March 2021 - openSUSE Commits - openSUSE Mailing Lists

commit python-Paste for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-Paste for openSUSE:Factory checked in at 2021-03-02 12:26:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-Paste (Old) and /work/SRC/openSUSE:Factory/.python-Paste.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-Paste" Tue Mar 2 12:26:45 2021 rev:32 rq:874688 version:3.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-Paste/python-Paste.changes 2020-11-29 12:19:10.637440777 +0100 +++ /work/SRC/openSUSE:Factory/.python-Paste.new.2378/python-Paste.changes 2021-03-02 12:29:18.743524177 +0100 @@ -1,0 +2,5 @@ +Tue Feb 23 15:59:59 UTC 2021 - Mark��ta Machov�� <mmachova(a)suse.com> + +- Get rid of broken %ifpython3 macro + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-Paste.spec ++++++ --- /var/tmp/diff_new_pack.ACT5KD/_old 2021-03-02 12:29:19.363524731 +0100 +++ /var/tmp/diff_new_pack.ACT5KD/_new 2021-03-02 12:29:19.363524731 +0100 @@ -1,7 +1,7 @@ # # spec file for package python-Paste # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -39,8 +39,8 @@ Provides: %{oldpython}-paste = %{version} Obsoletes: %{oldpython}-paste < %{version} %endif -%ifpython3 -Suggests: python3-python3-openid +%if %{python_version_nodots} >= 30 +Suggests: python-python3-openid %endif %python_subpackages

1 0

commit nodejs15 for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs15 for openSUSE:Factory checked in at 2021-03-02 12:26:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs15 (Old) and /work/SRC/openSUSE:Factory/.nodejs15.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "nodejs15" Tue Mar 2 12:26:41 2021 rev:4 rq:874672 version:15.10.0 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs15/nodejs15.changes 2021-02-22 14:57:56.089758138 +0100 +++ /work/SRC/openSUSE:Factory/.nodejs15.new.2378/nodejs15.changes 2021-03-02 12:29:17.419522993 +0100 @@ -1,0 +2,21 @@ +Tue Feb 23 14:41:30 UTC 2021 - Adam Majer <adam.majer(a)suse.de> + +- New upstream version 15.10.0: + * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service + by resource exhaustion (bsc#1182619) + * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620) + +- Changes in 15.9.0: + * crypto: add keyObject.export() 'jwk' format option + * deps: upgrade to libuv 1.41.0 + * doc: refactor fs docs structure + * fs: + + add fsPromises.watch() + + use a default callback for fs.close() + + add AbortSignal support to watch + * perf_hooks: introduce createHistogram + * stream: improve Readable.from error handling + * timers: introduce setInterval async iterator + * tls: add ability to get cert/peer cert as X509Certificate object + +------------------------------------------------------------------- Old: ---- node-v15.8.0.tar.xz New: ---- node-v15.10.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs15.spec ++++++ --- /var/tmp/diff_new_pack.dK8qsw/_old 2021-03-02 12:29:18.059523565 +0100 +++ /var/tmp/diff_new_pack.dK8qsw/_new 2021-03-02 12:29:18.059523565 +0100 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs15 -Version: 15.8.0 +Version: 15.10.0 Release: 0 %define node_version_number 15 @@ -248,7 +248,7 @@ %endif %else -Provides: bundled(openssl) = 1.1.1i +Provides: bundled(openssl) = 1.1.1j %endif %if ! 0%{with intree_cares} @@ -304,7 +304,7 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-build Provides: bundled(brotli) = 1.0.9 -Provides: bundled(libuv) = 1.40.0 +Provides: bundled(libuv) = 1.41.0 Provides: bundled(uvwasi) = 0.0.11 Provides: bundled(v8) = 8.6.395.17 @@ -343,26 +343,26 @@ Provides: nodejs-npm = %{version} Obsoletes: nodejs-npm < 4.0.0 Provides: npm = %{version} -Provides: npm(npm) = 7.5.1 +Provides: npm(npm) = 7.5.3 %if 0%{?suse_version} >= 1500 %if %{node_version_number} >= 10 Requires: group(nobody) Requires: user(nobody) %endif %endif -Provides: bundled(node-@npmcli/arborist) = 2.1.1 +Provides: bundled(node-@npmcli/arborist) = 2.2.1 Provides: bundled(node-@npmcli/ci-detect) = 1.3.0 -Provides: bundled(node-@npmcli/config) = 1.2.8 +Provides: bundled(node-@npmcli/config) = 1.2.9 Provides: bundled(node-@npmcli/disparity-colors) = 1.0.1 Provides: bundled(node-@npmcli/git) = 2.0.4 -Provides: bundled(node-@npmcli/installed-package-contents) = 1.0.5 -Provides: bundled(node-@npmcli/map-workspaces) = 1.0.1 +Provides: bundled(node-@npmcli/installed-package-contents) = 1.0.7 +Provides: bundled(node-@npmcli/map-workspaces) = 1.0.2 Provides: bundled(node-@npmcli/metavuln-calculator) = 1.0.2 Provides: bundled(node-@npmcli/move-file) = 1.1.1 Provides: bundled(node-@npmcli/name-from-folder) = 1.0.1 Provides: bundled(node-@npmcli/node-gyp) = 1.0.1 Provides: bundled(node-@npmcli/promise-spawn) = 1.3.2 -Provides: bundled(node-@npmcli/run-script) = 1.8.1 +Provides: bundled(node-@npmcli/run-script) = 1.8.2 Provides: bundled(node-@tootallnate/once) = 1.1.2 Provides: bundled(node-abbrev) = 1.1.1 Provides: bundled(node-agent-base) = 6.0.2 @@ -426,6 +426,7 @@ Provides: bundled(node-encoding) = 0.1.13 Provides: bundled(node-env-paths) = 2.2.0 Provides: bundled(node-err-code) = 1.1.2 +Provides: bundled(node-err-code) = 2.0.3 Provides: bundled(node-extend) = 3.0.2 Provides: bundled(node-extsprintf) = 1.3.0 Provides: bundled(node-fast-deep-equal) = 3.1.3 @@ -438,7 +439,7 @@ Provides: bundled(node-gauge) = 2.7.4 Provides: bundled(node-getpass) = 0.1.7 Provides: bundled(node-glob) = 7.1.6 -Provides: bundled(node-graceful-fs) = 4.2.4 +Provides: bundled(node-graceful-fs) = 4.2.5 Provides: bundled(node-har-schema) = 2.0.0 Provides: bundled(node-har-validator) = 5.1.5 Provides: bundled(node-has) = 1.0.3 @@ -458,7 +459,7 @@ Provides: bundled(node-inflight) = 1.0.6 Provides: bundled(node-inherits) = 2.0.4 Provides: bundled(node-ini) = 2.0.0 -Provides: bundled(node-init-package-json) = 2.0.1 +Provides: bundled(node-init-package-json) = 2.0.2 Provides: bundled(node-ip) = 1.1.5 Provides: bundled(node-ip-regex) = 4.2.0 Provides: bundled(node-is-cidr) = 4.0.2 @@ -491,7 +492,7 @@ Provides: bundled(node-libnpmpublish) = 4.0.0 Provides: bundled(node-libnpmsearch) = 3.1.0 Provides: bundled(node-libnpmteam) = 2.0.2 -Provides: bundled(node-libnpmversion) = 1.0.7 +Provides: bundled(node-libnpmversion) = 1.0.8 Provides: bundled(node-lru-cache) = 6.0.0 Provides: bundled(node-make-fetch-happen) = 8.0.13 Provides: bundled(node-mime-db) = 1.44.0 @@ -531,7 +532,7 @@ Provides: bundled(node-once) = 1.4.0 Provides: bundled(node-opener) = 1.5.2 Provides: bundled(node-p-map) = 4.0.0 -Provides: bundled(node-pacote) = 11.2.4 +Provides: bundled(node-pacote) = 11.2.6 Provides: bundled(node-parse-conflict-json) = 1.1.1 Provides: bundled(node-path-is-absolute) = 1.0.1 Provides: bundled(node-path-parse) = 1.0.6 @@ -541,6 +542,7 @@ Provides: bundled(node-promise-call-limit) = 1.0.1 Provides: bundled(node-promise-inflight) = 1.0.1 Provides: bundled(node-promise-retry) = 1.1.1 +Provides: bundled(node-promise-retry) = 2.0.1 Provides: bundled(node-promzard) = 0.3.0 Provides: bundled(node-psl) = 1.8.0 Provides: bundled(node-puka) = 1.0.1 @@ -550,12 +552,13 @@ Provides: bundled(node-read) = 1.0.7 Provides: bundled(node-read-cmd-shim) = 2.0.0 Provides: bundled(node-read-package-json) = 3.0.0 -Provides: bundled(node-read-package-json-fast) = 1.2.1 +Provides: bundled(node-read-package-json-fast) = 2.0.1 Provides: bundled(node-readable-stream) = 2.3.7 Provides: bundled(node-readdir-scoped-modules) = 1.1.0 Provides: bundled(node-request) = 2.88.2 Provides: bundled(node-resolve) = 1.19.0 Provides: bundled(node-retry) = 0.10.1 +Provides: bundled(node-retry) = 0.12.0 Provides: bundled(node-rimraf) = 3.0.2 Provides: bundled(node-safe-buffer) = 5.1.2 Provides: bundled(node-safer-buffer) = 2.1.2 ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.dK8qsw/_old 2021-03-02 12:29:18.095523597 +0100 +++ /var/tmp/diff_new_pack.dK8qsw/_new 2021-03-02 12:29:18.095523597 +0100 @@ -1,32 +1,32 @@ -8a1f2fc0e4aac595f7d82ab9e1a51958aa74bbdfa9bb36090f4a78b5cc776638 node-v15.8.0-aix-ppc64.tar.gz -23f9a8a53d0d63e1d90afe775891088533fc5b277ef83db0cd2fc37951c09595 node-v15.8.0-darwin-x64.tar.gz -8b1012b7c78c27513bf1d3b1db65f505041771683d964f14f67fe1fc243fe038 node-v15.8.0-darwin-x64.tar.xz -1b86dd704a756ad947d9949fb003bd18483fa9934d910d54fb3c975cb995d2c8 node-v15.8.0-headers.tar.gz -dea9fe1e00f2516f01533ee52ac853d91a887d5eadab5103a693805fabaf281b node-v15.8.0-headers.tar.xz -086149a16cf7a092f1e12fa2a91bb6587ce25914bd52c3bcff78b5b5c6222e30 node-v15.8.0-linux-arm64.tar.gz -792403c345a0af5af3641e193cb1e6c6d819315bfe181a147215f7d39e98729f node-v15.8.0-linux-arm64.tar.xz -a6f91fd3f668e7d0f987c8ef17223720bf8f19827cf4ce1b5ba65a076eedcabc node-v15.8.0-linux-armv7l.tar.gz -1b9ee1b6ea540873887636753408927f7b5af05c0d4cdaebf3f457fb787e0e4a node-v15.8.0-linux-armv7l.tar.xz -52e9bcee4b6432fdb4d3fa770029e9484ceebd168497e22774e374181af37767 node-v15.8.0-linux-ppc64le.tar.gz -988fe0b28ae84b7b6cff906ddac1830595b4614b561740f64dce7cb1de610376 node-v15.8.0-linux-ppc64le.tar.xz -c1cbf037ca1417131dfbdbbf4ddcc29fe46d0348accceafb65747a30b56f3811 node-v15.8.0-linux-s390x.tar.gz -a8732e3a7c51064cdb12caeef9b003741a9cc3a789cf756ee2cd12564353a3b2 node-v15.8.0-linux-s390x.tar.xz -c2b073c4421e62aa71f0cef929e61a3334853ab211119f8ea7601612c43cd71d node-v15.8.0-linux-x64.tar.gz -cdb80f0810e5a076eb6079297073147d2564b1c2292bb4436b3f9e9e4fe18759 node-v15.8.0-linux-x64.tar.xz -a0e5eea1a606a1be5509a3c49e46ff7b3a89d7e843e9a629e3f2cb3cecf921ca node-v15.8.0.pkg -e08c8778a6b767cd0d2ab4613946d1616c3d4054dead08b04f705d607c84510f node-v15.8.0.tar.gz -e23ae2f6181444066cf74e03c3e30e650fbc63764c2b89829928cddf3e4230a9 node-v15.8.0.tar.xz -8cfe90e8a97d9973495498aa5b1a021e901f5859a26440193c3bb9c88cbdbc62 node-v15.8.0-win-x64.7z -edb16def1fecaecaffcccf9352e9f94a029d47203f26ae44dc1d4aa7eef35940 node-v15.8.0-win-x64.zip -53a9964d5637546470d0d343aef2c677615d47a1d96f9c818ff6afe4d04acd5a node-v15.8.0-win-x86.7z -f339f68c9b21dbaffb9d369c1c2f1d516a7fc25189dad98ae903b09034d97456 node-v15.8.0-win-x86.zip -8bbf0c74bc85e5f8f4360ba600a039fb2750a32a4603a389fd072e1ec639ac19 node-v15.8.0-x64.msi -c02085195b8f0af2d076fa0be68138fddbe939d6dd6bda6dafc122329653a032 node-v15.8.0-x86.msi -22e4bcf147f6424a06472a6a6b94def200c455d753bed80dbb9535db1da92ee7 win-x64/node.exe -74c5baf6049f2f9f6712ad06cbf544c25803f7a01c6f63b8fe18488a68ef4720 win-x64/node.lib -eb3e4f8e71b93e2ec3aa328f223a859ef522ecd76d1ebe7df4020c0a0fdf2eb4 win-x64/node_pdb.7z -e4d2eee8983e58aabe6330df4a6052b2da065a2ede3aa01d29ee052a1fe2abd5 win-x64/node_pdb.zip -b0838991576c255285150d9b93f0ce70fa2a2b775a14ed2de1b6113a0f38e1c4 win-x86/node.exe -bff86968328f105b6d4a491806863ef9f2b51dc55f02580600c0b2ca5faef870 win-x86/node.lib -c796d8d1e1a84e59af9d310555ddde45c7d05acf6f2058fd959434b80da4f221 win-x86/node_pdb.7z -5735cd9b2136ffbf4f366f0d3fe982f4ac81e7b7ace7c7a8a3d60cab592a0035 win-x86/node_pdb.zip +351ef617dea3ec93819ebb92435b82febaa1de393bdb442dcc129ac76a03014c node-v15.10.0-aix-ppc64.tar.gz +45ccf8dc5ac539a4f965313593510970a992e5f5dcf8cfacaebec0f99fd546be node-v15.10.0-darwin-x64.tar.gz +60678b3995712ed96928c9bcce86d6847035d7853417b9862e8b2f7bd888aa7e node-v15.10.0-darwin-x64.tar.xz +5ee67c683f7d5d060829aece2ec04609de9d500f5b6f56f584c0f1707650c9da node-v15.10.0-headers.tar.gz +b8cb4c1f8cdfb19c3ecffa01a1a23754ae2075a19dfac3c33ababe9f3e5c9ad0 node-v15.10.0-headers.tar.xz +a9f8c807ec31ed24fe6e0b2d002ce2d1b9f20b7e23a0efe10679331a44b30dba node-v15.10.0-linux-arm64.tar.gz +d3af39fb8d7bfc22c711aed4120a3fc4419cd70b3d2016b18c6a709fa0f0e845 node-v15.10.0-linux-arm64.tar.xz +ca27a48dd9233b00c49b37a07751395657d4e454ebfa5066a6371e5f6c9969cf node-v15.10.0-linux-armv7l.tar.gz +200ca8de7f7d575dcf9221a40fe8754be40759b97f254d55b1f4679f368d5eee node-v15.10.0-linux-armv7l.tar.xz +49977dac42124295bedff31b8409f2990b586aa673f439ed5e9636ac1485a08d node-v15.10.0-linux-ppc64le.tar.gz +7a54dc554686d7fe7c45db57068a03c69dfd64afd7994873b77c1c7bc978db8a node-v15.10.0-linux-ppc64le.tar.xz +078a8c2207f92040e0decdcfde0cd368973208876f01ff7d03de6bd0d5f09090 node-v15.10.0-linux-s390x.tar.gz +c2c8375d491e9f7c39e297587bcf99fe6be70ae38aaa9c1757405a5818fe5c73 node-v15.10.0-linux-s390x.tar.xz +31554d9b2de47948a364a007031c635d3943c303e50703b5f4c41a5eead07737 node-v15.10.0-linux-x64.tar.gz +a56793179965235e7c4f911f2cec08dd3f31dc1e09d68eddbb397107042a43fc node-v15.10.0-linux-x64.tar.xz +aa188140cdc1f96a719bcc88904a37fdcd0745ed8344de9866a4e6869cc45466 node-v15.10.0.pkg +643f9bbd6ae4c424224c946cad52d11b9379aaab927673b2e3c6c4df9a1a7b0e node-v15.10.0.tar.gz +7748d8f15eabb5543f26fec8ca08e755044512fab1f6bd98d5ba403f276deec4 node-v15.10.0.tar.xz +1e346ced805d316f9d288a2165e9273ed3e75d18bf02b55cda890af25e90919b node-v15.10.0-win-x64.7z +2bf72da4e5ddc485599f2eca54ab7c59001d70baec7ff2bb050d9f4ed1b066a6 node-v15.10.0-win-x64.zip +3509ce1b7d26116e955c39eae2f60e2132b0b7db423283cac19ef643d682efc6 node-v15.10.0-win-x86.7z +aba943732f371eda2341a62de84c459b376b755917ea92ae587afcc4bfbbaf5d node-v15.10.0-win-x86.zip +999ca54fb0b329dca36eb01975d6f4a2b3120707d078c594019e88cdda8f0a85 node-v15.10.0-x64.msi +ed40690ceee7339554f0d592453f864235e1e241a85f0e53d7e39a2c73554ab3 node-v15.10.0-x86.msi +a0db7bf0565841e88b85979efb9a640a702dd8ded3b5915342635b190b1413ca win-x64/node.exe +0692711edaf626282aaeff0a28cce749488d03a5d1db6490c7bb19866ec4aedd win-x64/node.lib +456373f6ed6145be5b01ce588590ec927c7c05f025704082a4986dc2eb4b25a6 win-x64/node_pdb.7z +b6de50aebb75696fca501a5bbf1914c7a01ebd929d2dc49707621410b8017276 win-x64/node_pdb.zip +5c0095f58e0d4e0bdb0598b5db5a5c4c31ba1cf090994fbd415ab4dc273506f6 win-x86/node.exe +6cec3adfe0cbf4f894d89fafe857fbda9dba14b61586d6abf145b3dd7775dad3 win-x86/node.lib +1ff43f5c0c77951cdfe21bb49973e800c8fdee6ea7565d6054bd2775a024ec47 win-x86/node_pdb.7z +59bb4f60277962be395513fa597126a44ce7264674a94ada6d32c0d2b6477f22 win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.dK8qsw/_old and /var/tmp/diff_new_pack.dK8qsw/_new differ ++++++ node-v15.8.0.tar.xz -> node-v15.10.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs15/node-v15.8.0.tar.xz /work/SRC/openSUSE:Factory/.nodejs15.new.2378/node-v15.10.0.tar.xz differ: char 26, line 1

