blockFd preventing + the file descriptors being inherited any further from the vmtoolsd. + +commit 3b5308bb4bdf3eeebd49808eb0efa015aa183772 +Author: Katy Feng <fkaty(a)vmware.com> +Date: Tue Oct 17 15:24:48 2023 -0700 + + Suppress optional arg to backup scripts when empty string. + Backup scripts can be called with an optional argument. Don't pass the + optional arg to the script if it's an empty string. + +commit 395cb80dc14e86f07e22541ae5ff205ad695056e +Author: Katy Feng <fkaty(a)vmware.com> +Date: Tue Oct 17 15:24:48 2023 -0700 + + Checking flag 'disable_vmware_customization' in more cloud-init config files + + Currently, deployPkg plugin checks the existence of flag + 'disable_vmware_customization: false' in the /etc/cloud/cloud.cfg file + to determine if VMware customization is enabled or not on cloud-init + side when cloud-init is available in guest. + Both cloud-init team and customers suggested that it's better practice to + put local configuration like this flag into some .cfg files under + /etc/cloud/cloud.cfg.d directory, ex: /etc/cloud/cloud.cfg.d/somefile.cfg + + This change implements the following adjustments to make sure we handle + this flag the same way as cloud-init does in ds-identify and Datasource: + 1. Instead of regex matching flag 'disable_vmware_customization: false', + we will check the value of flag 'disable_vmware_customization': + If the value is 'false', it means VMware customization is enabled. + If the value is 'true', it means VMware customization is disabled. + If the flag is not set, by default VMware customization is disabled + on cloud-init side. + 2. Besides cloud-init /etc/cloud/cloud.cfg file, we will check all .cfg + files under /etc/cloud/cloud.cfg.d directory. + 3. The value of flag 'disable_vmware_customization' in .cfg files under + /etc/cloud/cloud.cfg.d directory will overwrite the one in + /etc/cloud/cloud.cfg file. + 4. The value of flag 'disable_vmware_customization' in a .cfg file listed + further down the alphabetical order under /etc/cloud/cloud.cfg.d directory + will overwrite the value in a .cfg file listed earier. + 5. If a cloud-init config file contains more than one instance of this + flag, the value of the later flag will overwrite the former one's. + + Github Issue: https://github.com/vmware/open-vm-tools/issues/310 + +commit d9ffb3275ada811caa8478d481cd9003766baa1c +Author: Katy Feng <fkaty(a)vmware.com> +Date: Tue Oct 17 15:24:48 2023 -0700 + + Add missed 2023 copyright change. + +commit ba8219ee4bab927d7142e8392b20e183c589786e +Author: Katy Feng <fkaty(a)vmware.com> +Date: Tue Oct 17 15:24:48 2023 -0700 + + Enabling the open-vm-tools VGAuth Host Verification feature. + + The Host Verified SAML token work is complete. Adding the new code to the + open-vm-tools source. + +commit 650ce059114e09cbac3594b9e1be4069febe4311 +Author: Katy Feng <fkaty(a)vmware.com> +Date: Tue Oct 17 15:24:47 2023 -0700 + + Setting the VMware Tools version to 12.3.5. + +commit 865e76adf86fb38380220a3b760aa92ba5407c60 +Author: Katy Feng <fkaty(a)vmware.com> +Date: Thu Aug 31 07:38:59 2023 -0700 + + Update of the ChangeLog with the "open-vm-tools 12.3.0" release point marker. + commit 4fe4b1be1d7139aa571a6431f26904e6f0b77883 Author: Katy Feng <fkaty(a)vmware.com> Date: Thu Aug 31 07:32:27 2023 -0700 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/configure.ac new/open-vm-tools-12.3.5/open-vm-tools/configure.ac --- old/open-vm-tools-12.3.0/open-vm-tools/configure.ac 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/configure.ac 2023-10-26 17:39:15.000000000 +0200 @@ -35,10 +35,10 @@ ### Initialization ### -TOOLS_VERSION="12.3.0" +TOOLS_VERSION="12.3.5" AC_INIT( [open-vm-tools], - [12.3.0], + [12.3.5], [open-vm-tools-devel(a)lists.sourceforge.net]) # In order to make this configure script auto-detect situations where @@ -1944,12 +1944,6 @@ -AM_CONDITIONAL([VMTOOLS_FS_VGAUTH_HOST_VERIFICATION],[true]) -if test "$enable_vgauth" = "yes"; then - echo "Enabling vgauth host verification" - CPPFLAGS="$CPPFLAGS -DVMTOOLS_FS_VGAUTH_HOST_VERIFICATION" -fi - ### ### Output diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/lib/include/buildNumber.h new/open-vm-tools-12.3.5/open-vm-tools/lib/include/buildNumber.h --- old/open-vm-tools-12.3.0/open-vm-tools/lib/include/buildNumber.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/lib/include/buildNumber.h 2023-10-26 17:39:15.000000000 +0200 @@ -1,12 +1,12 @@ #define BUILD_NUMBER \ - "build-22234872" + "build-22544099" #define BUILD_NUMBER_NUMERIC \ - 22234872 + 22544099 #define BUILD_NUMBER_NUMERIC_STRING \ - "22234872" + "22544099" #define PRODUCT_BUILD_NUMBER \ - "product-build-44994" + "product-build-46049" #define PRODUCT_BUILD_NUMBER_NUMERIC \ - 44994 + 46049 #define PRODUCT_BUILD_NUMBER_NUMERIC_STRING \ - "44994" + "46049" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/lib/include/compat/compat_stdarg.h new/open-vm-tools-12.3.5/open-vm-tools/lib/include/compat/compat_stdarg.h --- old/open-vm-tools-12.3.0/open-vm-tools/lib/include/compat/compat_stdarg.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/lib/include/compat/compat_stdarg.h 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2006-2016 VMware, Inc. All rights reserved. + * Copyright (C) 2006-2016,2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/lib/include/vm_tools_version.h new/open-vm-tools-12.3.5/open-vm-tools/lib/include/vm_tools_version.h --- old/open-vm-tools-12.3.0/open-vm-tools/lib/include/vm_tools_version.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/lib/include/vm_tools_version.h 2023-10-26 17:39:15.000000000 +0200 @@ -1751,15 +1751,22 @@ #define TOOLS_VERSION_BANDSAW_UPDATE1_V_BASE 5 #ifndef RC_INVOKED -#define TOOLS_VERSION_NEXT TOOLS_VERSION_TO_UINT(TOOLS_VERSION_NEXT_V) +#define TOOLS_VERSION_HEDGE_TRIMMER_RELEASE TOOLS_VERSION_TO_UINT(TOOLS_VERSION_HEDGE_TRIMMER_RELEASE_V) #endif /* RC_INVOKED */ -#define TOOLS_VERSION_NEXT_V_MJR 12 -#define TOOLS_VERSION_NEXT_V_MNR 3 -#define TOOLS_VERSION_NEXT_V_BASE 0 +#define TOOLS_VERSION_HEDGE_TRIMMER_RELEASE_V_MJR 12 +#define TOOLS_VERSION_HEDGE_TRIMMER_RELEASE_V_MNR 3 +#define TOOLS_VERSION_HEDGE_TRIMMER_RELEASE_V_BASE 0 -#define TOOLS_VERSION_CURRENT TOOLS_VERSION_NEXT -#define TOOLS_VERSION_CURRENT_STR TOOLS_VERSION_TO_STR(TOOLS_VERSION_NEXT) -#define TOOLS_VERSION_CURRENT_CSV TOOLS_VERSION_TO_CSV(TOOLS_VERSION_NEXT) +#ifndef RC_INVOKED +#define TOOLS_VERSION_HEDGE_TRIMMER_UPDATE1 TOOLS_VERSION_TO_UINT(TOOLS_VERSION_HEDGE_TRIMMER_UPDATE1_V) +#endif /* RC_INVOKED */ +#define TOOLS_VERSION_HEDGE_TRIMMER_UPDATE1_V_MJR 12 +#define TOOLS_VERSION_HEDGE_TRIMMER_UPDATE1_V_MNR 3 +#define TOOLS_VERSION_HEDGE_TRIMMER_UPDATE1_V_BASE 5 + +#define TOOLS_VERSION_CURRENT TOOLS_VERSION_HEDGE_TRIMMER_UPDATE1 +#define TOOLS_VERSION_CURRENT_STR TOOLS_VERSION_TO_STR(TOOLS_VERSION_HEDGE_TRIMMER_UPDATE1) +#define TOOLS_VERSION_CURRENT_CSV TOOLS_VERSION_TO_CSV(TOOLS_VERSION_HEDGE_TRIMMER_UPDATE1) /* * The extended Tools version is the current Tools version with the diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/libDeployPkg/linuxDeployment.c new/open-vm-tools-12.3.5/open-vm-tools/libDeployPkg/linuxDeployment.c --- old/open-vm-tools-12.3.0/open-vm-tools/libDeployPkg/linuxDeployment.c 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/libDeployPkg/linuxDeployment.c 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (c) 2006-2022 VMware, Inc. All rights reserved. + * Copyright (c) 2006-2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -1236,7 +1236,6 @@ { static const char cfgName[] = "cust.cfg"; static const char metadataName[] = "metadata"; - static const char cloudInitConfigFilePath[] = "/etc/cloud/cloud.cfg"; static const char cloudInitCommand[] = "/usr/bin/cloud-init -v"; char cloudInitCommandOutput[MAX_LENGTH_CLOUDINIT_VERSION]; int forkExecResult; @@ -1288,7 +1287,7 @@ return USE_CLOUDINIT_OK; } } else { - if (IsCloudInitEnabled(cloudInitConfigFilePath)) { + if (IsCloudInitCustomizationEnabled()) { return USE_CLOUDINIT_OK; } else { return USE_CLOUDINIT_DISABLED; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/libDeployPkg/linuxDeploymentUtilities.c new/open-vm-tools-12.3.5/open-vm-tools/libDeployPkg/linuxDeploymentUtilities.c --- old/open-vm-tools-12.3.0/open-vm-tools/libDeployPkg/linuxDeploymentUtilities.c 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/libDeployPkg/linuxDeploymentUtilities.c 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2016-2019 VMware, Inc. All rights reserved. + * Copyright (c) 2016-2019, 2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -18,70 +18,99 @@ #include <dirent.h> #include <errno.h> +#include <limits.h> #include <stdio.h> #include <stdlib.h> #include <string.h> #include <regex.h> #include "linuxDeploymentUtilities.h" +#include "str.h" extern LogFunction sLog; +// The status code of flag 'disable_vmware_customization' +typedef enum DISABLE_VMWARE_CUSTIOMIZATION_FLAG_STATUS_CODE { + DISABLE_VMWARE_CUSTOMIZATION_FLAG_UNSET = 0, + DISABLE_VMWARE_CUSTOMIZATION_FLAG_SET_TRUE, + DISABLE_VMWARE_CUSTOMIZATION_FLAG_SET_FALSE, +} DISABLE_VMWARE_CUSTIOMIZATION_FLAG_STATUS_CODE; + +// Private functions +static DISABLE_VMWARE_CUSTIOMIZATION_FLAG_STATUS_CODE +GetDisableVMwareCustomizationFlagStatus(const char* cloudInitConfigFilePath); +static int +FilterCfgExt(const struct dirent *dir); + /** *---------------------------------------------------------------------------- * - * IsCloudInitEnabled + * IsCloudInitCustomizationEnabled * - * Function to determine if cloud-init is enabled. + * Function to determine if cloud-init customization workflow is enabled. * Essentially it does - * - read a cloud-init config file - * - Find if a particular flag is enabled or disabled. + * - Read all cloud-init configuration files under /etc/cloud/cloud.cfg.d/ + * - Read the cloud-init configuration file /etc/cloud/cloud.cfg + * - Find if a particular flag is enabled or disabled + * - Particularly, the value of flag in files under /etc/cloud/cloud.cfg.d/ + * has higher priority than the one in file /etc/cloud/cloud.cfg, and the + * value of flag in file listed behind in alphabetical sort under + * /etc/cloud/cloud.cfg.d/ has higher priority than the one in file listed + * in front * - * @param [IN] cloudFilePath path of the cloud-init config file - * @returns TRUE if disable_vmware_customization is false and FALSE otherwise. + * @returns TRUE if value of the flag 'disable_vmware_customization' is false + * FALSE otherwise * *---------------------------------------------------------------------------- **/ bool -IsCloudInitEnabled(const char *cloudFilePath) +IsCloudInitCustomizationEnabled() { - bool isEnabled = false; - FILE *cloudFile; - char line[256]; - regex_t regex; - const char *cloudInitRegex = - "^\\s*disable_vmware_customization\\s*:\\s*false\\s*$"; - int reti; - - sLog(log_info, "Checking if cloud.cfg exists and if cloud-init is enabled."); - cloudFile = fopen(cloudFilePath, "r"); - if (cloudFile == NULL) { - sLog(log_info, "Could not open file: %s", strerror(errno)); - return isEnabled; - } - - reti = regcomp(&regex, cloudInitRegex, 0); - if (reti != 0) { - char buf[256]; - regerror(reti, &regex, buf, sizeof(buf)); - sLog(log_error, "Error compiling regex for cloud-init flag: %s", buf); - goto done; - } - - while (fgets(line, sizeof(line), cloudFile) != NULL) { - if (regexec(&regex, line, 0, NULL, 0) == 0) { - isEnabled = true; - break; + DISABLE_VMWARE_CUSTIOMIZATION_FLAG_STATUS_CODE flagStatus = + DISABLE_VMWARE_CUSTOMIZATION_FLAG_UNSET; + static const char cloudInitBaseConfigFilePath[] = "/etc/cloud/cloud.cfg"; + static const char cloudInitConfigDirPath[] = "/etc/cloud/cloud.cfg.d/"; + struct dirent **fileList; + int i, fileCount; + size_t filePathLength; + char *filePath = NULL; + + sLog(log_info, "Checking if cloud-init customization is enabled."); + fileCount = + scandir(cloudInitConfigDirPath, &fileList, FilterCfgExt, alphasort); + if (fileCount < 0) { + sLog(log_warning, "Could not scan directory %s, error: %s.", + cloudInitConfigDirPath, strerror(errno)); + } else { + for (i = fileCount - 1; i >= 0; i--) { + filePathLength = Str_Strlen(cloudInitConfigDirPath, PATH_MAX) + + Str_Strlen(fileList[i]->d_name, FILENAME_MAX) + 1; + filePath = malloc(filePathLength); + if (filePath == NULL) { + sLog(log_warning, "Error allocating memory to copy '%s'.", + cloudInitConfigDirPath); + break; + } + Str_Strcpy(filePath, cloudInitConfigDirPath, filePathLength); + Str_Strcat(filePath, fileList[i]->d_name, filePathLength); + flagStatus = GetDisableVMwareCustomizationFlagStatus(filePath); + free(filePath); + filePath = NULL; + if (flagStatus != DISABLE_VMWARE_CUSTOMIZATION_FLAG_UNSET) { + break; + } + } + for (i = 0; i < fileCount; i++) { + free(fileList[i]); } } - if (ferror(cloudFile) != 0) { - sLog(log_warning, "Error reading file: %s", strerror(errno)); - isEnabled = false; + free(fileList); + + if (flagStatus == DISABLE_VMWARE_CUSTOMIZATION_FLAG_UNSET) { + flagStatus = + GetDisableVMwareCustomizationFlagStatus(cloudInitBaseConfigFilePath); } - regfree(&regex); -done: - fclose(cloudFile); - return isEnabled; + return (flagStatus == DISABLE_VMWARE_CUSTOMIZATION_FLAG_SET_FALSE); } /** @@ -113,7 +142,7 @@ sLog(log_info, "Check if custom script(pre/post customization) exists."); tempDir = opendir(dirPath); if (tempDir == NULL) { - sLog(log_warning, "Could not open directory %s: error: %s", dirPath, + sLog(log_warning, "Could not open directory %s: error: %s.", dirPath, strerror(errno)); return scriptName; } @@ -123,7 +152,7 @@ char buf[256]; regerror(regRet, &scriptRegex, buf, sizeof(buf)); - sLog(log_error, "Error compiling regex for custom script: %s", buf); + sLog(log_error, "Error compiling regex for custom script: %s.", buf); goto done; } @@ -131,7 +160,7 @@ if (regexec(&scriptRegex, dir->d_name, 0, NULL, 0) == 0) { scriptName = strdup(dir->d_name); if (scriptName == NULL) { - sLog(log_warning, "Could not allocate memory for scriptName: %s", + sLog(log_warning, "Could not allocate memory for scriptName: %s.", strerror(errno)); break; } @@ -145,3 +174,106 @@ return scriptName; } +/** + *---------------------------------------------------------------------------- + * + * GetDisableVMwareCustomizationFlagStatus + * + * Function to get status code of the flag 'disable_vmware_customization' from + * a cloud-init config file. + * Essentially it does + * - Read a cloud-init config file + * - Get status code of the flag according to its value + * + * @param [IN] cloudInitConfigFilePath path of a cloud-int config file + * @returns The status code of this particular flag + * + *---------------------------------------------------------------------------- + **/ +static DISABLE_VMWARE_CUSTIOMIZATION_FLAG_STATUS_CODE +GetDisableVMwareCustomizationFlagStatus(const char* cloudInitConfigFilePath) +{ + DISABLE_VMWARE_CUSTIOMIZATION_FLAG_STATUS_CODE flagStatus = + DISABLE_VMWARE_CUSTOMIZATION_FLAG_UNSET; + FILE *cloudInitConfigFile; + char line[256]; + regex_t regex; + size_t maxGroups = 2, flagValueLength = 0; + regmatch_t groupArray[maxGroups]; + const char *flagPattern = + "^\\s*disable_vmware_customization\\s*:\\s*(true|false)\\s*$"; + int reti; + + cloudInitConfigFile = fopen(cloudInitConfigFilePath, "r"); + if (cloudInitConfigFile == NULL) { + sLog(log_warning, "Could not open file: %s.", strerror(errno)); + return flagStatus; + } + + reti = regcomp(&regex, flagPattern, REG_EXTENDED); + if (reti != 0) { + char buf[256]; + regerror(reti, &regex, buf, sizeof(buf)); + sLog(log_error, "Error compiling regex for cloud-init flag: %s.", buf); + goto done; + } + + while (fgets(line, sizeof(line), cloudInitConfigFile) != NULL) { + if (regexec(&regex, line, maxGroups, groupArray, 0) == 0) { + flagValueLength = groupArray[1].rm_eo - groupArray[1].rm_so; + if (flagValueLength > 0) { + char flagValue[flagValueLength + 1]; + Str_Strncpy(flagValue, flagValueLength + 1, + line + groupArray[1].rm_so, flagValueLength); + sLog(log_info, + "Flag 'disable_vmware_customization' set in %s with value: %s.", + cloudInitConfigFilePath, flagValue); + if (Str_Strequal(flagValue, "false")) { + flagStatus = DISABLE_VMWARE_CUSTOMIZATION_FLAG_SET_FALSE; + } else if (Str_Strequal(flagValue, "true")) { + flagStatus = DISABLE_VMWARE_CUSTOMIZATION_FLAG_SET_TRUE; + } + } + } + } + if (ferror(cloudInitConfigFile) != 0) { + sLog(log_warning, "Error reading file: %s.", strerror(errno)); + flagStatus = DISABLE_VMWARE_CUSTOMIZATION_FLAG_UNSET; + } + regfree(&regex); + +done: + fclose(cloudInitConfigFile); + return flagStatus; +} + +/** + *----------------------------------------------------------------------------- + * + * FilterCfgExt + * + * Filter files with .cfg extension when calling scandir. + * + * @param [IN] dir struct dirent of a directory entry + * @returns 1 if dir is a regular file and its file extension is .cfg + * 0 otherwise + * + * ---------------------------------------------------------------------------- + **/ +static int +FilterCfgExt(const struct dirent *dir) +{ + if (!dir) + return 0; + + if (dir->d_type == DT_REG) { + const char *ext = Str_Strrchr(dir->d_name, '.'); + if ((!ext) || (ext == dir->d_name)) { + return 0; + } else if (Str_Strequal(ext, ".cfg")) { + return 1; + } + } + + return 0; +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/libDeployPkg/linuxDeploymentUtilities.h new/open-vm-tools-12.3.5/open-vm-tools/libDeployPkg/linuxDeploymentUtilities.h --- old/open-vm-tools-12.3.0/open-vm-tools/libDeployPkg/linuxDeploymentUtilities.