November 2023 - openSUSE Commits - openSUSE Mailing Lists

commit golang-github-prometheus-alertmanager for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package golang-github-prometheus-alertmanager for openSUSE:Factory checked in at 2023-11-30 22:01:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/golang-github-prometheus-alertmanager (Old) and /work/SRC/openSUSE:Factory/.golang-github-prometheus-alertmanager.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "golang-github-prometheus-alertmanager" Thu Nov 30 22:01:39 2023 rev:17 rq:1129939 version:0.26.0 Changes: -------- --- /work/SRC/openSUSE:Factory/golang-github-prometheus-alertmanager/golang-github-prometheus-alertmanager.changes 2023-09-07 21:15:27.555135564 +0200 +++ /work/SRC/openSUSE:Factory/.golang-github-prometheus-alertmanager.new.25432/golang-github-prometheus-alertmanager.changes 2023-11-30 22:02:12.351015022 +0100 @@ -1,0 +2,11 @@ +Tue Nov 21 16:24:41 UTC 2023 - Witek Bedyk <witold.bedyk(a)suse.com> + +- Add 0002-Set-build-flags.patch +- Require Go 1.20 or newer for building +- Remove not used build flags +- Create position independent executables (PIE) +- Do not disable stripping the binaries +- Add System/Monitoring group tag +- Do not generate automatically changelog entries + +------------------------------------------------------------------- New: ---- 0002-Set-build-flags.patch BETA DEBUG BEGIN: New: - Add 0002-Set-build-flags.patch - Require Go 1.20 or newer for building BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ golang-github-prometheus-alertmanager.spec ++++++ --- /var/tmp/diff_new_pack.RXDkPt/_old 2023-11-30 22:02:12.979038157 +0100 +++ /var/tmp/diff_new_pack.RXDkPt/_new 2023-11-30 22:02:12.979038157 +0100 @@ -22,24 +22,25 @@ Summary: Prometheus Alertmanager License: Apache-2.0 URL: https://prometheus.io/ +Group: System/Monitoring Source: alertmanager-%{version}.tar.gz Source1: vendor.tar.gz Source2: prometheus-alertmanager.service Source3: alertmanager.yml # Lifted from Debian's alertmanager package Patch1: 0001-Default-settings.patch +# Build as position independent executables (PIE) +Patch2: 0002-Set-build-flags.patch BuildRequires: fdupes BuildRequires: golang-github-prometheus-promu >= 0.12.0 BuildRequires: golang-packaging -BuildRequires: golang(API) >= 1.19 +BuildRequires: golang(API) >= 1.20 Requires(pre): group(prometheus) Requires(pre): user(prometheus) Provides: prometheus-alertmanager = %{version} ExcludeArch: s390 %{?systemd_ordering} -%{go_nostrip} - %description The Alertmanager handles alerts sent by client applications such as the Prometheus server. It takes care of deduplicating, grouping, and routing @@ -51,8 +52,7 @@ %build %goprep github.com/prometheus/alertmanager -export BUILDFLAGS="-v -p 4 -x -buildmode=pie -mod=vendor" -GOPATH=%{_builddir}/go promu build +GOPATH=%{_builddir}/go promu -v build %install %goinstall ++++++ 0002-Set-build-flags.patch ++++++ Index: alertmanager-0.26.0/.promu.yml =================================================================== --- alertmanager-0.26.0.orig/.promu.yml +++ alertmanager-0.26.0/.promu.yml @@ -10,7 +10,7 @@ build: path: ./cmd/alertmanager - name: amtool path: ./cmd/amtool - flags: -a + flags: -a -buildmode pie tags: all: - netgo ++++++ _service ++++++ --- /var/tmp/diff_new_pack.RXDkPt/_old 2023-11-30 22:02:13.019039631 +0100 +++ /var/tmp/diff_new_pack.RXDkPt/_new 2023-11-30 22:02:13.023039778 +0100 @@ -7,7 +7,6 @@ <param name="revision">refs/tags/v0.26.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">^\D*([\d.]+)$</param> - <param name="changesgenerate">enable</param> </service> <service name="set_version" mode="disabled"> <param name="basename">alertmanager</param> ++++++ alertmanager-0.26.0.obscpio ++++++ /work/SRC/openSUSE:Factory/golang-github-prometheus-alertmanager/alertmanager-0.26.0.obscpio /work/SRC/openSUSE:Factory/.golang-github-prometheus-alertmanager.new.25432/alertmanager-0.26.0.obscpio differ: char 46, line 1 ++++++ vendor.tar.gz ++++++

