December 2022 - openSUSE Commits - openSUSE Mailing Lists

commit mined for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mined for openSUSE:Factory checked in at 2022-12-24 14:51:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mined (Old) and /work/SRC/openSUSE:Factory/.mined.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "mined" Sat Dec 24 14:51:33 2022 rev:24 rq:1045008 version:2022.27 Changes: -------- --- /work/SRC/openSUSE:Factory/mined/mined.changes 2020-03-05 23:18:33.977186905 +0100 +++ /work/SRC/openSUSE:Factory/.mined.new.1563/mined.changes 2022-12-24 14:52:29.259700260 +0100 @@ -1,0 +2,23 @@ +Fri Dec 23 12:21:44 UTC 2022 - Dirk M��ller <dmueller(a)suse.com> + +- use disabled services so that it can be included in Factory + +------------------------------------------------------------------- +Fri Dec 23 12:21:44 UTC 2022 - Thomas Wolff <mined(a)towo.net> + +- update to 2022.27: + * Update to Unicode 13.0 + +------------------------------------------------------------------- +Sun Dec 11 18:29:55 UTC 2022 - Dirk M��ller <dmueller(a)suse.com> + +- update to 2022.26: + * Update to Unicode 13.0 + * Support for emoji width handling. + * Search and replacement patterns can contain substitution references like \1 + to matching sub-expressions like $...$ (can be nested). + * Tweaked smart undentation (on Backspace) of auto-numbering. + * Fixed line split of long lines read from file. + * Tweaked menu background colour handling. + +------------------------------------------------------------------- Old: ---- mined-2015.25.tar.gz New: ---- 2022.27.tar.gz Unihan.zip ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mined.spec ++++++ --- /var/tmp/diff_new_pack.d4kjuu/_old 2022-12-24 14:52:32.171717250 +0100 +++ /var/tmp/diff_new_pack.d4kjuu/_new 2022-12-24 14:52:32.179717297 +0100 @@ -1,7 +1,7 @@ # # spec file for package mined # -# Copyright (c) 2020 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,16 +17,17 @@ Name: mined -Version: 2015.25 +Version: 2022.27 Release: 0 Summary: Powerful Text Editor with Extensive Unicode and CJK Support License: GPL-3.0-or-later Group: Productivity/Editors/Other -URL: http://towo.net/mined/ -Source: http://towo.net/mined/download/mined-%{version}.tar.gz +URL: https://mined.github.io/ +Source: https://github.com/mined/mined/archive/refs/tags/%{version}.tar.gz +Source2: http://unicode.org/Public/UNIDATA/Unihan.zip BuildRequires: fdupes +BuildRequires: unzip BuildRequires: update-desktop-files -BuildRoot: %{_tmppath}/%{name}-%{version}-build %description Mined is a powerful text editor with a comprehensive yet concise and @@ -69,6 +70,7 @@ sed -i s/Utility/Utility\;/ ./usrshare/setup_install/mined.desktop %build +cp -p %{SOURCE2} src %configure make OPT="%{optflags}" USRLIBDIR=%{_libdir} ROOTLIBDIR=/%{_lib} %{?_smp_mflags} ++++++ mined-2015.25.tar.gz -> 2022.27.tar.gz ++++++ /work/SRC/openSUSE:Factory/mined/mined-2015.25.tar.gz /work/SRC/openSUSE:Factory/.mined.new.1563/2022.27.tar.gz differ: char 5, line 1