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/libDeployPkg/linuxDeploymentUtilities.h 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2016-2019 VMware, Inc. All rights reserved. + * Copyright (c) 2016-2019, 2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -24,7 +24,7 @@ #include "imgcust-common/imgcust-api.h" IMGCUST_API bool -IsCloudInitEnabled(const char* configFile); +IsCloudInitCustomizationEnabled(); IMGCUST_API char * GetCustomScript(const char* dirPath); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscoveryInt.h new/open-vm-tools-12.3.5/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscoveryInt.h --- old/open-vm-tools-12.3.0/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscoveryInt.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscoveryInt.h 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2020-2021 VMware, Inc. All rights reserved. + * Copyright (C) 2020-2021,2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscoveryPosix.c new/open-vm-tools-12.3.5/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscoveryPosix.c --- old/open-vm-tools-12.3.0/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscoveryPosix.c 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/services/plugins/serviceDiscovery/serviceDiscoveryPosix.c 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2020-2021 VMware, Inc. All rights reserved. + * Copyright (C) 2020-2021,2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/services/plugins/vix/vixToolsInt.h new/open-vm-tools-12.3.5/open-vm-tools/services/plugins/vix/vixToolsInt.h --- old/open-vm-tools-12.3.0/open-vm-tools/services/plugins/vix/vixToolsInt.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/services/plugins/vix/vixToolsInt.h 2023-10-26 17:39:15.000000000 +0200 @@ -204,9 +204,7 @@ const char *token, const char *username, char *serviceUsername, -#ifdef VMTOOLS_FS_VGAUTH_HOST_VERIFICATION Bool hostVerified, -#endif void **userToken, VGAuthUserHandle **curUserHandle); #endif // _WIN32 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/services/plugins/vmbackup/scriptOps.c new/open-vm-tools-12.3.5/open-vm-tools/services/plugins/vmbackup/scriptOps.c --- old/open-vm-tools-12.3.0/open-vm-tools/services/plugins/vmbackup/scriptOps.c 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/services/plugins/vmbackup/scriptOps.c 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2007-2019, 2021 VMware, Inc. All rights reserved. + * Copyright (c) 2007-2019, 2021, 2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -157,7 +157,7 @@ if (File_IsFile(scripts[index].path)) { char *cmd; - if (op->state->scriptArg != NULL) { + if (op->state->scriptArg != NULL && op->state->scriptArg[0] != '\0') { cmd = Str_Asprintf(NULL, "\"%s\" %s \"%s\"", scripts[index].path, scriptOp, op->state->scriptArg); } else { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/services/vmtoolsd/mainPosix.c new/open-vm-tools-12.3.5/open-vm-tools/services/vmtoolsd/mainPosix.c --- old/open-vm-tools-12.3.0/open-vm-tools/services/vmtoolsd/mainPosix.c 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/services/vmtoolsd/mainPosix.c 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (c) 2008-2020,2022 VMware, Inc. All rights reserved. + * Copyright (c) 2008-2020,2022-2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -28,10 +28,12 @@ #include <signal.h> #include <string.h> #include <unistd.h> +#include <fcntl.h> #include <glib/gstdio.h> #include "file.h" #include "guestApp.h" #include "hostinfo.h" +#include "su.h" #include "system.h" #include "unicode.h" #include "util.h" @@ -155,6 +157,59 @@ /** + * Tools function to set close-on-exec flg for the fd. + * + * @param[in] fd open file descriptor. + * + * @return TRUE on success, FALSE otherwise. + */ + +static gboolean +ToolsSetCloexecFlag(int fd) +{ + int flags; + + if (fd == -1) { + /* fd is not present, no need to manipulate */ + return TRUE; + } + + flags = fcntl(fd, F_GETFD, 0); + if (flags < 0) { + g_printerr("Couldn't get the flags set for fd %d, error %u.", fd, errno); + return FALSE; + } + flags |= FD_CLOEXEC; + if (fcntl(fd, F_SETFD, flags) < 0) { + g_printerr("Couldn't set close-on-exec for fd %d, error %u.", fd, errno); + return FALSE; + } + + return TRUE; +} + + +/** + * Tools function to close the fds. + */ + +static void +ToolsCloseFds(void) +{ + if (gState.ctx.blockFD != -1) { + close(gState.ctx.blockFD); + } + + /* + * uinputFD will be available only for wayland. + */ + if (gState.ctx.uinputFD != -1) { + close(gState.ctx.uinputFD); + } +} + + +/** * Tools daemon entry function. * * @param[in] argc Argument count. @@ -210,6 +265,27 @@ g_free(argvCopy); argvCopy = NULL; + /* + * Drops privilege to the real uid and gid of the process + * for the "vmusr" service. + */ + if (TOOLS_IS_USER_SERVICE(&gState)) { + uid_t uid = getuid(); + gid_t gid = getgid(); + + if ((Id_SetREUid(uid, uid) != 0) || + (Id_SetREGid(gid, gid) != 0)) { + g_printerr("could not drop privileges: %s", strerror(errno)); + ToolsCloseFds(); + goto exit; + } + if (!ToolsSetCloexecFlag(gState.ctx.blockFD) || + !ToolsSetCloexecFlag(gState.ctx.uinputFD)) { + ToolsCloseFds(); + goto exit; + } + } + if (gState.pidFile != NULL) { /* * If argv[0] is not an absolute path, make it so; all other path diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/tests/Makefile.am new/open-vm-tools-12.3.5/open-vm-tools/tests/Makefile.am --- old/open-vm-tools-12.3.0/open-vm-tools/tests/Makefile.am 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/tests/Makefile.am 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ ################################################################################ -### Copyright (c) 2009-2016,2022 VMware, Inc. All rights reserved. +### Copyright (c) 2009-2016,2022,2023 VMware, Inc. All rights reserved. ### ### This program is free software; you can redistribute it and/or modify ### it under the terms of version 2 of the GNU General Public License as diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/vgauth/common/VGAuthProto.h new/open-vm-tools-12.3.5/open-vm-tools/vgauth/common/VGAuthProto.h --- old/open-vm-tools-12.3.0/open-vm-tools/vgauth/common/VGAuthProto.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/vgauth/common/VGAuthProto.h 2023-10-26 17:39:15.000000000 +0200 @@ -622,7 +622,6 @@ #define VGAUTH_REQUESTVALIDATESAMLBEARERTOKEN_ELEMENT_NAME "ValidateSamlBToken" - #define VGAUTH_VALIDATESAMLBEARERTOKEN_REQUEST_FORMAT \ VGAUTH_REQUEST_FORMAT_START \ "<"VGAUTH_REQUESTNAME_ELEMENT_NAME">"VGAUTH_REQUESTVALIDATESAMLBEARERTOKEN_ELEMENT_NAME"</"VGAUTH_REQUESTNAME_ELEMENT_NAME">" \ @@ -632,7 +631,6 @@ "<"VGAUTH_HOST_VERIFIED_ELEMENT_NAME">%s</"VGAUTH_HOST_VERIFIED_ELEMENT_NAME">" \ VGAUTH_REQUEST_FORMAT_END - #define VGAUTH_VALIDATESAMLBEARERTOKEN_REPLY_FORMAT_START \ VGAUTH_REPLY_FORMAT_START \ "<"VGAUTH_USERNAME_ELEMENT_NAME">%s</"VGAUTH_USERNAME_ELEMENT_NAME">" \ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/vgauth/common/certverify.c new/open-vm-tools-12.3.5/open-vm-tools/vgauth/common/certverify.c --- old/open-vm-tools-12.3.0/open-vm-tools/vgauth/common/certverify.c 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/vgauth/common/certverify.c 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (c) 2011-2016, 2018-2019, 2021-2022 VMware, Inc. All rights reserved. + * Copyright (c) 2011-2016, 2018-2019, 2021-2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -914,3 +914,148 @@ return err; } + + +/* + * Finds a cert with a subject (if checkSubj is set) or issuer (if + * checkSUbj is unset), matching 'val' in the list + * of certs. Returns a match or NULL. + */ + +static X509 * +FindCert(GList *cList, + X509_NAME *val, + int checkSubj) +{ + GList *l; + X509 *c; + X509_NAME *v; + + l = cList; + while (l != NULL) { + c = (X509 *) l->data; + if (checkSubj) { + v = X509_get_subject_name(c); + } else { + v = X509_get_issuer_name(c); + } + if (X509_NAME_cmp(val, v) == 0) { + return c; + } + l = l->next; + } + return NULL; +} + + +/* + ****************************************************************************** + * CertVerify_CheckForUnrelatedCerts -- */ /** + * + * Looks over a list of certs. If it finds that they are not all + * part of the same chain, returns failure. + * + * @param[in] numCerts The number of certs in the chain. + * @param[in] pemCerts The chain of certificates to verify. + * + * @return VGAUTH_E_OK on success, VGAUTH_E_FAIL if unrelated certs are found. + * + ****************************************************************************** + */ + +VGAuthError +CertVerify_CheckForUnrelatedCerts(int numCerts, + const char **pemCerts) +{ + VGAuthError err = VGAUTH_E_FAIL; + int chainLen = 0; + int i; + X509 **certs = NULL; + GList *rawList = NULL; + X509 *baseCert; + X509 *curCert; + X509_NAME *subject; + X509_NAME *issuer; + + /* common single cert case; nothing to do */ + if (numCerts == 1) { + return VGAUTH_E_OK; + } + + /* convert all PEM to X509 objects */ + certs = g_malloc0(numCerts * sizeof(X509 *)); + for (i = 0; i < numCerts; i++) { + certs[i] = CertStringToX509(pemCerts[i]); + if (NULL == certs[i]) { + g_warning("%s: failed to convert cert to X509\n", __FUNCTION__); + goto done; + } + } + + /* choose the cert to start the chain. shouldn't matter which */ + baseCert = certs[0]; + + /* put the rest into a list */ + for (i = 1; i < numCerts; i++) { + rawList = g_list_append(rawList, certs[i]); + } + + /* now chase down to a leaf, looking for certs the baseCert issued */ + subject = X509_get_subject_name(baseCert); + while ((curCert = FindCert(rawList, subject, 0)) != NULL) { + /* pull it from the list */ + rawList = g_list_remove(rawList, curCert); + /* set up the next find */ + subject = X509_get_subject_name(curCert); + } + + /* + * walk up to the root cert, by finding a cert where the + * issuer equals the subject of the current + */ + issuer = X509_get_issuer_name(baseCert); + while ((curCert = FindCert(rawList, issuer, 1)) != NULL) { + /* pull it from the list */ + rawList = g_list_remove(rawList, curCert); + /* set up the next find */ + issuer = X509_get_issuer_name(curCert); + } + + /* + * At this point, anything on the list should be certs that are not part + * of the chain that includes the original 'baseCert'. + * + * For a valid token, the list should be empty. + */ + chainLen = g_list_length(rawList); + if (chainLen != 0 ) { + GList *l; + + g_warning("%s: %d unrelated certs found in list\n", + __FUNCTION__, chainLen); + + /* debug helper */ + l = rawList; + while (l != NULL) { + X509* c = (X509 *) l->data; + char *s = X509_NAME_oneline(X509_get_subject_name(c), NULL, 0); + + g_debug("%s: unrelated cert subject: %s\n", __FUNCTION__, s); + free(s); + l = l->next; + } + + goto done; + } + + g_debug("%s: Success! no unrelated certs found\n", __FUNCTION__); + err = VGAUTH_E_OK; + +done: + g_list_free(rawList); + for (i = 0; i < numCerts; i++) { + X509_free(certs[i]); + } + g_free(certs); + return err; +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/vgauth/common/certverify.h new/open-vm-tools-12.3.5/open-vm-tools/vgauth/common/certverify.h --- old/open-vm-tools-12.3.0/open-vm-tools/vgauth/common/certverify.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/vgauth/common/certverify.h 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2011-2016, 2020 VMware, Inc. All rights reserved. + * Copyright (C) 2011-2016, 2020, 2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -67,6 +67,10 @@ size_t signatureLen, const unsigned char *signature); + +VGAuthError CertVerify_CheckForUnrelatedCerts(int numCerts, + const char **pemCerts); + gchar * CertVerify_StripPEMCert(const gchar *pemCert); gchar * CertVerify_CertToX509String(const gchar *pemCert); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/vgauth/common/prefs.h new/open-vm-tools-12.3.5/open-vm-tools/vgauth/common/prefs.h --- old/open-vm-tools-12.3.0/open-vm-tools/vgauth/common/prefs.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/vgauth/common/prefs.h 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2011-2019 VMware, Inc. All rights reserved. + * Copyright (C) 2011-2019,2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -136,6 +136,8 @@ #define VGAUTH_PREF_ALIASSTORE_DIR "aliasStoreDir" /** The number of seconds slack allowed in either direction in SAML token date checks. */ #define VGAUTH_PREF_CLOCK_SKEW_SECS "clockSkewAdjustment" +/** If unrelated certificates are allowed in a SAML token */ +#define VGAUTH_PREF_ALLOW_UNRELATED_CERTS "allowUnrelatedCerts" /** Ticket group name. */ #define VGAUTH_PREF_GROUP_NAME_TICKET "ticket" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/vgauth/public/VGAuthAuthentication.h new/open-vm-tools-12.3.5/open-vm-tools/vgauth/public/VGAuthAuthentication.h --- old/open-vm-tools-12.3.0/open-vm-tools/vgauth/public/VGAuthAuthentication.h 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/vgauth/public/VGAuthAuthentication.h 2023-10-26 17:39:15.000000000 +0200 @@ -198,7 +198,7 @@ #define VGAUTH_PARAM_VALIDATE_INFO_ONLY "validateInfoOnly" -# define VGAUTH_PARAM_SAML_HOST_VERIFIED "hostVerified" +#define VGAUTH_PARAM_SAML_HOST_VERIFIED "hostVerified" VGAuthError VGAuth_ValidateSamlBearerToken(VGAuthContext *ctx, const char *samlToken, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c new/open-vm-tools-12.3.5/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c --- old/open-vm-tools-12.3.0/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c 2023-10-26 17:39:15.000000000 +0200 @@ -49,6 +49,7 @@ #include "vmxlog.h" static int gClockSkewAdjustment = VGAUTH_PREF_DEFAULT_CLOCK_SKEW_SECS; +static gboolean gAllowUnrelatedCerts = FALSE; static xmlSchemaPtr gParsedSchemas = NULL; static xmlSchemaValidCtxtPtr gSchemaValidateCtx = NULL; @@ -369,6 +370,10 @@ VGAUTH_PREF_DEFAULT_CLOCK_SKEW_SECS); Log("%s: Allowing %d of clock skew for SAML date validation\n", __FUNCTION__, gClockSkewAdjustment); + gAllowUnrelatedCerts = Pref_GetBool(gPrefs, + VGAUTH_PREF_ALLOW_UNRELATED_CERTS, + VGAUTH_PREF_GROUP_NAME_SERVICE, + FALSE); } @@ -1697,6 +1702,15 @@ return VGAUTH_E_AUTHENTICATION_DENIED; } + if (!gAllowUnrelatedCerts) { + err = CertVerify_CheckForUnrelatedCerts(num, (const char **) certChain); + if (err != VGAUTH_E_OK) { + VMXLog_Log(VMXLOG_LEVEL_WARNING, + "Unrelated certs found in SAML token, failing\n"); + return VGAUTH_E_AUTHENTICATION_DENIED; + } + } + subj.type = SUBJECT_TYPE_NAMED; subj.name = *subjNameOut; err = ServiceVerifyAndCheckTrustCertChainForSubject(num, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/open-vm-tools-12.3.0/open-vm-tools/vmware-user-suid-wrapper/main.c new/open-vm-tools-12.3.5/open-vm-tools/vmware-user-suid-wrapper/main.c --- old/open-vm-tools-12.3.0/open-vm-tools/vmware-user-suid-wrapper/main.c 2023-08-31 16:38:59.000000000 +0200 +++ new/open-vm-tools-12.3.5/open-vm-tools/vmware-user-suid-wrapper/main.c 2023-10-26 17:39:15.000000000 +0200 @@ -1,5 +1,5 @@ /********************************************************* - * Copyright (C) 2007-2018 VMware, Inc. All rights reserved. + * Copyright (C) 2007-2018,2023 VMware, Inc. All rights reserved. * * This program is free software; you can redistribute it and/or modify it * under the terms of the GNU Lesser General Public License as published @@ -156,8 +156,7 @@ * * Obtains the library directory from the Tools locations database, then * opens a file descriptor (while still root) to add and remove blocks, - * drops privilege to the real uid of this process, and finally starts - * vmware-user. + * and finally starts vmware-user. * * Results: * Parent: TRUE on success, FALSE on failure. @@ -173,8 +172,6 @@ StartVMwareUser(char *const envp[]) { pid_t pid; - uid_t uid; - gid_t gid; int blockFd = -1; char blockFdStr[8]; int uinputFd = -1; @@ -191,8 +188,8 @@ } /* - * Now create a child process, obtain a file descriptor as root, downgrade - * privilege, and run vmware-user. + * Now create a child process, obtain a file descriptor as root and + * run vmware-user. */ pid = fork(); if (pid == -1) { @@ -229,23 +226,6 @@ } } - uid = getuid(); - gid = getgid(); - - if ((setreuid(uid, uid) != 0) || - (setregid(gid, gid) != 0)) { - Error("could not drop privileges: %s\n", strerror(errno)); - if (blockFd != -1) { - close(blockFd); - } - if (useWayland) { - if (uinputFd != -1) { - close(uinputFd); - } - } - return FALSE; - } - /* * Since vmware-user provides features that don't depend on vmblock, we * invoke vmware-user even if we couldn't obtain a file descriptor or we

