March 2017 - openSUSE Commits - openSUSE Mailing Lists

commit autoconf-archive for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package autoconf-archive for openSUSE:Factory checked in at 2017-03-31 15:04:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/autoconf-archive (Old) and /work/SRC/openSUSE:Factory/.autoconf-archive.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "autoconf-archive" Fri Mar 31 15:04:45 2017 rev:21 rq:482269 version:2017.03.21 Changes: -------- --- /work/SRC/openSUSE:Factory/autoconf-archive/autoconf-archive.changes 2016-10-03 09:35:28.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.autoconf-archive.new/autoconf-archive.changes 2017-03-31 15:04:46.604343624 +0200 @@ -1,0 +2,12 @@ +Thu Mar 23 14:27:26 UTC 2017 - mpluskal(a)suse.com + +- Update to version 2017.03.21: + * Removed macros: + + AX_CXX_COMPILER_VENDOR + + AX_GCC_LIBRARIES_DIR + + AX_GCC_VERSION, + + AX_HAVE_OPENGL + * Obsolete macros: + + AX_DEFINE_SUB_PATH + +------------------------------------------------------------------- Old: ---- autoconf-archive-2016.09.16.tar.xz autoconf-archive-2016.09.16.tar.xz.sig New: ---- autoconf-archive-2017.03.21.tar.xz autoconf-archive-2017.03.21.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ autoconf-archive.spec ++++++ --- /var/tmp/diff_new_pack.RJjOHk/_old 2017-03-31 15:04:47.252252029 +0200 +++ /var/tmp/diff_new_pack.RJjOHk/_new 2017-03-31 15:04:47.256251464 +0200 @@ -1,7 +1,7 @@ # # spec file for package autoconf-archive # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,19 +17,18 @@ Name: autoconf-archive -Version: 2016.09.16 +Version: 2017.03.21 Release: 0 Summary: A Collection of macros for GNU autoconf License: GPL-3.0+ WITH Autoconf-exception-3.0 Group: Development/Tools/Building -Url: http://savannah.gnu.org/projects/autoconf-archive -Source0: http://ftp.gnu.org/pub/gnu/autoconf-archive/%{name}-%{version}.tar.xz -Source1: http://ftp.gnu.org/pub/gnu/autoconf-archive/%{name}-%{version}.tar.xz.sig +Url: https://savannah.gnu.org/projects/autoconf-archive +Source0: https://ftp.gnu.org/pub/gnu/autoconf-archive/%{name}-%{version}.tar.xz +Source1: https://ftp.gnu.org/pub/gnu/autoconf-archive/%{name}-%{version}.tar.xz.sig # http://wwwkeys.pgp.net:11371/pks/lookup?op=get&search=0x99089D72 Source2: %{name}.keyring -BuildRequires: xz +Requires(post): info Requires(pre): info -BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildArch: noarch %description @@ -56,19 +55,19 @@ make %{?_smp_mflags} %install -make %{?_smp_mflags} DESTDIR=%{buildroot} install +%make_install rm -rf %{buildroot}/%{_datadir}/%{name}/ %post -%install_info --info-dir=%{_infodir} %{_infodir}/autoconf-archive.info.gz +%install_info --info-dir=%{_infodir} %{_infodir}/autoconf-archive.info%{ext_info} %preun -%install_info_delete --info-dir=%{_infodir} %{_infodir}/autoconf-archive.info.gz +%install_info_delete --info-dir=%{_infodir} %{_infodir}/autoconf-archive.info%{ext_info} %files %defattr(-, root, root) %doc AUTHORS COPYING README COPYING.EXCEPTION -%{_infodir}/%{name}.info%{ext_info} +%{_infodir}/%{name}.info*%{ext_info} %dir %{_datadir}/aclocal %{_datadir}/aclocal/*.m4 ++++++ autoconf-archive-2016.09.16.tar.xz -> autoconf-archive-2017.03.21.tar.xz ++++++ ++++ 85362 lines of diff (skipped)

1 0

commit zziplib for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package zziplib for openSUSE:Factory checked in at 2017-03-31 15:04:40 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/zziplib (Old) and /work/SRC/openSUSE:Factory/.zziplib.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "zziplib" Fri Mar 31 15:04:40 2017 rev:23 rq:482259 version:0.13.62 Changes: -------- --- /work/SRC/openSUSE:Factory/zziplib/zziplib.changes 2013-03-22 13:07:21.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.zziplib.new/zziplib.changes 2017-03-31 15:04:43.292811777 +0200 @@ -1,0 +2,26 @@ +Thu Mar 23 13:32:03 UTC 2017 - josef.moellers(a)suse.com + +- Several bugs fixed: + * heap-based buffer overflows + (bsc#1024517, CVE-2017-5974, zziplib-CVE-2017-5974.patch) + * check if "relative offset of local header" in "central + directory header" really points to a local header + (ZZIP_FILE_HEADER_MAGIC) + (bsc#1024528, CVE-2017-5975, zziplib-CVE-2017-5975.patch) + * protect against bad formatted data in extra blocks + (bsc#1024531, CVE-2017-5976, zziplib-CVE-2017-5976.patch) + * NULL pointer dereference in main (unzzipcat-mem.c) + (bsc#1024532, bsc#1024536, CVE-2017-5975, + zziplib-CVE-2017-5975.patch) + * protect against huge values of "extra field length" + in local file header and central file header + (bsc#1024533, CVE-2017-5978, zziplib-CVE-2017-5978.patch) + * clear ZZIP_ENTRY record before use. + (bsc#1024534, bsc#1024535, CVE-2017-5979, CVE-2017-5977, + zziplib-CVE-2017-5979.patch) + * prevent unzzipcat.c from trying to print a NULL name + (bsc#1024537, zziplib-unzipcat-NULL-name.patch) + * Replace assert() by going to error exit. + (bsc#1034539, CVE-2017-5981, zziplib-CVE-2017-5981.patch) + +------------------------------------------------------------------- New: ---- zziplib-CVE-2017-5974.patch zziplib-CVE-2017-5975.patch zziplib-CVE-2017-5976.patch zziplib-CVE-2017-5978.patch zziplib-CVE-2017-5979.patch zziplib-CVE-2017-5981.patch zziplib-unzipcat-NULL-name.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ zziplib.spec ++++++ --- /var/tmp/diff_new_pack.KZVsC5/_old 2017-03-31 15:04:44.212681735 +0200 +++ /var/tmp/diff_new_pack.KZVsC5/_new 2017-03-31 15:04:44.216681170 +0200 @@ -1,7 +1,7 @@ # # spec file for package zziplib # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -29,6 +29,13 @@ Patch: zziplib-0.13.62.patch Patch1: zziplib-0.13.62-wronglinking.patch Patch2: zziplib-largefile.patch +Patch3: zziplib-CVE-2017-5974.patch +Patch4: zziplib-CVE-2017-5975.patch +Patch5: zziplib-CVE-2017-5976.patch +Patch6: zziplib-CVE-2017-5978.patch +Patch7: zziplib-CVE-2017-5979.patch +Patch8: zziplib-unzipcat-NULL-name.patch +Patch9: zziplib-CVE-2017-5981.patch BuildRequires: dos2unix BuildRequires: fdupes BuildRequires: libtool @@ -66,6 +73,14 @@ %patch %patch1 %patch2 +%patch3 -p1 +%patch4 -p1 +%patch5 -p1 +%patch6 -p1 +%patch7 -p1 +%patch8 -p1 +%patch9 -p1 + # Fix wrong encoding dos2unix docs/README.MSVC6 dos2unix docs/sdocbook.css ++++++ zziplib-CVE-2017-5974.patch ++++++ Index: zziplib-0.13.62/zzip/memdisk.c =================================================================== --- zziplib-0.13.62.orig/zzip/memdisk.c +++ zziplib-0.13.62/zzip/memdisk.c @@ -216,12 +216,12 @@ zzip_mem_entry_new(ZZIP_DISK * disk, ZZI /* override sizes/offsets with zip64 values for largefile support */ zzip_extra_zip64 *block = (zzip_extra_zip64 *) zzip_mem_entry_extra_block(item, ZZIP_EXTRA_zip64); - if (block) + if (block && ZZIP_GET16(block->z_datasize) >= (8 + 8 + 8 + 4)) { - item->zz_usize = __zzip_get64(block->z_usize); - item->zz_csize = __zzip_get64(block->z_csize); - item->zz_offset = __zzip_get64(block->z_offset); - item->zz_diskstart = __zzip_get32(block->z_diskstart); + item->zz_usize = ZZIP_GET64(block->z_usize); + item->zz_csize = ZZIP_GET64(block->z_csize); + item->zz_offset = ZZIP_GET64(block->z_offset); + item->zz_diskstart = ZZIP_GET32(block->z_diskstart); } } /* NOTE: ++++++ zziplib-CVE-2017-5975.patch ++++++ Index: zziplib-0.13.62/zzip/memdisk.c =================================================================== --- zziplib-0.13.62.orig/zzip/memdisk.c +++ zziplib-0.13.62/zzip/memdisk.c @@ -173,6 +173,8 @@ zzip_mem_entry_new(ZZIP_DISK * disk, ZZI return 0; /* errno=ENOMEM; */ ___ struct zzip_file_header *header = zzip_disk_entry_to_file_header(disk, entry); + if (!header) + { free(item); return 0; } /* there is a number of duplicated information in the file header * or the disk entry block. Theoretically some part may be missing * that exists in the other, ... but we will prefer the disk entry. Index: zziplib-0.13.62/zzip/mmapped.c =================================================================== --- zziplib-0.13.62.orig/zzip/mmapped.c +++ zziplib-0.13.62/zzip/mmapped.c @@ -289,6 +289,8 @@ zzip_disk_entry_to_file_header(ZZIP_DISK (disk->buffer + zzip_disk_entry_fileoffset(entry)); if (disk->buffer > file_header || file_header >= disk->endbuf) return 0; + if (ZZIP_GET32(file_header) != ZZIP_FILE_HEADER_MAGIC) + return 0; return (struct zzip_file_header *) file_header; } ++++++ zziplib-CVE-2017-5976.patch ++++++ Index: zziplib-0.13.62/zzip/memdisk.c =================================================================== --- zziplib-0.13.62.orig/zzip/memdisk.c +++ zziplib-0.13.62/zzip/memdisk.c @@ -201,6 +201,7 @@ zzip_mem_entry_new(ZZIP_DISK * disk, ZZI { void *mem = malloc(ext1 + 2); item->zz_ext[1] = mem; + item->zz_extlen[1] = ext1 + 2; memcpy(mem, ptr1, ext1); ((char *) (mem))[ext1 + 0] = 0; ((char *) (mem))[ext1 + 1] = 0; @@ -209,6 +210,7 @@ zzip_mem_entry_new(ZZIP_DISK * disk, ZZI { void *mem = malloc(ext2 + 2); item->zz_ext[2] = mem; + item->zz_extlen[2] = ext2 + 2; memcpy(mem, ptr2, ext2); ((char *) (mem))[ext2 + 0] = 0; ((char *) (mem))[ext2 + 1] = 0; @@ -245,8 +247,10 @@ zzip_mem_entry_extra_block(ZZIP_MEM_ENTR while (1) { ZZIP_EXTRA_BLOCK *ext = entry->zz_ext[i]; - if (ext) + if (ext && (entry->zz_extlen[i] >= zzip_extra_block_headerlength)) { + char *endblock = (char *)ext + entry->zz_extlen[i]; + while (*(short *) (ext->z_datatype)) { if (datatype == zzip_extra_block_get_datatype(ext)) @@ -257,6 +261,10 @@ zzip_mem_entry_extra_block(ZZIP_MEM_ENTR e += zzip_extra_block_headerlength; e += zzip_extra_block_get_datasize(ext); ext = (void *) e; + if (e >= endblock) + { + break; + } ____; } } Index: zziplib-0.13.62/zzip/memdisk.h =================================================================== --- zziplib-0.13.62.orig/zzip/memdisk.h +++ zziplib-0.13.62/zzip/memdisk.h @@ -66,6 +66,7 @@ struct _zzip_mem_entry { int zz_filetype; /* (from "z_filetype") */ char* zz_comment; /* zero-terminated (from "comment") */ ZZIP_EXTRA_BLOCK* zz_ext[3]; /* terminated by null in z_datatype */ + int zz_extlen[3]; /* length of zz_ext[i] in bytes */ }; /* the extra blocks are NOT converted */ #define _zzip_mem_disk_findfirst(_d_) ((_d_)->list) ++++++ zziplib-CVE-2017-5978.patch ++++++ Index: zziplib-0.13.62/zzip/memdisk.c =================================================================== --- zziplib-0.13.62.orig/zzip/memdisk.c +++ zziplib-0.13.62/zzip/memdisk.c @@ -180,7 +180,7 @@ zzip_mem_entry_new(ZZIP_DISK * disk, ZZI * that exists in the other, ... but we will prefer the disk entry. */ item->zz_comment = zzip_disk_entry_strdup_comment(disk, entry); - item->zz_name = zzip_disk_entry_strdup_name(disk, entry); + item->zz_name = zzip_disk_entry_strdup_name(disk, entry) ?: strdup(""); item->zz_data = zzip_file_header_to_data(header); item->zz_flags = zzip_disk_entry_get_flags(entry); item->zz_compr = zzip_disk_entry_get_compr(entry); @@ -197,7 +197,7 @@ zzip_mem_entry_new(ZZIP_DISK * disk, ZZI int /* */ ext2 = zzip_file_header_get_extras(header); char *_zzip_restrict ptr2 = zzip_file_header_to_extras(header); - if (ext1) + if (ext1 && ((ptr1 + ext1) < disk->endbuf)) { void *mem = malloc(ext1 + 2); item->zz_ext[1] = mem; @@ -206,7 +206,7 @@ zzip_mem_entry_new(ZZIP_DISK * disk, ZZI ((char *) (mem))[ext1 + 0] = 0; ((char *) (mem))[ext1 + 1] = 0; } - if (ext2) + if (ext2 && ((ptr2 + ext2) < disk->endbuf)) { void *mem = malloc(ext2 + 2); item->zz_ext[2] = mem; ++++++ zziplib-CVE-2017-5979.patch ++++++ Index: zziplib-0.13.62/zzip/fseeko.c =================================================================== --- zziplib-0.13.62.orig/zzip/fseeko.c +++ zziplib-0.13.62/zzip/fseeko.c @@ -255,7 +255,7 @@ zzip_entry_findfirst(FILE * disk) return 0; /* we read out chunks of 8 KiB in the hope to match disk granularity */ ___ zzip_off_t pagesize = PAGESIZE; /* getpagesize() */ - ___ ZZIP_ENTRY *entry = malloc(sizeof(*entry)); + ___ ZZIP_ENTRY *entry = calloc(1, sizeof(*entry)); if (! entry) return 0; ___ unsigned char *buffer = malloc(pagesize); ++++++ zziplib-CVE-2017-5981.patch ++++++ Index: zziplib-0.13.62/zzip/fseeko.c =================================================================== --- zziplib-0.13.62.orig/zzip/fseeko.c +++ zziplib-0.13.62/zzip/fseeko.c @@ -311,7 +311,8 @@ zzip_entry_findfirst(FILE * disk) } else continue; - assert(0 <= root && root < mapsize); + if (root < 0 || root >= mapsize) + goto error; if (fseeko(disk, root, SEEK_SET) == -1) goto error; if (fread(disk_(entry), 1, sizeof(*disk_(entry)), disk) ++++++ zziplib-unzipcat-NULL-name.patch ++++++ Index: zziplib-0.13.62/bins/unzzipcat.c =================================================================== --- zziplib-0.13.62.orig/bins/unzzipcat.c +++ zziplib-0.13.62/bins/unzzipcat.c @@ -91,8 +91,11 @@ main (int argc, char ** argv) for (; entry ; entry = zzip_disk_findnext(disk, entry)) { char* name = zzip_disk_entry_strdup_name (disk, entry); - printf ("%s\n", name); - free (name); + if (name) + { + printf ("%s\n", name); + free (name); + } } return 0; } @@ -112,10 +115,13 @@ main (int argc, char ** argv) for (; entry ; entry = zzip_disk_findnext(disk, entry)) { char* name = zzip_disk_entry_strdup_name (disk, entry); - if (! fnmatch (argv[argn], name, - FNM_NOESCAPE|FNM_PATHNAME|FNM_PERIOD)) - zzip_disk_cat_file (disk, name, stdout); - free (name); + if (name) + { + if (! fnmatch (argv[argn], name, + FNM_NOESCAPE|FNM_PATHNAME|FNM_PERIOD)) + zzip_disk_cat_file (disk, name, stdout); + free (name); + } } } return 0; Index: zziplib-0.13.62/zzip/fseeko.c =================================================================== --- zziplib-0.13.62.orig/zzip/fseeko.c +++ zziplib-0.13.62/zzip/fseeko.c @@ -300,7 +300,8 @@ zzip_entry_findfirst(FILE * disk) * central directory was written directly before : */ root = mapoffs - rootsize; } - } else if (zzip_disk64_trailer_check_magic(p)) + } else if ((p + sizeof(struct zzip_disk64_trailer)) <= (buffer + mapsize) + && zzip_disk64_trailer_check_magic(p)) { struct zzip_disk64_trailer *trailer = (struct zzip_disk64_trailer *) p;