1 0

commit nodejs10 for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package nodejs10 for openSUSE:Factory checked in at 2021-03-02 12:26:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/nodejs10 (Old) and /work/SRC/openSUSE:Factory/.nodejs10.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "nodejs10" Tue Mar 2 12:26:38 2021 rev:36 rq:874671 version:10.24.0 Changes: -------- --- /work/SRC/openSUSE:Factory/nodejs10/nodejs10.changes 2021-02-22 14:58:07.181770984 +0100 +++ /work/SRC/openSUSE:Factory/.nodejs10.new.2378/nodejs10.changes 2021-03-02 12:28:49.655498162 +0100 @@ -1,0 +2,10 @@ +Tue Feb 23 14:48:58 UTC 2021 - Adam Majer <adam.majer(a)suse.de> + +- New upstream LTS version 10.24.0: + * CVE-2021-22883: HTTP2 'unknownProtocol' cause Denial of Service + by resource exhaustion (bsc#1182619) + * CVE-2021-22884: DNS rebinding in --inspect (bsc#1182620) + * CVE-2021-23840: OpenSSL - Integer overflow in CipherUpdate + (bsc#1182333) + +------------------------------------------------------------------- Old: ---- node-v10.23.3.tar.xz New: ---- node-v10.24.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ nodejs10.spec ++++++ --- /var/tmp/diff_new_pack.C9qVey/_old 2021-03-02 12:28:50.363498795 +0100 +++ /var/tmp/diff_new_pack.C9qVey/_new 2021-03-02 12:28:50.363498795 +0100 @@ -26,7 +26,7 @@ ########################################################### Name: nodejs10 -Version: 10.23.3 +Version: 10.24.0 Release: 0 %define node_version_number 10 @@ -250,7 +250,7 @@ %endif %else -Provides: bundled(openssl) = 1.1.1i +Provides: bundled(openssl) = 1.1.1j %endif %if ! 0%{with intree_cares} ++++++ SHASUMS256.txt ++++++ --- /var/tmp/diff_new_pack.C9qVey/_old 2021-03-02 12:28:50.395498824 +0100 +++ /var/tmp/diff_new_pack.C9qVey/_new 2021-03-02 12:28:50.395498824 +0100 @@ -1,36 +1,36 @@ -b9ad6ba0f7377fc5010b7aa3bb852385e3a54d6a910d294a76b23419a3eeb297 node-v10.23.3-aix-ppc64.tar.gz -f33d88fe2bf93c1b1f6312cb849a56185d3c8371517119d48245fa322b82d96e node-v10.23.3-darwin-x64.tar.gz -2a375f2f25676100f5f5235d01e5ff6d722c87bb12e45e0caa1c8e6ee2c0247d node-v10.23.3-darwin-x64.tar.xz -e11f10d58e7243e7da74213723093a47739b31ed0d9fe9074964806e3f515f79 node-v10.23.3-headers.tar.gz -501e99629521487a60add061d6fc6a99695ff038f7b899ab448c6d82bf5bafd9 node-v10.23.3-headers.tar.xz -483a4b609fe406b87da290bc0aa582b863e725321d71c6207f050ebe06baec8d node-v10.23.3-linux-arm64.tar.gz -d559e61a043c56a3202baf670e4c3c973dafcfadc1109e4523ce1c5b2d80c1d8 node-v10.23.3-linux-arm64.tar.xz -24fcc84e890eb0fae3f75af4ec08f207230b41e1012a2ecdd8f006628be3353d node-v10.23.3-linux-armv6l.tar.gz -39968109857b4d14427e717c76295a8703523d2942bd9704e69260ef1c9e6399 node-v10.23.3-linux-armv6l.tar.xz -2629053bba51065326bed825460e4b794ec9daf0be00c15daf6ff017c144eecb node-v10.23.3-linux-armv7l.tar.gz -d3f9641f33cdf2c851b473de8dba993821d3f05eaeb51e7da6cafa160502d3f8 node-v10.23.3-linux-armv7l.tar.xz -b199aecee44c9251854773879ed7c6b707b1f6a7e5aa36021bdde853391d7ee8 node-v10.23.3-linux-ppc64le.tar.gz -6ee49bf9ffa6180ff3263ee153123643df892365290de8d775d744f6e979a3f9 node-v10.23.3-linux-ppc64le.tar.xz -f107548b47ba9e911b68dcfd73065e21b2d32d7cd00908401e0c2eed554fc51a node-v10.23.3-linux-s390x.tar.gz -5a9a778fc981763ab18076bf7af645c61fd8799d71b54218bebec84f43995a6f node-v10.23.3-linux-s390x.tar.xz -08e225a3581ca45b8c00d5561cf68ec7c53fe9022a30a1d167b9544789477f5b node-v10.23.3-linux-x64.tar.gz -245cbb538c758f27efd2fa49b5ded81c924e2dc4d5b0d140855465366dea7f17 node-v10.23.3-linux-x64.tar.xz -689b768ccfe15e27a677662cea38626068b2f57ccf2ed178be700d9c4eac2c5d node-v10.23.3.pkg -63d6910af4e87ab65624652e727c7c0941c28512418192e4f2c5f3dff45c33d7 node-v10.23.3-sunos-x64.tar.gz -fb72ab18ce155be6f549dcab583bfcfd115f6b7d93f00c95fc9b2f9e3b92ec8a node-v10.23.3-sunos-x64.tar.xz -517db39eefccb03cb9ec1de67ddc917be943a755b290bff309b2e4b1bd78ffaf node-v10.23.3.tar.gz -515bd7f2a1c3653c4f45eb0823479e812a24050da467dfd90b679ef09701ea8f node-v10.23.3.tar.xz -9a94936e826a73130f030345bacd09bc39e3bd5727dd0b708e455b91ab1a84b5 node-v10.23.3-win-x64.7z -3d9a51c8dc073a2f36efe084abf08122c9d1a10e61fa440d6e1fbf5751cbe64b node-v10.23.3-win-x64.zip -e9a78f452bbacc4ba9f40b0c48e7997ad13db4f976ec006ef99837b7a27d009a node-v10.23.3-win-x86.7z -fa2456c7ea3a74922168f9e1c8168437babf2a6293aec2dd0f697754e3ad1fbd node-v10.23.3-win-x86.zip -1cc375f5af02ce8db295a6fd932b2645122cc6dd527290f947ad6da2a1bb4d15 node-v10.23.3-x64.msi -68325cae566ad54ae076bf1160d47378f0a4a57ca65d3dc30d27fb2d5f9477e0 node-v10.23.3-x86.msi -1c2784462001f250a158be98cd93d3ed3ec40d52fbba0cd3a241ea9b6ce14d05 win-x64/node.exe +59bdb393035c605627bf4ba64ad8edcc74f067043790c7edc545333cca8630c4 node-v10.24.0-aix-ppc64.tar.gz +265ccad26fdfdcd86d6571b0bf5f1815b55f6a4a9b367816ad0369790501f55e node-v10.24.0-darwin-x64.tar.gz +ba749262eb5599360cdfe5edf7516a98269defcb6d2de56a9bbfd95a76366a7d node-v10.24.0-darwin-x64.tar.xz +165ca4182bcfa952d2405e53f480525dfe62c3fd453a893bc34df6cbb8fc6740 node-v10.24.0-headers.tar.gz +c7afbb814018f2bed87e85b2aa71c864c961a3754b0733bcfd077fbb068cfd76 node-v10.24.0-headers.tar.xz +65e6255c6f95b6dcf87f13c21994bc80205b4bd7c7d9a3fe1f8f2a18daec576d node-v10.24.0-linux-arm64.tar.gz +41bbf035512a72d073e93440458ad6e48586853fc0a5b6396ded80a2d45cb49c node-v10.24.0-linux-arm64.tar.xz +5a5dcc02bfd0ddcbeb2ef68f116bb72e416149f15f12767864bde77edd7f39d1 node-v10.24.0-linux-armv6l.tar.gz +076d387b1e9345c675745a453f642b6819b07b21cf21d6824f33c8d508f71559 node-v10.24.0-linux-armv6l.tar.xz +02feb052d0e1eb77c9beea5cfe3b67b90d5209ab509797f4f6c892c75cc30fda node-v10.24.0-linux-armv7l.tar.gz +0b01cb43903bc2d06f0ea3bb6753da4c91fd9533f1bd74e8bd2ee55b470a9084 node-v10.24.0-linux-armv7l.tar.xz +227338ffe74d2c2a87bd1bd77f4c74d21d8027e8eff78eb8e7f686a470b83fbe node-v10.24.0-linux-ppc64le.tar.gz +1d5b9c5a6ffb7027bbf9cf608d919c280039cea1f1f0308324aca871d874fca7 node-v10.24.0-linux-ppc64le.tar.xz +5a4478e6602c6c6fb28bc01b5356215e714ef0d3917fb1ede487c9b93e88741e node-v10.24.0-linux-s390x.tar.gz +322d9faf2d724de4596cc021e5eb37553ceafc07fccd2f39afede8c56dde7432 node-v10.24.0-linux-s390x.tar.xz +d8d7ecb0667a9b86b7ce1994731f9c9d313b46f04de59f724259a6fda685617a node-v10.24.0-linux-x64.tar.gz +a937fb43225289ada54c6c3272a2ad18e1e33b8c7d6211c289d421b5051fdbd0 node-v10.24.0-linux-x64.tar.xz +347004459f040a83bf7f1cb663dd9ba846df8def8967a9572801484768b8a754 node-v10.24.0.pkg +c5233cea13d3ce560cda1cdda873c2054bd3b5621da466fb4965668ef4259b93 node-v10.24.0-sunos-x64.tar.gz +2b43e85f73a0dbc1ec0e64394c2607cbfe53045aaa11f3d9a65ceb4cc6ee8394 node-v10.24.0-sunos-x64.tar.xz +c8d0a56279be77a9033b5f89603c6c491060a661c607fbf82bbe931ca662996e node-v10.24.0.tar.gz +158273af66f891b2fca90aec7336c42f7574f467affad02c14e80ca163cb3acc node-v10.24.0.tar.xz +bf839f4d96e1cb105c271a1ccb7a728ff8ce7dfd34a260afaf02e349b00831d2 node-v10.24.0-win-x64.7z +abf0aa48f642aa9ef6cc0021d2fe0275a60feece603664a76c31a812adc710bb node-v10.24.0-win-x64.zip +7e0e4c6b43935ce194456bbf066bb72fad49427fa08bfd4e7fc9818b4f312d3c node-v10.24.0-win-x86.7z +6e32b8c513ba209ae7ac2058c106d0b83b4c14c3472d3f1ad956fd3462691799 node-v10.24.0-win-x86.zip +a2c5dd02e43715127248d8533d260a9d4359b9f2d6ba6958df65631b8bf627cf node-v10.24.0-x64.msi +afcfa989c331e92ed02aeb88b0865ac2264b7bc297685ea46de48d5a945d46c0 node-v10.24.0-x86.msi +58c529834cbc65363d07e1ee59bb577cc76f527a2b0db80d0784e9b6e3c7e6da win-x64/node.exe 7688ed23318d253aa98ee198f94983e4b563fab188e6fd9dd32955e77111096a win-x64/node.lib -c8b79a94be1fd400003067ff9a376f1c602d051a5547f6e9eeeddfc5c1f0207e win-x64/node_pdb.7z -f81c67014590af935c860085eb915ef8e6ca9a6b45be49cc831162f21ef9c545 win-x64/node_pdb.zip -56136c34f7a765cc784adea093e32da1b295596a443f837c04cac951d86b7152 win-x86/node.exe +2ae5424c759a3eb7aabfbb5d21ce8227f43d27150fbf6e1dd89173eeae9a4f8c win-x64/node_pdb.7z +7a68fa70295977484f1b1dcffa7d590c5b5f84b28d0ea51ffea734850307933a win-x64/node_pdb.zip +121c6d54aa31bb43a042e7cdedf0bdc916c39895f0f46c34cac76c3990895381 win-x86/node.exe de1f3445597cbbee2e5eac435651f5dcab049a2d8bd3636877ab5803a87e269e win-x86/node.lib -84057dadd63ccda17af28b7431adc3e4f56e7463ae3ee507c035b28060343127 win-x86/node_pdb.7z -5dd040cdd8888fd26aee9c671acc2f7948a32fc1cbf27725f01d96c01a8da93f win-x86/node_pdb.zip +2e218cafa528cd3a35dd58ba621b3f182498db7f235c072f14d1426043cf2eb8 win-x86/node_pdb.7z +2e4d6d1c72a90bdff03412d525b764a445edc108cd0503c4baf7da708b081a6e win-x86/node_pdb.zip ++++++ SHASUMS256.txt.sig ++++++ Binary files /var/tmp/diff_new_pack.C9qVey/_old and /var/tmp/diff_new_pack.C9qVey/_new differ ++++++ node-v10.23.3.tar.xz -> node-v10.24.0.tar.xz ++++++ /work/SRC/openSUSE:Factory/nodejs10/node-v10.23.3.tar.xz /work/SRC/openSUSE:Factory/.nodejs10.new.2378/node-v10.24.0.tar.xz differ: char 27, line 1