1 0

commit kernel-default-base for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package kernel-default-base for openSUSE:Factory checked in at 2023-11-01 22:09:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kernel-default-base (Old) and /work/SRC/openSUSE:Factory/.kernel-default-base.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "kernel-default-base" Wed Nov 1 22:09:26 2023 rev:29 rq:1121191 version:MACRO Changes: -------- --- /work/SRC/openSUSE:Factory/kernel-default-base/kernel-default-base.changes 2023-07-07 15:46:03.051742198 +0200 +++ /work/SRC/openSUSE:Factory/.kernel-default-base.new.17445/kernel-default-base.changes 2023-11-01 22:09:30.198608215 +0100 @@ -1,0 +2,5 @@ +Mon Oct 30 09:43:01 UTC 2023 - Fabian Vogt <fvogt(a)suse.com> + +- Add dummy (boo#1216647) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kernel-default-base.spec ++++++ --- /var/tmp/diff_new_pack.o0gs52/_old 2023-11-01 22:09:31.026638608 +0100 +++ /var/tmp/diff_new_pack.o0gs52/_new 2023-11-01 22:09:31.042639195 +0100 @@ -36,7 +36,7 @@ %define hyperv_modules hid-hyperv hv_balloon hv_utils \ hv_vmbus hyperv-keyboard hv_netvsc hv_storvsc scsi_transport_fc hyperv_fb -%define net_drivers 8390 ne2k-pci tulip e100 e1000 e1000e 8139cp 8139too +%define net_drivers 8390 ne2k-pci tulip e100 e1000 e1000e 8139cp 8139too dummy %define scsi_modules scsi_transport_iscsi sd_mod sg sr_mod st scsi_mod