1 0

commit snapper for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package snapper for openSUSE:Factory checked in at 2017-03-31 15:04:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/snapper (Old) and /work/SRC/openSUSE:Factory/.snapper.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "snapper" Fri Mar 31 15:04:19 2017 rev:92 rq:482180 version:0.4.4 Changes: -------- --- /work/SRC/openSUSE:Factory/snapper/snapper.changes 2017-02-07 11:58:57.383954417 +0100 +++ /work/SRC/openSUSE:Factory/.snapper.new/snapper.changes 2017-03-31 15:04:20.704005161 +0200 @@ -1,0 +2,7 @@ +Wed Mar 22 16:47:56 CET 2017 - aschnell(a)suse.com + +- remove read-only mount option for new fstab entry in mksubvolume + (bsc#1030257) +- version 0.4.4 + +------------------------------------------------------------------- Old: ---- snapper-0.4.3.tar.bz2 New: ---- snapper-0.4.4.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ snapper.spec ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:21.851842892 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:21.851842892 +0200 @@ -17,12 +17,18 @@ Name: snapper -Version: 0.4.3 +Version: 0.4.4 Release: 0 BuildRoot: %{_tmppath}/%{name}-%{version}-build Source: snapper-%{version}.tar.bz2 Prefix: /usr +%if 0%{?suse_version} > 1325 +BuildRequires: libboost_system-devel +BuildRequires: libboost_test-devel +BuildRequires: libboost_thread-devel +%else BuildRequires: boost-devel +%endif BuildRequires: e2fsprogs-devel BuildRequires: gcc-c++ BuildRequires: libacl-devel @@ -188,7 +194,11 @@ /sbin/ldconfig %package -n libsnapper-devel +%if 0%{?suse_version} > 1325 +Requires: libboost_headers-devel +%else Requires: boost-devel +%endif Requires: gcc-c++ Requires: libacl-devel Requires: libsnapper4 = %version ++++++ debian.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/debian/rules new/debian/rules --- old/debian/rules 2017-01-13 19:37:56.822678000 +0100 +++ new/debian/rules 2017-02-28 18:12:18.607366317 +0100 @@ -21,3 +21,5 @@ override_dh_auto_install: dh_auto_install install -D -m 644 data/sysconfig.snapper $$(pwd)/debian/tmp/etc/sysconfig/snapper + mv $$(pwd)/debian/tmp/etc/cron.hourly/suse.de-snapper $$(pwd)/debian/tmp/etc/cron.hourly/snapper + mv $$(pwd)/debian/tmp/etc/cron.daily/suse.de-snapper $$(pwd)/debian/tmp/etc/cron.daily/snapper diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/debian/snapper.install new/debian/snapper.install --- old/debian/snapper.install 2017-01-13 19:37:56.822678000 +0100 +++ new/debian/snapper.install 2017-02-28 18:12:18.607366317 +0100 @@ -1,5 +1,5 @@ -etc/cron.daily/suse.de-snapper etc/cron.daily/snapper -etc/cron.hourly/suse.de-snapper etc/cron.hourly/snapper +etc/cron.daily/snapper +etc/cron.hourly/snapper etc/dbus-1/system.d/org.opensuse.Snapper.conf etc/logrotate.d/snapper usr/bin/snapper diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/debian/snapper.preinst new/debian/snapper.preinst --- old/debian/snapper.preinst 1970-01-01 01:00:00.000000000 +0100 +++ new/debian/snapper.preinst 2017-03-09 15:07:17.379493398 +0100 @@ -0,0 +1,35 @@ +#!/bin/sh +set -e + +action=$1 +version=$2 + +# This is a cleanup script for removing the fallout of bug +# https://github.com/openSUSE/snapper/issues/328 +# +# Normally the /etc/cron.daily/snapper item should be a file, +# but due to that bug it was a directory for a while. +# +# We need to handle upgrading from the broken package specifically +# and move the cron files to the correct location. +# +# TODO: This script can be removed after some time, it is just needed +# to overcome the temporary upgrade issue. The following package upgrades +# will not need this. + +if [ "$action" = upgrade ]; then + # move /etc/cron.daily/snapper/suse.de-snapper to the correct location + if [ -e /etc/cron.daily/snapper/suse.de-snapper ]; then + mv /etc/cron.daily/snapper/suse.de-snapper /etc/cron.daily/snapper.cron + rm -rf /etc/cron.daily/snapper + mv /etc/cron.daily/snapper.cron /etc/cron.daily/snapper + fi + # move /etc/cron.hourly/snapper/suse.de-snapper to the correct location + if [ -e /etc/cron.hourly/snapper/suse.de-snapper ]; then + mv /etc/cron.hourly/snapper/suse.de-snapper /etc/cron.hourly/snapper.cron + rm -rf /etc/cron.hourly/snapper + mv /etc/cron.hourly/snapper.cron /etc/cron.hourly/snapper + fi +fi + +exit 0 ++++++ snapper-0.4.3.tar.bz2 -> snapper-0.4.4.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/snapper-0.4.3/VERSION new/snapper-0.4.4/VERSION --- old/snapper-0.4.3/VERSION 2017-02-03 13:42:08.000000000 +0100 +++ new/snapper-0.4.4/VERSION 2017-03-23 11:37:14.000000000 +0100 @@ -1 +1 @@ -0.4.3 +0.4.4 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/snapper-0.4.3/client/mksubvolume.cc new/snapper-0.4.4/client/mksubvolume.cc --- old/snapper-0.4.3/client/mksubvolume.cc 2016-01-18 11:03:24.000000000 +0100 +++ new/snapper-0.4.4/client/mksubvolume.cc 2017-03-23 11:37:14.000000000 +0100 @@ -1,5 +1,5 @@ /* - * Copyright (c) [2015] SUSE LLC + * Copyright (c) [2015-2017] SUSE LLC * * All Rights Reserved. * @@ -63,7 +63,7 @@ if (!subvol_option.empty()) mnt_context_set_options(cxt, ("subvol=" + subvol_option).c_str()); else - mnt_context_set_options(cxt, "subvolid=5"); // 5 is the btrfs initial top-level subvolume + mnt_context_set_options(cxt, "subvolid=5"); // 5 is the btrfs top-level subvolume int ret = mnt_context_mount(cxt); if (ret != 0) @@ -139,6 +139,7 @@ char* options = mnt_fs_strdup_options(x); mnt_optstr_remove_option(&options, "defaults"); + mnt_optstr_remove_option(&options, "ro"); mnt_optstr_set_option(&options, "subvol", full_subvol_option.c_str()); mnt_fs_set_options(x, options); free(options); @@ -202,7 +203,7 @@ bool is_subvol_mount(const string& fs_options) { - list<string> tmp1; + vector<string> tmp1; boost::split(tmp1, fs_options, boost::is_any_of(","), boost::token_compress_on); for (const string& tmp2 : tmp1) { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/snapper-0.4.3/config.guess new/snapper-0.4.4/config.guess --- old/snapper-0.4.3/config.guess 2017-02-06 15:58:30.000000000 +0100 +++ new/snapper-0.4.4/config.guess 2017-03-23 11:38:33.000000000 +0100 @@ -1013,7 +1013,7 @@ echo powerpcle-${VENDOR}-linux-${LIBC} exit ;; s390:Linux:*:* | s390x:Linux:*:*) - echo ${UNAME_MACHINE}-ibm-linux-${LIBC} + echo ${UNAME_MACHINE}-${VENDOR}-linux-${LIBC} exit ;; sh64*:Linux:*:*) echo ${UNAME_MACHINE}-${VENDOR}-linux-${LIBC} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/snapper-0.4.3/config.sub new/snapper-0.4.4/config.sub --- old/snapper-0.4.3/config.sub 2017-02-06 15:58:30.000000000 +0100 +++ new/snapper-0.4.4/config.sub 2017-03-23 11:38:33.000000000 +0100 @@ -1058,12 +1058,18 @@ rtpc | rtpc-*) basic_machine=romp-ibm ;; - s390 | s390-*) + s390) basic_machine=s390-ibm ;; - s390x | s390x-*) + s390-*) + basic_machine=s390-`echo $basic_machine | sed 's/^[^-]*-//'` + ;; + s390x) basic_machine=s390x-ibm ;; + s390x-*) + basic_machine=s390x-`echo $basic_machine | sed 's/^[^-]*-//'` + ;; sa29200) basic_machine=a29k-amd os=-udi diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/snapper-0.4.3/doc/snapper.xml.in new/snapper-0.4.4/doc/snapper.xml.in --- old/snapper-0.4.3/doc/snapper.xml.in 2016-12-16 13:22:14.000000000 +0100 +++ new/snapper-0.4.4/doc/snapper.xml.in 2017-03-14 19:02:16.000000000 +0100 @@ -577,7 +577,7 @@ </listitem> <listitem> <para>With a number, a first read-only snapshot of the current - system in created. A second read-write snapshot is created of + system is created. A second read-write snapshot is created of <replaceable>number</replaceable>. The system is set to boot from the second snapshot.</para> </listitem> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/snapper-0.4.3/snapper.spec.in new/snapper-0.4.4/snapper.spec.in --- old/snapper-0.4.3/snapper.spec.in 2017-02-02 15:07:10.000000000 +0100 +++ new/snapper-0.4.4/snapper.spec.in 2017-02-28 10:57:11.000000000 +0100 @@ -22,7 +22,13 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-build Source: snapper-%{version}.tar.bz2 Prefix: /usr +%if 0%{?suse_version} > 1325 +BuildRequires: libboost_system-devel +BuildRequires: libboost_thread-devel +BuildRequires: libboost_test-devel +%else BuildRequires: boost-devel +%endif BuildRequires: gcc-c++ BuildRequires: libacl-devel BuildRequires: libtool @@ -188,7 +194,11 @@ /sbin/ldconfig %package -n libsnapper-devel +%if 0%{?suse_version} > 1325 +Requires: libboost_headers-devel +%else Requires: boost-devel +%endif Requires: gcc-c++ Requires: libacl-devel Requires: libsnapper@LIBVERSION_MAJOR@ = %version ++++++ snapper-Debian_7.0.dsc ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:22.307778436 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:22.307778436 +0200 @@ -1,6 +1,6 @@ Format: 1.0 Source: snapper -Version: 0.4.3 +Version: 0.4.4 Binary: snapper Maintainer: Arvin Schnell <aschnell(a)suse.com> Architecture: any @@ -11,4 +11,4 @@ # 423a20ae6e882d44e65a4eff97f2269f 630905 snapper-0.2.8.tar.gz # Files: -cbb00dd1a74a65b05e41851a111173f9 571049 snapper-0.4.3.tar.bz2 +86ed13ea87432c1b66763e6f30b4b8eb 571143 snapper-0.4.4.tar.bz2 ++++++ snapper-Debian_8.0.dsc ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:22.327775610 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:22.327775610 +0200 @@ -1,6 +1,6 @@ Format: 1.0 Source: snapper -Version: 0.4.3 +Version: 0.4.4 Binary: snapper Maintainer: Arvin Schnell <aschnell(a)suse.com> Architecture: any @@ -11,4 +11,4 @@ # 423a20ae6e882d44e65a4eff97f2269f 630905 snapper-0.2.8.tar.gz # Files: -cbb00dd1a74a65b05e41851a111173f9 571049 snapper-0.4.3.tar.bz2 +86ed13ea87432c1b66763e6f30b4b8eb 571143 snapper-0.4.4.tar.bz2 ++++++ snapper-xUbuntu_14.04.dsc ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:22.351772217 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:22.355771651 +0200 @@ -1,6 +1,6 @@ Format: 1.0 Source: snapper -Version: 0.4.3 +Version: 0.4.4 Binary: snapper Maintainer: Arvin Schnell <aschnell(a)suse.com> Architecture: any @@ -11,4 +11,4 @@ # 423a20ae6e882d44e65a4eff97f2269f 630905 snapper-0.2.8.tar.gz # Files: -cbb00dd1a74a65b05e41851a111173f9 571049 snapper-0.4.3.tar.bz2 +86ed13ea87432c1b66763e6f30b4b8eb 571143 snapper-0.4.4.tar.bz2 ++++++ snapper-xUbuntu_14.10.dsc ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:22.375768825 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:22.379768259 +0200 @@ -1,6 +1,6 @@ Format: 1.0 Source: snapper -Version: 0.4.3 +Version: 0.4.4 Binary: snapper Maintainer: Arvin Schnell <aschnell(a)suse.com> Architecture: any @@ -11,4 +11,4 @@ # 423a20ae6e882d44e65a4eff97f2269f 630905 snapper-0.2.8.tar.gz # Files: -cbb00dd1a74a65b05e41851a111173f9 571049 snapper-0.4.3.tar.bz2 +86ed13ea87432c1b66763e6f30b4b8eb 571143 snapper-0.4.4.tar.bz2 ++++++ snapper-xUbuntu_15.04.dsc ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:22.399765432 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:22.399765432 +0200 @@ -1,6 +1,6 @@ Format: 1.0 Source: snapper -Version: 0.4.3 +Version: 0.4.4 Binary: snapper Maintainer: Arvin Schnell <aschnell(a)suse.com> Architecture: any @@ -11,4 +11,4 @@ # 423a20ae6e882d44e65a4eff97f2269f 630905 snapper-0.2.8.tar.gz # Files: -cbb00dd1a74a65b05e41851a111173f9 571049 snapper-0.4.3.tar.bz2 +86ed13ea87432c1b66763e6f30b4b8eb 571143 snapper-0.4.4.tar.bz2 ++++++ snapper-xUbuntu_15.10.dsc ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:22.423762040 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:22.423762040 +0200 @@ -1,6 +1,6 @@ Format: 1.0 Source: snapper -Version: 0.4.3 +Version: 0.4.4 Binary: snapper Maintainer: Arvin Schnell <aschnell(a)suse.com> Architecture: any @@ -11,4 +11,4 @@ # 423a20ae6e882d44e65a4eff97f2269f 630905 snapper-0.2.8.tar.gz # Files: -cbb00dd1a74a65b05e41851a111173f9 571049 snapper-0.4.3.tar.bz2 +86ed13ea87432c1b66763e6f30b4b8eb 571143 snapper-0.4.4.tar.bz2 ++++++ snapper-xUbuntu_16.04.dsc ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:22.447758648 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:22.447758648 +0200 @@ -1,6 +1,6 @@ Format: 1.0 Source: snapper -Version: 0.4.3 +Version: 0.4.4 Binary: snapper Maintainer: Arvin Schnell <aschnell(a)suse.com> Architecture: any @@ -11,4 +11,4 @@ # 423a20ae6e882d44e65a4eff97f2269f 630905 snapper-0.2.8.tar.gz # Files: -cbb00dd1a74a65b05e41851a111173f9 571049 snapper-0.4.3.tar.bz2 +86ed13ea87432c1b66763e6f30b4b8eb 571143 snapper-0.4.4.tar.bz2 ++++++ snapper-xUbuntu_16.10.dsc ++++++ --- /var/tmp/diff_new_pack.wSLR6z/_old 2017-03-31 15:04:22.467755820 +0200 +++ /var/tmp/diff_new_pack.wSLR6z/_new 2017-03-31 15:04:22.471755255 +0200 @@ -1,6 +1,6 @@ Format: 1.0 Source: snapper -Version: 0.4.3 +Version: 0.4.4 Binary: snapper Maintainer: Arvin Schnell <aschnell(a)suse.com> Architecture: any @@ -11,4 +11,4 @@ # 423a20ae6e882d44e65a4eff97f2269f 630905 snapper-0.2.8.tar.gz # Files: -cbb00dd1a74a65b05e41851a111173f9 571049 snapper-0.4.3.tar.bz2 +86ed13ea87432c1b66763e6f30b4b8eb 571143 snapper-0.4.4.tar.bz2