1 0

commit cyrus-sasl for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cyrus-sasl for openSUSE:Factory checked in at 2021-03-02 12:26:35 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cyrus-sasl (Old) and /work/SRC/openSUSE:Factory/.cyrus-sasl.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cyrus-sasl" Tue Mar 2 12:26:35 2021 rev:61 rq:875610 version:2.1.27 Changes: -------- --- /work/SRC/openSUSE:Factory/cyrus-sasl/cyrus-sasl-bdb.changes 2020-12-28 10:29:41.130795167 +0100 +++ /work/SRC/openSUSE:Factory/.cyrus-sasl.new.2378/cyrus-sasl-bdb.changes 2021-03-02 12:28:22.823474165 +0100 @@ -1,0 +2,7 @@ +Thu Feb 25 18:03:26 UTC 2021 - Peter Varkoly <varkoly(a)suse.com> + +- Fix build: Do not build libsasl2-3 in the bdb package. This will + not be linked to berkely db. libsasl2-3 is now defined as + %BuildRequires and %Requires + +------------------------------------------------------------------- @@ -5 +12 @@ - The pacakges cyrus-sasl and cyrus-sasl-saslauthd are build + The packages cyrus-sasl and cyrus-sasl-saslauthd are built @@ -7 +14 @@ - The pacakges cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are build + The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built --- /work/SRC/openSUSE:Factory/cyrus-sasl/cyrus-sasl-saslauthd-bdb.changes 2020-12-28 10:29:41.226795246 +0100 +++ /work/SRC/openSUSE:Factory/.cyrus-sasl.new.2378/cyrus-sasl-saslauthd-bdb.changes 2021-03-02 12:28:23.263474558 +0100 @@ -5 +5 @@ - The pacakges cyrus-sasl and cyrus-sasl-saslauthd are build + The packages cyrus-sasl and cyrus-sasl-saslauthd are built @@ -7 +7 @@ - The pacakges cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are build + The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built --- /work/SRC/openSUSE:Factory/cyrus-sasl/cyrus-sasl.changes 2020-12-28 10:29:41.426795411 +0100 +++ /work/SRC/openSUSE:Factory/.cyrus-sasl.new.2378/cyrus-sasl.changes 2021-03-02 12:28:23.499474769 +0100 @@ -1,0 +2,8 @@ +Fri Jan 8 11:32:42 UTC 2021 - Peter Varkoly <varkoly(a)suse.com> + +- CVE-2020-8032: cyrus-sasl: Local privilege escalation to root + due to insecure tmp file usage. (bsc#1180669) + Use /var/adm/update-scripts/ instead of /tmp. Clean up temporary + files. + +------------------------------------------------------------------- @@ -5 +13 @@ - The pacakges cyrus-sasl and cyrus-sasl-saslauthd are build + The packages cyrus-sasl and cyrus-sasl-saslauthd are built @@ -7 +15 @@ - The pacakges cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are build + The packages cyrus-sasl-bdb and cyrus-sasl-saslauthd-bdb are built ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cyrus-sasl-bdb.spec ++++++ --- /var/tmp/diff_new_pack.Vap6yh/_old 2021-03-02 12:28:24.155475355 +0100 +++ /var/tmp/diff_new_pack.Vap6yh/_new 2021-03-02 12:28:24.155475355 +0100 @@ -1,7 +1,7 @@ # # spec file for package cyrus-sasl-bdb # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -36,8 +36,10 @@ Patch6: cyrus-sasl-lfs.patch Patch7: fix_libpq-fe_include.diff BuildRoot: %{_tmppath}/%{name}-%{version}-build +Requires: libsasl2-3 BuildRequires: db-devel BuildRequires: krb5-mini-devel +BuildRequires: libsasl2-3 BuildRequires: libtool BuildRequires: openssl-devel BuildRequires: opie @@ -52,49 +54,49 @@ %package gssapi Summary: Plugin for the GSSAPI SASL mechanism Group: Productivity/Networking/Other -Requires: cyrus-sasl = %{version} +Requires: cyrus-sasl-bdb = %{version} Conflicts: cyrus-sasl-gssapi %package crammd5 Summary: Plugin for the CRAMMD5 SASL mechanism Group: Productivity/Networking/Other -Requires: cyrus-sasl = %{version} +Requires: cyrus-sasl-bdb = %{version} Conflicts: cyrus-sasl-crammd5 %package digestmd5 Summary: Plugin for the DIGESTMD5 SASL mechanism Group: Productivity/Networking/Other -Requires: cyrus-sasl = %{version} +Requires: cyrus-sasl-bdb = %{version} Conflicts: cyrus-sasl-digestmd5 %package otp Summary: Plugin for the OTP SASL mechanism Group: Productivity/Networking/Other -Requires: cyrus-sasl = %{version} +Requires: cyrus-sasl-bdb = %{version} Conflicts: cyrus-sasl-otp %package plain Summary: Plugin for the PLAIN SASL mechanism Group: Productivity/Networking/Other -Requires: cyrus-sasl = %{version} +Requires: cyrus-sasl-bdb = %{version} Conflicts: cyrus-sasl-plain %package ntlm Summary: Plugin for the NTLM SASL mechanism Group: Productivity/Networking/Other -Requires: cyrus-sasl = %{version} +Requires: cyrus-sasl-bdb = %{version} Conflicts: cyrus-sasl-ntlm %package gs2 Summary: Plugin for the GS2 SASL mechanism Group: Productivity/Networking/Other -Requires: cyrus-sasl = %{version} +Requires: cyrus-sasl-bdb = %{version} Conflicts: cyrus-sasl-gs2 %package scram Summary: Plugin for the SCRAM SASL mechanism Group: Productivity/Networking/Other -Requires: cyrus-sasl = %{version} +Requires: cyrus-sasl-bdb = %{version} Conflicts: cyrus-sasl-scram %package devel ++++++ cyrus-sasl-saslauthd-bdb.spec ++++++ --- /var/tmp/diff_new_pack.Vap6yh/_old 2021-03-02 12:28:24.171475370 +0100 +++ /var/tmp/diff_new_pack.Vap6yh/_new 2021-03-02 12:28:24.175475374 +0100 @@ -1,7 +1,7 @@ # # spec file for package cyrus-sasl-saslauthd-bdb # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed cyrus-sasl-saslauthd.spec: same change ++++++ cyrus-sasl.spec ++++++ --- /var/tmp/diff_new_pack.Vap6yh/_old 2021-03-02 12:28:24.227475420 +0100 +++ /var/tmp/diff_new_pack.Vap6yh/_new 2021-03-02 12:28:24.227475420 +0100 @@ -1,7 +1,7 @@ # # spec file for package cyrus-sasl # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -112,7 +112,6 @@ %package -n libsasl2-3 Summary: Simple Authentication and Security Layer (SASL) library Group: System/Libraries -Conflicts: libsasl2-3-bdb %description This is the Cyrus SASL API. It can be used on the client or server side @@ -218,7 +217,7 @@ #Convert password file from berkely into gdbm #In %pre the existing file will be dumped out if [ -e /etc/sasldb2 ]; then -cat <<EOF > /tmp/saslpw.awk +cat <<EOF > /var/adm/update-scripts/saslpw.awk { split(\$0,b,/\\\00/) if( b[3] == "userPassword" ) { @@ -233,7 +232,8 @@ } } EOF -db_dump -p /etc/sasldb2 | gawk -f /tmp/saslpw.awk > /var/adm/update-scripts/saslpwd +db_dump -p /etc/sasldb2 | gawk -f /var/adm/update-scripts/saslpw.awk > /var/adm/update-scripts/saslpwd +rm -f /var/adm/update-scripts/saslpw.awk mv /etc/sasldb2 /etc/sasldb2-back fi @@ -241,6 +241,7 @@ if [ -e /var/adm/update-scripts/saslpwd ]; then chmod 755 /var/adm/update-scripts/saslpwd /var/adm/update-scripts/saslpwd + rm -f /var/adm/update-scripts/saslpwd fi %post -n %lname -p /sbin/ldconfig