1 0

commit apache2-mod_auth_openidc for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package apache2-mod_auth_openidc for openSUSE:Factory checked in at 2022-12-24 14:51:32 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/apache2-mod_auth_openidc (Old) and /work/SRC/openSUSE:Factory/.apache2-mod_auth_openidc.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "apache2-mod_auth_openidc" Sat Dec 24 14:51:32 2022 rev:28 rq:1044612 version:2.4.12.2 Changes: -------- --- /work/SRC/openSUSE:Factory/apache2-mod_auth_openidc/apache2-mod_auth_openidc.changes 2022-11-18 15:44:26.902803348 +0100 +++ /work/SRC/openSUSE:Factory/.apache2-mod_auth_openidc.new.1563/apache2-mod_auth_openidc.changes 2022-12-24 14:52:27.919692441 +0100 @@ -1,0 +2,11 @@ +Tue Dec 20 15:24:49 UTC 2022 - Michael Str��der <michael(a)stroeder.com> + +- update to 2.4.12.2 + * Security + - CVE-2022-23527: prevent open redirect in default setup when + OIDCRedirectURLsAllowed is not configured + see: GHSA-q6f2-285m-gr53 + * Features + - allow overriding the type of lock used at compile time with OIDC_LOCK + +------------------------------------------------------------------- Old: ---- mod_auth_openidc-2.4.12.1.tar.gz New: ---- mod_auth_openidc-2.4.12.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ apache2-mod_auth_openidc.spec ++++++ --- /var/tmp/diff_new_pack.DILLft/_old 2022-12-24 14:52:28.471695662 +0100 +++ /var/tmp/diff_new_pack.DILLft/_new 2022-12-24 14:52:28.475695686 +0100 @@ -17,7 +17,7 @@ Name: apache2-mod_auth_openidc -Version: 2.4.12.1 +Version: 2.4.12.2 Release: 0 Summary: Apache2.x module for an OpenID Connect enabled Identity Provider License: Apache-2.0 ++++++ mod_auth_openidc-2.4.12.1.tar.gz -> mod_auth_openidc-2.4.12.2.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/AUTHORS new/mod_auth_openidc-2.4.12.2/AUTHORS --- old/mod_auth_openidc-2.4.12.1/AUTHORS 2022-11-14 15:35:42.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/AUTHORS 2022-12-09 10:26:49.000000000 +0100 @@ -85,3 +85,5 @@ blackwhiser1 <https://github.com/blackwhiser1> Ruediger Pluem <https://github.com/rpluem-vf> Nikhil Chaudhari <https://github.com/nvchaudhari1991> + Quentin Gillet <qgillet(a)gmail.com> + Brent van Laere <brent.van.laere(a)gmail.com> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/ChangeLog new/mod_auth_openidc-2.4.12.2/ChangeLog --- old/mod_auth_openidc-2.4.12.1/ChangeLog 2022-11-15 15:14:21.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/ChangeLog 2022-12-13 16:45:41.000000000 +0100 @@ -1,3 +1,16 @@ +12/13/2022 +- prevent open redirect in default setup i.e. when OIDCRedirectURLsAllowed is not configured + see: https://github.com/zmartzone/mod_auth_openidc/security/advisories/GHSA-q6f2… +- release 2.4.12.2 + +12/08/2022 +- simplify redis context code +- bump to 2.4.12.2rc1 + +11/18/2022 +- allow overriding the type of lock used at compile time with OIDC_LOCK +- bump to 2.4.12.2rc0 + 11/15/2022 - release 2.4.12.1 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/configure new/mod_auth_openidc-2.4.12.2/configure --- old/mod_auth_openidc-2.4.12.1/configure 2022-11-15 15:15:33.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/configure 2022-12-13 18:14:29.000000000 +0100 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.71 for mod_auth_openidc 2.4.12.1. +# Generated by GNU Autoconf 2.71 for mod_auth_openidc 2.4.12.2. # # Report bugs to <hans.zandbelt(a)zmartzone.eu>. # @@ -621,8 +621,8 @@ # Identity of this package. PACKAGE_NAME='mod_auth_openidc' PACKAGE_TARNAME='mod_auth_openidc' -PACKAGE_VERSION='2.4.12.1' -PACKAGE_STRING='mod_auth_openidc 2.4.12.1' +PACKAGE_VERSION='2.4.12.2' +PACKAGE_STRING='mod_auth_openidc 2.4.12.2' PACKAGE_BUGREPORT='hans.zandbelt(a)zmartzone.eu' PACKAGE_URL='' @@ -1407,7 +1407,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures mod_auth_openidc 2.4.12.1 to adapt to many kinds of systems. +\`configure' configures mod_auth_openidc 2.4.12.2 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1479,7 +1479,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of mod_auth_openidc 2.4.12.1:";; + short | recursive ) echo "Configuration of mod_auth_openidc 2.4.12.2:";; esac cat <<\_ACEOF @@ -1621,7 +1621,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -mod_auth_openidc configure 2.4.12.1 +mod_auth_openidc configure 2.4.12.2 generated by GNU Autoconf 2.71 Copyright (C) 2021 Free Software Foundation, Inc. @@ -1839,7 +1839,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by mod_auth_openidc $as_me 2.4.12.1, which was +It was created by mod_auth_openidc $as_me 2.4.12.2, which was generated by GNU Autoconf 2.71. Invocation command line was $ $0$ac_configure_args_raw @@ -2595,7 +2595,7 @@ -NAMEVER=mod_auth_openidc-2.4.12.1 +NAMEVER=mod_auth_openidc-2.4.12.2 am__api_version='1.16' @@ -3112,7 +3112,7 @@ # Define the identity of the package. PACKAGE='mod_auth_openidc' - VERSION='2.4.12.1' + VERSION='2.4.12.2' printf "%s\n" "#define PACKAGE \"$PACKAGE\"" >>confdefs.h @@ -14732,7 +14732,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by mod_auth_openidc $as_me 2.4.12.1, which was +This file was extended by mod_auth_openidc $as_me 2.4.12.2, which was generated by GNU Autoconf 2.71. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -14800,7 +14800,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config='$ac_cs_config_escaped' ac_cs_version="\\ -mod_auth_openidc config.status 2.4.12.1 +mod_auth_openidc config.status 2.4.12.2 configured by $0, generated by GNU Autoconf 2.71, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/configure.ac new/mod_auth_openidc-2.4.12.2/configure.ac --- old/mod_auth_openidc-2.4.12.1/configure.ac 2022-11-15 15:14:28.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/configure.ac 2022-12-13 16:45:53.000000000 +0100 @@ -1,4 +1,4 @@ -AC_INIT([mod_auth_openidc],[2.4.12.1],[hans.zandbelt(a)zmartzone.eu]) +AC_INIT([mod_auth_openidc],[2.4.12.2],[hans.zandbelt(a)zmartzone.eu]) AC_SUBST(NAMEVER, AC_PACKAGE_TARNAME()-AC_PACKAGE_VERSION()) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/src/cache/common.c new/mod_auth_openidc-2.4.12.2/src/cache/common.c --- old/mod_auth_openidc-2.4.12.1/src/cache/common.c 2022-11-13 12:59:47.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/src/cache/common.c 2022-12-09 10:26:49.000000000 +0100 @@ -87,18 +87,22 @@ "%s/mod_auth_openidc_%s_mutex.