1 0

commit gsoap for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package gsoap for openSUSE:Factory checked in at 2017-03-31 15:04:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gsoap (Old) and /work/SRC/openSUSE:Factory/.gsoap.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gsoap" Fri Mar 31 15:04:07 2017 rev:28 rq:482176 version:2.8.44 Changes: -------- --- /work/SRC/openSUSE:Factory/gsoap/gsoap.changes 2017-02-20 14:27:08.799264753 +0100 +++ /work/SRC/openSUSE:Factory/.gsoap.new/gsoap.changes 2017-03-31 15:04:10.137498945 +0200 @@ -1,0 +2,9 @@ +Wed Mar 15 16:11:44 UTC 2017 - jengelh(a)inai.de + +- Update to new upstream release 2.8.44 + * Fixed WS-Discovery `soap_wsdd_listen` memory cleanup on timeouts. + * Fixed `soap->os` saved message string NUL termination (a + problem in C code, not in C++). +- Add gsoap-sslverify.diff + +------------------------------------------------------------------- Old: ---- gsoap-2.8.43.tar.xz New: ---- gsoap-2.8.44.tar.xz gsoap-sslverify.diff ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gsoap.spec ++++++ --- /var/tmp/diff_new_pack.YM21Ph/_old 2017-03-31 15:04:11.329330456 +0200 +++ /var/tmp/diff_new_pack.YM21Ph/_new 2017-03-31 15:04:11.337329325 +0200 @@ -17,8 +17,8 @@ Name: gsoap -%define lname libgsoap-2_8_43 -Version: 2.8.43 +%define lname libgsoap-2_8_44 +Version: 2.8.44 Release: 0 Summary: Toolkit for SOAP/REST-based C/C++ server and client web service applications License: SUSE-GPL-2.0+-with-openssl-exception @@ -29,6 +29,7 @@ Source2: sanitize_source.sh Patch1: gsoap-automake1_13.diff Patch2: gsoap-01-sharedlibs.diff +Patch3: gsoap-sslverify.diff BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: autoconf BuildRequires: automake @@ -84,7 +85,7 @@ %prep %setup -q cmp gsoap/stdsoap2.cpp gsoap/stdsoap2.c -%patch -P 1 -P 2 -p1 +%patch -P 1 -P 2 -P 3 -p1 ln -fs stdsoap2.cpp gsoap/stdsoap2.c %build @@ -96,8 +97,6 @@ # Also needed because Makefile.am and configure.ac are touched. autoreconf -fi -export CFLAGS="-O0 -ggdb3" -export CXXFLAGS=$CFLAGS %configure --enable-ipv6 --disable-static pushd gsoap/src/ # build prerequisites for parallel build first @@ -111,6 +110,7 @@ rm -f "$b/%_libdir"/*.la mkdir -p "$b/%_defaultdocdir" cp -a gsoap/doc "$b/%_defaultdocdir/%name" +find "$b" -type f -name "*inconsolata*" -exec chmod a-x "{}" "+" %if 0%{?fdupes:1} %fdupes %buildroot/%_prefix %endif ++++++ gsoap-2.8.43.tar.xz -> gsoap-2.8.44.tar.xz ++++++ /work/SRC/openSUSE:Factory/gsoap/gsoap-2.8.43.tar.xz /work/SRC/openSUSE:Factory/.gsoap.new/gsoap-2.8.44.tar.xz differ: char 27, line 1 ++++++ gsoap-sslverify.diff ++++++ From: Jan Engelhardt <jengelh(a)inai.de> References: https://sourceforge.net/p/gsoap2/patches/168/ When verification of a certificate has failed, do not just leave soap->msgbuf at the default openssl message ("certificate validation failed" or so), but append the detailed error message from the verification stage as well. --- gsoap/stdsoap2.cpp | 7 +++++++ 1 file changed, 7 insertions(+) Index: gsoap-2.8.43/gsoap/stdsoap2.cpp =================================================================== --- gsoap-2.8.43.orig/gsoap/stdsoap2.cpp +++ gsoap-2.8.43/gsoap/stdsoap2.cpp @@ -3672,6 +3672,13 @@ soap_ssl_error(struct soap *soap, int re while ((r = ERR_get_error())) { size_t l = strlen(soap->msgbuf); ERR_error_string_n(r, soap->msgbuf + l, sizeof(soap->msgbuf) - l); + l = strlen(soap->msgbuf); + if (l + 1 < sizeof(soap->msgbuf)) + soap->msgbuf[l++] = '\n'; + if (ERR_GET_REASON(r) == SSL_R_CERTIFICATE_VERIFY_FAILED && l <= sizeof(soap->msgbuf)) { + const char *reason = X509_verify_cert_error_string(SSL_get_verify_result(soap->ssl)); + (SOAP_SNPRINTF(soap->msgbuf + l, sizeof(soap->msgbuf) - l, strlen(reason)), "%s", reason); + } } } else ++++++ sanitize_source.sh ++++++ --- /var/tmp/diff_new_pack.YM21Ph/_old 2017-03-31 15:04:11.409319148 +0200 +++ /var/tmp/diff_new_pack.YM21Ph/_new 2017-03-31 15:04:11.409319148 +0200 @@ -13,7 +13,7 @@ exit 1; fi; -version="2.8.43" +version="2.8.44" shortver="2.8" # agh... if [ ! -e "gsoap_$version.zip" ]; then wget -c "http://downloads.sf.net/gsoap2/gsoap_$version.zip"

1 0

commit perl-Config-Crontab for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package perl-Config-Crontab for openSUSE:Factory checked in at 2017-03-31 15:03:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/perl-Config-Crontab (Old) and /work/SRC/openSUSE:Factory/.perl-Config-Crontab.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "perl-Config-Crontab" Fri Mar 31 15:03:36 2017 rev:26 rq:482156 version:1.44 Changes: -------- --- /work/SRC/openSUSE:Factory/perl-Config-Crontab/perl-Config-Crontab.changes 2017-03-03 14:35:17.424041997 +0100 +++ /work/SRC/openSUSE:Factory/.perl-Config-Crontab.new/perl-Config-Crontab.changes 2017-03-31 15:03:44.589110696 +0200 @@ -1,0 +2,14 @@ +Tue Mar 21 06:16:41 UTC 2017 - coolo(a)suse.com + +- updated to 1.44 + see /usr/share/doc/packages/perl-Config-Crontab/Changes + + Release 1.44 + ---------------------------- + commit a81b708e1b5b023b6fc70ec7b68ce4cfcd1d5628 + Author: Scott Wiersdorf <scott(a)perlcode.org> + Date: Mon Mar 20 14:24:08 2017 -0600 + + skip crontab writes unless explicitly asked for + +------------------------------------------------------------------- Old: ---- Config-Crontab-1.43.tar.gz New: ---- Config-Crontab-1.44.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ perl-Config-Crontab.spec ++++++ --- /var/tmp/diff_new_pack.9MLBVn/_old 2017-03-31 15:03:47.320724531 +0200 +++ /var/tmp/diff_new_pack.9MLBVn/_new 2017-03-31 15:03:47.324723966 +0200 @@ -17,7 +17,7 @@ Name: perl-Config-Crontab -Version: 1.43 +Version: 1.44 Release: 0 %define cpan_name Config-Crontab Summary: Read/Write Vixie compatible crontab(5) files ++++++ Config-Crontab-1.43.tar.gz -> Config-Crontab-1.44.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Config-Crontab-1.43/Changes new/Config-Crontab-1.44/Changes --- old/Config-Crontab-1.43/Changes 2017-02-27 18:43:33.000000000 +0100 +++ new/Config-Crontab-1.44/Changes 2017-03-20 21:24:29.000000000 +0100 @@ -1,5 +1,13 @@ Revision history for Perl extension Config::Crontab. +Release 1.44 +---------------------------- +commit a81b708e1b5b023b6fc70ec7b68ce4cfcd1d5628 +Author: Scott Wiersdorf <scott(a)perlcode.org> +Date: Mon Mar 20 14:24:08 2017 -0600 + + skip crontab writes unless explicitly asked for + Release 1.43 ---------------------------- commit 2fedca514e2826bae41960295af20dc718db3256 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Config-Crontab-1.43/Crontab.pm new/Config-Crontab-1.44/Crontab.pm --- old/Config-Crontab-1.43/Crontab.pm 2017-02-27 18:41:59.000000000 +0100 +++ new/Config-Crontab-1.44/Crontab.pm 2017-03-20 21:23:22.000000000 +0100 @@ -39,7 +39,7 @@ use Fcntl; use File::Temp qw(:POSIX); -our $VERSION = '1.43'; +our $VERSION = '1.44'; sub init { my $self = shift; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Config-Crontab-1.43/META.json new/Config-Crontab-1.44/META.json --- old/Config-Crontab-1.43/META.json 2017-02-27 18:45:49.000000000 +0100 +++ new/Config-Crontab-1.44/META.json 2017-03-20 21:25:04.000000000 +0100 @@ -4,7 +4,7 @@ "Scott Wiersdorf <scott(a)perlcode.org>" ], "dynamic_config" : 1, - "generated_by" : "ExtUtils::MakeMaker version 7.1002, CPAN::Meta::Converter version 2.150005", + "generated_by" : "ExtUtils::MakeMaker version 7.14, CPAN::Meta::Converter version 2.150001", "license" : [ "unknown" ], @@ -35,6 +35,5 @@ } }, "release_status" : "stable", - "version" : "1.43", - "x_serialization_backend" : "JSON::PP version 2.27300_01" + "version" : "1.44" } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Config-Crontab-1.43/META.yml new/Config-Crontab-1.44/META.yml --- old/Config-Crontab-1.43/META.yml 2017-02-27 18:45:42.000000000 +0100 +++ new/Config-Crontab-1.44/META.yml 2017-03-20 21:25:04.000000000 +0100 @@ -7,7 +7,7 @@ configure_requires: ExtUtils::MakeMaker: '0' dynamic_config: 1 -generated_by: 'ExtUtils::MakeMaker version 7.1002, CPAN::Meta::Converter version 2.150005' +generated_by: 'ExtUtils::MakeMaker version 7.14, CPAN::Meta::Converter version 2.150001' license: unknown meta-spec: url: http://module-build.sourceforge.net/META-spec-v1.4.html @@ -18,5 +18,4 @@ - t - inc requires: {} -version: '1.43' -x_serialization_backend: 'CPAN::Meta::YAML version 0.018' +version: '1.44' diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/Config-Crontab-1.43/t/07_write.t new/Config-Crontab-1.44/t/07_write.t --- old/Config-Crontab-1.43/t/07_write.t 2017-02-27 18:40:02.000000000 +0100 +++ new/Config-Crontab-1.44/t/07_write.t 2017-03-20 21:19:31.000000000 +0100 @@ -258,18 +258,22 @@ eval { $ct = new Config::Crontab( -file => ".tmp_foo.$$", -strict => 0 ) }; ok( !$@, "unstrict clean" ); -undef $ct; -$ct = new Config::Crontab; -$block = new Config::Crontab::Block; -$block->last( new Config::Crontab::Event( -data => '5 * * * * /bin/true' ) ); -$ct->last($block); -ok($ct->write, "crontab written"); +SKIP: { + skip "WRITE_CRONTAB not set", 2 unless $ENV{WRITE_CRONTAB}; -undef $ct; -$ct = new Config::Crontab; -$ct->read; -like($ct->dump, qr(^5.*/bin/true$), "crontab written"); -$ct->remove_tab; + undef $ct; + $ct = new Config::Crontab; + $block = new Config::Crontab::Block; + $block->last( new Config::Crontab::Event( -data => '5 * * * * /bin/true' ) ); + $ct->last($block); + ok($ct->write, "crontab written"); + + undef $ct; + $ct = new Config::Crontab; + $ct->read; + like($ct->dump, qr(^5.*/bin/true$), "crontab written"); + $ct->remove_tab; +} ## we don't test non-squeeze mode because it doesn't really work

