November 2014 - openSUSE Commits - openSUSE Mailing Lists

commit giver for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package giver for openSUSE:Factory checked in at 2014-11-24 11:09:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/giver (Old) and /work/SRC/openSUSE:Factory/.giver.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "giver" Changes: -------- --- /work/SRC/openSUSE:Factory/giver/giver.changes 2013-04-07 14:22:08.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.giver.new/giver.changes 2014-11-24 11:09:32.000000000 +0100 @@ -1,0 +2,8 @@ +Sat Nov 15 04:55:00 UTC 2014 - Led <ledest(a)gmail.com> + +- fix shebang in giver start script: option '-a' of 'exec' command + may be unsupported in some POSIX-complete shells +- add patches: + * giver-0.1.8-fix-bashisms.patch + +------------------------------------------------------------------- New: ---- giver-0.1.8-fix-bashisms.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ giver.spec ++++++ --- /var/tmp/diff_new_pack.jGG2Z6/_old 2014-11-24 11:09:33.000000000 +0100 +++ /var/tmp/diff_new_pack.jGG2Z6/_new 2014-11-24 11:09:33.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package giver # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -27,6 +27,7 @@ Patch: bnc-326064.txt # PATCH-FIX-UPSTREAM giver-change-photo.patch bnc#328531 vuntz(a)opensuse.org -- Make it possible to change the photo, patch taken from http://code.google.com/p/giver/issues/detail?id=4 Patch1: giver-change-photo.patch +Patch2: %{name}-0.1.8-fix-bashisms.patch BuildRequires: fdupes BuildRequires: mono-devel BuildRequires: perl-XML-Parser @@ -54,6 +55,7 @@ %setup %patch -p1 %patch1 -p1 +%patch2 -p1 # Prefer dmcs over gmcs, bnc#812529 sed -i "s:gmcs:dmcs:g" configure* src/Makefile* ++++++ giver-0.1.8-fix-bashisms.patch ++++++ diff -Ndur giver-0.1.8/src/giver.in giver-0.1.8-fix-bashisms/src/giver.in --- giver-0.1.8/src/giver.in 2014-11-15 07:49:40.072723948 +0200 +++ giver-0.1.8-fix-bashisms/src/giver.in 2014-11-15 07:49:31.594724522 +0200 @@ -1,4 +1,4 @@ -#!/bin/sh +#!/bin/bash prefix="@prefix@" exec_prefix="@exec_prefix@" -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit zathura-plugin-pdf-poppler for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package zathura-plugin-pdf-poppler for openSUSE:Factory checked in at 2014-11-24 11:09:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zathura-plugin-pdf-poppler (Old) and /work/SRC/openSUSE:Factory/.zathura-plugin-pdf-poppler.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "zathura-plugin-pdf-poppler" Changes: -------- --- /work/SRC/openSUSE:Factory/zathura-plugin-pdf-poppler/zathura-plugin-pdf-poppler.changes 2014-11-15 12:31:05.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.zathura-plugin-pdf-poppler.new/zathura-plugin-pdf-poppler.changes 2014-11-24 11:09:28.000000000 +0100 @@ -1,0 +2,5 @@ +Fri Nov 21 15:03:20 UTC 2014 - mimi.vx(a)gmail.com + +- add requires: zathura + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zathura-plugin-pdf-poppler.spec ++++++ --- /var/tmp/diff_new_pack.MvTbiL/_old 2014-11-24 11:09:29.000000000 +0100 +++ /var/tmp/diff_new_pack.MvTbiL/_new 2014-11-24 11:09:29.000000000 +0100 @@ -15,6 +15,7 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # + %define realname zathura-pdf-poppler Name: zathura-plugin-pdf-poppler Version: 0.2.5 @@ -28,6 +29,7 @@ BuildRequires: pkgconfig(girara-gtk3) BuildRequires: pkgconfig(poppler-glib) BuildRequires: pkgconfig(zathura) +Requires: zathura Provides: zathura-pdf-poppler-plugin BuildRoot: %{_tmppath}/%{name}-%{version}-build -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit xfce4-panel-plugin-systemload for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package xfce4-panel-plugin-systemload for openSUSE:Factory checked in at 2014-11-24 11:09:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xfce4-panel-plugin-systemload (Old) and /work/SRC/openSUSE:Factory/.xfce4-panel-plugin-systemload.