%ld.%pp", dir, type, (long int) getpid(), s); - /* create the mutex lock */ - rv = apr_global_mutex_create(&m->mutex, (const char *) m->mutex_filename, -#if APR_HAS_POSIXSEM_SERIALIZE - APR_LOCK_POSIXSEM, + /* set the lock type */ + apr_lockmech_e mech = +#ifdef OIDC_LOCK + OIDC_LOCK +#elif APR_HAS_POSIXSEM_SERIALIZE + APR_LOCK_POSIXSEM #else - APR_LOCK_DEFAULT, + APR_LOCK_DEFAULT #endif - s->process->pool); + ; + + /* create the mutex lock */ + rv = + apr_global_mutex_create(&m->mutex, (const char*) m->mutex_filename, mech, s->process->pool); if (rv != APR_SUCCESS) { - oidc_serror(s, - "apr_global_mutex_create failed to create mutex on file %s: %s (%d)", - m->mutex_filename, oidc_cache_status2str(s->process->pool, rv), rv); + oidc_serror(s, "apr_global_mutex_create failed to create mutex (%d) on file %s: %s (%d)", mech, m->mutex_filename, oidc_cache_status2str(s->process->pool, rv), rv); return FALSE; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/src/cache/redis.c new/mod_auth_openidc-2.4.12.2/src/cache/redis.c --- old/mod_auth_openidc-2.4.12.1/src/cache/redis.c 2022-11-14 15:34:36.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/src/cache/redis.c 2022-12-11 09:13:59.000000000 +0100 @@ -52,20 +52,6 @@ #define REDIS_CONNECT_TIMEOUT_DEFAULT 5 #define REDIS_TIMEOUT_DEFAULT 5 -typedef struct oidc_cache_cfg_redis_ctx_t { - char *host_str; - apr_port_t port; - redisContext *rctx; -} oidc_cache_cfg_redis_ctx_t; - -static oidc_cache_cfg_redis_ctx_t* oidc_cache_redis_cfg_ctx_create(apr_pool_t *pool) { - oidc_cache_cfg_redis_ctx_t *context = apr_pcalloc(pool, sizeof(oidc_cache_cfg_redis_ctx_t)); - context->host_str = NULL; - context->port = 0; - context->rctx = NULL; - return context; -} - /* create the cache context */ static oidc_cache_cfg_redis_t* oidc_cache_redis_cfg_create(apr_pool_t *pool) { oidc_cache_cfg_redis_t *context = apr_pcalloc(pool, sizeof(oidc_cache_cfg_redis_t)); @@ -77,7 +63,9 @@ context->connect_timeout.tv_usec = 0; context->timeout.tv_sec = REDIS_TIMEOUT_DEFAULT; context->timeout.tv_usec = 0; - context->ctx = NULL; + context->host_str = NULL; + context->port = 0; + context->rctx = NULL; return context; } @@ -118,13 +106,11 @@ /* * free resources allocated for the per-process Redis connection context */ -static apr_status_t oidc_cache_redis_disconnect(oidc_cache_cfg_redis_t *context) { - oidc_cache_cfg_redis_ctx_t *rctx = NULL; +apr_status_t oidc_cache_redis_disconnect(oidc_cache_cfg_redis_t *context) { if (context != NULL) { - rctx = (oidc_cache_cfg_redis_ctx_t*) context->ctx; - if ((rctx != NULL) && (rctx->rctx != NULL)) { - redisFree(rctx->rctx); - rctx->rctx = NULL; + if (context->rctx != NULL) { + redisFree(context->rctx); + context->rctx = NULL; } } return APR_SUCCESS; @@ -136,7 +122,6 @@ static int oidc_cache_redis_post_config_impl(server_rec *s) { apr_status_t rv = APR_SUCCESS; oidc_cache_cfg_redis_t *context = NULL; - oidc_cache_cfg_redis_ctx_t *rctx = NULL; oidc_cfg *cfg = (oidc_cfg*) ap_get_module_config(s->module_config, &auth_openidc_module); if (cfg->cache_cfg != NULL) @@ -145,9 +130,7 @@ if (oidc_cache_redis_post_config(s, cfg, "redis") != OK) return HTTP_INTERNAL_SERVER_ERROR; - context = cfg->cache_cfg; - rctx = oidc_cache_redis_cfg_ctx_create(s->process->pool); - context->ctx = rctx; + context = (oidc_cache_cfg_redis_t *)cfg->cache_cfg; /* parse the host:post tuple from the configuration */ if (cfg->cache_redis_server == NULL) { @@ -157,19 +140,19 @@ char *scope_id; rv = - apr_parse_addr_port(&rctx->host_str, &scope_id, &rctx->port, cfg->cache_redis_server, s->process->pool); + apr_parse_addr_port(&context->host_str, &scope_id, &context->port, cfg->cache_redis_server, s->process->pool); if (rv != APR_SUCCESS) { oidc_serror(s, "failed to parse cache server: '%s'", cfg->cache_redis_server); return HTTP_INTERNAL_SERVER_ERROR; } - if (rctx->host_str == NULL) { + if (context->host_str == NULL) { oidc_serror(s, "failed to parse cache server, no hostname specified: '%s'", cfg->cache_redis_server); return HTTP_INTERNAL_SERVER_ERROR; } - if (rctx->port == 0) - rctx->port = 6379; + if (context->port == 0) + context->port = 6379; context->connect = oidc_cache_redis_connect; context->command = oidc_cache_redis_command; @@ -211,38 +194,37 @@ */ static apr_status_t oidc_cache_redis_connect(request_rec *r, oidc_cache_cfg_redis_t *context) { - oidc_cache_cfg_redis_ctx_t *rctx = (oidc_cache_cfg_redis_ctx_t*) context->ctx; redisReply *reply = NULL; - if (rctx->rctx != NULL) + if (context->rctx != NULL) goto end; /* no connection, connect to the configured Redis server */ oidc_debug(r, "calling redisConnectWithTimeout"); - rctx->rctx = redisConnectWithTimeout(rctx->host_str, rctx->port, context->connect_timeout); + context->rctx = redisConnectWithTimeout(context->host_str, context->port, context->connect_timeout); /* check for errors */ - if ((rctx->rctx == NULL) || (rctx->rctx->err != 0)) { - oidc_error(r, "failed to connect to Redis server (%s:%d): '%s'", rctx->host_str, rctx->port, rctx->rctx != NULL ? rctx->rctx->errstr : ""); + if ((context->rctx == NULL) || (context->rctx->err != 0)) { + oidc_error(r, "failed to connect to Redis server (%s:%d): '%s'", context->host_str, context->port, context->rctx != NULL ? context->rctx->errstr : ""); context->disconnect(context); goto end; } /* log the connection */ - oidc_debug(r, "successfully connected to Redis server (%s:%d)", rctx->host_str, rctx->port); + oidc_debug(r, "successfully connected to Redis server (%s:%d)", context->host_str, context->port); - if (redisSetTimeout(rctx->rctx, context->timeout) != REDIS_OK) - oidc_error(r, "redisSetTimeout failed: %s", rctx->rctx->errstr); + if (redisSetTimeout(context->rctx, context->timeout) != REDIS_OK) + oidc_error(r, "redisSetTimeout failed: %s", context->rctx->errstr); /* see if we need to authenticate to the Redis server */ if (context->passwd != NULL) { if (context->username != NULL) { - reply = redisCommand(rctx->rctx, "AUTH %s %s", context->username, context->passwd); + reply = redisCommand(context->rctx, "AUTH %s %s", context->username, context->passwd); } else { - reply = redisCommand(rctx->rctx, "AUTH %s", context->passwd); + reply = redisCommand(context->rctx, "AUTH %s", context->passwd); } if ((reply == NULL) || (reply->type == REDIS_REPLY_ERROR)) - oidc_error(r, "Redis AUTH command (%s:%d) failed: '%s' [%s]", rctx->host_str, rctx->port, rctx->rctx->errstr, + oidc_error(r, "Redis AUTH command (%s:%d) failed: '%s' [%s]", context->host_str, context->port, context->rctx->errstr, reply ? reply->str : "<n/a>"); else oidc_debug(r, "successfully authenticated to the Redis server: %s", @@ -254,9 +236,9 @@ /* see if we need to set the database */ if (context->database != -1) { - reply = redisCommand(rctx->rctx, "SELECT %d", context->database); + reply = redisCommand(context->rctx, "SELECT %d", context->database); if ((reply == NULL) || (reply->type == REDIS_REPLY_ERROR)) - oidc_error(r, "Redis SELECT command (%s:%d) failed: '%s' [%s]", rctx->host_str, rctx->port, rctx->rctx->errstr, + oidc_error(r, "Redis SELECT command (%s:%d) failed: '%s' [%s]", context->host_str, context->port, context->rctx->errstr, reply ? reply->str : "<n/a>"); else oidc_debug(r, "successfully selected database %d on the Redis server: %s", context->database, @@ -268,14 +250,13 @@ end: - return (rctx->rctx != NULL) ? APR_SUCCESS : APR_EGENERAL; + return (context->rctx != NULL) ? APR_SUCCESS : APR_EGENERAL; } redisReply* oidc_cache_redis_command(request_rec *r, oidc_cache_cfg_redis_t *context, char **errstr, const char *format, va_list ap) { - oidc_cache_cfg_redis_ctx_t *rctx = (oidc_cache_cfg_redis_ctx_t*) context->ctx; - redisReply *reply = redisvCommand(rctx->rctx, format, ap); - *errstr = apr_pstrdup(r->pool, rctx->rctx->errstr); + redisReply *reply = redisvCommand(context->rctx, format, ap); + *errstr = apr_pstrdup(r->pool, context->rctx->errstr); return reply; } @@ -287,7 +268,6 @@ static redisReply* oidc_cache_redis_exec(request_rec *r, oidc_cache_cfg_redis_t *context, const char *format, ...) { - oidc_cache_cfg_redis_ctx_t *rctx = (oidc_cache_cfg_redis_ctx_t*) context->ctx; redisReply *reply = NULL; char *errstr = NULL; int i = 0; @@ -311,7 +291,7 @@ break; /* something went wrong, log it */ - oidc_error(r, "Redis command (attempt=%d to %s:%d) failed, disconnecting: '%s' [%s]", i, rctx->host_str, rctx->port, errstr, + oidc_error(r, "Redis command (attempt=%d to %s:%d) failed, disconnecting: '%s' [%s]", i, context->host_str, context->port, errstr, reply ? reply->str : "<n/a>"); /* free the reply (if there is one allocated) */ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/src/cache/redis.h new/mod_auth_openidc-2.4.12.2/src/cache/redis.h --- old/mod_auth_openidc-2.4.12.1/src/cache/redis.h 2022-11-14 15:34:36.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/src/cache/redis.h 2022-12-11 09:13:59.000000000 +0100 @@ -61,7 +61,9 @@ int database; struct timeval connect_timeout; struct timeval timeout; - void *ctx; + char *host_str; + apr_port_t port; + redisContext *rctx; oidc_cache_redis_connect_function_t connect; oidc_cache_redis_command_function_t command; oidc_cache_redis_disconnect_function_t disconnect; @@ -75,3 +77,4 @@ const char **value); apr_byte_t oidc_cache_redis_set(request_rec *r, const char *section, const char *key, const char *value, apr_time_t expiry); +apr_status_t oidc_cache_redis_disconnect(oidc_cache_cfg_redis_t *context); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/src/mod_auth_openidc.c new/mod_auth_openidc-2.4.12.2/src/mod_auth_openidc.c --- old/mod_auth_openidc-2.4.12.1/src/mod_auth_openidc.c 2022-11-14 15:36:15.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/src/mod_auth_openidc.c 2022-12-13 16:40:49.000000000 +0100 @@ -2537,15 +2537,15 @@ oidc_error(r, "%s: %s", *err_str, *err_desc); return FALSE; } - - if ((strstr(url, "/%09") != NULL) || (strstr(url, "/%2f") != NULL) - || (strstr(url, "/%68") != NULL) || (strstr(url, "/http:") != NULL) - || (strstr(url, "/https:") != NULL) || (strstr(url, "/javascript:") != NULL) + if ( (strstr(url, "/%09") != NULL) || (oidc_util_strcasestr(url, "/%2f") != NULL) + || (strstr(url, "/\t") != NULL) + || (strstr(url, "/%68") != NULL) || (oidc_util_strcasestr(url, "/http:") != NULL) + || (oidc_util_strcasestr(url, "/https:") != NULL) || (oidc_util_strcasestr(url, "/javascript:") != NULL) || (strstr(url, "/��") != NULL) || (strstr(url, "/��") != NULL) || (strstr(url, "/��") != NULL) || (strstr(url, "/��") != NULL) || (strstr(url, "/��") != NULL) || (strstr(url, "/��") != NULL) - || (strstr(url, "/<") != NULL) || (strstr(url, "%01javascript:") != NULL) - || (strstr(url, "/%5c") != NULL)) { + || (strstr(url, "/<") != NULL) || (oidc_util_strcasestr(url, "%01javascript:") != NULL) + || (strstr(url, "/%5c") != NULL) || (strstr(url, "/\\") != NULL)) { *err_str = apr_pstrdup(r->pool, "Invalid URL"); *err_desc = apr_psprintf(r->pool, "URL value \"%s\" contains illegal character(s)", url); oidc_error(r, "%s: %s", *err_str, *err_desc); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/src/mod_auth_openidc.h new/mod_auth_openidc-2.4.12.2/src/mod_auth_openidc.h --- old/mod_auth_openidc-2.4.12.1/src/mod_auth_openidc.h 2022-11-14 15:36:15.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/src/mod_auth_openidc.h 2022-12-13 16:33:07.000000000 +0100 @@ -853,6 +853,7 @@ char *oidc_util_get_full_path(apr_pool_t *pool, const char *abs_or_rel_filename); apr_byte_t oidc_enabled(request_rec *r); char *oidc_util_http_form_encoded_data(request_rec *r, const apr_table_t *params); +char* oidc_util_strcasestr(const char *s1, const char *s2); /* HTTP header constants */ #define OIDC_HTTP_HDR_COOKIE "Cookie" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/src/util.c new/mod_auth_openidc-2.4.12.2/src/util.c --- old/mod_auth_openidc-2.4.12.1/src/util.c 2022-11-14 15:36:15.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/src/util.c 2022-12-13 16:32:44.000000000 +0100 @@ -434,7 +434,7 @@ return output; } -static char* oidc_util_strcasestr(const char *s1, const char *s2) { +char* oidc_util_strcasestr(const char *s1, const char *s2) { const char *s = s1; const char *p = s2; do { diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/mod_auth_openidc-2.4.12.1/test/open-redirect-payload-list.txt new/mod_auth_openidc-2.4.12.2/test/open-redirect-payload-list.txt --- old/mod_auth_openidc-2.4.12.1/test/open-redirect-payload-list.txt 2022-11-13 12:59:47.000000000 +0100 +++ new/mod_auth_openidc-2.4.12.2/test/open-redirect-payload-list.txt 2022-12-13 16:40:29.000000000 +0100 @@ -1,4 +1,5 @@ /%09/example.com +/ /example.com /%2f%2fexample.com /%2f%2f%2fbing.com%2f%3fwww.omise.co /%2f%5c%2f%67%6f%6f%67%6c%65%2e%63%6f%6d/