1 0

commit pipewire for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pipewire for openSUSE:Factory checked in at 2021-03-02 12:26:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pipewire (Old) and /work/SRC/openSUSE:Factory/.pipewire.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "pipewire" Tue Mar 2 12:26:31 2021 rev:23 rq:875335 version:0.3.22 Changes: -------- --- /work/SRC/openSUSE:Factory/pipewire/pipewire.changes 2021-02-22 14:39:58.360591865 +0100 +++ /work/SRC/openSUSE:Factory/.pipewire.new.2378/pipewire.changes 2021-03-02 12:28:21.327472827 +0100 @@ -1,0 +2,95 @@ +Thu Feb 25 11:10:46 UTC 2021 - Antonio Larrosa <alarrosa(a)suse.com> + +- Do not provide pulseaudio, but pulseaudio-daemon so we can + specify in the patterns that we prefer the pulseaudio package + (boo#1182730) + +------------------------------------------------------------------- +Thu Feb 25 07:32:58 UTC 2021 - Antonio Larrosa <alarrosa(a)suse.com> + +- Update to version 0.3.22: + * Highlights + + Per client config files replace the module-profiles. It's + now possible to tweak settings and load custom modules. + + Pro Audio card profile support. You can now select the + Pro Audio profile and have raw device access with the + maximum number of channels and no mixer controls. This is + the usual setup for managing high end Pro Audio cards. + + Many fixes and improvements in the JACK library to make + devices look and integrate better. + + Many bluetooth improvements. Playback should be more + reliable and better synchronized. Support for the HFP HF + profile. + + Small fixes and improvements all over the map. + * PipeWire improvements + + Add support for restrictions requested by a client. This + makes it possible to implement Flatpak policy for emulated + PulseAudio clients as well. + + Fix removal of params in objects. Previously they would not + be removed from the cache. + + Remove mlock warnings by default. There is an option to + enable them again if you want to check if your system is + optimized. + + Remove LimitMEMLOCK lines from the service files. They can + only lower the system settings and are thus not useful. + + Implement per-client config files. Each pipewire client will + now read a config file that you can use to configure the + context of the client. + + Implement state and config load/save in pipewire. This is + used by the session manager or other apps. + + Make an option to disable dbus support. + + Add tool to convert pipewire config to JSON. + * Session-manager + + Give all permissions to Manager flatpak apps. In the future + we will use the Permission store to remember user settings. + + Improvements to default audio/sink handling. + + Add option to configure device suspend time. + + Small fixes in route handling. + * Device support + + Complain when ACP profile files are not found and use + a fallback in order to get something working. + + Add volume support to monitor ports. + + Fix resume from suspend for ALSA in more cases. + + ALSA ACP cards now have a Pro Audio profile that exposes + the raw card devices. + * Bluetooth + + Enable A2DP delay reporting. This improves audio/video sync + when playing audio over bluetooth. + + Fix stuttering in A2DP source + + Tweak buffer size and latency settings to avoid stuttering + + More work on HSP and HFP support + + Fix initial profile configuration + + Add HFP HF support + * PulseAudio server + + Small tweaks in capture packet size to avoid crashes in some + apps. + + Detect Flatpak apps and requests the flatpak permissions from + the session manager. This means that Flatpak pulseaudio apps + will now run with reduced permissions. + * ALSA plugin + + Reduce min buffer size in the plugin for lower possible + latency. + * JACK + + implement some missing methods to make qjackctl work again. + + Use the context data thread instead of making our own. This + fixes the issue where the data thread was not given RT + priority correctly. + + Pass extra jack flags around in port properties. This makes + CV ports in carla work. + + Many tweaks to the port names and aliases. Unwanted + characters are filtered out, giving better names to jack + apps. Default device names are now equal to those seen in + pulseaudio apps. + + Add an option to make a separate client for the monitor + ports of a device. This makes it more usable in apps. + + add support for system:playback_N and system:capture_N port + names for apps that hardcode these port names. + +------------------------------------------------------------------- +Wed Feb 24 11:29:58 UTC 2021 - Dominique Leuenberger <dimstar(a)opensuse.org> + +- Re-add the Provides: pulseaudio; patterns-base now suggests + pulseaudio, which should help zypp in doing a smarter decision + (boo#1182730). + +------------------------------------------------------------------- @@ -13 +108 @@ - switch. + switch (boo#1182730). Old: ---- pipewire-0.3.21.obscpio New: ---- pipewire-0.3.22.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pipewire.spec ++++++ --- /var/tmp/diff_new_pack.80EvIq/_old 2021-03-02 12:28:22.059473481 +0100 +++ /var/tmp/diff_new_pack.80EvIq/_new 2021-03-02 12:28:22.063473484 +0100 @@ -35,7 +35,7 @@ %endif Name: pipewire -Version: 0.3.21 +Version: 0.3.22 Release: 0 Summary: A Multimedia Framework designed to be an audio and video server and more License: MIT @@ -239,8 +239,8 @@ Conflicts: pulseaudio # Virtual Provides to support swapping between PipeWire-PA and PA -#Provides: pulseaudio-daemon -#Conflicts: pulseaudio-daemon +Provides: pulseaudio-daemon +Conflicts: pulseaudio-daemon #Provides: pulseaudio-module-bluetooth #Provides: pulseaudio-module-jack @@ -351,7 +351,11 @@ %{_mandir}/man5/pipewire.conf.5%{ext_man} %dir %{_sysconfdir}/pipewire -%config %{_sysconfdir}/pipewire/pipewire.conf +%config(noreplace) %{_sysconfdir}/pipewire/pipewire.conf +%config(noreplace) %{_sysconfdir}/pipewire/client.conf +%config(noreplace) %{_sysconfdir}/pipewire/client-rt.conf +%config(noreplace) %{_sysconfdir}/pipewire/jack.conf +%config(noreplace) %{_sysconfdir}/pipewire/pipewire-pulse.conf %dir %{_sysconfdir}/pipewire/media-session.d %config(noreplace) %{_sysconfdir}/pipewire/media-session.d/media-session.conf %config(noreplace) %{_sysconfdir}/pipewire/media-session.d/alsa-monitor.conf @@ -406,6 +410,7 @@ %{_bindir}/spa-monitor %{_bindir}/spa-acp-tool %{_bindir}/spa-resample +%{_bindir}/spa-json-dump %files modules %dir %{_libdir}/pipewire-%{apiver} ++++++ _service ++++++ --- /var/tmp/diff_new_pack.80EvIq/_old 2021-03-02 12:28:22.083473503 +0100 +++ /var/tmp/diff_new_pack.80EvIq/_new 2021-03-02 12:28:22.083473503 +0100 @@ -3,7 +3,7 @@ <service name="obs_scm" mode="disabled"> <param name="scm">git</param> <param name="url">https://gitlab.freedesktop.org/pipewire/pipewire.git</param> - <param name="revision">0.3.21</param> + <param name="revision">0.3.22</param> <param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param> <param name="versionrewrite-pattern">(.*)\+0</param> <param name="versionrewrite-replacement">\1</param> ++++++ pipewire-0.3.21.obscpio -> pipewire-0.3.22.obscpio ++++++ /work/SRC/openSUSE:Factory/pipewire/pipewire-0.3.21.obscpio /work/SRC/openSUSE:Factory/.pipewire.new.2378/pipewire-0.3.22.obscpio differ: char 49, line 1 ++++++ pipewire.obsinfo ++++++ --- /var/tmp/diff_new_pack.80EvIq/_old 2021-03-02 12:28:22.139473553 +0100 +++ /var/tmp/diff_new_pack.80EvIq/_new 2021-03-02 12:28:22.139473553 +0100 @@ -1,5 +1,5 @@ name: pipewire -version: 0.3.21 -mtime: 1612362026 -commit: 885748dfbd82985abbe396cb3272264ea2e0d163 +version: 0.3.22 +mtime: 1613643135 +commit: 22d563720a7f6ba7bdf59950f8c14488d80dfa95