1 0

commit syft for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package syft for openSUSE:Factory checked in at 2023-11-30 22:01:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/syft (Old) and /work/SRC/openSUSE:Factory/.syft.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "syft" Thu Nov 30 22:01:36 2023 rev:56 rq:1129932 version:0.98.0 Changes: -------- --- /work/SRC/openSUSE:Factory/syft/syft.changes 2023-11-20 21:21:06.902270684 +0100 +++ /work/SRC/openSUSE:Factory/.syft.new.25432/syft.changes 2023-11-30 22:02:10.414943700 +0100 @@ -1,0 +2,24 @@ +Thu Nov 30 08:14:13 UTC 2023 - andrea.manzini(a)suse.com + +- Update to version 0.98.0: + * fix file metadata cataloger to use resolved locations (#2370) + * fix: logging level for parsing potential PE files (#2367) + * only remove breaking-change label when there are schema changes (#2371) + * fix: capture root command stdout (#2364) + * fix: hardcode xalan group ID (#2368) + * Normalize cataloger configuration patterns (#2365) + * normalize enums to lowercase with hyphens (#2363) + * bump deps version + * fix: index file itself when file scan path has symlink (#2359) + * use read lock in pkg collection (#2341) + * Fix the `attest` command (#2337) + * fix: add manual namespace mapping for org.springframework jars (#2345) + * Add binary classifiers for MySQL and MariaDB (#2316) + * Enhance redis binary classifier (#2329) + * fix: add manual namespace mapping for org.springframework.security jars (#2343) + * fix: add manual namespace mapping for org.bouncycastle jars (#2342) + * Update developer docs to represent the current package layout (#2340) + * Remove the power-user command and related catalogers (#2306) + * Add "pretty" json configuration and change default behavior to be space-efficient (#2275) + +------------------------------------------------------------------- Old: ---- syft-0.97.1.obscpio New: ---- syft-0.98.0.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ syft.spec ++++++ --- /var/tmp/diff_new_pack.nMaAS3/_old 2023-11-30 22:02:11.922999254 +0100 +++ /var/tmp/diff_new_pack.nMaAS3/_new 2023-11-30 22:02:11.926999402 +0100 @@ -19,7 +19,7 @@ %define __arch_install_post export NO_BRP_STRIP_DEBUG=true Name: syft -Version: 0.97.1 +Version: 0.98.0 Release: 0 Summary: CLI tool and library for generating a Software Bill of Materials License: Apache-2.0 ++++++ _service ++++++ --- /var/tmp/diff_new_pack.nMaAS3/_old 2023-11-30 22:02:11.951000286 +0100 +++ /var/tmp/diff_new_pack.nMaAS3/_new 2023-11-30 22:02:11.955000433 +0100 @@ -3,7 +3,7 @@ <param name="url">https://github.com/anchore/syft</param> <param name="scm">git</param> <param name="exclude">.git</param> - <param name="revision">v0.97.1</param> + <param name="revision">v0.98.0</param> <param name="versionformat">@PARENT_TAG@</param> <param name="changesgenerate">enable</param> <param name="versionrewrite-pattern">v(.*)</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.nMaAS3/_old 2023-11-30 22:02:11.971001023 +0100 +++ /var/tmp/diff_new_pack.nMaAS3/_new 2023-11-30 22:02:11.975001170 +0100 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/anchore/syft</param> - <param name="changesrevision">7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73</param></service></servicedata> + <param name="changesrevision">5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628</param></service></servicedata> (No newline at EOF) ++++++ syft-0.97.1.obscpio -> syft-0.98.0.obscpio ++++++ /work/SRC/openSUSE:Factory/syft/syft-0.97.1.obscpio /work/SRC/openSUSE:Factory/.syft.new.25432/syft-0.98.0.obscpio differ: char 49, line 1 ++++++ syft.obsinfo ++++++ --- /var/tmp/diff_new_pack.nMaAS3/_old 2023-11-30 22:02:12.011002496 +0100 +++ /var/tmp/diff_new_pack.nMaAS3/_new 2023-11-30 22:02:12.015002643 +0100 @@ -1,5 +1,5 @@ name: syft -version: 0.97.1 -mtime: 1700254381 -commit: 7cfb5f630a7a2105d49d65eaaaa2e2c06e4eda73 +version: 0.98.0 +mtime: 1701268954 +commit: 5c8dd4c3a7632dcfd999bab7a5b73c3180f1b628 ++++++ vendor.tar.gz ++++++ /work/SRC/openSUSE:Factory/syft/vendor.tar.gz /work/SRC/openSUSE:Factory/.syft.new.25432/vendor.tar.gz differ: char 5, line 1