1 0

commit python-py7zr for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-py7zr for openSUSE:Factory checked in at 2022-12-24 14:51:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-py7zr (Old) and /work/SRC/openSUSE:Factory/.python-py7zr.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-py7zr" Sat Dec 24 14:51:30 2022 rev:4 rq:1044224 version:0.20.2 Changes: -------- --- /work/SRC/openSUSE:Factory/python-py7zr/python-py7zr.changes 2022-07-15 13:52:58.279572984 +0200 +++ /work/SRC/openSUSE:Factory/.python-py7zr.new.1563/python-py7zr.changes 2022-12-24 14:52:24.907674867 +0100 @@ -1,0 +2,29 @@ +Wed Dec 21 10:02:30 UTC 2022 - Ben Greiner <code(a)bnavigator.de> + +- Update to 0.20.2 + * Fix error with good path data, when detecting wrong path with + new canonical_path(), and drop resolve() call on path. +- Release 0.20.1 + ## Security + * Fix sanity check for path traversal attack(#480) + * Add path checker in writef() and writestr() methods that + ignores evil pass. + - When pass arcname as evil path such as + "../../../../tmp/evil.sh" + - it raises ValueError + * Check symlink and junction is under target folder when + extraction +- Release 0.20.0 + * Support enhanced deflate compression.(#472) + * Bump setuptools@63 and setuptools_scm@7 (#473) + * Deprecate Python 3.6 support (#473) +- Fixes boo#1206141 CVE-2022-44900 + +------------------------------------------------------------------- +Fri Jul 15 07:54:24 UTC 2022 - Ben Greiner <code(a)bnavigator.de> + +- Update to version 0.19.0 + * big changelog +- Move tests to multibuild + +------------------------------------------------------------------- Old: ---- py7zr-0.11.3.tar.gz New: ---- _multibuild py7zr-0.20.2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-py7zr.spec ++++++ --- /var/tmp/diff_new_pack.AdAmda/_old 2022-12-24 14:52:27.455689734 +0100 +++ /var/tmp/diff_new_pack.AdAmda/_new 2022-12-24 14:52:27.459689757 +0100 @@ -1,5 +1,5 @@ # -# spec file for package python-py7zr +# spec file # # Copyright (c) 2022 SUSE LLC # @@ -16,36 +16,55 @@ # -%{?!python_module:%define python_module() python-%{**} python3-%{**}} -%define skip_python2 1 -Name: python-py7zr -Version: 0.11.3 +%global flavor @BUILD_FLAVOR@%{nil} +%if "%{flavor}" == "test" +%define psuffix -test +%bcond_without test +%else +%define psuffix %{nil} +%bcond_with test +%endif + +Name: python-py7zr%{psuffix} +Version: 0.20.2 Release: 0 Summary: Library and utility to support 7zip License: LGPL-2.1-or-later Group: Development/Languages/Python URL: https://github.com/miurahr/py7zr Source0: https://files.pythonhosted.org/packages/source/p/py7zr/py7zr-%{version}.tar… -BuildRequires: %{python_module pep517} -BuildRequires: %{python_module pyannotate} -BuildRequires: %{python_module pycryptodome} -BuildRequires: %{python_module pylzma} -BuildRequires: %{python_module setuptools_scm} -BuildRequires: %{python_module setuptools} -BuildRequires: %{python_module texttable} -BuildRequires: %{python_module toml} +BuildRequires: %{python_module base >= 3.7} +BuildRequires: %{python_module pip} +BuildRequires: %{python_module setuptools >= 63} +BuildRequires: %{python_module setuptools_scm >= 7.0.5} BuildRequires: %{python_module wheel} -# SECTION test requirements -BuildRequires: %{python_module pytest-remotedata} -BuildRequires: %{python_module pytest-timeout} -BuildRequires: %{python_module pytest} -# /SECTION BuildRequires: fdupes BuildRequires: python-rpm-macros -Requires: python-pycryptodome +Requires: python-Brotli >= 1.0.9 +Requires: python-multivolumefile >= 0.2.3 +Requires: python-psutil +Requires: python-pybcj >= 0.6.0 +Requires: python-pycryptodomex >= 3.6.6 +Requires: python-pyzstd >= 0.14.4 Requires: python-texttable +Requires: (python-pyppmd >= 0.18.1 with python-pyppmd < 1.1.0) +%if 0%{?python_version_nodots} < 38 +Requires: python-importlib_metadata +%endif +%if 0%{?python_version_nodots} > 36 +Requires: python-inflate64 >= 0.3.1 +%endif Requires(post): update-alternatives Requires(postun):update-alternatives +%if %{with test} +BuildRequires: %{python_module py-cpuinfo} +BuildRequires: %{python_module py7zr = %{version}} +BuildRequires: %{python_module pyannotate} +BuildRequires: %{python_module pytest-benchmark} +BuildRequires: %{python_module pytest-remotedata} +BuildRequires: %{python_module pytest-timeout} +BuildRequires: %{python_module pytest} +%endif BuildArch: noarch %python_subpackages @@ -54,24 +73,23 @@ %prep %setup -q -n py7zr-%{version} -find . -type f -name "*.py" -exec sed -i \ - -e '1s|/usr/bin/env python$|/usr/bin/python3|g' \ - -e '1s|/usr/bin/python |/usr/bin/python3 |g' \ - {} \; - -sed -i -e 's|setuptools-scm>=3.5.0|setuptools-scm|g' setup.cfg -sed -i -e '/addopts/d' tox.ini +# remove shebangs from source +sed -i '1{/#!/d}' py7zr/*.py +%if !%{with test} %build -%python_build +%pyproject_wheel %install -%python_install +%pyproject_install %python_clone -a %{buildroot}%{_bindir}/py7zr %python_expand %fdupes %{buildroot}%{$python_sitelib} -for i in __init__.py __main__.py archiveinfo.py callbacks.py cli.py compressor.py helpers.py py7zr.py ; do - %python_expand chmod +x %{buildroot}%{$python_sitelib}/py7zr/$i -done +%endif + +%if %{with test} +%check +%pytest +%endif %post %python_install_alternative py7zr @@ -79,16 +97,13 @@ %postun %python_uninstall_alternative py7zr -%check -# different format of argparse in python3.10 -python310_donttest=("-k" "not (test_cli_help or test_cli_no_subcommand)") -%pytest -m "not benchmark" "${$python_donttest[@]}" - +%if !%{with test} %files %{python_files} %license LICENSE %doc README.rst Changelog.rst %{python_sitelib}/py7zr %{python_sitelib}/py7zr-%{version}*-info %python_alternative %{_bindir}/py7zr +%endif %changelog ++++++ _multibuild ++++++ <multibuild> <package>test</package> </multibuild> ++++++ py7zr-0.11.3.tar.gz -> py7zr-0.20.2.tar.gz ++++++ ++++ 19562 lines of diff (skipped)