1 0

commit mozilla-nss for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package mozilla-nss for openSUSE:Factory checked in at 2017-03-31 15:02:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mozilla-nss (Old) and /work/SRC/openSUSE:Factory/.mozilla-nss.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "mozilla-nss" Fri Mar 31 15:02:07 2017 rev:124 rq:482051 version:3.29.3 Changes: -------- --- /work/SRC/openSUSE:Factory/mozilla-nss/mozilla-nss.changes 2017-03-21 22:44:21.466817939 +0100 +++ /work/SRC/openSUSE:Factory/.mozilla-nss.new/mozilla-nss.changes 2017-03-31 15:02:08.466699226 +0200 @@ -1,0 +2,9 @@ +Thu Mar 16 20:27:50 UTC 2017 - wr(a)rosenauer.org + +- update to NSS 3.29.3 + * enables TLS 1.3 by default +- TLS 1.3 was already enabled in 3.28.x builds for openSUSE. + This build option was removed. +- required for Firefox 53 + +------------------------------------------------------------------- Old: ---- nss-3.28.3.tar.gz New: ---- nss-3.29.3.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mozilla-nss.spec ++++++ --- /var/tmp/diff_new_pack.3QHUvL/_old 2017-03-31 15:02:10.642391659 +0200 +++ /var/tmp/diff_new_pack.3QHUvL/_new 2017-03-31 15:02:10.642391659 +0200 @@ -25,7 +25,7 @@ BuildRequires: pkg-config BuildRequires: sqlite-devel BuildRequires: zlib-devel -Version: 3.28.3 +Version: 3.29.3 Release: 0 # bug437293 %ifarch ppc64 @@ -36,8 +36,8 @@ License: MPL-2.0 Group: System/Libraries Url: http://www.mozilla.org/projects/security/pki/nss/ -Source: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_28_3_RT… -# hg clone https://hg.mozilla.org/projects/nss nss-3.28.3/nss ; cd nss-3.28.3/nss ; hg up NSS_3_28_3_RTM +Source: https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_3_29_3_RT… +# hg clone https://hg.mozilla.org/projects/nss nss-3.29.3/nss ; cd nss-3.29.3/nss ; hg up NSS_3_29_3_RTM #Source: nss-%{version}.tar.gz Source1: nss.pc.in Source3: nss-config.in @@ -200,7 +200,6 @@ export USE_64=1 %endif export NSS_USE_SYSTEM_SQLITE=1 -export NSS_ENABLE_TLS_1_3=1 #export SQLITE_LIB_NAME=nsssqlite3 MAKE_FLAGS="BUILD_OPT=1" make nss_build_all $MAKE_FLAGS ++++++ nss-3.28.3.tar.gz -> nss-3.29.3.tar.gz ++++++ /work/SRC/openSUSE:Factory/mozilla-nss/nss-3.28.3.tar.gz /work/SRC/openSUSE:Factory/.mozilla-nss.new/nss-3.29.3.tar.gz differ: char 5, line 1

1 0

commit python-mutagen for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package python-mutagen for openSUSE:Factory checked in at 2017-03-31 15:01:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-mutagen (Old) and /work/SRC/openSUSE:Factory/.python-mutagen.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-mutagen" Fri Mar 31 15:01:59 2017 rev:26 rq:482011 version:1.37 Changes: -------- --- /work/SRC/openSUSE:Factory/python-mutagen/python-mutagen.changes 2016-08-22 13:59:29.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.python-mutagen.new/python-mutagen.changes 2017-03-31 15:02:01.979616273 +0200 @@ -1,0 +2,61 @@ +Wed Mar 22 14:58:43 UTC 2017 - tbechtold(a)suse.com + +- Use files.pythonhosted.org for Source url + +------------------------------------------------------------------- +Thu Mar 16 13:14:53 UTC 2017 - alarrosa(a)suse.com + +- update to version 1.37: + * Relicense "GPLv2" → "GPLv2 or later" :bug:`291` + * DSF: add `mutagen.dsf` module for DSF (DSD Stream File) support + :pr:`283` (Boris Pruessmann) + * MP3: Add `mp3.MPEGInfo.encoder_settings` containing a guess of the encoder + settings used, for example ``"-V2"`` for LAME :bug:`66` + * ID3: add iTunes movement related frames `id3.MVIN` and `id3.MVNM` + * MP4: support ``©mvi``, ``©mvc``, ``shwm``, ``stik``, ``rtng``, ``tves``, + ``tvsn``, ``plID``, ``cnID``, ``geID``, ``atID``, ``sfID``, ``cmID``, + ``akID`` :bug:`130` +- update to version 1.36.3: + * MP3: fix error with xing frames without a frame count :bug:`292` +- Run spec file through spec-cleaner + +------------------------------------------------------------------- +Wed Jan 25 14:31:30 UTC 2017 - alarrosa(a)suse.com + +- update to version 1.36.2: + * ID3: Always write little endian utf-16 with BOM. + Fixes tests on big endian machines :pr:`289` +- update to version 1.36.1: + * Support GAE runtime :bug:`286` + * FLAC: Fix crash when loading files with zero samples :bug:`287` + * MP3: Handle broken lame tags written by older lame versions +- update to version 1.36: + * ID3: Ignore trailing empty values for v2.3 text frames :bug:`276` + * ID3: Write large APIC frames last :bug:`278` + * EasyID3: support saving as v2.3 :bug:`188` + * FLAC: Add StreamInfo.bitrate :bug:`279` + * mid3cp: Add ``--merge`` option :bug:`277` + * MP4: Allow loading files without audio tracks :bug:`272` +- update to version 1.35.1: + * Revert back to distutils :bug:`273` +- update to version 1.35: + * Tests: Require pytest + * Tools: Install .exe launchers on Windows + * setup.py: Require setuptools + * ID3: + * Fix loading files with CRM frames :bug:`239` + * Fix loading AENC, LINK, GRID frames with no payload + * Merge duplicate text frames with same key on load :bug:`172` + * Allow parsing of duplicate APIC frames :bug:`172` + * Parse utf-16 text fields with missing BOM :bug:`267` + * Increase max resyncs for the mpeg frame search :bug:`268` +- Add fix-tests-tools-names.diff. This fixes the tests to run + successfully since they try to extract the module name from the tool + name, but we changed the tools names so they can be co-installed + with the python2 version of the tools, so we have to remove the + "-3" suffix before importing the modules. +- Fix update-alternatives execution as mutagen-inspect and mutagen-pony + binaries had manpage suffixes so alternative links were not created. +- Drop fix_SynchronizedTextSpec_test_on_BE.patch (upstream included it). + +------------------------------------------------------------------- Old: ---- fix_SynchronizedTextSpec_test_on_BE.patch mutagen-1.31.tar.gz New: ---- fix-tests-tools-names.diff mutagen-1.37.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-mutagen.spec ++++++ --- /var/tmp/diff_new_pack.lihoz6/_old 2017-03-31 15:02:02.763505459 +0200 +++ /var/tmp/diff_new_pack.lihoz6/_new 2017-03-31 15:02:02.767504893 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-mutagen # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,26 +16,27 @@ # +%if 0%{?suse_version} && 0%{?suse_version} <= 1110 +%{!?python_sitelib: %global python_sitelib %(python -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} +%else +BuildArch: noarch +%endif Name: python-mutagen -Version: 1.31 +Version: 1.37 Release: 0 Summary: Python module to Handle Audio Metadata -License: GPL-2.0 +License: GPL-2.0+ Group: Development/Libraries/Python Url: https://pypi.python.org/pypi/mutagen -Source: https://pypi.python.org/packages/source/m/mutagen/mutagen-%{version}.tar.gz -Patch1: fix_SynchronizedTextSpec_test_on_BE.patch +Source: https://files.pythonhosted.org/packages/source/m/mutagen/mutagen-%{version}… +# PATCH-FIX-OPENSUSE fix-tests-tools-names.diff -- Undo the alternate-names of the tools when importing the modules so tests build successfully. +Patch0: fix-tests-tools-names.diff BuildRequires: python-devel BuildRequires: python-pytest BuildRequires: python-setuptools Requires(post): update-alternatives Requires(preun): update-alternatives BuildRoot: %{_tmppath}/%{name}-%{version}-build -%if 0%{?suse_version} && 0%{?suse_version} <= 1110 -%{!?python_sitelib: %global python_sitelib %(python -c "from distutils.sysconfig import get_python_lib; print get_python_lib()")} -%else -BuildArch: noarch -%endif %description Mutagen is a Python module to handle audio metadata. It supports FLAC, @@ -48,7 +49,7 @@ %prep %setup -q -n mutagen-%{version} -%patch1 -p1 +%patch0 -p1 # remove shebangs from library files find mutagen/ -name "*.py" -exec sed -i -e '/^#!\s\?\/usr\/bin\/$env\s$\?python$/d' {} ';' @@ -75,13 +76,13 @@ done %post -%_sbindir/update-alternatives \ +%{_sbindir}/update-alternatives \ --install %{_bindir}/mid3cp mid3cp %{_bindir}/mid3cp-%{py_ver} 30 \ --slave %{_bindir}/mid3iconv mid3iconv %{_bindir}/mid3iconv-%{py_ver} \ --slave %{_bindir}/mid3v2 mid3v2 %{_bindir}/mid3v2-%{py_ver} \ --slave %{_bindir}/moggsplit moggsplit %{_bindir}/moggsplit-%{py_ver} \ - --slave %{_bindir}/mutagen-inspect mutagen-inspect %{_bindir}/mutagen-inspect-%{py_ver}.1.gz \ - --slave %{_bindir}/mutagen-pony mutagen-pony %{_bindir}/mutagen-pony-%{py_ver}.1.gz \ + --slave %{_bindir}/mutagen-inspect mutagen-inspect %{_bindir}/mutagen-inspect-%{py_ver} \ + --slave %{_bindir}/mutagen-pony mutagen-pony %{_bindir}/mutagen-pony-%{py_ver} \ --slave %{_mandir}/man1/mid3cp.1.gz mid3cp.1.gz %{_mandir}/man1/mid3cp-%{py_ver}.1.gz \ --slave %{_mandir}/man1/mid3iconv.1.gz mid3iconv.1.gz %{_mandir}/man1/mid3iconv-%{py_ver}.1.gz \ --slave %{_mandir}/man1/mid3v2.1.gz mid3v2.1.gz %{_mandir}/man1/mid3v2-%{py_ver}.1.gz \ @@ -91,7 +92,7 @@ %preun if [ $1 -eq 0 ] ; then - %_sbindir/update-alternatives --remove mid3cp %{_bindir}/mid3cp-%{py_ver} + %{_sbindir}/update-alternatives --remove mid3cp %{_bindir}/mid3cp-%{py_ver} fi %check @@ -121,18 +122,18 @@ %ghost %{_sysconfdir}/alternatives/moggsplit %ghost %{_sysconfdir}/alternatives/mutagen-inspect %ghost %{_sysconfdir}/alternatives/mutagen-pony -%{_mandir}/man1/mid3cp.1.gz -%{_mandir}/man1/mid3iconv.1.gz -%{_mandir}/man1/mid3v2.1.gz -%{_mandir}/man1/moggsplit.1.gz -%{_mandir}/man1/mutagen-inspect.1.gz -%{_mandir}/man1/mutagen-pony.1.gz -%{_mandir}/man1/mid3cp-%{py_ver}.1.gz -%{_mandir}/man1/mid3iconv-%{py_ver}.1.gz -%{_mandir}/man1/mid3v2-%{py_ver}.1.gz -%{_mandir}/man1/moggsplit-%{py_ver}.1.gz -%{_mandir}/man1/mutagen-inspect-%{py_ver}.1.gz -%{_mandir}/man1/mutagen-pony-%{py_ver}.1.gz +%{_mandir}/man1/mid3cp.1%{ext_man} +%{_mandir}/man1/mid3iconv.1%{ext_man} +%{_mandir}/man1/mid3v2.1%{ext_man} +%{_mandir}/man1/moggsplit.1%{ext_man} +%{_mandir}/man1/mutagen-inspect.1%{ext_man} +%{_mandir}/man1/mutagen-pony.1%{ext_man} +%{_mandir}/man1/mid3cp-%{py_ver}.1%{ext_man} +%{_mandir}/man1/mid3iconv-%{py_ver}.1%{ext_man} +%{_mandir}/man1/mid3v2-%{py_ver}.1%{ext_man} +%{_mandir}/man1/moggsplit-%{py_ver}.1%{ext_man} +%{_mandir}/man1/mutagen-inspect-%{py_ver}.1%{ext_man} +%{_mandir}/man1/mutagen-pony-%{py_ver}.1%{ext_man} %ghost %{_sysconfdir}/alternatives/mid3cp.1.gz %ghost %{_sysconfdir}/alternatives/mid3iconv.1.gz %ghost %{_sysconfdir}/alternatives/mid3v2.1.gz ++++++ fix-tests-tools-names.diff ++++++ Index: mutagen-1.36.1/tests/test_tools.py =================================================================== --- mutagen-1.36.1.orig/tests/test_tools.py +++ mutagen-1.36.1/tests/test_tools.py @@ -12,7 +12,7 @@ from tests import TestCase def get_var(tool_name, entry="main"): mod = importlib.import_module( - "mutagen._tools.%s" % tool_name.replace("-", "_")) + "mutagen._tools.%s" % tool_name.replace("-", "_")[:tool_name.find('-2')]) return getattr(mod, entry) ++++++ mutagen-1.31.tar.gz -> mutagen-1.37.tar.gz ++++++ ++++ 29230 lines of diff (skipped)