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "xfce4-panel-plugin-systemload" Changes: -------- --- /work/SRC/openSUSE:Factory/xfce4-panel-plugin-systemload/xfce4-panel-plugin-systemload.changes 2014-06-16 21:38:40.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.xfce4-panel-plugin-systemload.new/xfce4-panel-plugin-systemload.changes 2014-11-24 11:09:26.000000000 +0100 @@ -1,0 +2,11 @@ +Fri Nov 21 10:11:44 UTC 2014 - gber(a)opensuse.org + +- update to version 1.1.2 + - support upower 0.99 + - add a way to run a command when clicking on systemload plugin + - pick up translation updates & fixes, especially DE locale + - merge some OpenBSD compatibility patches +- drop obsolete xfce4-panel-plugin-systemload-upower-0.99.patch, + xfce4-systemload-plugin-russian.patch + +------------------------------------------------------------------- Old: ---- xfce4-panel-plugin-systemload-upower-0.99.patch xfce4-systemload-plugin-1.1.1.tar.bz2 xfce4-systemload-plugin-russian.patch New: ---- xfce4-systemload-plugin-1.1.2.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xfce4-panel-plugin-systemload.spec ++++++ --- /var/tmp/diff_new_pack.s03W5z/_old 2014-11-24 11:09:27.000000000 +0100 +++ /var/tmp/diff_new_pack.s03W5z/_new 2014-11-24 11:09:27.000000000 +0100 @@ -20,17 +20,13 @@ %define plugin_name xfce4-systemload-plugin Name: xfce4-panel-plugin-systemload -Version: 1.1.1 +Version: 1.1.2 Release: 0 Summary: System Load Monitoring Plugin for the Xfce Panel License: BSD-2-Clause Group: System/GUI/XFCE Url: http://goodies.xfce.org/projects/panel-plugins/xfce4-systemload-plugin -Source0: http://archive.xfce.org/src/panel-plugins/%{plugin_name}/1.0/%{plugin_name}… -# PATCH-FIX-UPSTREAM xfce4-systemload-plugin-russian.patch lazy.kent(a)opensuse.org -- fix Russian translation (plural forms and one string) -Patch0: xfce4-systemload-plugin-russian.patch -# PATCH-FIX-UPSTREAM xfce4-panel-plugin-systemload-upower-0.99.patch bxo#10923 gber(a)opensuse.org -- Add support for upower >= 0.99 -Patch1: xfce4-panel-plugin-systemload-upower-0.99.patch +Source0: http://archive.xfce.org/src/panel-plugins/%{plugin_name}/1.1/%{plugin_name}… BuildRequires: fdupes BuildRequires: intltool BuildRequires: pkgconfig(gtk+-2.0) @@ -50,8 +46,6 @@ %prep %setup -q -n %{plugin_name}-%{version} -%patch0 -p1 -%patch1 -p1 %build %configure --disable-static ++++++ xfce4-systemload-plugin-1.1.1.tar.bz2 -> xfce4-systemload-plugin-1.1.2.tar.bz2 ++++++ ++++ 23936 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit mumble for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package mumble for openSUSE:Factory checked in at 2014-11-24 11:09:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mumble (Old) and /work/SRC/openSUSE:Factory/.mumble.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "mumble" Changes: -------- --- /work/SRC/openSUSE:Factory/mumble/mumble.changes 2014-08-13 08:48:56.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.mumble.new/mumble.changes 2014-11-24 11:09:24.000000000 +0100 @@ -1,0 +2,5 @@ +Fri Nov 21 13:37:45 UTC 2014 - lnussel(a)suse.de + +- fix murmur-user-wrapper (bnc#906416) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mumble.spec ++++++ --- /var/tmp/diff_new_pack.CJ7bQ3/_old 2014-11-24 11:09:25.000000000 +0100 +++ /var/tmp/diff_new_pack.CJ7bQ3/_new 2014-11-24 11:09:25.000000000 +0100 @@ -367,7 +367,7 @@ -e 's@#logfile=@logfile=/var/log/mumble-server/@' \ %{buildroot}%{_sysconfdir}/mumble-server.ini install -D -m 0755 scripts/murmur-user-wrapper %{buildroot}%{_bindir}/murmur-user-wrapper -sed -i -e '/^SYSDIR=/s@=.*@%{_docdir}/%{name}/scripts@' %{buildroot}%{_bindir}/murmur-user-wrapper +sed -i -e '/^SYSDIR=/s@=.