1 0

commit blosc2 for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package blosc2 for openSUSE:Factory checked in at 2023-11-30 22:01:33 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/blosc2 (Old) and /work/SRC/openSUSE:Factory/.blosc2.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "blosc2" Thu Nov 30 22:01:33 2023 rev:9 rq:1129934 version:2.11.2 Changes: -------- --- /work/SRC/openSUSE:Factory/blosc2/blosc2.changes 2023-10-15 19:29:37.685409850 +0200 +++ /work/SRC/openSUSE:Factory/.blosc2.new.25432/blosc2.changes 2023-11-30 22:02:08.070857347 +0100 @@ -1,0 +2,32 @@ +Thu Nov 30 05:21:32 UTC 2023 - Steve Kowalik <steven.kowalik(a)suse.com> + +- Update to 2.11.2: + * Added support for ARMv7l platforms (Raspberry Pi). The NEON version + of the bitshuffle filter was not compiling there, and besides it + offered no performance advantage over the generic bitshuffle version + (it is 2x to 3x slower actually). So bitshuffle-neon.c has been + disabled by default in all ARM platforms. + * Also, unaligned access has been disabled in all ARM non-64bits platforms. + It turned out that, at least the armv7l CPU in Raspberry Pi 4, had + issues because __ARM_FEATURE_UNALIGNED C macro was asserted in the + compiler (both gcc and clang), but it actually made binaries to raise + a "Bus error". + * Thanks to Ben Nuttall for providing a Raspberry Pi for tracking down + these issues. +- Release 2.11.1 + * Fix ALTIVEC header. Only affects to IBM POWER builds. Thanks to + Michael Kuhn for providing a patch. +- Release 2.11.0 + * New AVX512 support for the bitshuffle filter. This is a backport of + the upstream bitshuffle project. Expect up to 20% better compression + speed on AMD Zen4 architecture (7950X3D CPU). + * Add c-blosc2 package definition for Guix. Thanks to Ivan Vilata. + * Properly check calls to strtol. Fixes #558. + * Export the b2nd_copy_buffer function. This may be useful for other + projects dealing with multidimensional arrays in memory. Thanks to + Ivan Vilata. + * Better check that nthreads must be >= 1 and <= INT16_MAX. Fixes #559. + * Fix compile arguments for armv7l. Thanks to Ben Greiner. +- Drop patch c-blosc2-pr563-armv7l-option.patch, included upstream. + +------------------------------------------------------------------- Old: ---- c-blosc2-2.10.5.tar.gz c-blosc2-pr563-armv7l-option.patch New: ---- c-blosc2-2.11.2.tar.gz BETA DEBUG BEGIN: Old: * Fix compile arguments for armv7l. Thanks to Ben Greiner. - Drop patch c-blosc2-pr563-armv7l-option.patch, included upstream. BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ blosc2.spec ++++++ --- /var/tmp/diff_new_pack.MilAcJ/_old 2023-11-30 22:02:08.634878125 +0100 +++ /var/tmp/diff_new_pack.MilAcJ/_new 2023-11-30 22:02:08.638878272 +0100 @@ -20,15 +20,13 @@ %define major 2 %define libname lib%{name}-%{major} Name: blosc2 -Version: 2.10.5 +Version: 2.11.2 Release: 0 Summary: A fast, compressed, persistent binary data store library for C License: BSD-2-Clause AND BSD-3-Clause AND MIT URL: https://www.blosc.org/c-blosc2/c-blosc2.html Source: https://github.com/Blosc/c-blosc2/archive/refs/tags/v%{version}.tar.gz#/c-b… Source99: baselibs.conf -# PATCH-FIX-UPSTREAM c-blosc2-pr563-armv7l-option.patch gh#Blosc/c-blosc2#563 -Patch0: c-blosc2-pr563-armv7l-option.patch BuildRequires: cmake BuildRequires: gcc-c++ BuildRequires: pkgconfig ++++++ c-blosc2-2.10.5.tar.gz -> c-blosc2-2.11.2.tar.gz ++++++ ++++ 4282 lines of diff (skipped)