1 0

commit kbd for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package kbd for openSUSE:Factory checked in at 2017-03-31 15:01:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/kbd (Old) and /work/SRC/openSUSE:Factory/.kbd.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "kbd" Fri Mar 31 15:01:29 2017 rev:81 rq:483842 version:2.0.3 Changes: -------- --- /work/SRC/openSUSE:Factory/kbd/kbd.changes 2017-02-16 16:46:33.401143275 +0100 +++ /work/SRC/openSUSE:Factory/.kbd.new/kbd.changes 2017-03-31 15:01:32.111838517 +0200 @@ -1,0 +2,7 @@ +Thu Mar 23 23:23:20 UTC 2017 - zaitor(a)opensuse.org + +- Revert dropping of kdb-legacy Requires: There are still packages + and installation flows that needs this to be present + (boo#1027379). + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ kbd.spec ++++++ --- /var/tmp/diff_new_pack.nJ9rR6/_old 2017-03-31 15:01:33.963576748 +0200 +++ /var/tmp/diff_new_pack.nJ9rR6/_new 2017-03-31 15:01:33.963576748 +0200 @@ -1,7 +1,7 @@ # # spec file for package kbd # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -20,9 +20,9 @@ Version: 2.0.3 Release: 0 Summary: Keyboard and Font Utilities +# git: git://git.altlinux.org/people/legion/packages/kbd.git License: GPL-2.0+ Group: System/Console -# git: git://git.altlinux.org/people/legion/packages/kbd.git Url: ftp://ftp.altlinux.org/pub/people/legion/kbd/ # ftp://ftp.kernel.org/pub/linux/utils/kbd/kbd-%{version}.tar.xz repack_kbd.sh Source: %{name}-%{version}-repack.tar.bz2 @@ -66,6 +66,8 @@ BuildRequires: suse-module-tools BuildRequires: xkeyboard-config BuildRequires: xz +# Temporarily require -legacy +Requires: %{name}-legacy = %{version}-%{release} Requires(post): coreutils Requires(postun): coreutils Requires(pre): %fillup_prereq

1 0

commit elfutils for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package elfutils for openSUSE:Factory checked in at 2017-03-31 15:01:24 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/elfutils (Old) and /work/SRC/openSUSE:Factory/.elfutils.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "elfutils" Fri Mar 31 15:01:24 2017 rev:56 rq:483826 version:0.168 Changes: -------- --- /work/SRC/openSUSE:Factory/elfutils/elfutils.changes 2016-12-29 22:41:15.170660977 +0100 +++ /work/SRC/openSUSE:Factory/.elfutils.new/elfutils.changes 2017-03-31 15:01:25.772734638 +0200 @@ -1,0 +2,12 @@ +Thu Mar 30 08:07:10 UTC 2017 - rguenther(a)suse.com + +- Update to version 0.168: + libelf: gelf_newehdr and gelf_newehdr now return void *. + libdw: dwarf.h corrected the DW_LANG_PLI constant name (was DW_LANG_PL1). + readelf: Add optional --symbols[=SECTION] argument to select section name. +- Includes changes from 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch + and 0001-ar-Fix-GCC7-Wformat-length-issues.patch. +- Remove elfutils-0.137-dwarf-header-check-fix.diff which is no longer + required after a debugedit fix. + +------------------------------------------------------------------- Old: ---- 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch 0001-ar-Fix-GCC7-Wformat-length-issues.patch elfutils-0.137-dwarf-header-check-fix.diff elfutils-0.167.tar.bz2 elfutils-0.167.tar.bz2.sig New: ---- elfutils-0.168.tar.bz2 elfutils-0.168.tar.bz2.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ elfutils.spec ++++++ --- /var/tmp/diff_new_pack.kTxJKY/_old 2017-03-31 15:01:26.668607993 +0200 +++ /var/tmp/diff_new_pack.kTxJKY/_new 2017-03-31 15:01:26.672607428 +0200 @@ -1,7 +1,7 @@ # # spec file for package elfutils # -# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: elfutils -Version: 0.167 +Version: 0.168 Release: 0 Summary: Higher-level library to access ELF License: SUSE-GPL-2.0-with-OSI-exception @@ -30,10 +30,7 @@ Source1: README-BEFORE-ADDING-PATCHES Source2: baselibs.conf Source3: %{name}.changes -Patch1: elfutils-0.137-dwarf-header-check-fix.diff -Patch2: disable-tests-with-ptrace.patch -Patch3: 0001-Add-GCC7-Wimplicit-fallthrough-support-fixes.patch -Patch4: 0001-ar-Fix-GCC7-Wformat-length-issues.patch +Patch1: disable-tests-with-ptrace.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: autoconf BuildRequires: automake @@ -141,13 +138,10 @@ %prep %setup -q -%patch1 -p1 %if 0%{?qemu_user_space_build} # qemu does not support ptrace -%patch2 -p1 +%patch1 -p1 %endif -%patch3 -p1 -%patch4 -p1 %build # Change DATE/TIME macros to use last change time of elfutils.changes ++++++ elfutils-0.167.tar.bz2 -> elfutils-0.168.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/elfutils/elfutils-0.167.tar.bz2 /work/SRC/openSUSE:Factory/.elfutils.new/elfutils-0.168.tar.bz2 differ: char 11, line 1