*@=%{_docdir}/%{name}/scripts@' %{buildroot}%{_bindir}/murmur-user-wrapper for i in log lib run; do install -d -m755 %buildroot/var/$i/mumble-server done -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit osc for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package osc for openSUSE:Factory checked in at 2014-11-24 11:09:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/osc (Old) and /work/SRC/openSUSE:Factory/.osc.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "osc" Changes: -------- --- /work/SRC/openSUSE:Factory/osc/osc.changes 2014-10-29 21:11:38.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.osc.new/osc.changes 2014-11-24 11:09:23.000000000 +0100 @@ -1,0 +2,5 @@ +Fri Nov 14 12:46:34 UTC 2014 - suse-tux(a)gmx.de + +- fixed #123 (wrong requires for Fedora 20) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ osc.spec ++++++ --- /var/tmp/diff_new_pack.IBTYWT/_old 2014-11-24 11:09:24.000000000 +0100 +++ /var/tmp/diff_new_pack.IBTYWT/_new 2014-11-24 11:09:24.000000000 +0100 @@ -93,7 +93,11 @@ %setup -q %build -CFLAGS="%{optflags}" python setup.py build +# the PATH hack/rewrite is needed for Fedora 20 builds, because /bin +# is a symlink to /usr/bin and /bin precedes /usr/bin in PATH +# => a "wrong" interpreter line ("#!/bin/python") is constructed +# ("wrong", because no package provides "/bin/python"). +PATH="/usr/bin:$PATH" CFLAGS="%{optflags}" python setup.py build %install python setup.py install --prefix=%{_prefix} --root=%{buildroot} -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit cscope for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package cscope for openSUSE:Factory checked in at 2014-11-24 11:09:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cscope (Old) and /work/SRC/openSUSE:Factory/.cscope.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cscope" Changes: -------- --- /work/SRC/openSUSE:Factory/cscope/cscope.changes 2012-09-05 09:16:44.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.cscope.new/cscope.changes 2014-11-24 11:09:21.000000000 +0100 @@ -1,0 +2,7 @@ +Thu Nov 20 21:31:00 UTC 2014 - Led <ledest(a)gmail.com> + +- fix bashisms in osc script +- add patches: + * cscope-15.8a-fix-bashisms.patch + +------------------------------------------------------------------- New: ---- cscope-15.8a-fix-bashisms.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cscope.spec ++++++ --- /var/tmp/diff_new_pack.ly2JKC/_old 2014-11-24 11:09:23.000000000 +0100 +++ /var/tmp/diff_new_pack.ly2JKC/_new 2014-11-24 11:09:23.000000000 +0100 @@ -1,7 +1,7 @@ # # spec file for package cscope # -# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -27,6 +27,7 @@ Patch1: %{name}-null.patch Patch2: %{name}-15.7-gcc-warnings.patch Patch3: %{name}-15.7-vpath.patch +Patch4: %{name}-15.8a-fix-bashisms.patch Patch5: %{name}-cleanup_on_sigterm.patch Patch6: %{name}-egrep.out.patch BuildRequires: bison @@ -43,6 +44,7 @@ %patch1 -p1 %patch2 %patch3 +%patch4 -p1 %patch5 %patch6 -p1 ++++++ cscope-15.8a-fix-bashisms.patch ++++++ diff -Ndurp cscope-15.8a/contrib/ocs cscope-15.8a-fix-bashisms/contrib/ocs --- cscope-15.8a/contrib/ocs 2010-06-29 01:16:40.000000000 +0300 +++ cscope-15.8a-fix-bashisms/contrib/ocs 2014-10-19 19:16:03.210177402 +0300 @@ -168,7 +168,8 @@ create_list() if [ "${FORCE}" != "Y" ] then - echo "\n${LIST}" + echo + echo "$LIST" echo "Update the library? <(Y)es, (N)o, (Q)uit> [n] \c" read x y case $x in @@ -177,10 +178,11 @@ create_list() *) return ;; esac fi - echo "Updating library:\n ${LIST} \c" + echo "Updating library:" else - echo "Creating library:\n ${LIST} \c" + echo "Creating library:" fi + echo -n " ${LIST} " ( find . -follow -type f \( -name \*.