1 0

commit toolbox for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package toolbox for openSUSE:Factory checked in at 2021-03-02 12:26:28 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/toolbox (Old) and /work/SRC/openSUSE:Factory/.toolbox.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "toolbox" Tue Mar 2 12:26:28 2021 rev:11 rq:875299 version:2.1+git20210226.daeb191 Changes: -------- --- /work/SRC/openSUSE:Factory/toolbox/toolbox.changes 2021-02-07 15:18:16.933693925 +0100 +++ /work/SRC/openSUSE:Factory/.toolbox.new.2378/toolbox.changes 2021-03-02 12:28:11.403463950 +0100 @@ -1,0 +2,22 @@ +Fri Feb 26 08:29:43 UTC 2021 - kukuk(a)suse.com + +- Update to version 2.1+git20210226.daeb191: + * Set trap only after option parsing (#22) + +------------------------------------------------------------------- +Thu Feb 25 15:53:06 UTC 2021 - kukuk(a)suse.com + +- Update to version 2.1+git20210225.5c541c8: + * Check sub{u,g}id if rootless, and fail early if they're not setup + * Fix creating a container with a specific name with `-c` + +------------------------------------------------------------------- +Mon Feb 08 09:03:18 UTC 2021 - kukuk(a)suse.com + +- Update to version 2.1+git20210208.a720b25: + * Alleviate the need for zypper in the user toolbox script + * Consolidate logging and help debugging of the user toolbox's script + * Export machine-id and IPC inside the toolbox (IPC, user only) + * Fix (more) formatting... + +------------------------------------------------------------------- Old: ---- microos-toolbox-2.1+git20210203.a669e3a.tar.xz New: ---- microos-toolbox-2.1+git20210226.daeb191.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ toolbox.spec ++++++ --- /var/tmp/diff_new_pack.2pwoCj/_old 2021-03-02 12:28:12.519464948 +0100 +++ /var/tmp/diff_new_pack.2pwoCj/_new 2021-03-02 12:28:12.523464953 +0100 @@ -17,7 +17,7 @@ Name: toolbox -Version: 2.1+git20210203.a669e3a +Version: 2.1+git20210226.daeb191 Release: 0 Summary: Script to start a toolbox container for system debugging License: Apache-2.0 ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.2pwoCj/_old 2021-03-02 12:28:12.555464981 +0100 +++ /var/tmp/diff_new_pack.2pwoCj/_new 2021-03-02 12:28:12.559464985 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">git://github.com/kubic-project/microos-toolbox.git</param> - <param name="changesrevision">e589434b4619773c676c7aef667f69b6d944da6b</param> + <param name="changesrevision">daeb191ea97061ee52b831ccd93442a2a7b00038</param> </service> </servicedata> \ No newline at end of file ++++++ microos-toolbox-2.1+git20210203.a669e3a.tar.xz -> microos-toolbox-2.1+git20210226.daeb191.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/microos-toolbox-2.1+git20210203.a669e3a/toolbox new/microos-toolbox-2.1+git20210226.daeb191/toolbox --- old/microos-toolbox-2.1+git20210203.a669e3a/toolbox 2021-02-03 11:29:25.000000000 +0100 +++ new/microos-toolbox-2.1+git20210226.daeb191/toolbox 2021-02-26 09:27:41.000000000 +0100 @@ -16,8 +16,6 @@ set -eo pipefail -trap cleanup EXIT - # Defaults REGISTRY=registry.opensuse.org IMAGE=opensuse/toolbox @@ -77,12 +75,12 @@ container_runlabel return fi - # We want to do the user setup only when the container is created for the first time - [[ -n "${CREATE_AS_USER}" ]] && SETUP_USER=true + # We want to do the user setup only when the container is created for the first time + [[ -n "${CREATE_AS_USER}" ]] && SETUP_USER=true else echo "Container '$TOOLBOX_NAME' already exists. Trying to start..." echo "(To remove the container and start with a fresh toolbox, run: podman rm '$TOOLBOX_NAME')" - msg="start" + msg="start" fi local state @@ -100,16 +98,20 @@ echo "this may take some time. But this will only happen now that the toolbox is being created)" local tmp_user_setup tmp_user_setup=$(mktemp "${HOME}/.${TOOLBOX_NAME}-user-setup-XXXXXX.sh") + tmp_user_setup_log="/dev/null" + # DEBUG: uncomment the following line to see logs of the script in /tmp + #tmp_user_setup_log="/tmp/$(basename -- ${tmp_user_setup}).log" cat <<EOF > "${tmp_user_setup}" #!/bin/bash -groupadd -g ${USER_GID} ${USER_GNAME} &> /dev/null -useradd -M -N -g ${USER_GNAME} -u ${USER_ID} ${USER_NAME} &> /dev/null -getent group wheel >/dev/null || zypper install -y --no-recommends sudo system-group-wheel &> /dev/null -echo "%wheel ALL = (root) NOPASSWD:ALL" > /etc/sudoers.d/wheel 2> /dev/null -usermod -G wheel -a ${USER_NAME} &> /dev/null +groupadd -g ${USER_GID} ${USER_GNAME} +useradd -M -N -g ${USER_GNAME} -u ${USER_ID} ${USER_NAME} +if ! command -v sudo &> /dev/null ; then + zypper install -y --no-recommends sudo +fi +mkdir -p /etc/sudoers.d/ && echo "${USER_NAME} ALL = (root) NOPASSWD:ALL" > /etc/sudoers.d/${USER_NAME} EOF ${SUDO} podman cp "${tmp_user_setup}" "${TOOLBOX_NAME}":"${tmp_user_setup}" - ${SUDO} podman exec --user root "${TOOLBOX_NAME}" bash "${tmp_user_setup}" + ${SUDO} podman exec --user root "${TOOLBOX_NAME}" bash "${tmp_user_setup}" &> "${tmp_user_setup_log}" ${SUDO} podman exec --user root "${TOOLBOX_NAME}" rm "${tmp_user_setup}" fi @@ -144,6 +146,17 @@ } image_pull() { + if [ -z ${SUDO} ]; then + if [ ! `grep $USER /etc/subuid` ] || [ ! `grep $USER /etc/subgid` ]; then + echo "$0: ERROR: rootless mode wanted but no subuid and/or subgid for user '$USER'" + echo " Toolbox will only work for this user if rootless podman is configured properly." + echo " consider doing something like this:" + echo " sudo usermod --add-subuids 100000-165535 --add-subgids 100000-165535 $USER" + echo " and then restart." + echo " Or use '-r', for using a rootfull container." + exit 1 + fi + fi ${SUDO} podman pull "$TOOLBOX_IMAGE" } @@ -159,7 +172,8 @@ --privileged \ --security-opt label=disable ${CREATE_AS_USER} \ --volume /:/media/root:rslave \ - --volume /dev:/dev:rslave \ + --volume /dev:/dev:rslave \ + --volume /etc/machine-id:/etc/machine-id:ro \ "$TOOLBOX_IMAGE" sleep +Inf 2>&1; then echo "$0: failed to create container '$TOOLBOX_NAME'" exit 1 @@ -275,10 +289,10 @@ ;; -u|--user) shift - MODE="user" + MODE="user" ;; -c|--container) - if [ -z "$TAG" ]; then + if [ -n "$TAG" ]; then echo "ERROR: Don't use both -c and -t!" show_help exit 1 @@ -321,6 +335,10 @@ esac done + # Don't call trap before, else we will cleanup stuff + # where nothing is to cleanup and report wrong error + trap cleanup EXIT + # Let's rebuild the image URI (this means that command # line, if present, overrides config file) TOOLBOX_IMAGE=$(echo "${REGISTRY}"/"${IMAGE}" | sed 's/^\///g') @@ -328,7 +346,7 @@ if [ "$MODE" = "user" ]; then USER_ID=$(id -u); USER_GID=$(id -g) USER_NAME=$(id -un) ; USER_GNAME=$(id -gn) - if [ -z "$CHANGE_NAME" ]; then + if [ -z "$CHANGE_NAME" ]; then TOOLBOX_NAME="${TOOLBOX_NAME}-user" fi @@ -339,7 +357,7 @@ test -d "${HOME}" && VOLUMES="$VOLUMES --volume ${HOME}:${HOME}" test -d "/run/user/${USER_ID}" && VOLUMES="$VOLUMES --volume /run/user/${USER_ID}:/run/user/${USER_ID}:rslave" test -d /run/media && VOLUMES="$VOLUMES --volume /run/media/:/run/media/:rslave" - CREATE_AS_USER="--pid host --userns=keep-id --user root:root $VOLUMES" + CREATE_AS_USER="--pid host --ipc host --userns=keep-id --user root:root $VOLUMES" for ENV in $USER_ENV ; do eval VAL="$""$ENV" [[ -n "$VAL" ]] && USER_ENV_STR="$USER_ENV_STR --env $ENV=$VAL"

1 0

commit libcontainers-common for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libcontainers-common for openSUSE:Factory checked in at 2021-03-02 12:26:26 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libcontainers-common (Old) and /work/SRC/openSUSE:Factory/.libcontainers-common.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libcontainers-common" Tue Mar 2 12:26:26 2021 rev:31 rq:875203 version:20210112 Changes: -------- --- /work/SRC/openSUSE:Factory/libcontainers-common/libcontainers-common.changes 2021-01-19 15:59:56.731176015 +0100 +++ /work/SRC/openSUSE:Factory/.libcontainers-common.new.2378/libcontainers-common.changes 2021-03-02 12:27:58.759452642 +0100 @@ -1,0 +2,8 @@ +Thu Feb 25 16:15:46 UTC 2021 - Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> + +- Update commonver to 0.35.1 +- Update podmanver to 3.0.1 +- Update storagever to 1.24.8 +- Update imagever to 5.10.4 + +------------------------------------------------------------------- Old: ---- common-0.33.0.tar.xz image-5.9.0.tar.xz podman-2.2.1.tar.xz storage-1.24.5.tar.xz New: ---- common-0.35.1.tar.xz image-5.10.4.tar.xz podman-3.0.1.tar.xz storage-1.24.8.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libcontainers-common.spec ++++++ --- /var/tmp/diff_new_pack.xBSBMF/_old 2021-03-02 12:28:04.615457880 +0100 +++ /var/tmp/diff_new_pack.xBSBMF/_new 2021-03-02 12:28:04.619457883 +0100 @@ -17,16 +17,16 @@ # commonver - version from containers/common -%define commonver 0.33.0 +%define commonver 0.35.1 # podman - version from containers/podman -%define podmanver 2.2.1 +%define podmanver 3.0.1 # storagever - version from containers/storage -%define storagever 1.24.5 +%define storagever 1.24.8 # imagever - version from containers/image -%define imagever 5.9.0 +%define imagever 5.10.4 Name: libcontainers-common Version: 20210112 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.xBSBMF/_old 2021-03-02 12:28:04.663457923 +0100 +++ /var/tmp/diff_new_pack.xBSBMF/_new 2021-03-02 12:28:04.663457923 +0100 @@ -4,32 +4,32 @@ <param name="url">https://github.com/containers/storage.git</param> <param name="scm">git</param> <param name="filename">storage</param> -<param name="versionformat">1.24.5</param> -<param name="revision">v1.24.5</param> +<param name="versionformat">1.24.8</param> +<param name="revision">v1.24.8</param> </service> <service name="tar_scm" mode="disabled"> <param name="url">https://github.com/containers/image.git</param> <param name="scm">git</param> <param name="filename">image</param> -<param name="versionformat">5.9.0</param> -<param name="revision">v5.9.0</param> +<param name="versionformat">5.10.4</param> +<param name="revision">v5.10.4</param> </service> <service name="tar_scm" mode="disabled"> <param name="url">https://github.com/containers/podman.git</param> <param name="scm">git</param> <param name="filename">podman</param> -<param name="versionformat">2.2.1</param> -<param name="revision">v2.2.1</param> +<param name="versionformat">3.0.1</param> +<param name="revision">v3.0.1</param> </service> <service name="tar_scm" mode="disabled"> <param name="url">https://github.com/containers/common.git</param> <param name="scm">git</param> <param name="filename">common</param> -<param name="versionformat">0.33.0</param> -<param name="revision">v0.33.0</param> +<param name="versionformat">0.35.1</param> +<param name="revision">v0.35.1</param> </service> <service name="recompress" mode="disabled"> ++++++ common-0.33.0.tar.xz -> common-0.35.1.tar.xz ++++++ ++++ 21677 lines of diff (skipped) ++++++ image-5.9.0.tar.xz -> image-5.10.4.tar.xz ++++++ ++++ 3581 lines of diff (skipped) ++++++ podman-2.2.1.tar.xz -> podman-3.0.1.tar.xz ++++++ ++++ 145641 lines of diff (skipped) ++++++ storage-1.24.5.tar.xz -> storage-1.24.8.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/storage-1.24.5/.cirrus.yml new/storage-1.24.8/.cirrus.yml --- old/storage-1.24.5/.cirrus.yml 2021-01-08 14:32:51.000000000 +0100 +++ new/storage-1.24.8/.cirrus.yml 2021-02-19 12:33:38.000000000 +0100 @@ -25,7 +25,7 @@ # GCE project where images live IMAGE_PROJECT: "libpod-218412" # VM Image built in containers/automation_images - _BUILT_IMAGE_SUFFIX: "c6233039174893568" + _BUILT_IMAGE_SUFFIX: "c6524344056676352" FEDORA_CACHE_IMAGE_NAME: "fedora-${_BUILT_IMAGE_SUFFIX}" PRIOR_FEDORA_CACHE_IMAGE_NAME: "prior-fedora-${_BUILT_IMAGE_SUFFIX}" UBUNTU_CACHE_IMAGE_NAME: "ubuntu-${_BUILT_IMAGE_SUFFIX}" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/storage-1.24.5/VERSION new/storage-1.24.8/VERSION --- old/storage-1.24.5/VERSION 2021-01-08 14:32:51.000000000 +0100 +++ new/storage-1.24.8/VERSION 2021-02-19 12:33:38.000000000 +0100 @@ -1 +1 @@ -1.24.5 +1.24.8 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/storage-1.24.5/drivers/overlay/check.go new/storage-1.24.8/drivers/overlay/check.go --- old/storage-1.24.5/drivers/overlay/check.go 2021-01-08 14:32:51.000000000 +0100 +++ new/storage-1.24.8/drivers/overlay/check.go 2021-02-19 12:33:38.000000000 +0100 @@ -145,6 +145,10 @@ opts = fmt.Sprintf("%s,%s", opts, data) } if err := unix.Mount("overlay", filepath.Join(td, "merged"), "overlay", uintptr(flags), opts); err != nil { + if errors.Cause(err) == unix.EINVAL { + logrus.Info("metacopy option not supported on this kernel", mountOpts) + return false, nil + } return false, errors.Wrapf(err, "failed to mount overlay for metacopy check with %q options", mountOpts) } defer func() { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/storage-1.24.5/drivers/overlay/overlay.go new/storage-1.24.8/drivers/overlay/overlay.go --- old/storage-1.24.5/drivers/overlay/overlay.go 2021-01-08 14:32:51.000000000 +0100 +++ new/storage-1.24.8/drivers/overlay/overlay.go 2021-02-19 12:33:38.000000000 +0100 @@ -125,6 +125,15 @@ graphdriver.Register("overlay2", Init) } +func hasMetacopyOption(opts []string) bool { + for _, s := range opts { + if s == "metacopy=on" { + return true + } + } + return false +} + // Init returns the a native diff driver for overlay filesystem. // If overlay filesystem is not supported on the host, a wrapped graphdriver.ErrNotSupported is returned as error. // If an overlay filesystem is not supported over an existing filesystem then a wrapped graphdriver.ErrIncompatibleFS is returned. @@ -741,8 +750,22 @@ for _, s := range strings.Split(string(lowers), ":") { lower := d.dir(s) lp, err := os.Readlink(lower) + // if the link does not exist, we lost the symlinks during a sudden reboot. + // Let's go ahead and recreate those symlinks. if err != nil { - return nil, err + if os.IsNotExist(err) { + logrus.Warnf("Can't read link %q because it does not exist. Going through storage to recreate the missing symlinks.", lower) + if err := d.recreateSymlinks(); err != nil { + return nil, fmt.Errorf("error recreating the missing symlinks: %v", err) + } + // let's call Readlink on lower again now that we have recreated the missing symlinks + lp, err = os.Readlink(lower) + if err != nil { + return nil, err + } + } else { + return nil, err + } } lowersArray = append(lowersArray, path.Clean(d.dir(path.Join("link", lp)))) } @@ -863,7 +886,21 @@ } readWrite := true - for _, o := range options.Options { + optsList := options.Options + if len(optsList) == 0 { + optsList = strings.Split(d.options.mountOptions, ",") + } else { + // If metacopy=on is present in d.options.mountOptions it must be present in the mount + // options otherwise the kernel refuses to follow the metacopy xattr. + if hasMetacopyOption(strings.Split(d.options.mountOptions, ",")) && !hasMetacopyOption(options.Options) { + if d.usingMetacopy { + optsList = append(optsList, "metacopy=on") + } else { + logrus.Warnf("ignoring metacopy option from storage.conf, not supported with booted kernel") + } + } + } + for _, o := range optsList { if o == "ro" { readWrite = false break @@ -1001,10 +1038,8 @@ } else { opts = fmt.Sprintf("lowerdir=%s:%s", diffDir, strings.Join(absLowers, ":")) } - if len(options.Options) > 0 { - opts = fmt.Sprintf("%s,%s", strings.Join(options.Options, ","), opts) - } else if d.options.mountOptions != "" { - opts = fmt.Sprintf("%s,%s", d.options.mountOptions, opts) + if len(optsList) > 0 { + opts = fmt.Sprintf("%s,%s", strings.Join(optsList, ","), opts) } mountData := label.FormatMountLabel(opts, options.MountLabel) mountFunc := unix.Mount diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/storage-1.24.5/pkg/homedir/homedir_others.go new/storage-1.24.8/pkg/homedir/homedir_others.go --- old/storage-1.24.5/pkg/homedir/homedir_others.go 2021-01-08 14:32:51.000000000 +0100 +++ new/storage-1.24.8/pkg/homedir/homedir_others.go 2021-02-19 12:33:38.000000000 +0100 @@ -28,3 +28,8 @@ func GetConfigHome() (string, error) { return "", errors.New("homedir.GetConfigHome() is not supported on this system") } + +// GetCacheHome is unsupported on non-linux system. +func GetCacheHome() (string, error) { + return "", errors.New("homedir.GetCacheHome() is not supported on this system") +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/storage-1.24.5/pkg/homedir/homedir_unix.go new/storage-1.24.8/pkg/homedir/homedir_unix.go --- old/storage-1.24.5/pkg/homedir/homedir_unix.go 2021-01-08 14:32:51.000000000 +0100 +++ new/storage-1.24.8/pkg/homedir/homedir_unix.go 2021-02-19 12:33:38.000000000 +0100 @@ -123,3 +123,18 @@ } return filepath.Join(home, ".config"), nil } + +// GetCacheHome returns XDG_CACHE_HOME. +// GetCacheHome returns $HOME/.cache and nil error if XDG_CACHE_HOME is not set. +// +// See also https://standards.freedesktop.org/basedir-spec/latest/ar01s03.html +func GetCacheHome() (string, error) { + if xdgCacheHome := os.Getenv("XDG_CACHE_HOME"); xdgCacheHome != "" { + return xdgCacheHome, nil + } + home := Get() + if home == "" { + return "", errors.New("could not get either XDG_CACHE_HOME or HOME") + } + return filepath.Join(home, ".cache"), nil +}