1 0

commit dracut for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dracut for openSUSE:Factory checked in at 2023-11-01 22:09:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dracut (Old) and /work/SRC/openSUSE:Factory/.dracut.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "dracut" Wed Nov 1 22:09:25 2023 rev:215 rq:1121178 version:059+suse.511.g0bdb16ac Changes: -------- --- /work/SRC/openSUSE:Factory/dracut/dracut.changes 2023-10-22 21:01:30.108509110 +0200 +++ /work/SRC/openSUSE:Factory/.dracut.new.17445/dracut.changes 2023-11-01 22:09:28.650551395 +0100 @@ -1,0 +2,11 @@ +Mon Oct 30 12:53:53 UTC 2023 - antonio.feijoo(a)suse.com + +- Update to version 059+suse.511.g0bdb16ac: + * fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so + * fix(systemd-repart): correct undefined $libdir + * fix(dracut-systemd): use `DRACUT_VERSION` instead of `VERSION` + * fix(dracut.sh): abort if Bash is in POSIX mode + * fix(dracut-initramfs-restore.sh): do not set selinux labels if disabled + * fix(network): correct network device naming (bsc#1192986) + +------------------------------------------------------------------- Old: ---- dracut-059+suse.503.g41e99e72.obscpio New: ---- dracut-059+suse.511.g0bdb16ac.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dracut.spec ++++++ --- /var/tmp/diff_new_pack.XIasse/_old 2023-11-01 22:09:29.530583696 +0100 +++ /var/tmp/diff_new_pack.XIasse/_new 2023-11-01 22:09:29.530583696 +0100 @@ -25,7 +25,7 @@ %endif Name: dracut -Version: 059+suse.503.g41e99e72 +Version: 059+suse.511.g0bdb16ac Release: 0 Summary: Event driven initramfs infrastructure License: GPL-2.0-only AND GPL-2.0-or-later AND LGPL-2.1-or-later ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.XIasse/_old 2023-11-01 22:09:29.578585458 +0100 +++ /var/tmp/diff_new_pack.XIasse/_new 2023-11-01 22:09:29.582585604 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/opensuse/dracut.git</param> - <param name="changesrevision">37e011dd37dcebfb7a3e9d5542e1e5e13c9f9913</param></service></servicedata> + <param name="changesrevision">0bdb16ac0d445cf1051875116c4c015eb2e8575a</param></service></servicedata> (No newline at EOF) ++++++ dracut-059+suse.503.g41e99e72.obscpio -> dracut-059+suse.511.g0bdb16ac.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dracut-059+suse.503.g41e99e72/dracut-initramfs-restore.sh new/dracut-059+suse.511.g0bdb16ac/dracut-initramfs-restore.sh --- old/dracut-059+suse.503.g41e99e72/dracut-initramfs-restore.sh 2023-10-19 15:08:26.000000000 +0200 +++ new/dracut-059+suse.511.g0bdb16ac/dracut-initramfs-restore.sh 2023-10-30 13:53:00.000000000 +0100 @@ -75,9 +75,12 @@ fi fi -if [ -e /etc/selinux/config -a -x /usr/sbin/setfiles ]; then +if grep -q -w selinux /sys/kernel/security/lsm 2> /dev/null \ + && [ -e /etc/selinux/config -a -x /usr/sbin/setfiles ]; then . /etc/selinux/config - [ -n "${SELINUXTYPE}" ] && /usr/sbin/setfiles -v -r /run/initramfs /etc/selinux/"${SELINUXTYPE}"/contexts/files/file_contexts /run/initramfs > /dev/null + if [[ $SELINUX != "disabled" && -n $SELINUXTYPE ]]; then + /usr/sbin/setfiles -v -r /run/initramfs /etc/selinux/"${SELINUXTYPE}"/contexts/files/file_contexts /run/initramfs > /dev/null + fi fi exit 0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dracut-059+suse.503.g41e99e72/dracut.sh new/dracut-059+suse.511.g0bdb16ac/dracut.sh --- old/dracut-059+suse.503.g41e99e72/dracut.sh 2023-10-19 15:08:26.000000000 +0200 +++ new/dracut-059+suse.511.g0bdb16ac/dracut.sh 2023-10-30 13:53:00.000000000 +0100 @@ -29,6 +29,11 @@ exit 1 fi +if [[ -n $POSIXLY_CORRECT ]]; then + printf "%s\n" "dracut[F]: dracut is not compatible with Bash in POSIX mode" >&2 + exit 1 +fi + dracut_args=("$@") # shellcheck disable=SC2155 readonly dracut_cmd=$(readlink -f "$0") diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dracut-059+suse.503.g41e99e72/modules.d/01systemd-repart/module-setup.sh new/dracut-059+suse.511.g0bdb16ac/modules.d/01systemd-repart/module-setup.sh --- old/dracut-059+suse.503.g41e99e72/modules.d/01systemd-repart/module-setup.sh 2023-10-19 15:08:26.000000000 +0200 +++ new/dracut-059+suse.511.g0bdb16ac/modules.d/01systemd-repart/module-setup.sh 2023-10-30 13:53:00.000000000 +0100 @@ -25,7 +25,7 @@ install() { inst_multiple -o \ - "$libdir/repart.d/*.conf" \ + "/usr/lib/repart.d/*.conf" \ "$systemdsystemunitdir"/systemd-repart.service \ "$systemdsystemunitdir"/initrd-root-fs.target.wants/systemd-repart.service \ systemd-repart diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dracut-059+suse.503.g41e99e72/modules.d/35network-legacy/module-setup.sh new/dracut-059+suse.511.g0bdb16ac/modules.d/35network-legacy/module-setup.sh --- old/dracut-059+suse.503.g41e99e72/modules.d/35network-legacy/module-setup.sh 2023-10-19 15:08:26.000000000 +0200 +++ new/dracut-059+suse.511.g0bdb16ac/modules.d/35network-legacy/module-setup.sh 2023-10-30 13:53:00.000000000 +0100 @@ -26,8 +26,10 @@ install() { local _arch - #Adding default link - if dracut_module_included "systemd"; then + # Add default link if there is no persistent network device naming + if [ ! -e /etc/udev/rules.d/70-persistent-net.rules ] &&\ + dracut_module_included "systemd"; then + inst_multiple -o "${systemdnetwork}/99-default.link" [[ $hostonly ]] && inst_multiple -H -o "${systemdnetworkconfdir}/*.link" fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dracut-059+suse.503.g41e99e72/modules.d/35network-manager/module-setup.sh new/dracut-059+suse.511.g0bdb16ac/modules.d/35network-manager/module-setup.sh --- old/dracut-059+suse.503.g41e99e72/modules.d/35network-manager/module-setup.sh 2023-10-19 15:08:26.000000000 +0200 +++ new/dracut-059+suse.511.g0bdb16ac/modules.d/35network-manager/module-setup.sh 2023-10-30 13:53:00.000000000 +0100 @@ -51,9 +51,12 @@ inst_simple "$moddir"/nm-initrd.service "$systemdsystemunitdir"/nm-initrd.service inst_simple "$moddir"/nm-wait-online-initrd.service "$systemdsystemunitdir"/nm-wait-online-initrd.service - # Adding default link - inst_multiple -o "${systemdnetwork}/99-default.link" - [[ $hostonly ]] && inst_multiple -H -o "${systemdnetworkconfdir}/*.link" + # Add default link if there is no persistent network device naming + if [ ! -e /etc/udev/rules.d/70-persistent-net.rules ]; then + + inst_multiple -o "${systemdnetwork}/99-default.link" + [[ $hostonly ]] && inst_multiple -H -o "${systemdnetworkconfdir}/*.link" + fi $SYSTEMCTL -q --root "$initdir" enable nm-initrd.service fi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dracut-059+suse.503.g41e99e72/modules.d/91pkcs11/module-setup.sh new/dracut-059+suse.511.g0bdb16ac/modules.d/91pkcs11/module-setup.sh --- old/dracut-059+suse.503.g41e99e72/modules.d/91pkcs11/module-setup.sh 2023-10-19 15:08:26.000000000 +0200 +++ new/dracut-059+suse.511.g0bdb16ac/modules.d/91pkcs11/module-setup.sh 2023-10-30 13:53:00.000000000 +0100 @@ -30,6 +30,6 @@ {"tls/$_arch/",tls/,"$_arch/",}"libffi.so.*" \ {"tls/$_arch/",tls/,"$_arch/",}"libp11-kit.so.*" \ {"tls/$_arch/",tls/,"$_arch/",}"libcryptsetup.so.*" \ - {"tls/$_arch/",tls/,"$_arch/",}"/cryptsetup/libcryptsetup-token-systemd-pkcs11.so.*" + {"tls/$_arch/",tls/,"$_arch/",}"/cryptsetup/libcryptsetup-token-systemd-pkcs11.so*" } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dracut-059+suse.503.g41e99e72/modules.d/95udev-rules/module-setup.sh new/dracut-059+suse.511.g0bdb16ac/modules.d/95udev-rules/module-setup.sh --- old/dracut-059+suse.503.g41e99e72/modules.d/95udev-rules/module-setup.sh 2023-10-19 15:08:26.000000000 +0200 +++ new/dracut-059+suse.511.g0bdb16ac/modules.d/95udev-rules/module-setup.sh 2023-10-30 13:53:00.000000000 +0100 @@ -37,7 +37,6 @@ 60-persistent-storage.rules \ 64-btrfs.rules \ 70-uaccess.rules \ - 70-persistent-net.rules \ 71-seat.rules \ 73-seat-late.rules \ 75-net-description.rules \ @@ -47,8 +46,16 @@ "$moddir/61-persistent-storage.rules" prepare_udev_rules 59-persistent-storage.rules 61-persistent-storage.rules - # legacy persistent network device name rules - [[ $hostonly ]] && inst_rules 70-persistent-net.rules + + # only include persistent network device name rules if network is set up + # in the initrd + # Avoid interference with systemd predictable network device naming + if dracut_module_included "network-legacy" || dracut_module_included "network-manager"; then + if [ -e /etc/udev/rules.d/70-persistent-net.rules ] && \ + ! dracut_module_included "systemd-networkd"; then + [[ $hostonly ]] && inst_rules 70-persistent-net.rules + fi + fi { for i in cdrom tape dialout floppy; do diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/dracut-059+suse.503.g41e99e72/modules.d/98dracut-systemd/dracut-cmdline.sh new/dracut-059+suse.511.g0bdb16ac/modules.d/98dracut-systemd/dracut-cmdline.sh --- old/dracut-059+suse.503.g41e99e72/modules.d/98dracut-systemd/dracut-cmdline.sh 2023-10-19 15:08:26.000000000 +0200 +++ new/dracut-059+suse.511.g0bdb16ac/modules.d/98dracut-systemd/dracut-cmdline.sh 2023-10-30 13:53:00.000000000 +0100 @@ -6,7 +6,7 @@ type getarg > /dev/null 2>&1 || . /lib/dracut-lib.sh [ -f /usr/lib/initrd-release ] && . /usr/lib/initrd-release -[ -n "$VERSION" ] && info "dracut-$VERSION" +[ -n "$DRACUT_VERSION" ] && info "dracut-$DRACUT_VERSION" if ! getargbool 1 'rd.hostonly'; then [ -f /etc/cmdline.d/99-cmdline-ask.conf ] && mv /etc/cmdline.d/99-cmdline-ask.conf /tmp/99-cmdline-ask.conf ++++++ dracut.obsinfo ++++++ --- /var/tmp/diff_new_pack.XIasse/_old 2023-11-01 22:09:29.870596176 +0100 +++ /var/tmp/diff_new_pack.XIasse/_new 2023-11-01 22:09:29.874596323 +0100 @@ -1,5 +1,5 @@ name: dracut -version: 059+suse.503.g41e99e72 -mtime: 1697720906 -commit: 41e99e72894c4e9a19ca388da9dc313daaa39c46 +version: 059+suse.511.g0bdb16ac +mtime: 1698670380 +commit: 0bdb16ac0d445cf1051875116c4c015eb2e8575a

1 0

commit poppler for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package poppler for openSUSE:Factory checked in at 2023-11-01 22:09:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/poppler (Old) and /work/SRC/openSUSE:Factory/.poppler.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "poppler" Wed Nov 1 22:09:24 2023 rev:199 rq:1121165 version:23.10.0 Changes: -------- --- /work/SRC/openSUSE:Factory/poppler/poppler.changes 2023-10-01 21:21:59.175950666 +0200 +++ /work/SRC/openSUSE:Factory/.poppler.new.17445/poppler.changes 2023-11-01 22:09:26.714480332 +0100 @@ -1,0 +2,21 @@ +Mon Oct 30 08:50:11 UTC 2023 - Antonio Larrosa <alarrosa(a)suse.com> + +- Add patch to let it build with the heavily patched tiff 4.0.9 + we have in SLE 15: + * reduce-libtiff-required-version.patch + +------------------------------------------------------------------- +Fri Oct 27 16:38:54 UTC 2023 - pgajdos(a)suse.com + +- version update to 23.10.0 + core: + * cairo: update type 3 fonts for cairo 1.18 api + * Fix crash on malformed files + build system: + * Make a few more dependencies soft-mandatory + * Add more supported gnupg releases + * Check if linker supports version scripts +- modified patches + % reduce-boost-required-version.patch (refreshed) + +------------------------------------------------------------------- Old: ---- poppler-23.09.0.tar.xz poppler-23.09.0.tar.xz.sig New: ---- poppler-23.10.0.tar.xz poppler-23.10.0.tar.xz.sig reduce-libtiff-required-version.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ poppler.spec ++++++ --- /var/tmp/diff_new_pack.bDQd0m/_old 2023-11-01 22:09:27.426506467 +0100 +++ /var/tmp/diff_new_pack.bDQd0m/_new 2023-11-01 22:09:27.430506613 +0100 @@ -24,7 +24,7 @@ %endif # Actual version of poppler-data: %define poppler_data_version 0.4.11 -%define poppler_sover 131 +%define poppler_sover 132 %define poppler_cpp_sover 0 %define poppler_glib_sover 8 %define poppler_qt5_sover 1 @@ -32,7 +32,7 @@ %define poppler_api 0.18 %define poppler_apipkg 0_18 Name: poppler%{?psuffix} -Version: 23.09.0 +Version: 23.10.0 Release: 0 Summary: PDF Rendering Library License: GPL-2.0-only OR GPL-3.0-only @@ -43,6 +43,7 @@ Source90: poppler.keyring Source99: baselibs.conf Patch0: reduce-boost-required-version.patch +Patch1: reduce-libtiff-required-version.patch BuildRequires: cmake >= 3.10 BuildRequires: gtk-doc BuildRequires: libboost_headers-devel >= 1.66 @@ -215,6 +216,7 @@ %prep %setup -q -n poppler-%{version} %patch0 -p1 +%patch1 -p1 %build %if "%{flavor}" == "qt5" @@ -234,6 +236,10 @@ -DENABLE_ZLIB=ON \ -DENABLE_LIBCURL=ON \ -DBUILD_GTK_TESTS=OFF \ +%if "%{flavor}" == "" + -DENABLE_QT5=OFF \ + -DENABLE_QT6=OFF \ +%endif %if "%{flavor}" == "qt5" -DENABLE_QT5=ON \ -DENABLE_QT6=OFF \ ++++++ poppler-23.09.0.tar.xz -> poppler-23.10.0.tar.xz ++++++ ++++ 1774 lines of diff (skipped) ++++++ reduce-boost-required-version.patch ++++++ --- /var/tmp/diff_new_pack.bDQd0m/_old 2023-11-01 22:09:28.002527610 +0100 +++ /var/tmp/diff_new_pack.bDQd0m/_new 2023-11-01 22:09:28.002527610 +0100 @@ -1,8 +1,8 @@ -Index: poppler-23.01.0/CMakeLists.txt +Index: poppler-23.10.0/CMakeLists.txt =================================================================== ---- poppler-23.01.0.orig/CMakeLists.txt -+++ poppler-23.01.0/CMakeLists.txt -@@ -214,7 +214,7 @@ endif() +--- poppler-23.10.0.orig/CMakeLists.txt ++++ poppler-23.10.0/CMakeLists.txt +@@ -225,7 +225,7 @@ find_soft_mandatory_package(ENABLE_QT6 Q # Check for Cairo rendering backend macro_optional_find_package(Cairo ${CAIRO_VERSION}) ++++++ reduce-libtiff-required-version.patch ++++++ Index: poppler-23.10.0/CMakeLists.txt =================================================================== --- poppler-23.10.0.orig/CMakeLists.txt +++ poppler-23.10.0/CMakeLists.txt @@ -166,7 +166,7 @@ endmacro() find_soft_mandatory_package(ENABLE_NSS3 NSS3 3.68) find_soft_mandatory_package(ENABLE_GPGME Gpgmepp 1.19) -find_soft_mandatory_package(ENABLE_LIBTIFF TIFF 4.1) +find_soft_mandatory_package(ENABLE_LIBTIFF TIFF 4.0.9) macro_optional_find_package(JPEG) macro_optional_find_package(PNG)