[sScChHlyG] -o \ @@ -197,7 +199,8 @@ create_list() -print ) | grep -v SCCS | sort -u > ${LIST} - echo "\n`cat ${LIST} | wc -l` files listed" + echo + echo "`cat ${LIST} | wc -l` files listed" } # -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit cyrus-imapd for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package cyrus-imapd for openSUSE:Factory checked in at 2014-11-24 11:09:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cyrus-imapd (Old) and /work/SRC/openSUSE:Factory/.cyrus-imapd.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cyrus-imapd" Changes: -------- --- /work/SRC/openSUSE:Factory/cyrus-imapd/cyrus-imapd.changes 2014-03-09 18:21:58.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.cyrus-imapd.new/cyrus-imapd.changes 2014-11-24 11:09:20.000000000 +0100 @@ -1,0 +2,25 @@ +Fri Nov 21 11:55:51 UTC 2014 - tchvatal(a)suse.com + +- Drop unused patch: + * KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch + +------------------------------------------------------------------- +Fri Nov 14 10:49:38 UTC 2014 - rhafer(a)suse.com + +- Replace the TLS/POODLE patch with what was merged into the upstream + git repo: + * cyrus-imapd.tls_options.patch + * Obsoletes patches cyrus-imapd.tls_tlsonly.patch and + cyrus-imapd.tls_ec.patch +- Add a default tls_versions settings to imapd.conf which disables + POODLE affected SSL versions. + +------------------------------------------------------------------- +Sat Oct 18 11:15:00 UTC 2014 - johannes(a)lst.de + +- Add two patches from Kristian Kraemmer Nielsen found on the info-cyrus mailing list + (http://lists.andrew.cmu.edu/pipermail/info-cyrus/2014-October/037708.html) + * cyrus-imapd.tls_ec.patch - adding tls_ec for Perfect Forward Secrecy + * cyrus-imapd.tls_tlsonly.patch - add tlsonly config option to fix POODLE vulnerability + +------------------------------------------------------------------- @@ -353 +377,0 @@ -------------------------------------------------------------------- @@ -354,0 +379 @@ +------------------------------------------------------------------- @@ -363 +387,0 @@ -------------------------------------------------------------------- @@ -364,0 +389 @@ +------------------------------------------------------------------- Old: ---- KOLAB_cyrus-imapd-2.3.18_cross-domain-acls.patch New: ---- cyrus-imapd.tls_options.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cyrus-imapd.spec ++++++ --- /var/tmp/diff_new_pack.uxiVmW/_old 2014-11-24 11:09:21.000000000 +0100 +++ /var/tmp/diff_new_pack.uxiVmW/_new 2014-11-24 11:09:21.000000000 +0100 @@ -66,6 +66,8 @@ Patch26: cyrus-imapd-2.4.17_tls-session-leak.patch # PATCH-FEATURE-UPSTREAM -- Allow a result attribute to be specified with ptclient/ldap.c // included in 2.5 Patch27: cyrus-imapd-2.4.17_ptloader-ldap_user_attribute.patch +# PATCH-FIX-UPSTREAM -- Allow to configure TLS more detailed (e.g. to fix POODLE an add PFS) +Patch28: cyrus-imapd.tls_options.patch BuildRequires: automake BuildRequires: bison @@ -225,6 +227,7 @@ %patch25 -p1 %patch26 -p1 %patch27 -p1 +%patch28 -p1 # remove executable bit from docs find doc -type f -name '*.html' -exec %{__chmod} -x {} \; ++++++ cyrus-imapd-rc-2.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/SUSE/imapd.conf new/SUSE/imapd.conf --- old/SUSE/imapd.conf 2014-01-27 17:45:45.000000000 +0100 +++ new/SUSE/imapd.conf 2014-11-07 12:30:00.000000000 +0100 @@ -25,4 +25,5 @@ #tls_cert_file: /etc/ssl/certs/cyrus-imapd.pem #tls_key_file: /etc/ssl/private/cyrus-imapd.key #tls_ca_file: /etc/ssl/cacert.pem -#tls_ca_path: /etc/ssl/ \ No newline at end of file +#tls_ca_path: /etc/ssl/ +tls_versions: tls1_0 tls1_1 tls1_2 ++++++ cyrus-imapd.tls_options.patch ++++++ commit 4b26d2d7244eeaa481871c337e57cd393fd76dfe Author: Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen(a)kolabsys.com> Date: Thu Oct 16 11:12:20 2014 +0200 Enhance SSL/TLS configuration options New settings: tls_compression: 0 Enable TLS compression. Disabled