1 0

commit conmon for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package conmon for openSUSE:Factory checked in at 2021-03-02 12:26:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/conmon (Old) and /work/SRC/openSUSE:Factory/.conmon.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "conmon" Tue Mar 2 12:26:23 2021 rev:19 rq:875202 version:2.0.26 Changes: -------- --- /work/SRC/openSUSE:Factory/conmon/conmon.changes 2021-01-19 15:59:55.439174061 +0100 +++ /work/SRC/openSUSE:Factory/.conmon.new.2378/conmon.changes 2021-03-02 12:27:51.591446232 +0100 @@ -1,0 +2,17 @@ +Thu Feb 25 15:41:49 UTC 2021 - Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> + +- Update to version 2.0.26: + * conn_sock: do not fail on EAGAIN + * fix segfault from a double freed pointer + * Fix a bug where conmon could never spawn a container, because + a disagreement between the caller and itself on where the attach + socket was. + * improve --full-attach to ignore the socket-dir directly. that + means callers don't need to specify a socket dir at all (and + can remove it) + * add full-attach option to allow callers to not truncate a very + long path for the attach socket + * close only opened FDs + * set locale to inherit environment + +------------------------------------------------------------------- Old: ---- conmon-2.0.22.tar.xz New: ---- conmon-2.0.26.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ conmon.spec ++++++ --- /var/tmp/diff_new_pack.qi8a0M/_old 2021-03-02 12:27:52.147446728 +0100 +++ /var/tmp/diff_new_pack.qi8a0M/_new 2021-03-02 12:27:52.151446733 +0100 @@ -17,7 +17,7 @@ Name: conmon -Version: 2.0.22 +Version: 2.0.26 Release: 0 Summary: An OCI container runtime monitor License: Apache-2.0 @@ -25,7 +25,7 @@ URL: https://github.com/containers/conmon Source0: %{name}-%{version}.tar.xz BuildRequires: glib2-devel -BuildRequires: golang(API) >= 1.15 +BuildRequires: golang(API) >= 1.16 BuildRequires: pkgconfig(libsystemd) %description ++++++ _service ++++++ --- /var/tmp/diff_new_pack.qi8a0M/_old 2021-03-02 12:27:52.171446750 +0100 +++ /var/tmp/diff_new_pack.qi8a0M/_new 2021-03-02 12:27:52.171446750 +0100 @@ -4,7 +4,7 @@ <param name="scm">git</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">[v]?([^\+]+)(.*)</param> -<param name="revision">v2.0.22</param> +<param name="revision">v2.0.26</param> <param name="changesgenerate">enable</param> </service> <service name="recompress" mode="disabled"> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.qi8a0M/_old 2021-03-02 12:27:52.187446764 +0100 +++ /var/tmp/diff_new_pack.qi8a0M/_new 2021-03-02 12:27:52.187446764 +0100 @@ -1,4 +1,4 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/containers/conmon</param> - <param name="changesrevision">9c34a8663b85e479e0c083801e89a2b2835228ed</param></service></servicedata> \ No newline at end of file + <param name="changesrevision">0e155c83aa739ef0a0540ec9f9d265f57f68038b</param></service></servicedata> ++++++ conmon-2.0.22.tar.xz -> conmon-2.0.26.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/Makefile new/conmon-2.0.26/Makefile --- old/conmon-2.0.22/Makefile 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/Makefile 2021-02-03 19:32:15.000000000 +0100 @@ -6,7 +6,7 @@ PROJECT := github.com/containers/conmon PKG_CONFIG ?= pkg-config HEADERS := $(wildcard src/*.h) -OBJS := src/conmon.o src/cmsg.o src/ctr_logging.o src/utils.o src/cli.o src/globals.o src/cgroup.o src/conn_sock.o src/oom.o src/ctrl.o src/ctr_stdio.o src/parent_pipe_fd.o src/ctr_exit.o src/runtime_args.o +OBJS := src/conmon.o src/cmsg.o src/ctr_logging.o src/utils.o src/cli.o src/globals.o src/cgroup.o src/conn_sock.o src/oom.o src/ctrl.o src/ctr_stdio.o src/parent_pipe_fd.o src/ctr_exit.o src/runtime_args.o src/close_fds.o DEBUGTAG ?= ifneq (,$(findstring enable_debug,$(DEBUGTAG))) DEBUGFLAG=-g @@ -52,7 +52,7 @@ # Update nix/nixpkgs.json its latest stable commit .PHONY: nixpkgs nixpkgs: - @nix run -f channel:nixos-20.03 nix-prefetch-git -c nix-prefetch-git \ + @nix run -f channel:nixos-20.09 nix-prefetch-git -c nix-prefetch-git \ --no-deepClone https://github.com/nixos/nixpkgs > nix/nixpkgs.json # Build statically linked binary diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/VERSION new/conmon-2.0.26/VERSION --- old/conmon-2.0.22/VERSION 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/VERSION 2021-02-03 19:32:15.000000000 +0100 @@ -1 +1 @@ -2.0.22 +2.0.26 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/docs/Makefile new/conmon-2.0.26/docs/Makefile --- old/conmon-2.0.22/docs/Makefile 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/docs/Makefile 2021-02-03 19:32:15.000000000 +0100 @@ -1,4 +1,4 @@ -PREFIX := /usr/local +PREFIX ?= /usr/local DATADIR := ${PREFIX}/share MANDIR := $(DATADIR)/man GOMD2MAN = ../tools/build/go-md2man diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/meson.build new/conmon-2.0.26/meson.build --- old/conmon-2.0.22/meson.build 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/meson.build 2021-02-03 19:32:15.000000000 +0100 @@ -58,6 +58,8 @@ 'src/ctr_stdio.h', 'src/globals.c', 'src/globals.h', + 'src/close_fds.c', + 'src/close_fds.h', 'src/oom.c', 'src/oom.h', 'src/parent_pipe_fd.c', diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/nix/default.nix new/conmon-2.0.26/nix/default.nix --- old/conmon-2.0.22/nix/default.nix 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/nix/default.nix 2021-02-03 19:32:15.000000000 +0100 @@ -59,10 +59,10 @@ doCheck = false; enableParallelBuilding = true; outputs = [ "out" ]; - nativeBuildInputs = [ bash git pcre pkg-config which ]; + nativeBuildInputs = [ bash gitMinimal pcre pkg-config which ]; buildInputs = [ glibc glibc.static glib ]; prePatch = '' - export CFLAGS='-static' + export CFLAGS='-static -pthread' export LDFLAGS='-s -w -static-libgcc -static' export EXTRA_LDFLAGS='-s -w -linkmode external -extldflags "-static -lm"' ''; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/nix/nixpkgs.json new/conmon-2.0.26/nix/nixpkgs.json --- old/conmon-2.0.22/nix/nixpkgs.json 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/nix/nixpkgs.json 2021-02-03 19:32:15.000000000 +0100 @@ -1,7 +1,10 @@ { "url": "https://github.com/nixos/nixpkgs", - "rev": "6e089d30148953df7abb3a1167169afc7848499c", - "date": "2020-11-05T09:56:30+01:00", - "sha256": "0ydqjkz7payl16psx445jwh6dc6lgbvj2w11xin1dqvbpcp03jcy", - "fetchSubmodules": false + "rev": "30c2fb65feaf1068b1c413a0b75470afd351c291", + "date": "2021-01-28T21:27:34-05:00", + "path": "/nix/store/zk71rlw37vg9hqc5j0vqi9x8qzb2ir0m-nixpkgs", + "sha256": "0b1y1lgzbagpgh9cvi9szkm162laifz0q2ss4pibns3j3gqpf5gl", + "fetchSubmodules": false, + "deepClone": false, + "leaveDotGit": false } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/cgroup.c new/conmon-2.0.26/src/cgroup.c --- old/conmon-2.0.22/src/cgroup.c 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/cgroup.c 2021-02-03 19:32:15.000000000 +0100 @@ -21,7 +21,8 @@ #define CGROUP_ROOT "/sys/fs/cgroup" -static int oom_event_fd = -1; +int oom_event_fd = -1; +int oom_cgroup_fd = -1; static char *process_cgroup_subsystem_path(int pid, bool cgroup2, const char *subsystem); static void setup_oom_handling_cgroup_v2(int pid); @@ -147,14 +148,14 @@ _cleanup_free_ char *memory_cgroup_file_oom_path = g_build_filename(memory_cgroup_path, "memory.oom_control", NULL); - int ofd = open(memory_cgroup_file_oom_path, O_RDONLY | O_CLOEXEC); /* Not closed */ - if (ofd == -1) + oom_cgroup_fd = open(memory_cgroup_file_oom_path, O_RDONLY | O_CLOEXEC); /* Not closed */ + if (oom_cgroup_fd == -1) pexitf("Failed to open %s", memory_cgroup_file_oom_path); if ((oom_event_fd = eventfd(0, EFD_CLOEXEC)) == -1) pexit("Failed to create eventfd"); - _cleanup_free_ char *data = g_strdup_printf("%d %d", oom_event_fd, ofd); + _cleanup_free_ char *data = g_strdup_printf("%d %d", oom_event_fd, oom_cgroup_fd); if (write_all(cfd, data, strlen(data)) < 0) pexit("Failed to write to cgroup.event_control"); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/cgroup.h new/conmon-2.0.26/src/cgroup.h --- old/conmon-2.0.22/src/cgroup.h 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/cgroup.h 2021-02-03 19:32:15.000000000 +0100 @@ -3,6 +3,9 @@ #include <glib.h> /* gboolean */ +extern int oom_cgroup_fd; +extern int oom_event_fd; + void setup_oom_handling(int pid); gboolean conn_sock_cb(int fd, GIOCondition condition, gpointer user_data); gboolean check_cgroup2_oom(); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/cli.c new/conmon-2.0.26/src/cli.c --- old/conmon-2.0.22/src/cli.c 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/cli.c 2021-02-03 19:32:15.000000000 +0100 @@ -49,6 +49,7 @@ gboolean opt_sync = FALSE; gboolean opt_no_sync_log = FALSE; char *opt_sdnotify_socket = NULL; +gboolean opt_full_attach_path = FALSE; GOptionEntry opt_entries[] = { {"api-version", 0, 0, G_OPTION_ARG_NONE, &opt_api_version, "Conmon API version to use", NULL}, {"bundle", 'b', 0, G_OPTION_ARG_STRING, &opt_bundle_path, "Location of the OCI Bundle path", NULL}, @@ -97,6 +98,8 @@ {"terminal", 't', 0, G_OPTION_ARG_NONE, &opt_terminal, "Allocate a pseudo-TTY. The default is false", NULL}, {"timeout", 'T', 0, G_OPTION_ARG_INT, &opt_timeout, "Kill container after specified timeout in seconds.", NULL}, {"version", 0, 0, G_OPTION_ARG_NONE, &opt_version, "Print the version and exit", NULL}, + {"full-attach", 0, 0, G_OPTION_ARG_NONE, &opt_full_attach_path, + "Don't truncate the path to the attach socket. This option causes conmon to ignore --socket-dir-path", NULL}, {NULL, 0, 0, 0, NULL, NULL, NULL}}; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/cli.h new/conmon-2.0.26/src/cli.h --- old/conmon-2.0.22/src/cli.h 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/cli.h 2021-02-03 19:32:15.000000000 +0100 @@ -44,6 +44,7 @@ extern gboolean opt_sync; extern char *opt_sdnotify_socket; extern GOptionEntry opt_entries[]; +extern gboolean opt_full_attach_path; int initialize_cli(int argc, char *argv[]); void process_cli(); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/close_fds.c new/conmon-2.0.26/src/close_fds.c --- old/conmon-2.0.22/src/close_fds.c 1970-01-01 01:00:00.000000000 +0100 +++ new/conmon-2.0.26/src/close_fds.c 2021-02-03 19:32:15.000000000 +0100 @@ -0,0 +1,83 @@ +#define _GNU_SOURCE +#if __STDC_VERSION__ >= 199901L +/* C99 or later */ +#else +#error conmon.c requires C99 or later +#endif + +#include "utils.h" +#include "ctr_logging.h" +#include "cgroup.h" +#include "cli.h" +#include "globals.h" +#include "oom.h" +#include "conn_sock.h" +#include "ctrl.h" +#include "ctr_stdio.h" +#include "config.h" +#include "parent_pipe_fd.h" +#include "ctr_exit.h" +#include "close_fds.h" +#include "runtime_args.h" + +#include <sys/prctl.h> +#include <sys/stat.h> + +static int open_files_max_fd; +static fd_set *open_files_set; + +static void __attribute__((constructor)) init() +{ + struct dirent *ent; + ssize_t size = 0; + DIR *d; + + /* Store how many FDs were open before the Go runtime kicked in. */ + d = opendir("/proc/self/fd"); + if (!d) + return; + + for (ent = readdir(d); ent; ent = readdir(d)) { + int fd; + + if (ent->d_name[0] == '.') + continue; + + fd = atoi(ent->d_name); + if (fd == dirfd(d)) + continue; + + if (fd >= size * FD_SETSIZE) { + int i; + ssize_t new_size; + + new_size = (fd / FD_SETSIZE) + 1; + open_files_set = realloc(open_files_set, new_size * sizeof(fd_set)); + if (open_files_set == NULL) + _exit(EXIT_FAILURE); + + for (i = size; i < new_size; i++) + FD_ZERO(&(open_files_set[i])); + + size = new_size; + } + + if (fd > open_files_max_fd) + open_files_max_fd = fd; + + FD_SET(fd % FD_SETSIZE, &(open_files_set[fd / FD_SETSIZE])); + } + closedir(d); +} + +void close_other_fds() +{ + int fd; + + for (fd = 3; fd < open_files_max_fd; fd++) { + if (open_files_set == NULL || FD_ISSET(fd % FD_SETSIZE, &(open_files_set[fd / FD_SETSIZE]))) + if (fd == sync_pipe_fd || fd == attach_pipe_fd || fd == dev_null_r || fd == dev_null_w || fd == oom_cgroup_fd + || fd == oom_event_fd) + close(fd); + } +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/close_fds.h new/conmon-2.0.26/src/close_fds.h --- old/conmon-2.0.22/src/close_fds.h 1970-01-01 01:00:00.000000000 +0100 +++ new/conmon-2.0.26/src/close_fds.h 2021-02-03 19:32:15.000000000 +0100 @@ -0,0 +1 @@ +void