1 0

commit selinux-policy for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package selinux-policy for openSUSE:Factory checked in at 2023-11-01 22:09:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/selinux-policy (Old) and /work/SRC/openSUSE:Factory/.selinux-policy.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "selinux-policy" Wed Nov 1 22:09:22 2023 rev:51 rq:1121154 version:20231030 Changes: -------- --- /work/SRC/openSUSE:Factory/selinux-policy/selinux-policy.changes 2023-10-13 23:13:54.793366029 +0200 +++ /work/SRC/openSUSE:Factory/.selinux-policy.new.17445/selinux-policy.changes 2023-11-01 22:09:24.122385191 +0100 @@ -1,0 +2,168 @@ +Mon Oct 30 10:28:10 UTC 2023 - cathy.hu(a)suse.com + +- Update to version 20231030: + * Allow system_mail_t manage exim spool files and dirs + * Dontaudit keepalived setattr on keepalived_unconfined_script_exec_t + * Label /run/pcsd.socket with cluster_var_run_t + * ci: Run cockpit tests in PRs + * Add map_read map_write to kernel_prog_run_bpf + * Allow systemd-fstab-generator read all symlinks + * Allow systemd-fstab-generator the dac_override capability + * Allow rpcbind read network sysctls + * Support using systemd containers + * Allow sysadm_t to connect to iscsid using a unix domain stream socket + * Add policy for coreos installer + * Add policy for nvme-stas + * Confine systemd fstab,sysv,rc-local + * Label /etc/aliases.lmdb with etc_aliases_t + * Create policy for afterburn + * Make new virt drivers permissive + * Split virt policy, introduce virt_supplementary module + * Allow apcupsd cgi scripts read /sys + * Allow kernel_t to manage and relabel all files + * Add missing optional_policy() to files_relabel_all_files() + * Allow named and ndc use the io_uring api + * Deprecate common_anon_inode_perms usage + * Improve default file context(None) of /var/lib/authselect/backups + * Allow udev_t to search all directories with a filesystem type + * Implement proper anon_inode support + * Allow targetd write to the syslog pid sock_file + * Add ipa_pki_retrieve_key_exec() interface + * Allow kdumpctl_t to list all directories with a filesystem type + * Allow udev additional permissions + * Allow udev load kernel module + * Allow sysadm_t to mmap modules_object_t files + * Add the unconfined_read_files() and unconfined_list_dirs() interfaces + * Set default file context of HOME_DIR/tmp/.* to <<none>> + * Allow kernel_generic_helper_t to execute mount(1) + * Allow sssd send SIGKILL to passkey_child running in ipa_otpd_t + * Allow systemd-localed create Xserver config dirs + * Allow sssd read symlinks in /etc/sssd + * Label /dev/gnss[0-9] with gnss_device_t + * Allow systemd-sleep read/write efivarfs variables + * ci: Fix version number of packit generated srpms + * Dontaudit rhsmcertd write memory device + * Allow ssh_agent_type create a sockfile in /run/user/USERID + * Set default file context of /var/lib/authselect/backups to <<none>> + * Allow prosody read network sysctls + * Allow cupsd_t to use bpf capability + * Allow sssd domain transition on passkey_child execution conditionally + * Allow login_userdomain watch lnk_files in /usr + * Allow login_userdomain watch video4linux devices + * Change systemd-network-generator transition to include class file + * Revert "Change file transition for systemd-network-generator" + * Allow nm-dispatcher winbind plugin read/write samba var files + * Allow systemd-networkd write to cgroup files + * Allow kdump create and use its memfd: objects + * Allow fedora-third-party get generic filesystem attributes + * Allow sssd use usb devices conditionally + * Update policy for qatlib + * Allow ssh_agent_type manage generic cache home files + * Change file transition for systemd-network-generator + * Additional support for gnome-initial-setup + * Update gnome-initial-setup policy for geoclue + * Allow openconnect vpn open vhost net device + * Allow cifs.upcall to connect to SSSD also through the /var/run socket + * Grant cifs.upcall more required capabilities + * Allow xenstored map xenfs files + * Update policy for fdo + * Allow keepalived watch var_run dirs + * Allow svirt to rw /dev/udmabuf + * Allow qatlib to modify hardware state information. + * Allow key.dns_resolve connect to avahi over a unix stream socket + * Allow key.dns_resolve create and use unix datagram socket + * Use quay.io as the container image source for CI + * ci: Move srpm/rpm build to packit + * .copr: Avoid subshell and changing directory + * Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file + * Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t + * Make insights_client_t an unconfined domain + * Allow insights-client manage user temporary files + * Allow insights-client create all rpm logs with a correct label + * Allow insights-client manage generic logs + * Allow cloud_init create dhclient var files and init_t manage net_conf_t + * Allow insights-client read and write cluster tmpfs files + * Allow ipsec read nsfs files + * Make tuned work with mls policy + * Remove nsplugin_role from mozilla.if + * allow mon_procd_t self:cap_userns sys_ptrace + * Allow pdns name_bind and name_connect all ports + * Set the MLS range of fsdaemon_t to s0 - mls_systemhigh + * ci: Move to actions/checkout@v3 version + * .copr: Replace chown call with standard workflow safe.directory setting + * .copr: Enable `set -u` for robustness + * .copr: Simplify root directory variable + * Allow rhsmcertd dbus chat with policykit + * Allow polkitd execute pkla-check-authorization with nnp transition + * Allow user_u and staff_u get attributes of non-security dirs + * Allow unconfined user filetrans chrome_sandbox_home_t + * Allow svnserve execute postdrop with a transition + * Do not make postfix_postdrop_t type an MTA executable file + * Allow samba-dcerpc service manage samba tmp files + * Add use_nfs_home_dirs boolean for mozilla_plugin + * Fix labeling for no-stub-resolv.conf + * Revert "Allow winbind-rpcd use its private tmp files" + * Allow upsmon execute upsmon via a helper script + * Allow openconnect vpn read/write inherited vhost net device + * Allow winbind-rpcd use its private tmp files + * Update samba-dcerpc policy for printing + * Allow gpsd,oddjob,oddjob_mkhomedir rw user domain pty + * Allow nscd watch system db dirs + * Allow qatlib to read sssd public files + * Allow fedora-third-party read /sys and proc + * Allow systemd-gpt-generator mount a tmpfs filesystem + * Allow journald write to cgroup files + * Allow rpc.mountd read network sysctls + * Allow blueman read the contents of the sysfs filesystem + * Allow logrotate_t to map generic files in /etc + * Boolean: Allow virt_qemu_ga create ssh directory + * Allow systemd-network-generator send system log messages + * Dontaudit the execute permission on sock_file globally + * Allow fsadm_t the file mounton permission + * Allow named and ndc the io_uring sqpoll permission + * Allow sssd io_uring sqpoll permission + * Fix location for /run/nsd + * Allow qemu-ga get fixed disk devices attributes + * Update bitlbee policy + * Label /usr/sbin/sos with sosreport_exec_t + * Update policy for the sblim-sfcb service + * Add the files_getattr_non_auth_dirs() interface + * Fix the CI to work with DNF5 + * Make systemd_tmpfiles_t MLS trusted for lowering the level of files + * Revert "Allow insights client map cache_home_t" + * Allow nfsidmapd connect to systemd-machined over a unix socket + * Allow snapperd connect to kernel over a unix domain stream socket + * Allow virt_qemu_ga_t create .ssh dir with correct label + * Allow targetd read network sysctls + * Set the abrt_handle_event boolean to on + * Permit kernel_t to change the user identity in object contexts + * Allow insights client map cache_home_t + * Label /usr/sbin/mariadbd with mysqld_exec_t + * Allow httpd tcp connect to redis port conditionally + * Label only /usr/sbin/ripd and ripngd with zebra_exec_t + * Dontaudit aide the execmem permission + * Remove permissive from fdo + * Allow sa-update manage spamc home files + * Allow sa-update connect to systemlog services + * Label /usr/lib/systemd/system/mimedefang.service with antivirus_unit_file_t + * Allow nsd_crond_t write nsd_var_run_t & connectto nsd_t + * Allow bootupd search EFI directory + * Change init_audit_control default value to true + * Allow nfsidmapd connect to systemd-userdbd with a unix socket + * Add the qatlib module + * Add the fdo module + * Add the bootupd module + * Set default ports for keylime policy + * Create policy for qatlib + * Add policy for FIDO Device Onboard + * Add policy for bootupd + * Add support for kafs-dns requested by keyutils + * Allow insights-client execmem + * Add support for chronyd-restricted + * Add init_explicit_domain() interface + * Allow fsadm_t to get attributes of cgroup filesystems + * Add list_dir_perms to kerberos_read_keytab + * Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t + * Allow sendmail manage its runtime files + +------------------------------------------------------------------- Old: ---- selinux-policy-20231012.tar.xz New: ---- selinux-policy-20231030.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ selinux-policy.spec ++++++ --- /var/tmp/diff_new_pack.BPimQU/_old 2023-11-01 22:09:24.858412206 +0100 +++ /var/tmp/diff_new_pack.BPimQU/_new 2023-11-01 22:09:24.862412353 +0100 @@ -33,7 +33,7 @@ License: GPL-2.0-or-later Group: System/Management Name: selinux-policy -Version: 20231012 +Version: 20231030 Release: 0 Source0: %{name}-%{version}.tar.xz Source1: container.fc ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.BPimQU/_old 2023-11-01 22:09:24.922414556 +0100 +++ /var/tmp/diff_new_pack.BPimQU/_new 2023-11-01 22:09:24.926414703 +0100 @@ -1,7 +1,7 @@ <servicedata> <service name="tar_scm"> <param name="url">https://gitlab.suse.de/selinux/selinux-policy.git</param> - <param name="changesrevision">0624d60d3924bc66ce6247492bd633de77f061e8</param></service><service name="tar_scm"> + <param name="changesrevision">9593f3469572350fd17a1487788a13206b64d15e</param></service><service name="tar_scm"> <param name="url">https://github.com/containers/container-selinux.git</param> <param name="changesrevision">07b3034f6d9625ab84508a2f46515d8ff79b4204</param></service><service name="tar_scm"> <param name="url">https://gitlab.suse.de/jsegitz/selinux-policy.git</param> ++++++ selinux-policy-20231012.tar.xz -> selinux-policy-20231030.tar.xz ++++++ ++++ 7445 lines of diff (skipped)

1 0

commit yast2-trans for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package yast2-trans for openSUSE:Factory checked in at 2023-11-01 22:09:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/yast2-trans (Old) and /work/SRC/openSUSE:Factory/.yast2-trans.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "yast2-trans" Wed Nov 1 22:09:20 2023 rev:315 rq:1121047 version:84.87.20231027.a9c9df2125 Changes: -------- --- /work/SRC/openSUSE:Factory/yast2-trans/yast2-trans.changes 2023-10-12 12:01:05.158117796 +0200 +++ /work/SRC/openSUSE:Factory/.yast2-trans.new.17445/yast2-trans.changes 2023-11-01 22:09:22.638330720 +0100 @@ -1,0 +2,27 @@ +Mon Oct 30 05:15:19 UTC 2023 - git(a)opensuse.org + +- Update to version 84.87.20231027.a9c9df2125: + * Translated using Weblate (Galician) + * Translated using Weblate (Macedonian) + * Translated using Weblate (Macedonian) + * Translated using Weblate (Macedonian) + * Translated using Weblate (Macedonian) + * Translated using Weblate (Macedonian) + * Translated using Weblate (Macedonian) + * Translated using Weblate (Italian) + * Translated using Weblate (Catalan) + * Translated using Weblate (Czech) + * Translated using Weblate (Czech) + * Translated using Weblate (Slovak) + * Translated using Weblate (Slovak) + * Translated using Weblate (Dutch) + * Translated using Weblate (Japanese) + * New POT for text domain 'storage'. + * New POT for text domain 'country'. + * Translated using Weblate (Dutch) + * Translated using Weblate (Catalan) + * Translated using Weblate (Japanese) + * Translated using Weblate (French) + * New POT for text domain 'qt-pkg'. + +------------------------------------------------------------------- Old: ---- yast2-trans-84.87.20231004.bd479b5f2d.tar.xz New: ---- yast2-trans-84.87.20231027.a9c9df2125.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-trans.spec ++++++ --- /var/tmp/diff_new_pack.4rFS4j/_old 2023-11-01 22:09:23.742371243 +0100 +++ /var/tmp/diff_new_pack.4rFS4j/_new 2023-11-01 22:09:23.742371243 +0100 @@ -17,7 +17,7 @@ Name: yast2-trans -Version: 84.87.20231004.bd479b5f2d +Version: 84.87.20231027.a9c9df2125 Release: 0 Summary: YaST2 - Translation Container Package License: GPL-2.0-or-later ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.4rFS4j/_old 2023-11-01 22:09:23.790373005 +0100 +++ /var/tmp/diff_new_pack.4rFS4j/_new 2023-11-01 22:09:23.794373152 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/yast/yast-translations.git</param> - <param name="changesrevision">bd479b5f2d1503bae0b5678050320d8bc9687f13</param></service></servicedata> + <param name="changesrevision">a9c9df2125992cbd30d27ea5a89f07b1f4d53361</param></service></servicedata> (No newline at EOF) ++++++ yast2-trans-84.87.20231004.bd479b5f2d.tar.xz -> yast2-trans-84.87.20231027.a9c9df2125.tar.xz ++++++ /work/SRC/openSUSE:Factory/yast2-trans/yast2-trans-84.87.20231004.bd479b5f2d.tar.xz /work/SRC/openSUSE:Factory/.yast2-trans.new.17445/yast2-trans-84.87.20231027.a9c9df2125.tar.xz differ: char 27, line 1

