October 2022 - openSUSE Commits - openSUSE Mailing Lists

commit discover for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package discover for openSUSE:Factory checked in at 2022-10-20 11:10:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/discover (Old) and /work/SRC/openSUSE:Factory/.discover.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "discover" Thu Oct 20 11:10:18 2022 rev:121 rq:1029819 version:5.26.1 Changes: -------- --- /work/SRC/openSUSE:Factory/discover/discover.changes 2022-10-11 18:03:01.241839499 +0200 +++ /work/SRC/openSUSE:Factory/.discover.new.2275/discover.changes 2022-10-20 11:10:21.851855893 +0200 @@ -1,0 +2,15 @@ +Tue Oct 18 11:27:28 UTC 2022 - Fabian Vogt <fabian(a)ritter-vogt.de> + +- Update to 5.26.1 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.1 +- Changes since 5.26.0: + * Reviews: Don't check for name field being empty when it's not visible (kde#460504) + * Fix i18n warning + * flatpak: Address transaction progress skipping (kde#404819,kde#434948,kde#435450,kde#448280) + * Delay subCategoriesChanged signals when disabling (kde#401666,kde#457408) + * flatpak: Improve flatpaktest reliability + * flatpak: Just disable the test on the CI + +------------------------------------------------------------------- Old: ---- discover-5.26.0.tar.xz discover-5.26.0.tar.xz.sig New: ---- discover-5.26.1.tar.xz discover-5.26.1.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ discover.spec ++++++ --- /var/tmp/diff_new_pack.F8Awf1/_old 2022-10-20 11:10:22.323856849 +0200 +++ /var/tmp/diff_new_pack.F8Awf1/_new 2022-10-20 11:10:22.331856865 +0200 @@ -21,15 +21,15 @@ %global have_fwupd (0%{?suse_version} > 1500 || 0%{?sle_version} >= 150300) Name: discover -Version: 5.26.0 +Version: 5.26.1 Release: 0 Summary: Software store for the KDE Plasma desktop License: GPL-2.0-only AND GPL-3.0-only AND GPL-3.0-or-later Group: System/GUI/KDE URL: https://quickgit.kde.org/?p=discover.git -Source: discover-%{version}.tar.xz +Source: https://download.kde.org/stable/plasma/%{version}/discover-%{version}.tar.xz %if %{with released} -Source1: discover-%{version}.tar.xz.sig +Source1: https://download.kde.org/stable/plasma/%{version}/discover-%{version}.tar.x… Source2: plasma.keyring %endif # PATCH-FIX-OPENSUSE ++++++ discover-5.26.0.tar.xz -> discover-5.26.1.tar.xz ++++++ ++++ 3143 lines of diff (skipped)

1 0

commit breeze-gtk for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package breeze-gtk for openSUSE:Factory checked in at 2022-10-20 11:10:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/breeze-gtk (Old) and /work/SRC/openSUSE:Factory/.breeze-gtk.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "breeze-gtk" Thu Oct 20 11:10:17 2022 rev:123 rq:1029818 version:5.26.1 Changes: -------- --- /work/SRC/openSUSE:Factory/breeze-gtk/breeze-gtk.changes 2022-10-11 18:02:59.833837223 +0200 +++ /work/SRC/openSUSE:Factory/.breeze-gtk.new.2275/breeze-gtk.changes 2022-10-20 11:10:20.619853397 +0200 @@ -1,0 +2,9 @@ +Tue Oct 18 11:27:28 UTC 2022 - Fabian Vogt <fabian(a)ritter-vogt.de> + +- Update to 5.26.1 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.1 +- No code changes since 5.26.0 + +------------------------------------------------------------------- Old: ---- breeze-gtk-5.26.0.tar.xz breeze-gtk-5.26.0.tar.xz.sig New: ---- breeze-gtk-5.26.1.tar.xz breeze-gtk-5.26.1.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ breeze-gtk.spec ++++++ --- /var/tmp/diff_new_pack.KSiIAW/_old 2022-10-20 11:10:21.135854442 +0200 +++ /var/tmp/diff_new_pack.KSiIAW/_new 2022-10-20 11:10:21.139854450 +0200 @@ -19,15 +19,15 @@ %define _name breeze Name: breeze-gtk -Version: 5.26.0 +Version: 5.26.1 Release: 0 Summary: GTK+ theme matching KDE's Breeze License: LGPL-2.1-only Group: System/GUI/KDE URL: https://projects.kde.org/breeze-gtk -Source: breeze-gtk-%{version}.tar.xz +Source: https://download.kde.org/stable/plasma/%{version}/breeze-gtk-%{version}.tar… %if %{with released} -Source1: breeze-gtk-%{version}.tar.xz.sig +Source1: https://download.kde.org/stable/plasma/%{version}/breeze-gtk-%{version}.tar… Source2: plasma.keyring %endif BuildRequires: breeze5-style ++++++ breeze-gtk-5.26.0.tar.xz -> breeze-gtk-5.26.1.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/breeze-gtk-5.26.0/CMakeLists.txt new/breeze-gtk-5.26.1/CMakeLists.txt --- old/breeze-gtk-5.26.0/CMakeLists.txt 2022-10-06 14:08:55.000000000 +0200 +++ new/breeze-gtk-5.26.1/CMakeLists.txt 2022-10-18 12:21:35.000000000 +0200 @@ -1,5 +1,5 @@ project(breeze-gtk) -set(PROJECT_VERSION "5.26.0") +set(PROJECT_VERSION "5.26.1") set(PROJECT_VERSION_MAJOR 5) cmake_minimum_required(VERSION 3.16)