close_other_fds(); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/conmon.c new/conmon-2.0.26/src/conmon.c --- old/conmon-2.0.22/src/conmon.c 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/conmon.c 2021-02-03 19:32:15.000000000 +0100 @@ -17,18 +17,21 @@ #include "config.h" #include "parent_pipe_fd.h" #include "ctr_exit.h" +#include "close_fds.h" #include "runtime_args.h" #include <sys/prctl.h> #include <sys/stat.h> +#include <locale.h> int main(int argc, char *argv[]) { + setlocale(LC_ALL, ""); _cleanup_gerror_ GError *err = NULL; char buf[BUF_SIZE]; int num_read; - _cleanup_close_ int dev_null_r = -1; - _cleanup_close_ int dev_null_w = -1; + _cleanup_close_ int dev_null_r_cleanup = -1; + _cleanup_close_ int dev_null_w_cleanup = -1; _cleanup_close_ int dummyfd = -1; int initialize_ec = initialize_cli(argc, argv); @@ -58,11 +61,11 @@ close(start_pipe_fd); } - dev_null_r = open("/dev/null", O_RDONLY | O_CLOEXEC); + dev_null_r_cleanup = dev_null_r = open("/dev/null", O_RDONLY | O_CLOEXEC); if (dev_null_r < 0) pexit("Failed to open /dev/null"); - dev_null_w = open("/dev/null", O_WRONLY | O_CLOEXEC); + dev_null_w_cleanup = dev_null_w = open("/dev/null", O_WRONLY | O_CLOEXEC); if (dev_null_w < 0) pexit("Failed to open /dev/null"); @@ -97,7 +100,6 @@ /* Environment variables */ sync_pipe_fd = get_pipe_fd_from_env("_OCI_SYNCPIPE"); - int attach_pipe_fd = -1; if (opt_attach) { attach_pipe_fd = get_pipe_fd_from_env("_OCI_ATTACHPIPE"); if (attach_pipe_fd < 0) { @@ -167,7 +169,8 @@ /* now that we've set mainfd_stdout, we can register the ctrl_winsz_cb * if we didn't set it here, we'd risk attempting to run ioctl on * a negative fd, and fail to resize the window */ - g_unix_fd_add(winsz_fd_r, G_IO_IN, ctrl_winsz_cb, NULL); + if (winsz_fd_r >= 0) + g_unix_fd_add(winsz_fd_r, G_IO_IN, ctrl_winsz_cb, NULL); } /* We always create a stderr pipe, because that way we can capture @@ -464,24 +467,8 @@ * the container runs. Close them before we notify the container exited, so that they can be * reused immediately. */ - DIR *fdsdir = opendir("/proc/self/fd"); - if (fdsdir != NULL) { - int fd; - int dfd = dirfd(fdsdir); - struct dirent *next; - - for (next = readdir(fdsdir); next; next = readdir(fdsdir)) { - const char *name = next->d_name; - if (name[0] == '.') - continue; - - fd = strtoll(name, NULL, 10); - if (fd == dfd || fd == sync_pipe_fd || fd == attach_pipe_fd || fd == dev_null_r || fd == dev_null_w) - continue; - close(fd); - } - closedir(fdsdir); - } + close_other_fds(); + close_all_readers(); _cleanup_free_ char *status_str = g_strdup_printf("%d", exit_status); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/conn_sock.c new/conmon-2.0.26/src/conn_sock.c --- old/conmon-2.0.22/src/conn_sock.c 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/conn_sock.c 2021-02-03 19:32:15.000000000 +0100 @@ -22,7 +22,9 @@ static void schedule_local_sock_write(struct local_sock_s *local_sock); static void sock_try_write_to_local_sock(struct remote_sock_s *sock); static gboolean local_sock_write_cb(G_GNUC_UNUSED int fd, G_GNUC_UNUSED GIOCondition condition, G_GNUC_UNUSED gpointer user_data); -static char *bind_unix_socket(char *socket_relative_name, int sock_type, mode_t perms, struct remote_sock_s *remote_sock); +static char *bind_unix_socket(char *socket_relative_name, int sock_type, mode_t perms, struct remote_sock_s *remote_sock, + gboolean use_full_attach_path); +static char *socket_parent_dir(gboolean use_full_attach_path, size_t desired_len); /* Since our socket handling is abstract now, handling is based on sock_type, so we can pass around a structure that contains everything we need to handle I/O. Callbacks used to handle IO, for example, and whether this @@ -74,7 +76,7 @@ { struct sockaddr_un addr = {0}; _cleanup_free_ const char *tmpdir = g_get_tmp_dir(); - _cleanup_free_ char *csname = g_build_filename(tmpdir, "conmon-term.XXXXXX", NULL); + char *csname = g_build_filename(tmpdir, "conmon-term.XXXXXX", NULL); /* * Generate a temporary name. Is this unsafe? Probably, but we can * replace it with a rename(2) setup if necessary. @@ -104,12 +106,13 @@ if (listen(console_socket_fd, 128) < 0) pexit("Failed to listen on console-socket"); - return g_strdup(csname); + return csname; } char *setup_attach_socket(void) { - char *symlink_dir_path = bind_unix_socket("attach", SOCK_SEQPACKET | SOCK_NONBLOCK | SOCK_CLOEXEC, 0700, &remote_attach_sock); + char *symlink_dir_path = + bind_unix_socket("attach", SOCK_SEQPACKET | SOCK_NONBLOCK | SOCK_CLOEXEC, 0700, &remote_attach_sock, opt_full_attach_path); if (listen(remote_attach_sock.fd, 10) == -1) pexitf("Failed to listen on attach socket: %s/%s", symlink_dir_path, "attach"); @@ -134,53 +137,49 @@ /* No _cleanup_free_ here so we don't get a warning about unused variables * when compiling with clang */ char *symlink_dir_path = - bind_unix_socket("notify/notify.sock", SOCK_DGRAM | SOCK_NONBLOCK | SOCK_CLOEXEC, 0777, &remote_notify_sock); + bind_unix_socket("notify/notify.sock", SOCK_DGRAM | SOCK_NONBLOCK | SOCK_CLOEXEC, 0777, &remote_notify_sock, TRUE); g_unix_fd_add(remote_notify_sock.fd, G_IO_IN | G_IO_HUP | G_IO_ERR, remote_sock_cb, &remote_notify_sock); g_free(symlink_dir_path); } /* REMEMBER to g_free() the return value! */ -static char *bind_unix_socket(char *socket_relative_name, int sock_type, mode_t perms, struct remote_sock_s *remote_sock) +static char *bind_unix_socket(char *socket_relative_name, int sock_type, mode_t perms, struct remote_sock_s *remote_sock, + gboolean use_full_attach_path) { int socket_fd = -1; struct sockaddr_un socket_addr = {0}; socket_addr.sun_family = AF_UNIX; - _cleanup_free_ char *cwd = NULL; - /* - * Create a symlink so we don't exceed unix domain socket - * path length limit. - * - * We do NOT free this because it's returned to the parent, who is responsible for freeing it! - */ - char *base_path = g_build_filename(opt_socket_path, opt_cuuid, NULL); + /* get the parent_dir of the socket. We'll use this to get the location of the socket. */ + char *parent_dir = socket_parent_dir(use_full_attach_path, sizeof(socket_addr.sun_path)); /* - * Create a symlink so we don't exceed unix domain socket - * path length limit. We use the base path passed in from our parent. + * To be able to access the location of the attach socket, without first creating the attach socket + * but also be able to handle arbitrary length paths, we open the parent dir (base_path), and then use + * the corresponding entry in `/proc/self/fd` to act as the path to base_path, then we use the socket_relative_name + * to actually refer to the file where the socket will be created below. */ - if (unlink(base_path) == -1 && errno != ENOENT) - pexitf("Failed to remove existing symlink for socket directory %s", base_path); + _cleanup_close_ int parent_dir_fd = open(parent_dir, O_PATH); + if (parent_dir_fd < 0) + pexitf("failed to open socket path parent dir %s", parent_dir); - if (symlink(opt_bundle_path, base_path) == -1) - pexit("Failed to create symlink for notify socket"); + _cleanup_free_ char *sock_proc_entry = g_strdup_printf("/proc/self/fd/%d/%s", parent_dir_fd, socket_relative_name); + strncpy(socket_addr.sun_path, sock_proc_entry, sizeof(socket_addr.sun_path) - 1); + ninfof("addr{sun_family=AF_UNIX, sun_path=%s}", socket_addr.sun_path); - _cleanup_free_ char *sock_fullpath = g_build_filename(base_path, socket_relative_name, NULL); - _cleanup_free_ char *sock_relpath = g_build_filename(opt_cuuid, socket_relative_name, NULL); - ninfof("socket path: %s", sock_fullpath); - strncpy(socket_addr.sun_path, sock_relpath, sizeof(socket_addr.sun_path) - 1); - ninfof("addr{sun_family=AF_UNIX, sun_path=%s}", socket_addr.sun_path); + /* + * We use the fullpath for operations that aren't as limited in length as socket_addr.sun_path + * Cleanup of this variable is up to the caller + */ + char *sock_fullpath = g_build_filename(parent_dir, socket_relative_name, NULL); /* * We make the socket non-blocking to avoid a race where client aborts connection * before the server gets a chance to call accept. In that scenario, the server * accept blocks till a new client connection comes in. */ - if ((cwd = getcwd(NULL, 0)) == NULL) - pexitf("Failed to get CWD for socket %s", sock_fullpath); - socket_fd = socket(AF_UNIX, sock_type, 0); if (socket_fd == -1) pexitf("Failed to create socket %s", sock_fullpath); @@ -188,9 +187,6 @@ if (fchmod(socket_fd, perms)) pexitf("Failed to change socket permissions %s", sock_fullpath); - if (chdir(opt_socket_path) == -1) - pexitf("Could not chdir to %s", opt_socket_path); - if (unlink(sock_fullpath) == -1 && errno != ENOENT) pexitf("Failed to remove existing socket: %s", sock_fullpath); @@ -200,11 +196,48 @@ if (chmod(sock_fullpath, perms)) pexitf("Failed to change socket permissions %s", sock_fullpath); - if (chdir(cwd) == -1) - pexitf("Could not chdir to %s", cwd); - remote_sock->fd = socket_fd; + return sock_fullpath; +} + +/* + * socket_parent_dir decides whether to truncate the socket path, to match + * the caller's expectation. + * use_full_attach_path is whether conmon was told to not truncate the path. + * base_path is the path of the socket + * desired_len is the length of socket_addr.sun_path (should be strlen(char[108]) on linux). + */ +char *socket_parent_dir(gboolean use_full_attach_path, size_t desired_len) +{ + /* if we're to use the full path, ignore the socket path and only use the bundle_path */ + if (use_full_attach_path) + return opt_bundle_path; + + char *base_path = g_build_filename(opt_socket_path, opt_cuuid, NULL); + + /* + * This is to address a corner case where the symlink path length can end up being + * the same as the socket. When it happens, the symlink prevents the socket from being + * be created. This could still be a problem with other containers, but it is safe + * to assume the CUUIDs don't change length in the same directory. As a workaround, + * in such case, make the symlink one char shorter. + * + * If we're using using_full_attach_path, this is unnecessary. + */ + if (strlen(base_path) == (desired_len - 1)) + base_path[desired_len - 2] = '\0'; + + /* + * Create a symlink so we don't exceed unix domain socket + * path length limit. We use the base path passed in from our parent. + */ + if (unlink(base_path) == -1 && errno != ENOENT) + pexitf("Failed to remove existing symlink for socket directory %s", base_path); + + if (symlink(opt_bundle_path, base_path) == -1) + pexit("Failed to create symlink for notify socket"); + return base_path; } @@ -425,6 +458,20 @@ sock->readable = src->readable; sock->writable = src->writable; sock->dest = src->dest; + g_unix_set_fd_nonblocking(*sock->dest->fd, TRUE, NULL); sock->sock_type = src->sock_type; } } + +static void close_sock(gpointer data, G_GNUC_UNUSED gpointer user_data) +{ + struct remote_sock_s *sock = (struct remote_sock_s *)data; + + close(sock->fd); + sock->fd = -1; +} + +void close_all_readers() +{ + g_ptr_array_foreach(local_mainfd_stdin.readers, close_sock, NULL); +} diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/conn_sock.h new/conmon-2.0.26/src/conn_sock.h --- old/conmon-2.0.22/src/conn_sock.h 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/conn_sock.h 2021-02-03 19:32:15.000000000 +0100 @@ -52,5 +52,6 @@ void setup_notify_socket(char *); void schedule_main_stdin_write(); void write_back_to_remote_consoles(char *buf, int len); +void close_all_readers(); #endif // CONN_SOCK_H diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/globals.c new/conmon-2.0.26/src/globals.c --- old/conmon-2.0.22/src/globals.c 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/globals.c 2021-02-03 19:32:15.000000000 +0100 @@ -13,6 +13,9 @@ int inotify_fd = -1; int winsz_fd_w = -1; int winsz_fd_r = -1; +int attach_pipe_fd = -1; +int dev_null_r = -1; +int dev_null_w = -1; gboolean timed_out = FALSE; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/conmon-2.0.22/src/globals.h new/conmon-2.0.26/src/globals.h --- old/conmon-2.0.22/src/globals.h 2020-12-17 16:56:08.000000000 +0100 +++ new/conmon-2.0.26/src/globals.h 2021-02-03 19:32:15.000000000 +0100 @@ -18,6 +18,9 @@ extern int inotify_fd; extern int winsz_fd_w; extern int winsz_fd_r; +extern int attach_pipe_fd; +extern int dev_null_r; +extern int dev_null_w; extern gboolean timed_out;