1 0

commit opera for openSUSE:Factory:NonFree
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package opera for openSUSE:Factory:NonFree checked in at 2023-11-01 22:08:42 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory:NonFree/opera (Old) and /work/SRC/openSUSE:Factory:NonFree/.opera.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "opera" Wed Nov 1 22:08:42 2023 rev:199 rq:1121583 version:104.0.4944.36 Changes: -------- --- /work/SRC/openSUSE:Factory:NonFree/opera/opera.changes 2023-10-25 18:00:21.264972544 +0200 +++ /work/SRC/openSUSE:Factory:NonFree/.opera.new.17445/opera.changes 2023-11-01 22:08:44.608934872 +0100 @@ -1,0 +2,26 @@ +Mon Oct 30 19:16:48 UTC 2023 - Carsten Ziepke <kieltux(a)gmail.com> + +- Update to 104.0.4944.36 + * CHR-9492 Update Chromium on desktop-stable-118-4944 to + 118.0.5993.118 + * DNA-112757 [Tab close button] Close button is cutted when + a lot tabs are opened +- The update to chromium 118.0.5993.118 fixes following issues: + CVE-2023-5472 + +------------------------------------------------------------------- +Wed Oct 25 15:55:50 UTC 2023 - Carsten Ziepke <kieltux(a)gmail.com> + +- Update to 104.0.4944.33 + * CHR-9487 Update Chromium on desktop-stable-118-4944 to + 118.0.5993.96 + * DNA-111963 Show duplicate indicator when hovering tab in + tab tooltip +- Changes in 104.0.4944.28 + * DNA-112454 [Start Page] No context menu in Search bar using + right button of mouse + * DNA-112053 Context menu is too large on Mac + * DNA-111989 Favicons are displayed too close to titles in + history menu + +------------------------------------------------------------------- Old: ---- opera-stable_104.0.4944.23_amd64.rpm New: ---- opera-stable_104.0.4944.36_amd64.rpm ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ opera.spec ++++++ --- /var/tmp/diff_new_pack.9EEBrb/_old 2023-11-01 22:08:46.292996685 +0100 +++ /var/tmp/diff_new_pack.9EEBrb/_new 2023-11-01 22:08:46.292996685 +0100 @@ -20,7 +20,7 @@ # libffmpeg.so*, libfreetype.so* and libGLESv2.so* are currently bundled. %global __requires_exclude ^lib(ffmpeg|freetype|GLESv2)\\.so.*$ Name: opera -Version: 104.0.4944.23 +Version: 104.0.4944.36 Release: 0 Summary: Proprietary web browser License: NonFree ++++++ opera-stable_104.0.4944.23_amd64.rpm -> opera-stable_104.0.4944.36_amd64.rpm ++++++ /work/SRC/openSUSE:Factory:NonFree/opera/opera-stable_104.0.4944.23_amd64.rpm /work/SRC/openSUSE:Factory:NonFree/.opera.new.17445/opera-stable_104.0.4944.36_amd64.rpm differ: char 35, line 1

1 0

commit 000update-repos for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package 000update-repos for openSUSE:Factory checked in at 2023-11-01 21:07:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/000update-repos (Old) and /work/SRC/openSUSE:Factory/.000update-repos.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000update-repos" Wed Nov 1 21:07:23 2023 rev:2370 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- factory:non-oss_3786.2.packages.zst factory_20231030.packages.zst ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------