1 0

commit jasper for openSUSE:Factory
by root＠hilbert.suse.de 31 Mar '17

31 Mar '17

Hello community, here is the log from the commit of package jasper for openSUSE:Factory checked in at 2017-03-31 15:01:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/jasper (Old) and /work/SRC/openSUSE:Factory/.jasper.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "jasper" Fri Mar 31 15:01:19 2017 rev:38 rq:483773 version:1.900.14 Changes: -------- --- /work/SRC/openSUSE:Factory/jasper/jasper.changes 2017-03-18 20:49:35.542022975 +0100 +++ /work/SRC/openSUSE:Factory/.jasper.new/jasper.changes 2017-03-31 15:01:20.369498459 +0200 @@ -1,0 +2,20 @@ +Thu Mar 30 09:51:07 UTC 2017 - fstrba(a)suse.com + +- Modified patch: + * jasper-CVE-2016-9583.patch + + integrate upstream change + 99a50593254d1b53002719bbecfc946c84b23d27, which fixed a null + pointer dereferencing crash. + +------------------------------------------------------------------- +Wed Mar 22 09:30:41 UTC 2017 - fstrba(a)suse.com + +- Added patches: + * jasper-CVE-2016-9583.patch + - Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400, + CVE-2016-9583) + * jasper-CVE-2017-6850.patch + - NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) + (bsc#1021868, CVE-2017-6850) + +------------------------------------------------------------------- New: ---- jasper-CVE-2016-9583.patch jasper-CVE-2017-6850.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ jasper.spec ++++++ --- /var/tmp/diff_new_pack.CTR5x2/_old 2017-03-31 15:01:21.397353158 +0200 +++ /var/tmp/diff_new_pack.CTR5x2/_new 2017-03-31 15:01:21.397353158 +0200 @@ -34,6 +34,8 @@ Patch6: jasper-CVE-2016-10251.patch Patch7: jasper-CVE-2017-5498.patch Patch8: jasper-CVE-2016-9600.patch +Patch9: jasper-CVE-2016-9583.patch +Patch10: jasper-CVE-2017-6850.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: gcc-c++ @@ -91,6 +93,8 @@ %patch6 -p1 %patch7 -p1 %patch8 -p1 +%patch9 -p1 +%patch10 -p1 %build libtoolize --force --copy --install ++++++ jasper-CVE-2016-9583.patch ++++++ --- jasper-1.900.14/src/libjasper/include/jasper/jas_types.h 2017-03-22 10:14:30.098037013 +0100 +++ jasper-1.900.14/src/libjasper/include/jasper/jas_types.h 2017-03-22 10:15:11.619685037 +0100 @@ -128,6 +128,10 @@ #define JAS_CAST(t, e) \ ((t) (e)) +/* The number of bits in the integeral type uint_fast32_t. */ +/* NOTE: This could underestimate the size on some exotic architectures. */ +#define JAS_UINTFAST32_NUMBITS (8 * sizeof(uint_fast32_t)) + #ifdef __cplusplus extern "C" { #endif --- jasper-1.900.14/src/libjasper/jpc/jpc_t2cod.c 2017-03-22 10:14:30.102037013 +0100 +++ jasper-1.900.14/src/libjasper/jpc/jpc_t2cod.c 2017-03-22 10:15:11.619685037 +0100 @@ -200,7 +200,8 @@ JAS_CAST(int, pchg->lyrnoend); ++pi->lyrno) { for (pi->compno = pchg->compnostart, pi->picomp = &pi->picomps[pi->compno]; pi->compno < pi->numcomps && - pi->compno < JAS_CAST(int, pchg->compnoend); ++pi->compno, ++pi->picomp) { + pi->compno < JAS_CAST(int, pchg->compnoend); ++pi->compno, + ++pi->picomp) { if (pi->rlvlno >= pi->picomp->numrlvls) { continue; } @@ -249,10 +250,17 @@ ++compno, ++picomp) { for (rlvlno = 0, pirlvl = picomp->pirlvls; rlvlno < picomp->numrlvls; ++rlvlno, ++pirlvl) { - xstep = picomp->hsamp * (1 << (pirlvl->prcwidthexpn + - picomp->numrlvls - rlvlno - 1)); - ystep = picomp->vsamp * (1 << (pirlvl->prcheightexpn + - picomp->numrlvls - rlvlno - 1)); + // Check for the potential for overflow problems. + if (pirlvl->prcwidthexpn + pi->picomp->numrlvls > + JAS_UINTFAST32_NUMBITS - 2 || + pirlvl->prcheightexpn + pi->picomp->numrlvls > + JAS_UINTFAST32_NUMBITS - 2) { + return -1; + } + xstep = picomp->hsamp * (JAS_CAST(uint_fast32_t, 1) << + (pirlvl->prcwidthexpn + picomp->numrlvls - rlvlno - 1)); + ystep = picomp->vsamp * (JAS_CAST(uint_fast32_t, 1) << + (pirlvl->prcheightexpn + picomp->numrlvls - rlvlno - 1)); pi->xstep = (!pi->xstep) ? xstep : JAS_MIN(pi->xstep, xstep); pi->ystep = (!pi->ystep) ? ystep : JAS_MIN(pi->ystep, ystep); } @@ -282,21 +290,24 @@ rpy = r + pi->pirlvl->prcheightexpn; trx0 = JPC_CEILDIV(pi->xstart, pi->picomp->hsamp << r); try0 = JPC_CEILDIV(pi->ystart, pi->picomp->vsamp << r); - if (((pi->x == pi->xstart && ((trx0 << r) % (1 << rpx))) - || !(pi->x % (1 << rpx))) && - ((pi->y == pi->ystart && ((try0 << r) % (1 << rpy))) - || !(pi->y % (1 << rpy)))) { - prchind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->x, pi->picomp->hsamp - << r), pi->pirlvl->prcwidthexpn) - JPC_FLOORDIVPOW2(trx0, - pi->pirlvl->prcwidthexpn); - prcvind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->y, pi->picomp->vsamp - << r), pi->pirlvl->prcheightexpn) - JPC_FLOORDIVPOW2(try0, - pi->pirlvl->prcheightexpn); + if (((pi->x == pi->xstart && + ((trx0 << r) % (JAS_CAST(uint_fast32_t, 1) << rpx))) + || !(pi->x % (JAS_CAST(uint_fast32_t, 1) << rpx))) && + ((pi->y == pi->ystart && + ((try0 << r) % (JAS_CAST(uint_fast32_t, 1) << rpy))) + || !(pi->y % (JAS_CAST(uint_fast32_t, 1) << rpy)))) { + prchind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->x, + pi->picomp->hsamp << r), pi->pirlvl->prcwidthexpn) - + JPC_FLOORDIVPOW2(trx0, pi->pirlvl->prcwidthexpn); + prcvind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->y, + pi->picomp->vsamp << r), pi->pirlvl->prcheightexpn) - + JPC_FLOORDIVPOW2(try0, pi->pirlvl->prcheightexpn); pi->prcno = prcvind * pi->pirlvl->numhprcs + prchind; assert(pi->prcno < pi->pirlvl->numprcs); for (pi->lyrno = 0; pi->lyrno < - pi->numlyrs && pi->lyrno < JAS_CAST(int, pchg->lyrnoend); ++pi->lyrno) { + pi->numlyrs && pi->lyrno < JAS_CAST(int, + pchg->lyrnoend); ++pi->lyrno) { prclyrno = &pi->pirlvl->prclyrnos[pi->prcno]; if (pi->lyrno >= *prclyrno) { ++(*prclyrno); @@ -341,16 +352,19 @@ ++compno, ++picomp) { for (rlvlno = 0, pirlvl = picomp->pirlvls; rlvlno < picomp->numrlvls; ++rlvlno, ++pirlvl) { - xstep = picomp->hsamp * (1 << - (pirlvl->prcwidthexpn + picomp->numrlvls - - rlvlno - 1)); - ystep = picomp->vsamp * (1 << - (pirlvl->prcheightexpn + picomp->numrlvls - - rlvlno - 1)); - pi->xstep = (!pi->xstep) ? xstep : - JAS_MIN(pi->xstep, xstep); - pi->ystep = (!pi->ystep) ? ystep : - JAS_MIN(pi->ystep, ystep); + // Check for the potential for overflow problems. + if (pirlvl->prcwidthexpn + picomp->numrlvls > + JAS_UINTFAST32_NUMBITS - 2 || + pirlvl->prcheightexpn + picomp->numrlvls > + JAS_UINTFAST32_NUMBITS - 2) { + return -1; + } + xstep = picomp->hsamp * (JAS_CAST(uint_fast32_t, 1) << + (pirlvl->prcwidthexpn + picomp->numrlvls - rlvlno - 1)); + ystep = picomp->vsamp * (JAS_CAST(uint_fast32_t, 1) << + (pirlvl->prcheightexpn + picomp->numrlvls - rlvlno - 1)); + pi->xstep = (!pi->xstep) ? xstep : JAS_MIN(pi->xstep, xstep); + pi->ystep = (!pi->ystep) ? ystep : JAS_MIN(pi->ystep, ystep); } } pi->prgvolfirst = 0; @@ -377,20 +391,23 @@ try0 = JPC_CEILDIV(pi->ystart, pi->picomp->vsamp << r); rpx = r + pi->pirlvl->prcwidthexpn; rpy = r + pi->pirlvl->prcheightexpn; - if (((pi->x == pi->xstart && ((trx0 << r) % (1 << rpx))) || + if (((pi->x == pi->xstart && + ((trx0 << r) % (JAS_CAST(uint_fast32_t, 1) << rpx))) || !(pi->x % (pi->picomp->hsamp << rpx))) && - ((pi->y == pi->ystart && ((try0 << r) % (1 << rpy))) || + ((pi->y == pi->ystart && + ((try0 << r) % (JAS_CAST(uint_fast32_t, 1) << rpy))) || !(pi->y % (pi->picomp->vsamp << rpy)))) { - prchind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->x, pi->picomp->hsamp - << r), pi->pirlvl->prcwidthexpn) - JPC_FLOORDIVPOW2(trx0, - pi->pirlvl->prcwidthexpn); - prcvind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->y, pi->picomp->vsamp - << r), pi->pirlvl->prcheightexpn) - JPC_FLOORDIVPOW2(try0, - pi->pirlvl->prcheightexpn); + prchind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->x, + pi->picomp->hsamp << r), pi->pirlvl->prcwidthexpn) - + JPC_FLOORDIVPOW2(trx0, pi->pirlvl->prcwidthexpn); + prcvind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->y, + pi->picomp->vsamp << r), pi->pirlvl->prcheightexpn) - + JPC_FLOORDIVPOW2(try0, pi->pirlvl->prcheightexpn); pi->prcno = prcvind * pi->pirlvl->numhprcs + prchind; assert(pi->prcno < pi->pirlvl->numprcs); for (pi->lyrno = 0; pi->lyrno < pi->numlyrs && - pi->lyrno < JAS_CAST(int, pchg->lyrnoend); ++pi->lyrno) { + pi->lyrno < JAS_CAST(int, pchg->lyrnoend); + ++pi->lyrno) { prclyrno = &pi->pirlvl->prclyrnos[pi->prcno]; if (pi->lyrno >= *prclyrno) { ++(*prclyrno); @@ -428,10 +445,17 @@ pi->prgvolfirst = 0; } - for (pi->compno = pchg->compnostart, pi->picomp = - &pi->picomps[pi->compno]; pi->compno < JAS_CAST(int, pchg->compnoend) && pi->compno < pi->numcomps; ++pi->compno, - ++pi->picomp) { + for (pi->compno = pchg->compnostart, pi->picomp = &pi->picomps[pi->compno]; + pi->compno < JAS_CAST(int, pchg->compnoend) && pi->compno < pi->numcomps; + ++pi->compno, ++pi->picomp) { pirlvl = pi->picomp->pirlvls; + // Check for the potential for overflow problems. + if (pirlvl->prcwidthexpn + pi->picomp->numrlvls > + JAS_UINTFAST32_NUMBITS - 2 || + pirlvl->prcheightexpn + pi->picomp->numrlvls > + JAS_UINTFAST32_NUMBITS - 2) { + return -1; + } pi->xstep = pi->picomp->hsamp * (JAS_CAST(uint_fast32_t, 1) << (pirlvl->prcwidthexpn + pi->picomp->numrlvls - 1)); pi->ystep = pi->picomp->vsamp * (JAS_CAST(uint_fast32_t, 1) << @@ -461,23 +485,23 @@ try0 = JPC_CEILDIV(pi->ystart, pi->picomp->vsamp << r); rpx = r + pi->pirlvl->prcwidthexpn; rpy = r + pi->pirlvl->prcheightexpn; - if (((pi->x == pi->xstart && ((trx0 << r) % (1 << rpx))) || + if (((pi->x == pi->xstart && + ((trx0 << r) % (JAS_CAST(uint_fast32_t, 1) << rpx))) || !