1 0

commit xfce4-whiskermenu-plugin for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package xfce4-whiskermenu-plugin for openSUSE:Factory checked in at 2023-11-30 22:01:34 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xfce4-whiskermenu-plugin (Old) and /work/SRC/openSUSE:Factory/.xfce4-whiskermenu-plugin.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "xfce4-whiskermenu-plugin" Thu Nov 30 22:01:34 2023 rev:22 rq:1129935 version:2.8.2 Changes: -------- --- /work/SRC/openSUSE:Factory/xfce4-whiskermenu-plugin/xfce4-whiskermenu-plugin.changes 2023-11-17 20:51:32.721549098 +0100 +++ /work/SRC/openSUSE:Factory/.xfce4-whiskermenu-plugin.new.25432/xfce4-whiskermenu-plugin.changes 2023-11-30 22:02:09.098895219 +0100 @@ -1,0 +2,7 @@ +Mon Nov 27 11:15:04 UTC 2023 - Manfred Hollstein <manfred.h(a)gmx.net> + +- Update to version 2.8.2 + * Fix crash when searching. (Issue #120) + * Translation updates + +------------------------------------------------------------------- Old: ---- xfce4-whiskermenu-plugin-2.8.1.tar.bz2 New: ---- xfce4-whiskermenu-plugin-2.8.2.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xfce4-whiskermenu-plugin.spec ++++++ --- /var/tmp/diff_new_pack.8xJb9l/_old 2023-11-30 22:02:09.774920122 +0100 +++ /var/tmp/diff_new_pack.8xJb9l/_new 2023-11-30 22:02:09.774920122 +0100 @@ -19,7 +19,7 @@ %define panel_version 4.14 %define plugin whiskermenu Name: xfce4-whiskermenu-plugin -Version: 2.8.1 +Version: 2.8.2 Release: 0 Summary: Alternate Xfce Menu License: GPL-2.0-or-later ++++++ xfce4-whiskermenu-plugin-2.8.1.tar.bz2 -> xfce4-whiskermenu-plugin-2.8.2.tar.bz2 ++++++ ++++ 1825 lines of diff (skipped)