by default. tls_eccurve: prime256v1 Select the elliptic curve used for ECDHE. tls_prefer_server_ciphers: 0 Prefer the cipher order configured on the server-side. tls_versions: ssl2 ssl3 tls1_0 tls1_1 tls1_2 Disable SSL/TLS protocols not in this list. Bugzilla #3822, #3830, #3843, #3861. diff --git a/imap/tls.c b/imap/tls.c index 6db4a2f..92f4c88 100644 --- a/imap/tls.c +++ b/imap/tls.c @@ -631,6 +631,7 @@ int tls_init_serverengine(const char *ident, const char *s_cert_file; const char *s_key_file; int requirecert; + int server_cipher_order; int timeout; if (tls_serverengine) @@ -646,13 +647,6 @@ int tls_init_serverengine(const char *ident, return -1; } -#if 0 - if (tlsonly) { - s_ctx = SSL_CTX_new(TLSv1_server_method()); - } else { - s_ctx = SSL_CTX_new(SSLv23_server_method()); - } -#endif /* even if we want TLS only, we use SSLv23 server method so we can deal with a client sending an SSLv2 greeting message */ @@ -662,10 +656,40 @@ int tls_init_serverengine(const char *ident, }; off |= SSL_OP_ALL; /* Work around all known bugs */ - if (tlsonly) { + + const char *tls_versions = config_getstring(IMAPOPT_TLS_VERSIONS); + + if (strstr(tls_versions, "ssl2") == NULL || tlsonly) { off |= SSL_OP_NO_SSLv2; + } + + if (strstr(tls_versions, "ssl3") == NULL || tlsonly) { off |= SSL_OP_NO_SSLv3; } + + if (strstr(tls_versions, "tls1_2") == NULL) { +#if (OPENSSL_VERSION_NUMBER >= 0x1000105fL) + off |= SSL_OP_NO_TLSv1_2; +#else + syslog(LOG_ERR, "ERROR: TLSv1.2 configured, OpenSSL < 1.0.1e insufficient"); +#endif + } + + if (strstr(tls_versions, "tls1_1") == NULL) { +#if (OPENSSL_VERSION_NUMBER >= 0x1000000fL) + off |= SSL_OP_NO_TLSv1_1; +#else + syslog(LOG_ERR, "ERROR: TLSv1.1 configured, OpenSSL < 1.0.0 insufficient"); +#endif + } + if (strstr(tls_versions, "tls1_0") == NULL) { + off |= SSL_OP_NO_TLSv1; + } + + server_cipher_order = config_getswitch(IMAPOPT_TLS_PREFER_SERVER_CIPHERS); + if (server_cipher_order) + off |= SSL_OP_CIPHER_SERVER_PREFERENCE; + SSL_CTX_set_options(s_ctx, off); SSL_CTX_set_info_callback(s_ctx, (void (*)()) apps_ssl_info_callback); @@ -679,10 +703,15 @@ int tls_init_serverengine(const char *ident, CAfile = config_getstring(IMAPOPT_TLS_CA_FILE); CApath = config_getstring(IMAPOPT_TLS_CA_PATH); - if ((!SSL_CTX_load_verify_locations(s_ctx, CAfile, CApath)) || - (!SSL_CTX_set_default_verify_paths(s_ctx))) { - /* just a warning since this is only necessary for client auth */ - syslog(LOG_NOTICE,"TLS server engine: cannot load CA data"); + if (CAfile || CApath) { + if ((!SSL_CTX_load_verify_locations(s_ctx, CAfile, CApath)) || + (!SSL_CTX_set_default_verify_paths(s_ctx))) { + /* just a warning since this is only necessary for client auth */ + syslog(LOG_NOTICE,"TLS server engine: cannot load CA data. Disabling client certs."); + askcert = 0; + } + } else { + askcert = 0; } s_cert_file = config_getstring(IMAPOPT_TLS_CERT_FILE); @@ -697,11 +726,23 @@ int tls_init_serverengine(const char *ident, #if (OPENSSL_VERSION_NUMBER >= 0x0090800fL) /* Load DH params for DHE-* key exchanges */ SSL_CTX_set_tmp_dh(s_ctx, load_dh_param(s_key_file, s_cert_file)); - /* FIXME: Load ECDH params for ECDHE suites when 0.9.9 is released */ +#endif + +#if (OPENSSL_VERSION_NUMBER >= 0x1000103fL) + const char *ec = config_getstring(IMAPOPT_TLS_ECCURVE); + int openssl_nid = OBJ_sn2nid(ec); + if (openssl_nid != 0) { + EC_KEY *ecdh; + ecdh = EC_KEY_new_by_curve_name(openssl_nid); + if (ecdh != NULL) { + SSL_CTX_set_tmp_ecdh(s_ctx, ecdh); + EC_KEY_free(ecdh); + } + } #endif verify_depth = verifydepth; - if (askcert!