1 0

commit breeze for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package breeze for openSUSE:Factory checked in at 2022-10-20 11:10:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/breeze (Old) and /work/SRC/openSUSE:Factory/.breeze.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "breeze" Thu Oct 20 11:10:14 2022 rev:148 rq:1029817 version:5.26.1 Changes: -------- --- /work/SRC/openSUSE:Factory/breeze/breeze.changes 2022-10-11 18:02:57.581833582 +0200 +++ /work/SRC/openSUSE:Factory/.breeze.new.2275/breeze.changes 2022-10-20 11:10:19.263850650 +0200 @@ -1,0 +2,9 @@ +Tue Oct 18 11:27:28 UTC 2022 - Fabian Vogt <fabian(a)ritter-vogt.de> + +- Update to 5.26.1 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.1 +- No code changes since 5.26.0 + +------------------------------------------------------------------- Old: ---- breeze-5.26.0.tar.xz breeze-5.26.0.tar.xz.sig New: ---- breeze-5.26.1.tar.xz breeze-5.26.1.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ breeze.spec ++++++ --- /var/tmp/diff_new_pack.iK1U8x/_old 2022-10-20 11:10:20.307852765 +0200 +++ /var/tmp/diff_new_pack.iK1U8x/_new 2022-10-20 11:10:20.311852773 +0200 @@ -22,15 +22,15 @@ %{!?_plasma5_version: %define _plasma5_version %(echo %{_plasma5_bugfix} | awk -F. '{print $1"."$2}')} %bcond_without released Name: breeze -Version: 5.26.0 +Version: 5.26.1 Release: 0 Summary: Plasma Desktop artwork, styles and assets License: GPL-2.0-or-later Group: System/GUI/KDE URL: http://www.kde.org -Source: breeze-%{version}.tar.xz +Source: https://download.kde.org/stable/plasma/%{version}/breeze-%{version}.tar.xz %if %{with released} -Source1: breeze-%{version}.tar.xz.sig +Source1: https://download.kde.org/stable/plasma/%{version}/breeze-%{version}.tar.xz.… Source2: plasma.keyring %endif BuildRequires: cmake >= 3.16 ++++++ breeze-5.26.0.tar.xz -> breeze-5.26.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/breeze/breeze-5.26.0.tar.xz /work/SRC/openSUSE:Factory/.breeze.new.2275/breeze-5.26.1.tar.xz differ: char 28, line 1