1 0

commit 000product for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package 000product for openSUSE:Factory checked in at 2023-11-01 10:07:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/000product (Old) and /work/SRC/openSUSE:Factory/.000product.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000product" Wed Nov 1 10:07:28 2023 rev:3787 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ MicroOS-dvd5-dvd-x86_64.kiwi ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.460631834 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.464631981 +0100 @@ -1,4 +1,4 @@ -<image name="OBS__MicroOS___20231030" schemaversion="4.1"> +<image name="OBS__MicroOS___20231031" schemaversion="4.1"> <description type="system"> <author>The SUSE Team</author> <contact>build(a)opensuse.org</contact> @@ -35,11 +35,11 @@ <productvar name="SEPARATE_MEDIA">true</productvar> <productvar name="SHA1OPT">-x -2</productvar> <productvar name="VENDOR">openSUSE</productvar> - <productvar name="VERSION">20231030</productvar> + <productvar name="VERSION">20231031</productvar> <productinfo name="CONTENTSTYLE">11</productinfo> - <productinfo name="DISTRO">cpe:/o:opensuse:microos:20231030,openSUSE MicroOS</productinfo> + <productinfo name="DISTRO">cpe:/o:opensuse:microos:20231031,openSUSE MicroOS</productinfo> <productinfo name="LINGUAS">en_US </productinfo> - <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/MicroOS/20231030/x86_64</productinfo> + <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/MicroOS/20231031/x86_64</productinfo> <productinfo name="VENDOR">openSUSE</productinfo> <productoption name="INI_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> <productoption name="PLUGIN_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> ++++++ openSUSE-Addon-NonOss-ftp-ftp-x86_64.kiwi ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.492633010 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.496633156 +0100 @@ -1,4 +1,4 @@ -<image name="OBS__openSUSE-Addon-NonOss___20231030" schemaversion="4.1"> +<image name="OBS__openSUSE-Addon-NonOss___20231031" schemaversion="4.1"> <description type="system"> <author>The SUSE Team</author> <contact>build(a)opensuse.org</contact> @@ -35,11 +35,11 @@ <productvar name="SEPARATE_MEDIA">true</productvar> <productvar name="SHA1OPT">-x -2</productvar> <productvar name="VENDOR">openSUSE</productvar> - <productvar name="VERSION">20231030</productvar> + <productvar name="VERSION">20231031</productvar> <productinfo name="CONTENTSTYLE">11</productinfo> - <productinfo name="DISTRO">cpe:/o:opensuse:opensuse-addon-nonoss:20231030,openSUSE NonOSS Addon</productinfo> + <productinfo name="DISTRO">cpe:/o:opensuse:opensuse-addon-nonoss:20231031,openSUSE NonOSS Addon</productinfo> <productinfo name="LINGUAS">af ar be_BY bg br ca cy el et ga gl gu_IN he hi_IN hr ka km ko lt mk nn pa_IN rw sk sl sr_CS ss st tg th tr uk ve vi xh zu </productinfo> - <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/openSUSE-Addon-NonOss/2023…</productinfo> + <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/openSUSE-Addon-NonOss/2023…</productinfo> <productinfo name="VENDOR">openSUSE</productinfo> <productoption name="INI_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> <productoption name="PLUGIN_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> ++++++ openSUSE-cd-mini-x86_64.kiwi ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.516633891 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.520634038 +0100 @@ -1,4 +1,4 @@ -<image name="OBS__openSUSE___20231030" schemaversion="4.1"> +<image name="OBS__openSUSE___20231031" schemaversion="4.1"> <description type="system"> <author>The SUSE Team</author> <contact>build(a)opensuse.org</contact> @@ -35,11 +35,11 @@ <productvar name="SEPARATE_MEDIA">true</productvar> <productvar name="SHA1OPT">-x -2</productvar> <productvar name="VENDOR">openSUSE</productvar> - <productvar name="VERSION">20231030</productvar> + <productvar name="VERSION">20231031</productvar> <productinfo name="CONTENTSTYLE">11</productinfo> - <productinfo name="DISTRO">cpe:/o:opensuse:opensuse:20231030,openSUSE Tumbleweed</productinfo> + <productinfo name="DISTRO">cpe:/o:opensuse:opensuse:20231031,openSUSE Tumbleweed</productinfo> <productinfo name="LINGUAS">cs da de el en en_GB en_US es fr hu it ja pl pt pt_BR ru zh zh_CN zh_TW </productinfo> - <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/openSUSE/20231030/x86_64</productinfo> + <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/openSUSE/20231031/x86_64</productinfo> <productinfo name="VENDOR">openSUSE</productinfo> <productoption name="INI_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> <productoption name="PLUGIN_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> ++++++ openSUSE-dvd5-dvd-x86_64.kiwi ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.540634773 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.544634920 +0100 @@ -1,4 +1,4 @@ -<image name="OBS__openSUSE___20231030" schemaversion="4.1"> +<image name="OBS__openSUSE___20231031" schemaversion="4.1"> <description type="system"> <author>The SUSE Team</author> <contact>build(a)opensuse.org</contact> @@ -35,11 +35,11 @@ <productvar name="SEPARATE_MEDIA">true</productvar> <productvar name="SHA1OPT">-x -2</productvar> <productvar name="VENDOR">openSUSE</productvar> - <productvar name="VERSION">20231030</productvar> + <productvar name="VERSION">20231031</productvar> <productinfo name="CONTENTSTYLE">11</productinfo> - <productinfo name="DISTRO">cpe:/o:opensuse:opensuse:20231030,openSUSE Tumbleweed</productinfo> + <productinfo name="DISTRO">cpe:/o:opensuse:opensuse:20231031,openSUSE Tumbleweed</productinfo> <productinfo name="LINGUAS">cs da de el en en_GB en_US es fr hu it ja pl pt pt_BR ru zh zh_CN zh_TW </productinfo> - <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/openSUSE/20231030/x86_64</productinfo> + <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/openSUSE/20231031/x86_64</productinfo> <productinfo name="VENDOR">openSUSE</productinfo> <productoption name="INI_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> <productoption name="PLUGIN_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> @@ -1397,6 +1397,8 @@ <repopackage name="libdlm3"/> <repopackage name="libdmapsharing-4_0-3"/> <repopackage name="libdmtx0"/> + <repopackage name="libdnf-repo-config-zypp"/> + <repopackage name="libdnf2"/> <repopackage name="libdolphinvcs5"/> <repopackage name="libdotconf0"/> <repopackage name="libdouble-conversion3"/> @@ -2445,6 +2447,7 @@ <repopackage name="libreoffice-share-linker"/> <repopackage name="libreoffice-writer"/> <repopackage name="libreofficekit"/> + <repopackage name="librepo0"/> <repopackage name="librepository"/> <repopackage name="librest-1_0-0"/> <repopackage name="librevenge-0_0-0"/> @@ -3096,6 +3099,7 @@ <repopackage name="p11-kit"/> <repopackage name="p11-kit-tools"/> <repopackage name="PackageKit"/> + <repopackage name="PackageKit-backend-dnf"/> <repopackage name="PackageKit-backend-zypp"/> <repopackage name="PackageKit-branding-openSUSE"/> <repopackage name="PackageKit-gstreamer-plugin"/> ++++++ openSUSE-ftp-ftp-x86_64.kiwi ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.564635655 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.568635801 +0100 @@ -1,4 +1,4 @@ -<image name="OBS__openSUSE___20231030" schemaversion="4.1"> +<image name="OBS__openSUSE___20231031" schemaversion="4.1"> <description type="system"> <author>The SUSE Team</author> <contact>build(a)opensuse.org</contact> @@ -23,7 +23,7 @@ <productvar name="DISTNAME">openSUSE</productvar> <productvar name="FLAVOR">ftp</productvar> <productvar name="MAKE_LISTINGS">true</productvar> - <productvar name="MEDIUM_NAME">openSUSE-20231030-x86_64</productvar> + <productvar name="MEDIUM_NAME">openSUSE-20231031-x86_64</productvar> <productvar name="MULTIPLE_MEDIA">true</productvar> <productvar name="PRODUCT_DIR">/</productvar> <productvar name="PRODUCT_NAME">$DISTNAME-$FLAVOR</productvar> @@ -35,11 +35,11 @@ <productvar name="SEPARATE_MEDIA">true</productvar> <productvar name="SHA1OPT">-x -2</productvar> <productvar name="VENDOR">openSUSE</productvar> - <productvar name="VERSION">20231030</productvar> + <productvar name="VERSION">20231031</productvar> <productinfo name="CONTENTSTYLE">11</productinfo> - <productinfo name="DISTRO">cpe:/o:opensuse:opensuse:20231030,openSUSE Tumbleweed</productinfo> + <productinfo name="DISTRO">cpe:/o:opensuse:opensuse:20231031,openSUSE Tumbleweed</productinfo> <productinfo name="LINGUAS">cs da de el en en_GB en_US es fr hu it ja pl pt pt_BR ru zh zh_CN zh_TW </productinfo> - <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/openSUSE/20231030/x86_64</productinfo> + <productinfo name="REPOID">obsproduct://build.opensuse.org/openSUSE:Factory/openSUSE/20231031/x86_64</productinfo> <productinfo name="VENDOR">openSUSE</productinfo> <productoption name="DEBUGMEDIUM">2</productoption> <productoption name="INI_DIR">/usr/share/kiwi/modules/plugins/tumbleweed</productoption> ++++++ Aeon.product ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.604637124 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.608637270 +0100 @@ -6,7 +6,7 @@ <name>Aeon</name> <releasepkgname>Aeon-release</releasepkgname> <endoflife/> - <version>20231030</version> + <version>20231031</version>  <release>0</release> <productline>Aeon</productline> ++++++ MicroOS.product ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.624637859 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.632638152 +0100 @@ -6,7 +6,7 @@ <name>MicroOS</name> <releasepkgname>MicroOS-release</releasepkgname> <endoflife/> - <version>20231030</version> + <version>20231031</version>  <release>0</release> <productline>MicroOS</productline> ++++++ dvd.group ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.712641091 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.716641238 +0100 @@ -53,6 +53,7 @@ <package name="OpenPrintingPPDs-hpijs" supportstatus="unsupported"/>  <package name="OpenPrintingPPDs-postscript" supportstatus="unsupported"/>  <package name="PackageKit" supportstatus="unsupported"/>  + <package name="PackageKit-backend-dnf" supportstatus="unsupported"/>  <package name="PackageKit-backend-zypp" supportstatus="unsupported"/>  <package name="PackageKit-branding-openSUSE" supportstatus="unsupported"/>  <package name="PackageKit-gstreamer-plugin" supportstatus="unsupported"/>  @@ -794,7 +795,7 @@ <package name="gvfs" supportstatus="unsupported"/>  <package name="gvfs-backend-afc" supportstatus="unsupported"/>  <package name="gvfs-backend-goa" supportstatus="unsupported"/>  - <package name="gvfs-backend-samba" supportstatus="unsupported"/>  + <package name="gvfs-backend-samba" supportstatus="unsupported"/>  <package name="gvfs-backends" supportstatus="unsupported"/>  <package name="gvfs-fuse" supportstatus="unsupported"/>  <package name="gvfs-lang" supportstatus="unsupported"/>  @@ -1170,7 +1171,7 @@ <package name="lib389" supportstatus="unsupported"/>  <package name="libAnalitza8" supportstatus="unsupported"/>  <package name="libAppStreamQt2" supportstatus="unsupported"/>  - <package name="libBasicUsageEnvironment2" supportstatus="unsupported"/>  + <package name="libBasicUsageEnvironment2" supportstatus="unsupported"/>  <package name="libFLAC12" supportstatus="unsupported"/>  <package name="libFcitx5GClient2" supportstatus="unsupported"/>  <package name="libGLU1" supportstatus="unsupported"/>  @@ -1472,7 +1473,7 @@ <package name="libSPIRV-Tools-2023_5_rc1" supportstatus="unsupported"/>  <package name="libSoundTouch1" supportstatus="unsupported"/>  <package name="libSvtAv1Enc1" supportstatus="unsupported"/>  - <package name="libUsageEnvironment3" supportstatus="unsupported"/>  + <package name="libUsageEnvironment3" supportstatus="unsupported"/>  <package name="libWPEBackend-fdo-1_0-1" supportstatus="unsupported"/>  <package name="libX11-6" supportstatus="unsupported"/>  <package name="libX11-data" supportstatus="unsupported"/>  @@ -1508,7 +1509,7 @@ <package name="libXxf86vm1" supportstatus="unsupported"/>  <package name="libZXing3" supportstatus="unsupported"/>  <package name="liba52-0" supportstatus="unsupported"/>  - <package name="libaa1" supportstatus="unsupported"/>  + <package name="libaa1" supportstatus="unsupported"/>  <package name="libabsl2308_0_0" supportstatus="unsupported"/>  <package name="libabw-0_1-1" supportstatus="unsupported"/>  <package name="libaccounts-glib0" supportstatus="unsupported"/>  @@ -1564,14 +1565,14 @@ <package name="libavahi-gobject0" supportstatus="unsupported"/>  <package name="libavahi-ui-gtk3-0" supportstatus="unsupported"/>  <package name="libavc1394-0" supportstatus="unsupported"/>  - <package name="libavcodec58_134" supportstatus="unsupported"/>  + <package name="libavcodec58_134" supportstatus="unsupported"/>  <package name="libavcodec60" supportstatus="unsupported"/>  <package name="libavfilter9" supportstatus="unsupported"/>  - <package name="libavformat58_76" supportstatus="unsupported"/>  + <package name="libavformat58_76" supportstatus="unsupported"/>  <package name="libavformat60" supportstatus="unsupported"/>  <package name="libavif16" supportstatus="unsupported"/>  <package name="libavtp0" supportstatus="unsupported"/>  - <package name="libavutil56_70" supportstatus="unsupported"/>  + <package name="libavutil56_70" supportstatus="unsupported"/>  <package name="libavutil58" supportstatus="unsupported"/>  <package name="libb2-1" supportstatus="unsupported"/>  <package name="libb64-0" supportstatus="unsupported"/>  @@ -1616,7 +1617,7 @@ <package name="libbytesize-lang" supportstatus="unsupported"/>  <package name="libbytesize1" supportstatus="unsupported"/>  <package name="libbz2-1" supportstatus="unsupported"/>  - <package name="libcaca0" supportstatus="unsupported"/>  + <package name="libcaca0" supportstatus="unsupported"/>  <package name="libcacard0" supportstatus="unsupported"/>  <package name="libcairo-gobject2" supportstatus="unsupported"/>  <package name="libcairo-script-interpreter2" supportstatus="unsupported"/>  @@ -1643,14 +1644,14 @@ <package name="libccolamd2" supportstatus="unsupported"/>  <package name="libcdda_interface0" supportstatus="unsupported"/>  <package name="libcdda_paranoia0" supportstatus="unsupported"/>  - <package name="libcddb2" supportstatus="unsupported"/>  + <package name="libcddb2" supportstatus="unsupported"/>  <package name="libcdio19" supportstatus="unsupported"/>  <package name="libcdio_cdda2" supportstatus="unsupported"/>  <package name="libcdio_paranoia2" supportstatus="unsupported"/>  <package name="libcdr-0_1-1" supportstatus="unsupported"/>  <package name="libcdrdeflt1_0" supportstatus="unsupported"/>  <package name="libcdt5" supportstatus="unsupported"/>  - <package name="libcelt0-2" supportstatus="unsupported"/>  + <package name="libcelt0-2" supportstatus="unsupported"/>  <package name="libcfg6" supportstatus="unsupported"/>  <package name="libcfitsio10" supportstatus="unsupported"/>  <package name="libcgraph6" supportstatus="unsupported"/>  @@ -1660,7 +1661,7 @@ <package name="libchewing3" supportstatus="unsupported"/>  <package name="libchm0" supportstatus="unsupported"/>  <package name="libcholmod3" supportstatus="unsupported"/>  - <package name="libchromaprint1" supportstatus="unsupported"/>  + <package name="libchromaprint1" supportstatus="unsupported"/>  <package name="libclamav9" supportstatus="unsupported"/>  <package name="libclastfm0" supportstatus="unsupported"/>  <package name="libcloudproviders0" supportstatus="unsupported"/>  @@ -1733,6 +1734,8 @@ <package name="libdlm3" supportstatus="unsupported"/>  <package name="libdmapsharing-4_0-3" supportstatus="unsupported"/>  <package name="libdmtx0" supportstatus="unsupported"/>  + <package name="libdnf-repo-config-zypp" supportstatus="unsupported"/>  + <package name="libdnf2" supportstatus="unsupported"/>  <package name="libdolphinvcs5" supportstatus="unsupported"/>  <package name="libdotconf0" supportstatus="unsupported"/>  <package name="libdouble-conversion3" supportstatus="unsupported"/>  @@ -1744,13 +1747,13 @@ <package name="libdrm_radeon1" supportstatus="unsupported"/>  <package name="libduktape207" supportstatus="unsupported"/>  <package name="libdv4" supportstatus="unsupported"/>  - <package name="libdvbpsi10" supportstatus="unsupported"/>  - <package name="libdvdnav4" supportstatus="unsupported"/>  + <package name="libdvbpsi10" supportstatus="unsupported"/>  + <package name="libdvdnav4" supportstatus="unsupported"/>  <package name="libdvdread8" supportstatus="unsupported"/>  <package name="libdw1" supportstatus="unsupported"/>  <package name="libe-book-0_1-1" supportstatus="unsupported"/>  <package name="libebackend-1_2-11" supportstatus="unsupported"/>  - <package name="libebml5" supportstatus="unsupported"/>  + <package name="libebml5" supportstatus="unsupported"/>  <package name="libebook-1_2-21" supportstatus="unsupported"/>  <package name="libebook-contacts-1_2-4" supportstatus="unsupported"/>  <package name="libebtc0" supportstatus="unsupported"/>  @@ -1938,7 +1941,7 @@ <package name="libgrilo-0_3-0" supportstatus="unsupported"/>  <package name="libgrlnet-0_3-0" supportstatus="unsupported"/>  <package name="libgrlpls-0_3-0" supportstatus="unsupported"/>  - <package name="libgroupsock30" supportstatus="unsupported"/>  + <package name="libgroupsock30" supportstatus="unsupported"/>  <package name="libgsasl-lang" supportstatus="unsupported"/>  <package name="libgsasl7" supportstatus="unsupported"/>  <package name="libgsf-1-114" supportstatus="unsupported"/>  @@ -2047,7 +2050,7 @@ <package name="libicu73" supportstatus="unsupported"/>  <package name="libicu73-ledata" supportstatus="unsupported"/>  <package name="libid3tag0_16_2" supportstatus="unsupported"/>  - <package name="libidn12" supportstatus="unsupported"/>  + <package name="libidn12" supportstatus="unsupported"/>  <package name="libidn2-0" supportstatus="unsupported"/>  <package name="libidn2-0-32bit" supportstatus="unsupported"/>  <package name="libidn2-lang" supportstatus="unsupported"/>  @@ -2075,7 +2078,7 @@ <package name="libitm1" supportstatus="unsupported"/>  <package name="libiw30" supportstatus="unsupported"/>  <package name="libixion-0_18-0" supportstatus="unsupported"/>  - <package name="libixml11" supportstatus="unsupported"/>  + <package name="libixml11" supportstatus="unsupported"/>  <package name="libjack-devel" supportstatus="unsupported"/>  <package name="libjack0" supportstatus="unsupported"/>  <package name="libjacknet0" supportstatus="unsupported"/>  @@ -2166,8 +2169,8 @@ <package name="liblhasa0" supportstatus="unsupported"/>  <package name="liblightdm-gobject-1-0" supportstatus="unsupported"/>  <package name="liblilv-0-0" supportstatus="unsupported"/>  - <package name="liblirc_client0" supportstatus="unsupported"/>  - <package name="libliveMedia107" supportstatus="unsupported"/>  + <package name="liblirc_client0" supportstatus="unsupported"/>  + <package name="libliveMedia107" supportstatus="unsupported"/>  <package name="liblmdb-0_9_30" supportstatus="unsupported"/>  <package name="libloader" supportstatus="unsupported"/>  <package name="liblogging0" supportstatus="unsupported"/>  @@ -2180,7 +2183,7 @@ <package name="liblsan0" supportstatus="unsupported"/>  <package name="libltdl7" supportstatus="unsupported"/>  <package name="liblttng-ust1" supportstatus="unsupported"/>  - <package name="liblua5_3-5" supportstatus="unsupported"/>  + <package name="liblua5_3-5" supportstatus="unsupported"/>  <package name="liblua5_4-5" supportstatus="unsupported"/>  <package name="libluajit-5_1-2" supportstatus="unsupported"/>  <package name="liblunar-calendar-3_0-1" supportstatus="unsupported"/>  @@ -2192,7 +2195,7 @@ <package name="liblzma5-32bit" supportstatus="unsupported"/>  <package name="liblzo2-2" supportstatus="unsupported"/>  <package name="libm17n0" supportstatus="unsupported"/>  - <package name="libmad0" supportstatus="unsupported"/>  + <package name="libmad0" supportstatus="unsupported"/>  <package name="libmagic1" supportstatus="unsupported"/>  <package name="libmailutils9" supportstatus="unsupported"/>  <package name="libmalcontent-0-0" supportstatus="unsupported"/>  @@ -2202,7 +2205,7 @@ <package name="libmariadb3" supportstatus="unsupported"/>  <package name="libmariadbd19" supportstatus="unsupported"/>  <package name="libmarkdown3" supportstatus="unsupported"/>  - <package name="libmatroska7" supportstatus="unsupported"/>  + <package name="libmatroska7" supportstatus="unsupported"/>  <package name="libmaxminddb0" supportstatus="unsupported"/>  <package name="libmbim" supportstatus="unsupported"/>  <package name="libmbim-glib4" supportstatus="unsupported"/>  @@ -2365,7 +2368,7 @@ <package name="libpixman-1-0" supportstatus="unsupported"/>  <package name="libpkcs11-helper1" supportstatus="unsupported"/>  <package name="libpkgconf3" supportstatus="unsupported"/>  - <package name="libplacebo264" supportstatus="unsupported"/>  + <package name="libplacebo264" supportstatus="unsupported"/>  <package name="libplacebo338" supportstatus="unsupported"/>  <package name="libplist-2_0-4" supportstatus="unsupported"/>  <package name="libply-splash-core5" supportstatus="unsupported"/>  @@ -2386,14 +2389,14 @@ <package name="libportal-gtk3-1" supportstatus="unsupported"/>  <package name="libportal-gtk4-1" supportstatus="unsupported"/>  <package name="libportaudio2" supportstatus="unsupported"/>  - <package name="libpostproc55_9" supportstatus="unsupported"/>  + <package name="libpostproc55_9" supportstatus="unsupported"/>  <package name="libpostproc57" supportstatus="unsupported"/>  <package name="libpotrace0" supportstatus="unsupported"/>  <package name="libpq5" supportstatus="unsupported"/>  <package name="libpresage1" supportstatus="unsupported"/>  <package name="libproc2-0" supportstatus="unsupported"/>  <package name="libprocps8" supportstatus="unsupported"/>  - <package name="libprojectM3" supportstatus="unsupported"/>  + <package name="libprojectM3" supportstatus="unsupported"/>  <package name="libprotobuf-c1" supportstatus="unsupported"/>  <package name="libprotobuf-lite23_4_0" supportstatus="unsupported"/>  <package name="libprotobuf23_4_0" supportstatus="unsupported"/>  @@ -2487,6 +2490,7 @@ <package name="libreoffice-share-linker" supportstatus="unsupported"/>  <package name="libreoffice-writer" supportstatus="unsupported"/>  <package name="libreofficekit" supportstatus="unsupported"/>  + <package name="librepo0" supportstatus="unsupported"/>  <package name="librepository" supportstatus="unsupported"/>  <package name="librest-1_0-0" supportstatus="unsupported"/>  <package name="librevenge-0_0-0" supportstatus="unsupported"/>  @@ -2499,7 +2503,7 @@ <package name="librubberband2" supportstatus="unsupported"/>  <package name="libruby3_2-3_2" supportstatus="unsupported"/>  <package name="libsamba-policy0-python3" supportstatus="unsupported"/>  - <package name="libsamplerate0" supportstatus="unsupported"/>  + <package name="libsamplerate0" supportstatus="unsupported"/>  <package name="libsane1" supportstatus="unsupported"/>  <package name="libsasl2-3" supportstatus="unsupported"/>  <package name="libsasl2-3-32bit" supportstatus="unsupported"/>  @@ -2507,7 +2511,7 @@ <package name="libscg1_0" supportstatus="unsupported"/>  <package name="libscgcmd1_0" supportstatus="unsupported"/>  <package name="libschily2_0" supportstatus="unsupported"/>  - <package name="libschroedinger-1_0-0" supportstatus="unsupported"/>  + <package name="libschroedinger-1_0-0" supportstatus="unsupported"/>  <package name="libseccomp2" supportstatus="unsupported"/>  <package name="libsecret-1-0" supportstatus="unsupported"/>  <package name="libsecret-lang" supportstatus="unsupported"/>  @@ -2524,13 +2528,13 @@ <package name="libsha1detectcoll1" supportstatus="unsupported"/>  <package name="libshaderc_shared1" supportstatus="unsupported"/>  <package name="libsharpyuv0" supportstatus="unsupported"/>  - <package name="libshout3" supportstatus="unsupported"/>  + <package name="libshout3" supportstatus="unsupported"/>  <package name="libshumate-1_0-1" supportstatus="unsupported"/>  <package name="libshumate-lang" supportstatus="unsupported"/>  <package name="libsigc-2_0-0" supportstatus="unsupported"/>  <package name="libsigc-3_0-0" supportstatus="unsupported"/>  <package name="libsignon-qt5-1" supportstatus="unsupported"/>  - <package name="libslang2" supportstatus="unsupported"/>  + <package name="libslang2" supportstatus="unsupported"/>  <package name="libslirp0" supportstatus="unsupported"/>  <package name="libslp1" supportstatus="unsupported"/>  <package name="libsmartcols1" supportstatus="unsupported"/>  @@ -2555,7 +2559,7 @@ <package name="libspectre1" supportstatus="unsupported"/>  <package name="libspeechd2" supportstatus="unsupported"/>  <package name="libspeex1" supportstatus="unsupported"/>  - <package name="libspeexdsp1" supportstatus="unsupported"/>  + <package name="libspeexdsp1" supportstatus="unsupported"/>  <package name="libspice-client-glib-2_0-8" supportstatus="unsupported"/>  <package name="libspice-client-glib-helper" supportstatus="unsupported"/>  <package name="libspice-client-gtk-3_0-5" supportstatus="unsupported"/>  @@ -2584,9 +2588,9 @@ <package name="libsuitesparseconfig5" supportstatus="unsupported"/>  <package name="libsunpinyin3" supportstatus="unsupported"/>  <package name="libsvrcore0" supportstatus="unsupported"/>  - <package name="libswresample3_9" supportstatus="unsupported"/>  + <package name="libswresample3_9" supportstatus="unsupported"/>  <package name="libswresample4" supportstatus="unsupported"/>  - <package name="libswscale5_9" supportstatus="unsupported"/>  + <package name="libswscale5_9" supportstatus="unsupported"/>  <package name="libswscale7" supportstatus="unsupported"/>  <package name="libsynctex2" supportstatus="unsupported"/>  <package name="libsysfs2" supportstatus="unsupported"/>  @@ -2609,7 +2613,7 @@ <package name="libtextstyle0" supportstatus="unsupported"/>  <package name="libthai-data" supportstatus="unsupported"/>  <package name="libthai0" supportstatus="unsupported"/>  - <package name="libtheora0" supportstatus="unsupported"/>  + <package name="libtheora0" supportstatus="unsupported"/>  <package name="libtheoradec1" supportstatus="unsupported"/>  <package name="libtheoraenc1" supportstatus="unsupported"/>  <package name="libthunarx-3-0" supportstatus="unsupported"/>  @@ -2643,7 +2647,7 @@ <package name="libunistring5" supportstatus="unsupported"/>  <package name="libunistring5-32bit" supportstatus="unsupported"/>  <package name="libunwind8" supportstatus="unsupported"/>  - <package name="libupnp17" supportstatus="unsupported"/>  + <package name="libupnp17" supportstatus="unsupported"/>  <package name="libupower-glib3" supportstatus="unsupported"/>  <package name="liburcu8" supportstatus="unsupported"/>  <package name="liburing2" supportstatus="unsupported"/>  @@ -2661,7 +2665,7 @@ <package name="libv4lconvert0" supportstatus="unsupported"/>  <package name="libva-drm2" supportstatus="unsupported"/>  <package name="libva-glx2" supportstatus="unsupported"/>  - <package name="libva-wayland2" supportstatus="unsupported"/>  + <package name="libva-wayland2" supportstatus="unsupported"/>  <package name="libva-x11-2" supportstatus="unsupported"/>  <package name="libva2" supportstatus="unsupported"/>  <package name="libvdeplug3" supportstatus="unsupported"/>  @@ -2699,8 +2703,8 @@ <package name="libvirt-libs" supportstatus="unsupported"/>  <package name="libvisio-0_1-1" supportstatus="unsupported"/>  <package name="libvisual-0_4-0" supportstatus="unsupported"/>  - <package name="libvlc5" supportstatus="unsupported"/>  - <package name="libvlccore9" supportstatus="unsupported"/>  + <package name="libvlc5" supportstatus="unsupported"/>  + <package name="libvlccore9" supportstatus="unsupported"/>  <package name="libvmaf1" supportstatus="unsupported"/>  <package name="libvmtools0" supportstatus="unsupported"/>  <package name="libvncserver1" supportstatus="unsupported"/>  @@ -4411,12 +4415,12 @@ <package name="virtualbox-guest-tools" supportstatus="unsupported"/>  <package name="virtualbox-kmp-default" supportstatus="unsupported"/>  <package name="vlan" supportstatus="unsupported"/>  - <package name="vlc" supportstatus="unsupported"/>  - <package name="vlc-codec-gstreamer" supportstatus="unsupported"/>  - <package name="vlc-lang" supportstatus="unsupported"/>  - <package name="vlc-noX" supportstatus="unsupported"/>  - <package name="vlc-qt" supportstatus="unsupported"/>  - <package name="vlc-vdpau" supportstatus="unsupported"/>  + <package name="vlc" supportstatus="unsupported"/>  + <package name="vlc-codec-gstreamer" supportstatus="unsupported"/>  + <package name="vlc-lang" supportstatus="unsupported"/>  + <package name="vlc-noX" supportstatus="unsupported"/>  + <package name="vlc-qt" supportstatus="unsupported"/>  + <package name="vlc-vdpau" supportstatus="unsupported"/>  <package name="vlgothic-fonts" supportstatus="unsupported"/>  <package name="vorbis-tools" supportstatus="unsupported"/>  <package name="vorbis-tools-lang" supportstatus="unsupported"/>  ++++++ openSUSE-Addon-NonOss.product ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.736641972 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.740642120 +0100 @@ -4,7 +4,7 @@ <product> <vendor>openSUSE</vendor> <name>openSUSE-Addon-NonOss</name> - <version>20231030</version> + <version>20231031</version> <release>0</release> <summary>openSUSE NonOSS Addon</summary> <shortsummary>non oss addon</shortsummary> ++++++ openSUSE.product ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.756642707 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.760642854 +0100 @@ -4,7 +4,7 @@ <product> <vendor>openSUSE</vendor> <name>openSUSE</name> - <version>20231030</version> + <version>20231031</version> <release>0</release> <productline>openSUSE</productline> ++++++ unsorted.yml ++++++ --- /var/tmp/diff_new_pack.HWxgDv/_old 2023-11-01 10:07:32.840645793 +0100 +++ /var/tmp/diff_new_pack.HWxgDv/_new 2023-11-01 10:07:32.848646087 +0100 @@ -10003,7 +10003,7 @@ - libLTO16 - libLTO17 - libLibreGraphAPI1 - - libLimeSuite22_09-1 + - libLimeSuite23_10-0 - libMagick++-7_Q16HDRI5 - libMagick++-7_Q16HDRI5-32bit - libMagick++-devel @@ -10066,26 +10066,26 @@ - libOsiCbc3 - libOsiClp1 - libPDAL15 - - libPocoActiveRecord94 - - libPocoCppParser94 - - libPocoCrypto94 - - libPocoData94 - - libPocoDataMySQL94 - - libPocoDataODBC94 - - libPocoDataSQLite94 - - libPocoEncodings94 - - libPocoFoundation94 - - libPocoJSON94 - - libPocoJWT94 - - libPocoMongoDB94 - - libPocoNet94 - - libPocoNetSSL94 - - libPocoPDF94 - - libPocoPrometheus94 - - libPocoRedis94 - - libPocoUtil94 - - libPocoXML94 - - libPocoZip94 + - libPocoActiveRecord95 + - libPocoCppParser95 + - libPocoCrypto95 + - libPocoData95 + - libPocoDataMySQL95 + - libPocoDataODBC95 + - libPocoDataSQLite95 + - libPocoEncodings95 + - libPocoFoundation95 + - libPocoJSON95 + - libPocoJWT95 + - libPocoMongoDB95 + - libPocoNet95 + - libPocoNetSSL95 + - libPocoPDF95 + - libPocoPrometheus95 + - libPocoRedis95 + - libPocoUtil95 + - libPocoXML95 + - libPocoZip95 - libQCSXCAD0 - libQCoro5Core0 - libQCoro5DBus0 @@ -15312,7 +15312,7 @@ - libvamp-hostsdk3-32bit - libvamp-sdk2 - libvamp-sdk2-32bit - - libvapoursynth-64 + - libvapoursynth-65 - libvapoursynth-script0 - libvarnishapi3 - libvbr2 @@ -45727,6 +45727,7 @@ - xgboost-predictor - xgboost-predictor-javadoc - xgc + - xh - xhfsutil - xhost - xhtml-dtd