=0) + if (askcert != 0) verify_flags |= SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE; requirecert = config_getswitch(IMAPOPT_TLS_REQUIRE_CERT); @@ -714,7 +755,7 @@ int tls_init_serverengine(const char *ident, if (CAfile == NULL) { syslog(LOG_ERR, "TLS server engine: No CA file specified. " - "Client side certs may not work"); + "Client side certs will not work."); } else { SSL_CTX_set_client_CA_list(s_ctx, SSL_load_client_CA_file(CAfile)); } @@ -1209,7 +1250,7 @@ int tls_init_clientengine(int verifydepth, return -1; } - c_ctx = SSL_CTX_new(TLSv1_client_method()); + c_ctx = SSL_CTX_new(SSLv23_client_method()); if (c_ctx == NULL) { return (-1); }; @@ -1224,7 +1265,7 @@ int tls_init_clientengine(int verifydepth, if ((!SSL_CTX_load_verify_locations(c_ctx, CAfile, CApath)) || (!SSL_CTX_set_default_verify_paths(c_ctx))) { /* just a warning since this is only necessary for client auth */ - syslog(LOG_NOTICE,"TLS client engine: cannot load CA data"); + syslog(LOG_NOTICE,"TLS client engine: cannot load CA data"); } if (strlen(var_tls_cert_file) == 0) diff --git a/imtest/imtest.c b/imtest/imtest.c index 9351e20..80ca37f 100644 --- a/imtest/imtest.c +++ b/imtest/imtest.c @@ -506,7 +506,7 @@ static int tls_init_clientengine(int verifydepth, char *var_tls_cert_file, char return IMTEST_FAIL; } - tls_ctx = SSL_CTX_new(TLSv1_client_method()); + tls_ctx = SSL_CTX_new(SSLv23_client_method()); if (tls_ctx == NULL) { return IMTEST_FAIL; }; diff --git a/lib/imapoptions b/lib/imapoptions index 352ab60..d428fb3 100644 --- a/lib/imapoptions +++ b/lib/imapoptions @@ -1338,10 +1338,20 @@ product version in the capabilities */ /* The list of SSL/TLS ciphers to allow. The format of the string is described in ciphers(1). */ +{ "tls_compression", 0, SWITCH } +/* deactivate TLS compression by default */ + +{ "tls_eccurve", "prime256v1", STRING } +/* The elliptic curve used for ECDHE. Default is NIST Suite B prime256. + See 'openssl ecparam -list_curves' for possible values. */ + { "tls_key_file", NULL, STRING } /* File containing the private key belonging to the server certificate. A value of "disabled" will disable SSL/TLS. */ +{ "tls_prefer_server_ciphers", 0, SWITCH } +/* Prefer the ciphers on the server side instead of client side */ + { "tls_require_cert", 0, SWITCH } /* Require a client certificate for ALL services (imap, pop3, lmtp, sieve). */ @@ -1350,6 +1360,12 @@ product version in the capabilities */ for later reuse. The maximum value is 1440 (24 hours), the default. A value of 0 will disable session caching. */ +{ "tls_versions", "ssl2 ssl3 tls1_0 tls1_1 tls1_2", STRING } +/* A list of SSL/TLS versions to not disable. Cyrus IMAP SSL/TLS starts + with all protocols, and substracts protocols not in this list. Newer + versions of SSL/TLS will need to be added here to allow them to get + disabled. */ + { "umask", "077", STRING } /* The umask value used by various Cyrus IMAP programs. */ -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit mutt for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package mutt for openSUSE:Factory checked in at 2014-11-24 11:09:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mutt (Old) and /work/SRC/openSUSE:Factory/.mutt.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "mutt" Changes: -------- --- /work/SRC/openSUSE:Factory/mutt/mutt.changes 2014-03-26 16:41:28.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.mutt.new/mutt.changes 2014-11-24 11:09:15.000000000 +0100 @@ -1,0 +2,6 @@ +Tue Nov 18 08:15:09 UTC 2014 - lnussel(a)suse.de + +- handle text/html by default (bnc#899712) + that is add patch mutt-1.5.21-mailcap.diff + +------------------------------------------------------------------- New: ---- mutt-1.5.21-mailcap.diff mutt.mailcap ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mutt.spec ++++++ --- /var/tmp/diff_new_pack.9jIrjo/_old 2014-11-24 11:09:17.000000000 +0100 +++ /var/tmp/diff_new_pack.9jIrjo/_new 2014-11-24 11:09:17.000000000 +0100 @@ -57,6 +57,7 @@ Provides: muttssl Obsoletes: muttssl Recommends: smtp_daemon +Recommends: w3m %if 0%{?suse_version} > 