1 0

commit bluedevil5 for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package bluedevil5 for openSUSE:Factory checked in at 2022-10-20 11:10:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bluedevil5 (Old) and /work/SRC/openSUSE:Factory/.bluedevil5.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "bluedevil5" Thu Oct 20 11:10:13 2022 rev:138 rq:1029816 version:5.26.1 Changes: -------- --- /work/SRC/openSUSE:Factory/bluedevil5/bluedevil5.changes 2022-10-11 18:02:55.649830459 +0200 +++ /work/SRC/openSUSE:Factory/.bluedevil5.new.2275/bluedevil5.changes 2022-10-20 11:10:17.595847270 +0200 @@ -1,0 +2,9 @@ +Tue Oct 18 11:27:27 UTC 2022 - Fabian Vogt <fabian(a)ritter-vogt.de> + +- Update to 5.26.1 + * New bugfix release + * For more details please see: + * https://kde.org/announcements/plasma/5/5.26.1 +- No code changes since 5.26.0 + +------------------------------------------------------------------- Old: ---- bluedevil-5.26.0.tar.xz bluedevil-5.26.0.tar.xz.sig New: ---- bluedevil-5.26.1.tar.xz bluedevil-5.26.1.tar.xz.sig ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bluedevil5.spec ++++++ --- /var/tmp/diff_new_pack.LeqTeW/_old 2022-10-20 11:10:18.147848389 +0200 +++ /var/tmp/diff_new_pack.LeqTeW/_new 2022-10-20 11:10:18.155848405 +0200 @@ -22,15 +22,15 @@ %bcond_without released Name: bluedevil5 -Version: 5.26.0 +Version: 5.26.1 Release: 0 Summary: Bluetooth Manager for KDE Plasma License: GPL-2.0-or-later Group: Hardware/Other URL: http://www.kde.org/ -Source: bluedevil-%{version}.tar.xz +Source: https://download.kde.org/stable/plasma/%{version}/bluedevil-%{version}.tar.… %if %{with released} -Source1: bluedevil-%{version}.tar.xz.sig +Source1: https://download.kde.org/stable/plasma/%{version}/bluedevil-%{version}.tar.… Source2: plasma.keyring %endif BuildRequires: extra-cmake-modules ++++++ bluedevil-5.26.0.tar.xz -> bluedevil-5.26.1.tar.xz ++++++ ++++ 1891 lines of diff (skipped)

1 0

commit rpmlint for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rpmlint for openSUSE:Factory checked in at 2022-10-20 11:10:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rpmlint (Old) and /work/SRC/openSUSE:Factory/.rpmlint.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "rpmlint" Thu Oct 20 11:10:12 2022 rev:419 rq:1029725 version:2.4.0+git20221018.6c36ccd Changes: -------- --- /work/SRC/openSUSE:Factory/rpmlint/rpmlint.changes 2022-10-16 16:09:12.602753897 +0200 +++ /work/SRC/openSUSE:Factory/.rpmlint.new.2275/rpmlint.changes 2022-10-20 11:10:14.819841646 +0200 @@ -1,0 +2,13 @@ +Tue Oct 18 11:49:34 UTC 2022 - mliska(a)suse.cz + +- Update to version 2.4.0+git20221018.6c36ccd: + * FilesCheck: Split big check method + +------------------------------------------------------------------- +Tue Oct 18 07:33:19 UTC 2022 - mliska(a)suse.cz + +- Update to version 2.4.0+git20221018.ac9f2d8: + * SpecCheck: Split big line by line for-loop in methods + * rpmdiff: clarify help text on -i/-e options + +------------------------------------------------------------------- Old: ---- rpmlint-2.4.0+git20221014.b4aaa76.tar.xz New: ---- rpmlint-2.4.0+git20221018.6c36ccd.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rpmlint.spec ++++++ --- /var/tmp/diff_new_pack.F8sqKg/_old 2022-10-20 11:10:17.263846598 +0200 +++ /var/tmp/diff_new_pack.F8sqKg/_new 2022-10-20 11:10:17.267846606 +0200 @@ -23,7 +23,7 @@ %define name_suffix -%{flavor} %endif Name: rpmlint%{name_suffix} -Version: 2.4.0+git20221014.b4aaa76 +Version: 2.4.0+git20221018.6c36ccd Release: 0 Summary: RPM file correctness checker License: GPL-2.0-or-later ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.F8sqKg/_old 2022-10-20 11:10:17.331846736 +0200 +++ /var/tmp/diff_new_pack.F8sqKg/_new 2022-10-20 11:10:17.335846744 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/rpm-software-management/rpmlint.git</param> - <param name="changesrevision">b4aaa76440a4450101d84a50c29b0531db927033</param></service></servicedata> + <param name="changesrevision">6c36ccd6478df76fa3f64aa848df22eca893ba9a</param></service></servicedata> (No newline at EOF) ++++++ rpmlint-2.4.0+git20221014.b4aaa76.tar.xz -> rpmlint-2.4.0+git20221018.6c36ccd.tar.xz ++++++ /work/SRC/openSUSE:Factory/rpmlint/rpmlint-2.4.0+git20221014.b4aaa76.tar.xz /work/SRC/openSUSE:Factory/.rpmlint.new.2275/rpmlint-2.4.0+git20221018.6c36ccd.tar.xz differ: char 15, line 1