1 0

commit pulseaudio for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pulseaudio for openSUSE:Factory checked in at 2021-03-02 12:26:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pulseaudio (Old) and /work/SRC/openSUSE:Factory/.pulseaudio.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "pulseaudio" Tue Mar 2 12:26:21 2021 rev:177 rq:875171 version:14.2 Changes: -------- --- /work/SRC/openSUSE:Factory/pulseaudio/pulseaudio.changes 2021-02-01 13:25:30.193850658 +0100 +++ /work/SRC/openSUSE:Factory/.pulseaudio.new.2378/pulseaudio.changes 2021-03-02 12:27:48.619443573 +0100 @@ -1,0 +2,15 @@ +Thu Feb 25 15:32:55 UTC 2021 - Antonio Larrosa <alarrosa(a)suse.com> + +- Let pulseaudio-utils require any pulseaudio-daemon provider + so parecord and the other utils can be used with other + pulseaudio implementations + +------------------------------------------------------------------- +Thu Feb 25 10:48:37 UTC 2021 - Antonio Larrosa <alarrosa(a)suse.com> + +- Provide pulseaudio-daemon capability so pipewire-pulseaudio can + also provide that capability instead of providing 'pulseaudio' + itself which makes it difficult to recommend the pulseaudio + package (boo#1182730). + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pulseaudio.spec ++++++ --- /var/tmp/diff_new_pack.dUwQYZ/_old 2021-03-02 12:27:49.967444779 +0100 +++ /var/tmp/diff_new_pack.dUwQYZ/_new 2021-03-02 12:27:49.971444783 +0100 @@ -106,6 +106,9 @@ Obsoletes: libpulsecore7 < 0.9.13 Provides: libpulsecore7 = 0.9.13 +Provides: pulseaudio-daemon +Conflicts: pulseaudio-daemon + %description pulseaudio is a networked sound server for Linux, other Unix like operating systems and Microsoft Windows. It is intended to be an @@ -285,7 +288,7 @@ %package utils Summary: PulseAudio utilities Group: System/Sound Daemons -Requires: %{name} = %{version} +Requires: pulseaudio-daemon Requires: libpulse%{soname} = %{version} Requires: libpulse-mainloop-glib%{soname} = %{version}

1 0

commit virt-manager for openSUSE:Factory
by Source-Sync 02 Mar '21

02 Mar '21

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package virt-manager for openSUSE:Factory checked in at 2021-03-02 12:26:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/virt-manager (Old) and /work/SRC/openSUSE:Factory/.virt-manager.new.2378 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "virt-manager" Tue Mar 2 12:26:19 2021 rev:221 rq:875162 version:3.2.0 Changes: -------- --- /work/SRC/openSUSE:Factory/virt-manager/virt-manager.changes 2021-01-29 14:55:16.753348916 +0100 +++ /work/SRC/openSUSE:Factory/.virt-manager.new.2378/virt-manager.changes 2021-03-02 12:27:46.251441456 +0100 @@ -1,0 +2,7 @@ +Wed Feb 24 14:10:01 MST 2021 - acho(a)suse.com + +- bsc#1178926 - Unable to find any master var for loader + /usr/share/qemu/{bios.bin, bios-256k.bin} + virtman-legacy-bios-support.patch + +------------------------------------------------------------------- New: ---- virtman-legacy-bios-support.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ virt-manager.spec ++++++ --- /var/tmp/diff_new_pack.UzbRMN/_old 2021-03-02 12:27:47.723442772 +0100 +++ /var/tmp/diff_new_pack.UzbRMN/_new 2021-03-02 12:27:47.727442776 +0100 @@ -67,6 +67,7 @@ Patch158: virtman-disallow-adding-floppy-disk.patch Patch159: virtman-register-delete-event-for-details-dialog.patch Patch160: virtman-show-no-firmware-for-xenpv.patch +Patch161: virtman-legacy-bios-support.patch Patch170: virtinst-xen-drive-type.patch Patch171: virtinst-xenbus-disk-index-fix.patch Patch172: virtinst-refresh_before_fetch_pool.patch @@ -198,6 +199,7 @@ %patch158 -p1 %patch159 -p1 %patch160 -p1 +%patch161 -p1 %patch170 -p1 %patch171 -p1 %patch172 -p1 ++++++ virtinst-keep-iso-for-xenpv.patch ++++++ --- /var/tmp/diff_new_pack.UzbRMN/_old 2021-03-02 12:27:47.831442868 +0100 +++ /var/tmp/diff_new_pack.UzbRMN/_new 2021-03-02 12:27:47.835442873 +0100 @@ -1,3 +1,7 @@ +References: bsc#1180897 +Removing the cdrom iso file from the device prevents booting +with a qemu error. + Index: virt-manager-3.2.0/virtinst/install/installer.py =================================================================== --- virt-manager-3.2.0.orig/virtinst/install/installer.py ++++++ virtinst-smbios-unsupported-for-xenpv.patch ++++++ --- /var/tmp/diff_new_pack.UzbRMN/_old 2021-03-02 12:27:47.859442894 +0100 +++ /var/tmp/diff_new_pack.UzbRMN/_new 2021-03-02 12:27:47.863442897 +0100 @@ -4,7 +4,7 @@ =================================================================== --- virt-manager-3.2.0.orig/virtinst/guest.py +++ virt-manager-3.2.0/virtinst/guest.py -@@ -691,6 +691,8 @@ class Guest(XMLBuilder): +@@ -704,6 +704,8 @@ class Guest(XMLBuilder): self.type != "kvm"): log.warning( # pragma: no cover "KVM acceleration not available, using '%s'", self.type) ++++++ virtman-legacy-bios-support.patch ++++++ References: bsc#1178926 When we choose /usr/share/qemu/bios.bin or /usr/share/qemu/bios-256k.bin in Customize configuration before install, show this error message: Unable to complete install: 'operation failed: unable to find any master var store for loader: /usr/share/qemu/bios.bin' Traceback (most recent call last): File "/usr/share/virt-manager/virtManager/asyncjob.py", line 65, in cb_wrapper callback(asyncjob, *args, **kwargs) File "/usr/share/virt-manager/virtManager/createvm.py", line 2081, in _do_async_install installer.start_install(guest, meter=meter) File "/usr/share/virt-manager/virtinst/install/installer.py", line 721, in start_install domain = self._create_guest( File "/usr/share/virt-manager/virtinst/install/installer.py", line 669, in _create_guest domain = self.conn.createXML(install_xml or final_xml, 0) File "/usr/lib64/python3.8/site-packages/libvirt.py", line 4347, in createXML raise libvirtError('virDomainCreateXML() failed') libvirt.libvirtError: operation failed: unable to find any master var store for loader: /usr/share/qemu/bios.bin This patch check the loader if it is include bios.bin and bios-256k.bin. Signed-off-by: Yu-Chen, Cho <acho suse com> -- v2: Fixed tabs vs spaces issues. v1: Check the loader if it is include bios.bin and bios-256k.bin. --- virtManager/object/domain.py | 18 +++++++++--------- virtinst/guest.py | 13 +++++++++++++ 2 files changed, 22 insertions(+), 9 deletions(-) Index: virt-manager-3.2.0/virtManager/object/domain.py =================================================================== --- virt-manager-3.2.0.orig/virtManager/object/domain.py +++ virt-manager-3.2.0/virtManager/object/domain.py @@ -671,16 +671,16 @@ class vmmDomain(vmmLibvirtObject): if loader != _SENTINEL: if loader is None: - # Implies seabios, aka the default, so clear everything - guest.os.loader = None - guest.os.loader_ro = None - guest.os.loader_type = None - guest.os.nvram = None - guest.os.nvram_template = None + # Implies the default, so clear everything + guest.set_legacy_path(None) else: - # Implies UEFI - guest.set_uefi_path(loader) - guest.disable_hyperv_for_uefi() + if "bios.bin" in loader or "bios-256k.bin" in loader: + # Implies Custom: seabios, not UEFI + guest.set_legacy_path(loader) + else: + # Implies UEFI + guest.set_uefi_path(loader) + guest.disable_hyperv_for_uefi() if nvram != _SENTINEL: guest.os.nvram = nvram Index: virt-manager-3.2.0/virtinst/guest.py =================================================================== --- virt-manager-3.2.0.orig/virtinst/guest.py +++ virt-manager-3.2.0/virtinst/guest.py @@ -569,6 +569,19 @@ class Guest(XMLBuilder): self.os.machine) self.os.machine = "q35" + def set_legacy_path(self, path): + """ + Configure legacy BIOS for QEMU. + """ + self.os.loader = path + if (path): + self.os.loader_ro = True + else: + self.os.loader_ro = None + self.os.loader_type = None + self.os.nvram = None + self.os.nvram_template = None + def disable_hyperv_for_uefi(self): # UEFI doesn't work with hyperv bits for some OS if not self.is_uefi():

1 0