1130 Requires(post): shared-mime-info Requires(postun): shared-mime-info @@ -79,6 +80,7 @@ Source6: krb5-config Source7: mutt-1.5.21.de.po Source8: %name-%version-patches.tar.bz2 +Source9: mutt.mailcap Patch: %name-%version.dif # http://www.spinnaker.de/mutt/compressed/ Patch1: patch-%version.rr.compressed.1.bz2 @@ -103,6 +105,8 @@ Patch16: mutt-1.5.21-cariage-return.path # PATCH-FIX-SUSE: bnc#868115 - CVE-2014-0467: mutt: crash due to malicious email Patch17: mutt-CVE-2014-0467.patch +# PATCH-FIX-OPENSUSE bnc#899712 - fallback mailcap for e.g text/html +Patch18: mutt-1.5.21-mailcap.diff BuildRoot: %{_tmppath}/%{name}-%{version}-build %global _sysconfdir %{_sysconfdir} @@ -136,6 +140,7 @@ %patch15 -p0 -b .widechar.sidebar %patch16 -p0 -b .crlf %patch17 -p1 -b .cve.2014.0467 +%patch18 -p1 -b .mailcap cp doc/Muttrc Muttrc.SuSE cp %{S:2} . @@ -240,6 +245,7 @@ mkdir -p %{buildroot}%{_datadir}/applications install -m 644 %{SOURCE4} %{buildroot}%{_datadir}/applications/ install -D -m 644 %{SOURCE5} %{buildroot}%{_sysconfdir}/skel/.muttrc +install -D -m 644 %{SOURCE9} %{buildroot}%{_datadir}/mutt/mailcap %suse_update_desktop_file mutt #%fdupes %{buildroot} @@ -272,6 +278,7 @@ %{_mandir}/man5/muttrc.5.gz %{_mandir}/man5/mbox_mutt.5.gz %{_datadir}/mutt +%{_datadir}/mutt/mailcap %config(noreplace) %{_sysconfdir}/Muttrc %changelog ++++++ mutt-1.5.21-mailcap.diff ++++++ read /usr/share/mutt/mailcap as fallback by default. This allows to set some useful defaults specifically for mutt. For example text/html Index: mutt-1.5.21/init.c =================================================================== --- mutt-1.5.21.orig/init.c +++ mutt-1.5.21/init.c @@ -3011,8 +3011,8 @@ void mutt_init (int skip_sys_rc, LIST *c MailcapPath = safe_strdup (p); else { - /* Default search path from RFC1524 */ - MailcapPath = safe_strdup ("~/.mailcap:" PKGDATADIR "/mailcap:" SYSCONFDIR "/mailcap:/etc/mailcap:/usr/etc/mailcap:/usr/local/etc/mailcap"); + /* Default search path from RFC1524 plus fallback for mutt specific defaults */ + MailcapPath = safe_strdup ("~/.mailcap:" PKGDATADIR "/mailcap:" SYSCONFDIR "/mailcap:/etc/mailcap:/usr/etc/mailcap:/usr/local/etc/mailcap:" SYSCONFDIR "/mutt/mailcap"); } Tempdir = safe_strdup ((p = getenv ("TMPDIR")) ? p : "/tmp"); ++++++ mutt.mailcap ++++++ # render html mail with w3m text/html; w3m -I %{charset} -T text/html -dump %s; copiousoutput -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit python-astroid for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package python-astroid for openSUSE:Factory checked in at 2014-11-24 11:08:58 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-astroid (Old) and /work/SRC/openSUSE:Factory/.python-astroid.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-astroid" Changes: -------- --- /work/SRC/openSUSE:Factory/python-astroid/python-astroid.changes 2014-11-05 15:55:48.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.python-astroid.new/python-astroid.changes 2014-11-24 11:09:13.000000000 +0100 @@ -1,0 +2,34 @@ +Fri Nov 21 08:53:09 UTC 2014 - mcihar(a)suse.cz + +- Update to 1.3.0: + * Fix a maximum recursion error occured during the inference, + where statements with the same name weren't filtered properly. + Closes pylint issue #295. + * Check that EmptyNode has an underlying object in + EmptyNode.has_underlying_object. + * Simplify the understanding of enum members. + * Fix an infinite loop with decorator call chain inference, + where the decorator returns itself. Closes issue #50. + * Various speed improvements. Patch by Alex Munroe. + * Add pytest brain plugin. Patch by Robbie Coomber. + * Support for Python versions < 2.7 has been dropped, and the + source has been made compatible with Python 2 and 3. Running + 2to3 on installation for Python 3 is not needed anymore. + * astroid now