1 0

commit spirv-tools for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package spirv-tools for openSUSE:Factory checked in at 2022-12-24 14:51:23 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/spirv-tools (Old) and /work/SRC/openSUSE:Factory/.spirv-tools.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "spirv-tools" Sat Dec 24 14:51:23 2022 rev:36 rq:1045167 version:2022.4+sdk236 Changes: -------- --- /work/SRC/openSUSE:Factory/spirv-tools/spirv-tools.changes 2022-10-27 13:53:37.172398316 +0200 +++ /work/SRC/openSUSE:Factory/.spirv-tools.new.1563/spirv-tools.changes 2022-12-24 14:52:11.331595655 +0100 @@ -1,0 +2,10 @@ +Fri Dec 23 08:06:09 UTC 2022 - Jan Engelhardt <jengelh(a)inai.de> + +- Update to release 2022.4+sdk236 + * Only validate full layout in Vulkan environments + * Prevent eliminating case constructs in block merging + * Add pass to eliminate dead output components + * Add support for tesc, tese and geom to EliminateDead*Components + * Add option to ADCE to remove output variables from interface + +------------------------------------------------------------------- Old: ---- v2022.4.tar.gz New: ---- sdk-1.3.236.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ spirv-tools.spec ++++++ --- /var/tmp/diff_new_pack.ZMV8IU/_old 2022-12-24 14:52:11.839598619 +0100 +++ /var/tmp/diff_new_pack.ZMV8IU/_new 2022-12-24 14:52:11.839598619 +0100 @@ -17,17 +17,17 @@ %define _lto_cflags %nil -%define lname libSPIRV-Tools-2022_4 +%define lname libSPIRV-Tools-2022_4_sdk236 Name: spirv-tools -Version: 2022.4 +Version: 2022.4+sdk236 Release: 0 Summary: API and commands for processing SPIR-V modules License: Apache-2.0 Group: Development/Libraries/C and C++ URL: https://github.com/KhronosGroup/SPIRV-Tools - -Source: https://github.com/KhronosGroup/SPIRV-Tools/archive/refs/tags/v%version.tar… +#Source: https://github.com/KhronosGroup/SPIRV-Tools/archive/refs/tags/v%version.tar… +Source: https://github.com/KhronosGroup/SPIRV-Tools/archive/refs/tags/sdk-1.3.236.0… Source9: baselibs.conf Patch1: ver.diff BuildRequires: bison @@ -36,7 +36,7 @@ BuildRequires: pkg-config BuildRequires: python3-base BuildRequires: python3-xml -BuildRequires: spirv-headers >= 1.6.1+sdk231 +BuildRequires: spirv-headers >= 1.6.1+sdk236 %description The package includes an assembler, binary module parser, @@ -64,9 +64,10 @@ integration into other code bases directly. %prep -%autosetup -p1 -n SPIRV-Tools-%version +%define slibv 2022.4.sdk236 +%autosetup -p1 -n SPIRV-Tools-sdk-1.3.236.0 find . -type f -name CMakeLists.txt -exec \ - perl -i -pe 's{\@PACKAGE_VERSION\@}{%version}' CMakeLists.txt {} + + perl -i -pe 's{\@PACKAGE_VERSION\@}{%slibv}' CMakeLists.txt {} + %build %cmake -DSPIRV-Headers_SOURCE_DIR="%_prefix" \ @@ -77,7 +78,7 @@ %cmake_install perl -i -lpe 's{^#!/usr/bin/env sh$}{#!/bin/sh}' "%buildroot/%_bindir/spirv-lesspipe.sh" for i in "" "-diff" "-link" "-lint" "-opt" "-reduce" "-shared"; do - ln -s "libSPIRV-Tools$i-%version.so" "%buildroot/%_libdir/libSPIRV-Tools$i.so" + ln -s "libSPIRV-Tools$i-%slibv.so" "%buildroot/%_libdir/libSPIRV-Tools$i.so" done %post -n %lname -p /sbin/ldconfig ++++++ baselibs.conf ++++++ --- /var/tmp/diff_new_pack.ZMV8IU/_old 2022-12-24 14:52:11.883598876 +0100 +++ /var/tmp/diff_new_pack.ZMV8IU/_new 2022-12-24 14:52:11.887598899 +0100 @@ -1,5 +1,5 @@ -libSPIRV-Tools-2022_4 +libSPIRV-Tools-2022_4_sdk236 spirv-tools-devel requires -spirv-tools-<targettype> - requires "libSPIRV-Tools-2022_4-<targettype> = <version>" + requires "libSPIRV-Tools-2022_4_sdk236-<targettype> = <version>"

1 0

commit spirv-headers for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package spirv-headers for openSUSE:Factory checked in at 2022-12-24 14:51:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/spirv-headers (Old) and /work/SRC/openSUSE:Factory/.spirv-headers.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "spirv-headers" Sat Dec 24 14:51:22 2022 rev:32 rq:1045166 version:1.6.1+sdk236 Changes: -------- --- /work/SRC/openSUSE:Factory/spirv-headers/spirv-headers.changes 2022-10-27 13:53:36.084392766 +0200 +++ /work/SRC/openSUSE:Factory/.spirv-headers.new.1563/spirv-headers.changes 2022-12-24 14:52:08.711580368 +0100 @@ -1,0 +2,8 @@ +Fri Dec 23 07:59:56 UTC 2022 - Jan Engelhardt <jengelh(a)inai.de> + +- Update to release 1.6.1+sdk236 (1d31a10) + * Add SPV_INTEL_fpga_invocation_pipelining_attributes, + SPV_INTEL_fpga_dsp_control, SPV_INTEL_runtime_aligned + * Add headers for SPV_NV_shader_invocation_reorder + +------------------------------------------------------------------- Old: ---- _service spirv-headers-1.6.1+sdk231+git0.85a1ed2.tar.xz New: ---- sdk-1.3.236.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ spirv-headers.spec ++++++ --- /var/tmp/diff_new_pack.BnG0fb/_old 2022-12-24 14:52:10.503590824 +0100 +++ /var/tmp/diff_new_pack.BnG0fb/_new 2022-12-24 14:52:10.559591151 +0100 @@ -17,22 +17,20 @@ # The git repo is a hodgepodge. -# Most recent tag is 1.5.4, but that is outdated -# CMakeLists.txt's project() line contains 1.5.5, but this is outdated too +# Most recent tag is 1.5.4, but that is outdated. +# CMakeLists.txt's project() line contains 1.5.5, but this is outdated too. # The SPIR-V version is 1.6.1 (include/spirv/unified1/spirv.core.grammar.json) # They add "SDK" tags that reflect the Vulkan version (1.3), # and the independently increasing toolchain release number (216). Name: spirv-headers -Version: 1.6.1+sdk231+git0.85a1ed2 +Version: 1.6.1+sdk236 Release: 0 Summary: Machine-readable files from the SPIR-V registry License: MIT Group: Development/Libraries/C and C++ URL: https://github.com/KhronosGroup/SPIRV-Headers - -#Source: https://github.com/KhronosGroup/SPIRV-Headers/archive/sdk-1.3.216.0.tar.gz -Source: %name-%version.tar.xz +Source: https://github.com/KhronosGroup/SPIRV-Headers/archive/sdk-1.3.236.0.tar.gz BuildArch: noarch BuildRequires: cmake >= 2.8 BuildRequires: fdupes @@ -49,7 +47,7 @@ * The XML registry file. %prep -%autosetup +%autosetup -n SPIRV-Headers-sdk-1.3.236.0 %build %cmake

1 0

commit raspberrypi-firmware for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package raspberrypi-firmware for openSUSE:Factory checked in at 2022-12-24 14:51:21 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/raspberrypi-firmware (Old) and /work/SRC/openSUSE:Factory/.raspberrypi-firmware.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "raspberrypi-firmware" Sat Dec 24 14:51:21 2022 rev:97 rq:1045015 version:2022.12.12 Changes: -------- --- /work/SRC/openSUSE:Factory/raspberrypi-firmware/raspberrypi-firmware-config-camera.changes 2022-11-22 16:09:52.869938101 +0100 +++ /work/SRC/openSUSE:Factory/.raspberrypi-firmware.new.1563/raspberrypi-firmware-config-camera.changes 2022-12-24 14:52:07.599573880 +0100 @@ -1,0 +2,10 @@ +Fri Dec 23 13:58:39 UTC 2022 - Guillaume GARDET <guillaume.gardet(a)opensuse.org> + +- Update to 0a7ea702 (2022-12-12): + * firmware: arm_loader: PWM1 is not available on GPIO 45 + * firmware: power: Always read the uncached voltage for AIN and USB_PD + See: https://forums.raspberrypi.com/viewtopic.php?p=2059832#p2059832 + * firmware: Use new SDHCI controller instead of legacy arasan + See: #1763 + +------------------------------------------------------------------- raspberrypi-firmware-config.changes: same change raspberrypi-firmware.changes: same change Old: ---- raspberrypi-firmware-2022.11.18.tar.bz2 New: ---- raspberrypi-firmware-2022.12.12.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ raspberrypi-firmware-config-camera.spec ++++++ --- /var/tmp/diff_new_pack.SQZ3qQ/_old 2022-12-24 14:52:08.215577474 +0100 +++ /var/tmp/diff_new_pack.SQZ3qQ/_new 2022-12-24 14:52:08.219577498 +0100 @@ -17,7 +17,7 @@ Name: raspberrypi-firmware-config-camera -Version: 2022.11.18 +Version: 2022.12.12 Release: 0 Summary: Configuration for the Raspberry Pi firmware loader License: MIT raspberrypi-firmware-config.spec: same change ++++++ raspberrypi-firmware.spec ++++++ --- /var/tmp/diff_new_pack.SQZ3qQ/_old 2022-12-24 14:52:08.267577778 +0100 +++ /var/tmp/diff_new_pack.SQZ3qQ/_new 2022-12-24 14:52:08.295577941 +0100 @@ -23,7 +23,7 @@ %global modprobe_d_files 50-rpi3.conf Name: raspberrypi-firmware -Version: 2022.11.18 +Version: 2022.12.12 Release: 0 Summary: Binary bootloader and firmware files for Raspberry Pi License: SUSE-Firmware ++++++ raspberrypi-firmware-2022.11.18.tar.bz2 -> raspberrypi-firmware-2022.12.12.tar.bz2 ++++++ /work/SRC/openSUSE:Factory/raspberrypi-firmware/raspberrypi-firmware-2022.11.18.tar.bz2 /work/SRC/openSUSE:Factory/.raspberrypi-firmware.new.1563/raspberrypi-firmware-2022.12.12.tar.bz2 differ: char 11, line 1