1 0

commit polkit-default-privs for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package polkit-default-privs for openSUSE:Factory checked in at 2022-10-20 11:10:11 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/polkit-default-privs (Old) and /work/SRC/openSUSE:Factory/.polkit-default-privs.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "polkit-default-privs" Thu Oct 20 11:10:11 2022 rev:218 rq:1029704 version:1550+20221018.7616c25 Changes: -------- --- /work/SRC/openSUSE:Factory/polkit-default-privs/polkit-default-privs.changes 2022-09-21 14:38:56.813174959 +0200 +++ /work/SRC/openSUSE:Factory/.polkit-default-privs.new.2275/polkit-default-privs.changes 2022-10-20 11:10:13.699839378 +0200 @@ -1,0 +2,6 @@ +Tue Oct 18 10:17:49 UTC 2022 - matthias.gerstner(a)suse.com + +- Update to version 1550+20221018.7616c25: + * fwupd (bsc#1204026): add incremental {get,set}-bios-settings + +------------------------------------------------------------------- Old: ---- polkit-default-privs-1550+20220919.3b55a1f.tar.xz New: ---- polkit-default-privs-1550+20221018.7616c25.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ polkit-default-privs.spec ++++++ --- /var/tmp/diff_new_pack.OnTcxA/_old 2022-10-20 11:10:14.303840601 +0200 +++ /var/tmp/diff_new_pack.OnTcxA/_new 2022-10-20 11:10:14.307840609 +0200 @@ -23,7 +23,7 @@ %endif Name: polkit-default-privs -Version: 1550+20220919.3b55a1f +Version: 1550+20221018.7616c25 Release: 0 Summary: SUSE PolicyKit default permissions License: GPL-2.0-or-later ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.OnTcxA/_old 2022-10-20 11:10:14.355840707 +0200 +++ /var/tmp/diff_new_pack.OnTcxA/_new 2022-10-20 11:10:14.359840715 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/polkit-default-privs.git</param> - <param name="changesrevision">2d50aecf2bf7f67488fd6540bc33e44ba804c0fb</param></service></servicedata> + <param name="changesrevision">d65674400a26551a1d4784a5a6930ac90e1946d1</param></service></servicedata> (No newline at EOF) ++++++ polkit-default-privs-1550+20220919.3b55a1f.tar.xz -> polkit-default-privs-1550+20221018.7616c25.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polkit-default-privs-1550+20220919.3b55a1f/profiles/easy new/polkit-default-privs-1550+20221018.7616c25/profiles/easy --- old/polkit-default-privs-1550+20220919.3b55a1f/profiles/easy 2022-09-19 12:38:28.000000000 +0200 +++ new/polkit-default-privs-1550+20221018.7616c25/profiles/easy 2022-10-18 11:56:50.000000000 +0200 @@ -621,6 +621,9 @@ # fwupd (bsc#1193310) org.freedesktop.fwupd.downgrade-internal-trusted auth_admin:no:auth_admin_keep org.freedesktop.fwupd.downgrade-hotplug-trusted auth_admin:no:auth_admin_keep +# fwupd (bsc#1204026) +org.freedesktop.fwupd.get-bios-settings auth_admin:auth_admin:auth_admin_keep +org.freedesktop.fwupd.set-bios-settings auth_admin:auth_admin:auth_admin_keep # connman (bsc#1057697) net.connman.modify auth_admin_keep diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polkit-default-privs-1550+20220919.3b55a1f/profiles/restrictive new/polkit-default-privs-1550+20221018.7616c25/profiles/restrictive --- old/polkit-default-privs-1550+20220919.3b55a1f/profiles/restrictive 2022-09-19 12:38:28.000000000 +0200 +++ new/polkit-default-privs-1550+20221018.7616c25/profiles/restrictive 2022-10-18 11:56:50.000000000 +0200 @@ -622,6 +622,9 @@ # fwupd (bsc#1193310) org.freedesktop.fwupd.downgrade-internal-trusted auth_admin:no:auth_admin_keep org.freedesktop.fwupd.downgrade-hotplug-trusted auth_admin:no:auth_admin_keep +# fwupd (bsc#1204026) +org.freedesktop.fwupd.get-bios-settings auth_admin:no:auth_admin_keep +org.freedesktop.fwupd.set-bios-settings auth_admin:no:auth_admin # connman (bsc#1057697) net.connman.modify auth_admin_keep diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/polkit-default-privs-1550+20220919.3b55a1f/profiles/standard new/polkit-default-privs-1550+20221018.7616c25/profiles/standard --- old/polkit-default-privs-1550+20220919.3b55a1f/profiles/standard 2022-09-19 12:38:28.000000000 +0200 +++ new/polkit-default-privs-1550+20221018.7616c25/profiles/standard 2022-10-18 11:56:50.000000000 +0200 @@ -622,6 +622,9 @@ # fwupd (bsc#1193310) org.freedesktop.fwupd.downgrade-internal-trusted auth_admin:no:auth_admin_keep org.freedesktop.fwupd.downgrade-hotplug-trusted auth_admin:no:auth_admin_keep +# fwupd (bsc#1204026) +org.freedesktop.fwupd.get-bios-settings auth_admin:no:auth_admin_keep +org.freedesktop.fwupd.set-bios-settings auth_admin:no:auth_admin # connman (bsc#1057697) net.connman.modify auth_admin_keep