depends on six. + * modutils._module_file opens __init__.py in binary mode. + Closes issues #51 and #13. + * Only C extensions from trusted sources (the standard library) + are loaded into the examining Python process to build an AST + from the live module. + * Path names on case-insensitive filesystems are now properly + handled. This fixes the stdlib detection code on Windows. + * Metaclass-generating functions like six.with_metaclass + are now supported via some explicit detection code. + * astroid.register_module_extender has been added to generalize + the support for module extenders as used by many brain plugins. + * brain plugins can now register hooks to handle failed imports, + as done by the gobject-introspection plugin. + * The modules have been moved to a separate package directory, + `setup.py develop` now works correctly. + +------------------------------------------------------------------- Old: ---- astroid-1.2.1.zip New: ---- astroid-1.3.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-astroid.spec ++++++ --- /var/tmp/diff_new_pack.yEAJfL/_old 2014-11-24 11:09:15.000000000 +0100 +++ /var/tmp/diff_new_pack.yEAJfL/_new 2014-11-24 11:09:15.000000000 +0100 @@ -17,18 +17,21 @@ Name: python-astroid -Version: 1.2.1 +Version: 1.3.0 Release: 0 Url: http://bitbucket.org/logilab/astroid Summary: Rebuild a new abstract syntax tree from Python's ast License: LGPL-2.1+ Group: Development/Libraries/Python -Source: https://pypi.python.org/packages/source/a/astroid/astroid-%{version}.zip +Source: https://pypi.python.org/packages/source/a/astroid/astroid-%{version}.tar.gz BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: python-devel BuildRequires: python-logilab-common +BuildRequires: python-setuptools +BuildRequires: python-six BuildRequires: unzip Requires: python-logilab-common +Requires: python-six %if 0%{?suse_version} %py_requires %if 0%{?suse_version} > 1110 -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0

commit fio for openSUSE:Factory
by root＠hilbert.suse.de 24 Nov '14

24 Nov '14

Hello community, here is the log from the commit of package fio for openSUSE:Factory checked in at 2014-11-24 11:08:57 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/fio (Old) and /work/SRC/openSUSE:Factory/.fio.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "fio" Changes: -------- --- /work/SRC/openSUSE:Factory/fio/fio.changes 2014-10-06 22:04:50.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.fio.new/fio.changes 2014-11-24 11:09:11.000000000 +0100 @@ -1,0 +2,9 @@ +Fri Nov 21 00:00:00 CET 2014 - dsterba(a)suse.cz + +- 2.1.14 + - arithmetic expressions in jobfiles + - support for --remote-config + - net engine updates + - rbd engine updates + +------------------------------------------------------------------- Old: ---- fio-2.1.13.tar.bz2 New: ---- fio-2.1.14.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ fio.spec ++++++ --- /var/tmp/diff_new_pack.jVnwDQ/_old 2014-11-24 11:09:13.000000000 +0100 +++ /var/tmp/diff_new_pack.jVnwDQ/_new 2014-11-24 11:09:13.000000000 +0100 @@ -1,4 +1,3 @@ -# vim: set ts=4 sw=4 et: # # spec file for package fio # @@ -19,7 +18,7 @@ Name: fio -Version: 2.1.13 +Version: 2.1.14 Release: 0 Summary: Flexible I/O Tester/benchmarker License: GPL-2.0 @@ -89,13 +88,9 @@ %{_bindir}/fio_generate_plots %{_bindir}/genfio %{_bindir}/fio2gnuplot -%{_bindir}/axmap -%{_bindir}/btrace2fio -%{_bindir}/dedupe -%{_bindir}/genzipf -%{_bindir}/ieee754 -%{_bindir}/lfsr-test -%{_bindir}/stest +%{_bindir}/fio-btrace2fio +%{_bindir}/fio-dedupe +%{_bindir}/fio-genzipf %{_datadir}/fio %doc %{_mandir}/man1/fio.1%{ext_man} %doc %{_mandir}/man1/fio_generate_plots.1%{ext_man} ++++++ fio-2.1.13.tar.bz2 -> fio-2.1.14.tar.bz2 ++++++ ++++ 6124 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-commit+help(a)opensuse.org

1 0