1 0

commit cronie for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cronie for openSUSE:Factory checked in at 2022-12-24 14:51:20 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cronie (Old) and /work/SRC/openSUSE:Factory/.cronie.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cronie" Sat Dec 24 14:51:20 2022 rev:88 rq:1044632 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/cronie/cronie.changes 2022-12-14 14:10:49.499439773 +0100 +++ /work/SRC/openSUSE:Factory/.cronie.new.1563/cronie.changes 2022-12-24 14:52:06.315566389 +0100 @@ -1,0 +2,5 @@ +Tue Dec 20 16:10:11 UTC 2022 - Stefan Schubert <schubi(a)suse.com> + +- Use %_pam_vendordir + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cronie.spec ++++++ --- /var/tmp/diff_new_pack.y1PFMS/_old 2022-12-24 14:52:07.015570473 +0100 +++ /var/tmp/diff_new_pack.y1PFMS/_new 2022-12-24 14:52:07.023570520 +0100 @@ -149,8 +149,8 @@ touch %{buildroot}%{_localstatedir}/spool/anacron/cron.monthly %if 0%{?suse_version} > 1500 -mkdir -p %{buildroot}%{_distconfdir}/pam.d -mv %{buildroot}%{_sysconfdir}/pam.d/crond %{buildroot}%{_distconfdir}/pam.d/ +mkdir -p %{buildroot}%{_pam_vendordir} +mv %{buildroot}%{_sysconfdir}/pam.d/crond %{buildroot}%{_pam_vendordir}/ %endif %pre @@ -211,7 +211,7 @@ %dir %attr(700,root,root) %{_localstatedir}/spool/cron/tabs %dir %{_localstatedir}/spool/cron/lastrun %if 0%{?suse_version} > 1500 -%{_distconfdir}/pam.d/crond +%{_pam_vendordir}/crond %else %config %{_sysconfdir}/pam.d/crond %endif

1 0

commit iproute2 for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package iproute2 for openSUSE:Factory checked in at 2022-12-24 14:51:19 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/iproute2 (Old) and /work/SRC/openSUSE:Factory/.iproute2.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "iproute2" Sat Dec 24 14:51:19 2022 rev:130 rq:1044599 version:6.1 Changes: -------- --- /work/SRC/openSUSE:Factory/iproute2/iproute2.changes 2022-11-25 13:11:34.543819438 +0100 +++ /work/SRC/openSUSE:Factory/.iproute2.new.1563/iproute2.changes 2022-12-24 14:52:04.219554159 +0100 @@ -1,0 +2,58 @@ +Fri Dec 23 08:13:21 UTC 2022 - Dirk M��ller <dmueller(a)suse.com> + +- update to 6.1: + * man: ss.8: fix a typo + * testsuite: fix build failure + * genl: remove unused vars in Makefile + * json: do not escape single quotes + * ip-monitor: Do not error out when RTNLGRP_STATS is not available + * ip-link: man: Document existence of netns argument in add command + * macsec: add Extended Packet Number support + * macsec: add user manual description for extended packet number feature + * ip: xfrm: support "external" (`collect_md`) mode in xfrm interfaces + * ip: xfrm: support adding xfrm metadata as lwtunnel info in routes + * ip: add NLM_F_ECHO support + * libnetlink: add offset for nl_dump_ext_ack_done + * tc/tc_monitor: print netlink extack message + * rtnetlink: add new function rtnl_echo_talk() + * ip: fix return value for rtnl_talk failures + * iplink_bridge: Add no_linklocal_learn option support + * devlink: use dl_no_arg instead of checking dl_argc == 0 + * devlink: remove dl_argv_parse_put + * mnlg: remove unnused mnlg_socket structure + * utils: extract CTRL_ATTR_MAXATTR and save it + * devlink: expose nested devlink for a line card object + * devlink: load port-ifname map on demand + * devlink: fix parallel flash notifications processing + * devlink: move use_iec into struct dl + * devlink: fix typo in variable name in ifname_map_cb() + * devlink: load ifname map on demand from ifname_map_rev_lookup() as well + * dcb: unblock mnl_socket_recvfrom if not message received + * libnetlink: Fix memory leak in __rtnl_talk_iov() + * tc_util: Fix no error return when large parent id used + * tc_util: Change datatype for maj to avoid overflow issue + * ss: man: add missing entries for MPTCP + * ss: man: add missing entries for TIPC + * ss: usage: add missing parameters + * ss: re-add TIPC query support + * devlink: Fix setting parent for 'rate add' + * link: display 'allmulti' counter + * seg6: add support for flavors in SRv6 End* behaviors + * tc: ct: Fix invalid pointer dereference + * uapi: update from 6.1 pre rc1 + * u32: fix json formatting of flowid + * tc_stab: remove dead code + * uapi: update for in.h and ip.h + * remove #if 0 code + * tc: add json support to size table + * tc: put size table options in json object + * tc/basic: fix json output filter + * iplink: support JSON in MPLS output + * tc: print errors on stderr + * ip: print mpls errors on stderr + * tc: make prefix const + * man: add missing tc class show + * iplink_can: add missing `]' of the bitrate, dbitrate and termination arrays + * ip link: add sub-command to view and change DSA conduit interface + +------------------------------------------------------------------- Old: ---- iproute2-6.0.0.tar.sign iproute2-6.0.0.tar.xz New: ---- iproute2-6.1.0.tar.sign iproute2-6.1.0.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ iproute2.spec ++++++ --- /var/tmp/diff_new_pack.ZBQ8nd/_old 2022-12-24 14:52:04.751557263 +0100 +++ /var/tmp/diff_new_pack.ZBQ8nd/_new 2022-12-24 14:52:04.759557310 +0100 @@ -18,7 +18,7 @@ %define _buildshell /bin/bash Name: iproute2 -Version: 6.0 +Version: 6.1 Release: 0 Summary: Linux network configuration utilities License: GPL-2.0-only ++++++ iproute2-6.0.0.tar.xz -> iproute2-6.1.0.tar.xz ++++++ ++++ 4526 lines of diff (skipped)