1 0

commit 000release-packages for openSUSE:Factory
by Source-Sync 01 Nov '23

01 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package 000release-packages for openSUSE:Factory checked in at 2023-11-01 10:07:25 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/000release-packages (Old) and /work/SRC/openSUSE:Factory/.000release-packages.new.17445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "000release-packages" Wed Nov 1 10:07:25 2023 rev:2570 rq: version:unknown Changes: -------- New Changes file: NO CHANGES FILE!!! ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ MicroOS-release.spec: same change openSUSE-Addon-NonOss-release.spec: same change openSUSE-release.spec: same change stub.spec: same change ++++++ weakremovers.inc ++++++ --- /var/tmp/diff_new_pack.ffsvad/_old 2023-11-01 10:07:28.656492095 +0100 +++ /var/tmp/diff_new_pack.ffsvad/_new 2023-11-01 10:07:28.668492535 +0100 @@ -9111,6 +9111,7 @@ Provides: weakremover(libLimeSuite20_01-1) Provides: weakremover(libLimeSuite20_07-1) Provides: weakremover(libLimeSuite20_10-1) +Provides: weakremover(libLimeSuite22_09-1) Provides: weakremover(libMagick++-7_Q16HDRI2) Provides: weakremover(libMagick++-7_Q16HDRI2-32bit) Provides: weakremover(libMagick++-7_Q16HDRI3) @@ -9223,96 +9224,116 @@ Provides: weakremover(libPocoActiveRecord82) Provides: weakremover(libPocoActiveRecord83) Provides: weakremover(libPocoActiveRecord92) +Provides: weakremover(libPocoActiveRecord94) Provides: weakremover(libPocoCppParser63) Provides: weakremover(libPocoCppParser71) Provides: weakremover(libPocoCppParser82) Provides: weakremover(libPocoCppParser83) Provides: weakremover(libPocoCppParser92) +Provides: weakremover(libPocoCppParser94) Provides: weakremover(libPocoCrypto63) Provides: weakremover(libPocoCrypto71) Provides: weakremover(libPocoCrypto82) Provides: weakremover(libPocoCrypto83) Provides: weakremover(libPocoCrypto92) +Provides: weakremover(libPocoCrypto94) Provides: weakremover(libPocoData63) Provides: weakremover(libPocoData71) Provides: weakremover(libPocoData82) Provides: weakremover(libPocoData83) Provides: weakremover(libPocoData92) +Provides: weakremover(libPocoData94) Provides: weakremover(libPocoDataMySQL63) Provides: weakremover(libPocoDataMySQL71) Provides: weakremover(libPocoDataMySQL82) Provides: weakremover(libPocoDataMySQL83) Provides: weakremover(libPocoDataMySQL92) +Provides: weakremover(libPocoDataMySQL94) Provides: weakremover(libPocoDataODBC63) Provides: weakremover(libPocoDataODBC71) Provides: weakremover(libPocoDataODBC82) Provides: weakremover(libPocoDataODBC83) Provides: weakremover(libPocoDataODBC92) +Provides: weakremover(libPocoDataODBC94) Provides: weakremover(libPocoDataSQLite63) Provides: weakremover(libPocoDataSQLite71) Provides: weakremover(libPocoDataSQLite82) Provides: weakremover(libPocoDataSQLite83) Provides: weakremover(libPocoDataSQLite92) +Provides: weakremover(libPocoDataSQLite94) Provides: weakremover(libPocoEncodings63) Provides: weakremover(libPocoEncodings71) Provides: weakremover(libPocoEncodings82) Provides: weakremover(libPocoEncodings83) Provides: weakremover(libPocoEncodings92) +Provides: weakremover(libPocoEncodings94) Provides: weakremover(libPocoFoundation63) Provides: weakremover(libPocoFoundation71) Provides: weakremover(libPocoFoundation82) Provides: weakremover(libPocoFoundation83) Provides: weakremover(libPocoFoundation92) +Provides: weakremover(libPocoFoundation94) Provides: weakremover(libPocoJSON63) Provides: weakremover(libPocoJSON71) Provides: weakremover(libPocoJSON82) Provides: weakremover(libPocoJSON83) Provides: weakremover(libPocoJSON92) +Provides: weakremover(libPocoJSON94) Provides: weakremover(libPocoJWT71) Provides: weakremover(libPocoJWT82) Provides: weakremover(libPocoJWT83) Provides: weakremover(libPocoJWT92) +Provides: weakremover(libPocoJWT94) Provides: weakremover(libPocoMongoDB63) Provides: weakremover(libPocoMongoDB71) Provides: weakremover(libPocoMongoDB82) Provides: weakremover(libPocoMongoDB83) Provides: weakremover(libPocoMongoDB92) +Provides: weakremover(libPocoMongoDB94) Provides: weakremover(libPocoNet63) Provides: weakremover(libPocoNet71) Provides: weakremover(libPocoNet82) Provides: weakremover(libPocoNet83) Provides: weakremover(libPocoNet92) +Provides: weakremover(libPocoNet94) Provides: weakremover(libPocoNetSSL63) Provides: weakremover(libPocoNetSSL71) Provides: weakremover(libPocoNetSSL82) Provides: weakremover(libPocoNetSSL83) Provides: weakremover(libPocoNetSSL92) +Provides: weakremover(libPocoNetSSL94) Provides: weakremover(libPocoPDF63) Provides: weakremover(libPocoPDF71) Provides: weakremover(libPocoPDF82) Provides: weakremover(libPocoPDF83) Provides: weakremover(libPocoPDF92) +Provides: weakremover(libPocoPDF94) Provides: weakremover(libPocoPrometheus92) +Provides: weakremover(libPocoPrometheus94) Provides: weakremover(libPocoRedis63) Provides: weakremover(libPocoRedis71) Provides: weakremover(libPocoRedis82) Provides: weakremover(libPocoRedis83) Provides: weakremover(libPocoRedis92) +Provides: weakremover(libPocoRedis94) Provides: weakremover(libPocoUtil63) Provides: weakremover(libPocoUtil71) Provides: weakremover(libPocoUtil82) Provides: weakremover(libPocoUtil83) Provides: weakremover(libPocoUtil92) +Provides: weakremover(libPocoUtil94) Provides: weakremover(libPocoXML63) Provides: weakremover(libPocoXML71) Provides: weakremover(libPocoXML82) Provides: weakremover(libPocoXML83) Provides: weakremover(libPocoXML92) +Provides: weakremover(libPocoXML94) Provides: weakremover(libPocoZip63) Provides: weakremover(libPocoZip71) Provides: weakremover(libPocoZip82) Provides: weakremover(libPocoZip83) Provides: weakremover(libPocoZip92) +Provides: weakremover(libPocoZip94) Provides: weakremover(libPythonQt-Qt5-Python3-3) Provides: weakremover(libPythonQt_QtAll-Qt5-Python3-3) Provides: weakremover(libQCoroCore0) @@ -16674,6 +16695,7 @@ Provides: weakremover(libvapoursynth-54) Provides: weakremover(libvapoursynth-62) Provides: weakremover(libvapoursynth-63) +Provides: weakremover(libvapoursynth-64) Provides: weakremover(libvarnishapi1) Provides: weakremover(libvarnishapi2) Provides: weakremover(libvcdinfo0-32bit)

1 0