1 0

commit xwayland for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package xwayland for openSUSE:Factory checked in at 2022-10-20 11:10:09 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xwayland (Old) and /work/SRC/openSUSE:Factory/.xwayland.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "xwayland" Thu Oct 20 11:10:09 2022 rev:14 rq:1030010 version:22.1.3 Changes: -------- --- /work/SRC/openSUSE:Factory/xwayland/xwayland.changes 2022-07-13 13:44:45.613978348 +0200 +++ /work/SRC/openSUSE:Factory/.xwayland.new.2275/xwayland.changes 2022-10-20 11:10:12.767837489 +0200 @@ -1,0 +2,8 @@ +Wed Oct 19 11:19:40 UTC 2022 - Stefan Dirsch <sndirsch(a)suse.com> + +- U_xkb-proof-GetCountedString-against-request-length-at.patch + * security update for CVE-2022-3550 (bsc#1204412) +- U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch + * security update for CVE-2022-3551 (bsc#1204416) + +------------------------------------------------------------------- New: ---- U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch U_xkb-proof-GetCountedString-against-request-length-at.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xwayland.spec ++++++ --- /var/tmp/diff_new_pack.o01miA/_old 2022-10-20 11:10:13.307838583 +0200 +++ /var/tmp/diff_new_pack.o01miA/_new 2022-10-20 11:10:13.311838591 +0200 @@ -33,7 +33,8 @@ Source0: %{url}/archive/individual/xserver/%{name}-%{version}.tar.xz Source1: %{url}/archive/individual/xserver/%{name}-%{version}.tar.xz.sig Source2: xwayland.keyring - +Patch1204412: U_xkb-proof-GetCountedString-against-request-length-at.patch +Patch1204416: U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch BuildRequires: meson BuildRequires: ninja BuildRequires: pkgconfig ++++++ U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch ++++++ From 18f91b950e22c2a342a4fbc55e9ddf7534a707d2 Mon Sep 17 00:00:00 2001 From: Peter Hutterer <peter.hutterer(a)who-t.net> Date: Wed, 13 Jul 2022 11:23:09 +1000 Subject: [PATCH] xkb: fix some possible memleaks in XkbGetKbdByName GetComponentByName returns an allocated string, so let's free that if we fail somewhere. Signed-off-by: Peter Hutterer <peter.hutterer(a)who-t.net> --- xkb/xkb.c | 26 ++++++++++++++++++++------ 1 file changed, 20 insertions(+), 6 deletions(-) Index: xwayland-22.1.3/xkb/xkb.c =================================================================== --- xwayland-22.1.3.orig/xkb/xkb.c +++ xwayland-22.1.3/xkb/xkb.c @@ -5941,18 +5941,32 @@ ProcXkbGetKbdByName(ClientPtr client) xkb = dev->key->xkbInfo->desc; status = Success; str = (unsigned char *) &stuff[1]; - if (GetComponentSpec(&str, TRUE, &status)) /* keymap, unsupported */ - return BadMatch; + { + char *keymap = GetComponentSpec(&str, TRUE, &status); /* keymap, unsupported */ + if (keymap) { + free(keymap); + return BadMatch; + } + } names.keycodes = GetComponentSpec(&str, TRUE, &status); names.types = GetComponentSpec(&str, TRUE, &status); names.compat = GetComponentSpec(&str, TRUE, &status); names.symbols = GetComponentSpec(&str, TRUE, &status); names.geometry = GetComponentSpec(&str, TRUE, &status); - if (status != Success) + if (status == Success) { + len = str - ((unsigned char *) stuff); + if ((XkbPaddedSize(len) / 4) != stuff->length) + status = BadLength; + } + + if (status != Success) { + free(names.keycodes); + free(names.types); + free(names.compat); + free(names.symbols); + free(names.geometry); return status; - len = str - ((unsigned char *) stuff); - if ((XkbPaddedSize(len) / 4) != stuff->length) - return BadLength; + } CHK_MASK_LEGAL(0x01, stuff->want, XkbGBN_AllComponentsMask); CHK_MASK_LEGAL(0x02, stuff->need, XkbGBN_AllComponentsMask); ++++++ U_xkb-proof-GetCountedString-against-request-length-at.patch ++++++ From 11beef0b7f1ed290348e45618e5fa0d2bffcb72e Mon Sep 17 00:00:00 2001 From: Peter Hutterer <peter.hutterer(a)who-t.net> Date: Tue, 5 Jul 2022 12:06:20 +1000 Subject: [PATCH] xkb: proof GetCountedString against request length attacks GetCountedString did a check for the whole string to be within the request buffer but not for the initial 2 bytes that contain the length field. A swapped client could send a malformed request to trigger a swaps() on those bytes, writing into random memory. Signed-off-by: Peter Hutterer <peter.hutterer(a)who-t.net> --- xkb/xkb.c | 5 +++++ 1 file changed, 5 insertions(+) Index: xwayland-22.1.3/xkb/xkb.c =================================================================== --- xwayland-22.1.3.orig/xkb/xkb.c +++ xwayland-22.1.3/xkb/xkb.c @@ -5138,6 +5138,11 @@ _GetCountedString(char **wire_inout, Cli CARD16 len; wire = *wire_inout; + + if (client->req_len < + bytes_to_int32(wire + 2 - (char *) client->requestBuffer)) + return BadValue; + len = *(CARD16 *) wire; if (client->swapped) { swaps(&len);