(pi->x % (pi->picomp->hsamp << rpx))) && - ((pi->y == pi->ystart && ((try0 << r) % (1 << rpy))) || + ((pi->y == pi->ystart && + ((try0 << r) % (JAS_CAST(uint_fast32_t, 1) << rpy))) || !(pi->y % (pi->picomp->vsamp << rpy)))) { - prchind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->x, pi->picomp->hsamp - << r), pi->pirlvl->prcwidthexpn) - JPC_FLOORDIVPOW2(trx0, - pi->pirlvl->prcwidthexpn); - prcvind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->y, pi->picomp->vsamp - << r), pi->pirlvl->prcheightexpn) - JPC_FLOORDIVPOW2(try0, - pi->pirlvl->prcheightexpn); - pi->prcno = prcvind * - pi->pirlvl->numhprcs + - prchind; - assert(pi->prcno < - pi->pirlvl->numprcs); - for (pi->lyrno = 0; pi->lyrno < - pi->numlyrs && pi->lyrno < JAS_CAST(int, pchg->lyrnoend); ++pi->lyrno) { + prchind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->x, + pi->picomp->hsamp << r), pi->pirlvl->prcwidthexpn) - + JPC_FLOORDIVPOW2(trx0, pi->pirlvl->prcwidthexpn); + prcvind = JPC_FLOORDIVPOW2(JPC_CEILDIV(pi->y, + pi->picomp->vsamp << r), pi->pirlvl->prcheightexpn) - + JPC_FLOORDIVPOW2(try0, pi->pirlvl->prcheightexpn); + pi->prcno = prcvind * pi->pirlvl->numhprcs + prchind; + assert(pi->prcno < pi->pirlvl->numprcs); + for (pi->lyrno = 0; pi->lyrno < pi->numlyrs && + pi->lyrno < JAS_CAST(int, pchg->lyrnoend); + ++pi->lyrno) { prclyrno = &pi->pirlvl->prclyrnos[pi->prcno]; if (pi->lyrno >= *prclyrno) { ++(*prclyrno); --- jasper-1.900.14/src/libjasper/jpc/jpc_t2dec.c 2017-03-22 10:14:30.102037013 +0100 +++ jasper-1.900.14/src/libjasper/jpc/jpc_t2dec.c 2017-03-22 10:15:11.619685037 +0100 @@ -454,8 +454,8 @@ jas_stream_getrwcount(in), jpc_pi_prg(pi), jpc_pi_cmptno(pi), jpc_pi_rlvlno(pi), jpc_pi_prcno(pi), jpc_pi_lyrno(pi)); } - if (jpc_dec_decodepkt(dec, pkthdrstream, in, jpc_pi_cmptno(pi), jpc_pi_rlvlno(pi), - jpc_pi_prcno(pi), jpc_pi_lyrno(pi))) { + if (jpc_dec_decodepkt(dec, pkthdrstream, in, jpc_pi_cmptno(pi), + jpc_pi_rlvlno(pi), jpc_pi_prcno(pi), jpc_pi_lyrno(pi))) { return -1; } ++dec->numpkts; ++++++ jasper-CVE-2017-6850.patch ++++++ --- jasper-1.900.14/src/libjasper/base/jas_stream.c 2017-03-22 10:18:22.195685757 +0100 +++ jasper-1.900.14/src/libjasper/base/jas_stream.c 2017-03-22 10:20:15.366313051 +0100 @@ -507,6 +507,7 @@ return 0; } +/* FIXME integral type */ int jas_stream_read(jas_stream_t *stream, void *buf, int cnt) { int n; @@ -527,6 +528,7 @@ return n; } +/* FIXME integral type */ int jas_stream_write(jas_stream_t *stream, const void *buf, int cnt) { int n; @@ -573,6 +575,7 @@ return 0; } +/* FIXME integral type */ char *jas_stream_gets(jas_stream_t *stream, char *buf, int bufsize) { int c; @@ -594,6 +597,7 @@ return buf; } +/* FIXME integral type */ int jas_stream_gobble(jas_stream_t *stream, int n) { int m; @@ -606,6 +610,7 @@ return n; } +/* FIXME integral type */ int jas_stream_pad(jas_stream_t *stream, int n, int c) { int m; @@ -696,6 +701,7 @@ * Buffer initialization code. \******************************************************************************/ +/* FIXME integral type */ static void jas_stream_initbuf(jas_stream_t *stream, int bufmode, char *buf, int bufsize) { @@ -871,6 +877,7 @@ return openmode; } +/* FIXME integral type */ int jas_stream_copy(jas_stream_t *out, jas_stream_t *in, int n) { int all; @@ -896,6 +903,7 @@ return 0; } +/* FIXME integral type */ long jas_stream_setrwcount(jas_stream_t *stream, long rwcnt) { int old; @@ -905,6 +913,7 @@ return old; } +/* FIXME integral type */ int jas_stream_display(jas_stream_t *stream, FILE *fp, int n) { unsigned char buf[16]; @@ -979,6 +988,7 @@ * Memory stream object. \******************************************************************************/ +/* FIXME integral type */ static int mem_read(jas_stream_obj_t *obj, char *buf, int cnt) { int n; @@ -1007,6 +1017,7 @@ return 0; } +/* FIXME integral type */ static int mem_write(jas_stream_obj_t *obj, char *buf, int cnt) { int n; @@ -1054,6 +1065,7 @@ return ret; } +/* FIXME integral type */ static long mem_seek(jas_stream_obj_t *obj, long offset, int origin) { jas_stream_memobj_t *m = (jas_stream_memobj_t *)obj; @@ -1096,18 +1108,21 @@ * File stream object. \******************************************************************************/ +/* FIXME integral type */ static int file_read(jas_stream_obj_t *obj, char *buf, int cnt) { jas_stream_fileobj_t *fileobj = JAS_CAST(jas_stream_fileobj_t *, obj); return read(fileobj->fd, buf, cnt); } +/* FIXME integral type */ static int file_write(jas_stream_obj_t *obj, char *buf, int cnt) { jas_stream_fileobj_t *fileobj = JAS_CAST(jas_stream_fileobj_t *, obj); return write(fileobj->fd, buf, cnt); } +/* FIXME integral type */ static long file_seek(jas_stream_obj_t *obj, long offset, int origin) { jas_stream_fileobj_t *fileobj = JAS_CAST(jas_stream_fileobj_t *, obj); @@ -1130,6 +1145,7 @@ * Stdio file stream object. \******************************************************************************/ +/* FIXME integral type */ static int sfile_read(jas_stream_obj_t *obj, char *buf, int cnt) { FILE *fp; @@ -1144,6 +1160,7 @@ return result; } +/* FIXME integral type */ static int sfile_write(jas_stream_obj_t *obj, char *buf, int cnt) { FILE *fp; @@ -1153,6 +1170,7 @@ return (n != JAS_CAST(size_t, cnt)) ? (-1) : cnt; } +/* FIXME integral type */ static long sfile_seek(jas_stream_obj_t *obj, long offset, int origin) { FILE *fp; --- jasper-1.900.14/src/libjasper/jp2/jp2_cod.c 2017-03-22 10:18:22.191685757 +0100 +++ jasper-1.900.14/src/libjasper/jp2/jp2_cod.c 2017-03-22 10:20:15.366313051 +0100 @@ -183,15 +183,28 @@ * Box constructor. \******************************************************************************/ -jp2_box_t *jp2_box_create(int type) +jp2_box_t *jp2_box_create0() { jp2_box_t *box; - jp2_boxinfo_t *boxinfo; - if (!(box = jas_malloc(sizeof(jp2_box_t)))) { return 0; } memset(box, 0, sizeof(jp2_box_t)); + box->type = 0; + box->len = 0; + // Mark the box data as never having been constructed + // so that we will not errantly attempt to destroy it later. + box->ops = &jp2_boxinfo_unk.ops; + return box; +} + +jp2_box_t *jp2_box_create(int type) +{ + jp2_box_t *box; + jp2_boxinfo_t *boxinfo; + if (!(box = jp2_box_create0())) { + return 0; + } box->type = type; box->len = 0; if (!(boxinfo = jp2_boxinfolookup(type))) { @@ -248,14 +261,9 @@ box = 0; tmpstream = 0; - if (!(box = jas_malloc(sizeof(jp2_box_t)))) { + if (!(box = jp2_box_create0())) { goto error; } - - // Mark the box data as never having been constructed - // so that we will not errantly attempt to destroy it later. - box->ops = &jp2_boxinfo_unk.ops; - if (jp2_getuint32(in, &len) || jp2_getuint32(in, &box->type)) { goto error; } @@ -263,10 +271,12 @@ box->info = boxinfo; box->len = len; JAS_DBGLOG(10, ( - "preliminary processing of JP2 box: type=%c%s%c (0x%08x); length=%d\n", + "preliminary processing of JP2 box: " + "type=%c%s%c (0x%08x); length=%"PRIuFAST32"\n", '"', boxinfo->name, '"', box->type, box->len )); if (box->len == 1) { + JAS_DBGLOG(10, ("big length\n")); if (jp2_getuint64(in, &extlen)) { goto error; } @@ -382,6 +392,7 @@ { jp2_bpcc_t *bpcc = &box->data.bpcc; unsigned int i; + bpcc->bpcs = 0; bpcc->numcmpts = box->datalen; if (!(bpcc->bpcs = jas_alloc2(bpcc->numcmpts, sizeof(uint_fast8_t)))) { return -1; @@ -462,6 +473,7 @@ jp2_cdef_t *cdef = &box->data.cdef; jp2_cdefchan_t *chan; unsigned int channo; + cdef->ents = 0; if (jp2_getuint16(in, &cdef->numchans)) { return -1; } @@ -518,7 +530,9 @@ } if (dataflag) { - if (jas_stream_copy(out, tmpstream, box->len - JP2_BOX_HDRLEN(false))) { + if (jas_stream_copy(out, tmpstream, box->len - + JP2_BOX_HDRLEN(false))) { + jas_eprintf("cannot copy box data\n"); goto error; } jas_stream_close(tmpstream); @@ -777,6 +791,7 @@ jp2_cmap_t *cmap = &box->data.cmap; jp2_cmapent_t *ent; unsigned int i; + cmap->ents = 0; cmap->numchans = (box->datalen) / 4; if (!(cmap->ents = jas_alloc2(cmap->numchans, sizeof(jp2_cmapent_t)))) { @@ -835,6 +850,7 @@ int_fast32_t x; pclr->lutdata = 0; + pclr->bpc = 0; if (jp2_getuint16(in, &pclr->numlutents) || jp2_getuint8(in, &pclr->numchans)) {

1 0