1 0

commit ffmpeg-4 for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package ffmpeg-4 for openSUSE:Factory checked in at 2022-12-24 14:51:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/ffmpeg-4 (Old) and /work/SRC/openSUSE:Factory/.ffmpeg-4.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "ffmpeg-4" Sat Dec 24 14:51:17 2022 rev:56 rq:1044594 version:4.4.3 Changes: -------- --- /work/SRC/openSUSE:Factory/ffmpeg-4/ffmpeg-4.changes 2022-11-17 17:23:58.596897884 +0100 +++ /work/SRC/openSUSE:Factory/.ffmpeg-4.new.1563/ffmpeg-4.changes 2022-12-24 14:52:02.671545127 +0100 @@ -1,0 +2,6 @@ +Fri Dec 23 08:09:25 UTC 2022 - Alynx Zhou <alynx.zhou(a)suse.com> + +- Add ffmpeg-CVE-2022-3109.patch: Backport from upstream to fix + null pointer dereference in vp3_decode_frame() (bsc#1206442). + +------------------------------------------------------------------- New: ---- ffmpeg-CVE-2022-3109.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ ffmpeg-4.spec ++++++ --- /var/tmp/diff_new_pack.4BFW6r/_old 2022-12-24 14:52:03.639550775 +0100 +++ /var/tmp/diff_new_pack.4BFW6r/_new 2022-12-24 14:52:03.647550821 +0100 @@ -121,6 +121,7 @@ Patch10: ffmpeg-chromium.patch Patch11: ffmpeg-libglslang-detection.patch Patch12: ffmpeg-CVE-2022-3964.patch +Patch13: ffmpeg-CVE-2022-3109.patch BuildRequires: ladspa-devel BuildRequires: libgsm-devel BuildRequires: libmp3lame-devel ++++++ ffmpeg-CVE-2022-3109.patch ++++++ diff --unified --recursive --text --new-file --color ffmpeg-4.4.3.old/libavcodec/vp3.c ffmpeg-4.4.3.new/libavcodec/vp3.c --- ffmpeg-4.4.3.old/libavcodec/vp3.c 2022-10-10 03:04:38.000000000 +0800 +++ ffmpeg-4.4.3.new/libavcodec/vp3.c 2022-12-23 16:25:47.902576459 +0800 @@ -2683,8 +2683,13 @@ if ((ret = ff_thread_get_buffer(avctx, &s->current_frame, AV_GET_BUFFER_FLAG_REF)) < 0) goto error; - if (!s->edge_emu_buffer) + if (!s->edge_emu_buffer) { s->edge_emu_buffer = av_malloc(9 * FFABS(s->current_frame.f->linesize[0])); + if (!s->edge_emu_buffer) { + ret = AVERROR(ENOMEM); + goto error; + } + } if (s->keyframe) { if (!s->theora) {

1 0

commit pipewire for openSUSE:Factory
by Source-Sync 24 Dec '22

24 Dec '22

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pipewire for openSUSE:Factory checked in at 2022-12-24 14:51:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pipewire (Old) and /work/SRC/openSUSE:Factory/.pipewire.new.1563 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "pipewire" Sat Dec 24 14:51:15 2022 rev:71 rq:1044590 version:0.3.63 Changes: -------- --- /work/SRC/openSUSE:Factory/pipewire/pipewire.changes 2022-12-17 20:36:10.860484951 +0100 +++ /work/SRC/openSUSE:Factory/.pipewire.new.1563/pipewire.changes 2022-12-24 14:52:01.875540483 +0100 @@ -1,0 +2,7 @@ +Mon Dec 19 11:00:49 UTC 2022 - Antonio Larrosa <alarrosa(a)suse.com> + +- Add patch from upstream to remember last routing after a reboot + (glfo#pipewire/pipewire#2893): + * 0001-alsa-dont-set--1-as-node.target.patch + +------------------------------------------------------------------- New: ---- 0001-alsa-dont-set--1-as-node.target.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pipewire.spec ++++++ --- /var/tmp/diff_new_pack.KMJzQq/_old 2022-12-24 14:52:02.399543540 +0100 +++ /var/tmp/diff_new_pack.KMJzQq/_new 2022-12-24 14:52:02.403543564 +0100 @@ -66,6 +66,8 @@ Patch0: reduce-meson-dependency.patch # PATCH-FIX-UPSTREAM 0001-pulse-server-add-channel-map-in-echo-cancel-module.patch Patch1: 0001-pulse-server-add-channel-map-in-echo-cancel-module.patch +# PATCH-FIX-UPSTREAM 0001-alsa-dont-set--1-as-node.target.patch +Patch2: 0001-alsa-dont-set--1-as-node.target.patch BuildRequires: docutils BuildRequires: doxygen BuildRequires: fdupes @@ -338,6 +340,7 @@ %patch0 -p1 %endif %patch1 -p1 +%patch2 -p1 %build %if %{pkg_vcmp gcc < 8} ++++++ 0001-alsa-dont-set--1-as-node.target.patch ++++++ From 89ac6b353521fb9a6d6eb6bb74724c4fa968f75c Mon Sep 17 00:00:00 2001 From: Wim Taymans <wtaymans(a)redhat.com> Date: Sat, 17 Dec 2022 18:17:33 +0100 Subject: [PATCH] =?UTF-8?q?alsa:=20don=C2=B4t=20set=20-1=20as=20node.targe?= =?UTF-8?q?t?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Leave the target unset when -1, just like what pw-stream does. See #2893 --- pipewire-alsa/alsa-plugins/pcm_pipewire.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pipewire-alsa/alsa-plugins/pcm_pipewire.c b/pipewire-alsa/alsa-plugins/pcm_pipewire.c index 37a907b24..96b57da78 100644 --- a/pipewire-alsa/alsa-plugins/pcm_pipewire.c +++ b/pipewire-alsa/alsa-plugins/pcm_pipewire.c @@ -579,7 +579,7 @@ static int snd_pcm_pipewire_prepare(snd_pcm_ioplug_t *io) pw_properties_setf(props, PW_KEY_NODE_LATENCY, "%lu/%u", pw->min_avail, io->rate); if (pw_properties_get(props, PW_KEY_NODE_RATE) == NULL) pw_properties_setf(props, PW_KEY_NODE_RATE, "1/%u", io->rate); - if (pw->target != NULL && + if (pw->target != NULL && !spa_streq(pw->target, "-1") && pw_properties_get(props, PW_KEY_NODE_TARGET) == NULL) pw_properties_setf(props, PW_KEY_NODE_TARGET, "%s", pw->target);

1 0