1 0

commit xorg-x11-server for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package xorg-x11-server for openSUSE:Factory checked in at 2022-10-20 11:10:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xorg-x11-server (Old) and /work/SRC/openSUSE:Factory/.xorg-x11-server.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "xorg-x11-server" Thu Oct 20 11:10:08 2022 rev:410 rq:1030009 version:21.1.4 Changes: -------- --- /work/SRC/openSUSE:Factory/xorg-x11-server/xorg-x11-server.changes 2022-07-22 19:20:27.048580691 +0200 +++ /work/SRC/openSUSE:Factory/.xorg-x11-server.new.2275/xorg-x11-server.changes 2022-10-20 11:10:10.379832651 +0200 @@ -1,0 +2,8 @@ +Wed Oct 19 11:06:46 UTC 2022 - Stefan Dirsch <sndirsch(a)suse.com> + +- U_xkb-proof-GetCountedString-against-request-length-at.patch + * security update for CVE-2022-3550 (bsc#1204412) +- U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch + * security update for CVE-2022-3551 (bsc#1204416) + +------------------------------------------------------------------- New: ---- U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch U_xkb-proof-GetCountedString-against-request-length-at.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xorg-x11-server.spec ++++++ --- /var/tmp/diff_new_pack.Wi1gwx/_old 2022-10-20 11:10:12.079836096 +0200 +++ /var/tmp/diff_new_pack.Wi1gwx/_new 2022-10-20 11:10:12.087836112 +0200 @@ -247,6 +247,9 @@ Patch1960: u_sync-pci-ids-with-Mesa.patch +Patch1204412: U_xkb-proof-GetCountedString-against-request-length-at.patch +Patch1204416: U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch + %description This package contains the X.Org Server. @@ -404,6 +407,8 @@ %patch1930 -p1 %patch1940 -p1 %patch1960 -p1 +%patch1204412 -p1 +%patch1204416 -p1 %build # We have some -z now related errors during X default startup (boo#1197994): ++++++ U_xkb-fix-some-possible-memleaks-in-XkbGetKbdByName.patch ++++++ From 18f91b950e22c2a342a4fbc55e9ddf7534a707d2 Mon Sep 17 00:00:00 2001 From: Peter Hutterer <peter.hutterer(a)who-t.net> Date: Wed, 13 Jul 2022 11:23:09 +1000 Subject: [PATCH] xkb: fix some possible memleaks in XkbGetKbdByName GetComponentByName returns an allocated string, so let's free that if we fail somewhere. Signed-off-by: Peter Hutterer <peter.hutterer(a)who-t.net> --- xkb/xkb.c | 26 ++++++++++++++++++++------ 1 file changed, 20 insertions(+), 6 deletions(-) Index: xorg-server-21.1.4/xkb/xkb.c =================================================================== --- xorg-server-21.1.4.orig/xkb/xkb.c +++ xorg-server-21.1.4/xkb/xkb.c @@ -5940,18 +5940,32 @@ ProcXkbGetKbdByName(ClientPtr client) xkb = dev->key->xkbInfo->desc; status = Success; str = (unsigned char *) &stuff[1]; - if (GetComponentSpec(&str, TRUE, &status)) /* keymap, unsupported */ - return BadMatch; + { + char *keymap = GetComponentSpec(&str, TRUE, &status); /* keymap, unsupported */ + if (keymap) { + free(keymap); + return BadMatch; + } + } names.keycodes = GetComponentSpec(&str, TRUE, &status); names.types = GetComponentSpec(&str, TRUE, &status); names.compat = GetComponentSpec(&str, TRUE, &status); names.symbols = GetComponentSpec(&str, TRUE, &status); names.geometry = GetComponentSpec(&str, TRUE, &status); - if (status != Success) + if (status == Success) { + len = str - ((unsigned char *) stuff); + if ((XkbPaddedSize(len) / 4) != stuff->length) + status = BadLength; + } + + if (status != Success) { + free(names.keycodes); + free(names.types); + free(names.compat); + free(names.symbols); + free(names.geometry); return status; - len = str - ((unsigned char *) stuff); - if ((XkbPaddedSize(len) / 4) != stuff->length) - return BadLength; + } CHK_MASK_LEGAL(0x01, stuff->want, XkbGBN_AllComponentsMask); CHK_MASK_LEGAL(0x02, stuff->need, XkbGBN_AllComponentsMask); ++++++ U_xkb-proof-GetCountedString-against-request-length-at.patch ++++++ From 11beef0b7f1ed290348e45618e5fa0d2bffcb72e Mon Sep 17 00:00:00 2001 From: Peter Hutterer <peter.hutterer(a)who-t.net> Date: Tue, 5 Jul 2022 12:06:20 +1000 Subject: [PATCH] xkb: proof GetCountedString against request length attacks GetCountedString did a check for the whole string to be within the request buffer but not for the initial 2 bytes that contain the length field. A swapped client could send a malformed request to trigger a swaps() on those bytes, writing into random memory. Signed-off-by: Peter Hutterer <peter.hutterer(a)who-t.net> --- xkb/xkb.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/xkb/xkb.c b/xkb/xkb.c index f42f59ef3..1841cff26 100644 --- a/xkb/xkb.c +++ b/xkb/xkb.c @@ -5137,6 +5137,11 @@ _GetCountedString(char **wire_inout, ClientPtr client, char **str) CARD16 len; wire = *wire_inout; + + if (client->req_len < + bytes_to_int32(wire + 2 - (char *) client->requestBuffer)) + return BadValue; + len = *(CARD16 *) wire; if (client->swapped) { swaps(&len); -- 2.35.3

1 0

commit raspberrypi-firmware for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package raspberrypi-firmware for openSUSE:Factory checked in at 2022-10-20 11:10:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/raspberrypi-firmware (Old) and /work/SRC/openSUSE:Factory/.raspberrypi-firmware.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "raspberrypi-firmware" Thu Oct 20 11:10:07 2022 rev:94 rq:1029982 version:2022.10.18 Changes: -------- --- /work/SRC/openSUSE:Factory/raspberrypi-firmware/raspberrypi-firmware-config-camera.changes 2022-10-19 13:17:13.809166535 +0200 +++ /work/SRC/openSUSE:Factory/.raspberrypi-firmware.new.2275/raspberrypi-firmware-config-camera.changes 2022-10-20 11:10:08.627829102 +0200 @@ -1,0 +2,11 @@ +Wed Oct 19 12:09:22 UTC 2022 - Guillaume GARDET <guillaume.gardet(a)opensuse.org> + +- Update to ab37ef59f (2022-10-18): + * firmware: ldconfig: Add all, none, tryboot section support + to autoboot.txt for start.elf + * firmware: arm-dt: bootloader: Pass the original partition + number when booting a ramdisk + * firmware: arm_loader: HAT EEPROM support for GPIO bank 1 + See: #1756 + +------------------------------------------------------------------- raspberrypi-firmware-config.changes: same change raspberrypi-firmware.changes: same change Old: ---- raspberrypi-firmware-2022.10.14.tar.bz2 New: ---- raspberrypi-firmware-2022.10.18.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ raspberrypi-firmware-config-camera.spec ++++++ --- /var/tmp/diff_new_pack.Ygj4pY/_old 2022-10-20 11:10:09.419830706 +0200 +++ /var/tmp/diff_new_pack.Ygj4pY/_new 2022-10-20 11:10:09.423830714 +0200 @@ -17,7 +17,7 @@ Name: raspberrypi-firmware-config-camera -Version: 2022.10.14 +Version: 2022.10.18 Release: 0 Summary: Configuration for the Raspberry Pi firmware loader License: MIT raspberrypi-firmware-config.spec: same change ++++++ raspberrypi-firmware.spec ++++++ --- /var/tmp/diff_new_pack.Ygj4pY/_old 2022-10-20 11:10:09.475830820 +0200 +++ /var/tmp/diff_new_pack.Ygj4pY/_new 2022-10-20 11:10:09.483830836 +0200 @@ -23,7 +23,7 @@ %global modprobe_d_files 50-rpi3.conf Name: raspberrypi-firmware -Version: 2022.10.14 +Version: 2022.10.18 Release: 0 Summary: Binary bootloader and firmware files for Raspberry Pi License: SUSE-Firmware ++++++ raspberrypi-firmware-2022.10.14.tar.bz2 -> raspberrypi-firmware-2022.10.18.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/raspberrypi-firmware/raspberrypi-firmware-2022.10.14.tar.bz2 /work/SRC/openSUSE:Factory/.raspberrypi-firmware.new.2275/raspberrypi-firmware-2022.10.18.tar.bz2 differ: char 11, line 1

1 0

commit gnome-initial-setup for openSUSE:Factory
by Source-Sync 20 Oct '22

20 Oct '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gnome-initial-setup for openSUSE:Factory checked in at 2022-10-20 11:10:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gnome-initial-setup (Old) and /work/SRC/openSUSE:Factory/.gnome-initial-setup.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gnome-initial-setup" Thu Oct 20 11:10:06 2022 rev:23 rq:1029972 version:43.1 Changes: -------- --- /work/SRC/openSUSE:Factory/gnome-initial-setup/gnome-initial-setup.changes 2022-09-21 14:41:04.997530458 +0200 +++ /work/SRC/openSUSE:Factory/.gnome-initial-setup.new.2275/gnome-initial-setup.changes 2022-10-20 11:10:07.355826525 +0200 @@ -1,0 +2,7 @@ +Wed Oct 19 07:59:10 UTC 2022 - Bj��rn Lie <bjorn.lie(a)gmail.com> + +- Update to version 43.1: + + Several bugs in the enterprise login flow have been fixed. + + Updated translations. + +------------------------------------------------------------------- Old: ---- gnome-initial-setup-43.0.tar.xz New: ---- gnome-initial-setup-43.1.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gnome-initial-setup.spec ++++++ --- /var/tmp/diff_new_pack.BVNJff/_old 2022-10-20 11:10:07.799827424 +0200 +++ /var/tmp/diff_new_pack.BVNJff/_new 2022-10-20 11:10:07.803827432 +0200 @@ -17,7 +17,7 @@ Name: gnome-initial-setup -Version: 43.0 +Version: 43.1 Release: 0 Summary: GNOME Initial Setup Assistant License: GPL-2.0-or-later ++++++ gnome-initial-setup-43.0.tar.xz -> gnome-initial-setup-43.1.tar.xz ++++++ ++++ 9124 lines of diff (skipped)

1 0