1 0

commit mold for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mold for openSUSE:Factory checked in at 2023-11-30 22:01:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mold (Old) and /work/SRC/openSUSE:Factory/.mold.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "mold" Thu Nov 30 22:01:31 2023 rev:39 rq:1129883 version:2.4.0 Changes: -------- --- /work/SRC/openSUSE:Factory/mold/mold.changes 2023-11-15 21:09:39.478622499 +0100 +++ /work/SRC/openSUSE:Factory/.mold.new.25432/mold.changes 2023-11-30 22:02:07.170824191 +0100 @@ -1,0 +2,43 @@ +Thu Nov 30 05:33:24 UTC 2023 - Martin Liška <martin.liska(a)hey.com> + +- Update to version 2.4.0 + * mold gained the --spare-program-headers=<number> option, which adds a specified + number of spare entries at the end of the program header. The option aims to + make post-processing tools to add program header entries very easily. Note that + sorting program header entries after adding new ones may be necessary to meet + the constraints of the ELF file format. For details, see the elf(5) man page. + (eb6c213) + * mold's -z rewrite-endbr option rewrites superflous endbr64 instructions with nop + as a countermeasure against control-flow highjacking attacks. Previously, this + worked exclusively with object files compiled with -ffunction-sections, + requiring each function to be compiled into a separate section. Starting from + this release, -z rewrite-endbr works on object files compiled without it. In + other words, mold is now capable of rewriting endbr64 instructions even if the + instruction is not at the beginning of a section. (3cb8a52) + * Previously, mold couldn't handle object files containing multiple .eh_frame + sections. The .eh_frame is a section containing data for exception handling. + Usually, an object file contains only one .eh_frame which describes how to + handle exceptions for all text sections in the same file. However, on rare + conditions, it seems ld -r creates an object file containing multiple .eh_frame + sections. mold is now able to handle such object files. (f4c5a8a) + * mold -run <command> is an easy way to run the given command with a virtual + environment in which the ld command is replaced with mold. The feature is + implemented using LD_PRELOAD to hook fork(2)-family functions. Before this + release, some invocations of ld were not intercepted correctly because we missed + the posix_spawnp(2) function. Now, the function is intercepted just like other + fork(2)-family functions. (3fd1cec) + * mold used to produce a non-working executable on a rare occasion when all + thread-local variables lacked an initial value and the read-only data required + alignment equal to or greater than the page size. This bug has been resolved. + (de7d37e) + * Previously, mold might assign a different symbol version to a symbol compared to + GNU ld if it matches both a wildcard pattern and an exact pattern in a version + script. Our behavior is now compatible with that of GNU ld. (0fdbace) + * [x86-64, i686] Recent versions of LLVM emit a machine code sequence for TLSDESC + thread-local variables that differs from GCC's, and mold previously + mis-optimized this sequence, leading to crashes in the linked programs. In other + words, if you are using LLVM/Clang and compile object files with + -mtls-dialect=gnu2, mold might mis-optimize the output file. Now, the bug has + been fixed. (000ce0e) + +------------------------------------------------------------------- Old: ---- mold-2.3.3.tar.gz New: ---- mold-2.4.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mold.spec ++++++ --- /var/tmp/diff_new_pack.njCnEy/_old 2023-11-30 22:02:07.830848506 +0100 +++ /var/tmp/diff_new_pack.njCnEy/_new 2023-11-30 22:02:07.834848653 +0100 @@ -17,7 +17,7 @@ Name: mold -Version: 2.3.3 +Version: 2.4.0 Release: 0 Summary: A Modern Linker (mold) License: MIT ++++++ mold-2.3.3.tar.gz -> mold-2.4.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/mold/mold-2.3.3.tar.gz /work/SRC/openSUSE:Factory/.mold.new.25432/mold-2.4.0.tar.gz differ: char 13, line 1

1 0

commit mate-themes for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package mate-themes for openSUSE:Factory checked in at 2023-11-30 22:01:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/mate-themes (Old) and /work/SRC/openSUSE:Factory/.mate-themes.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "mate-themes" Thu Nov 30 22:01:29 2023 rev:37 rq:1129877 version:3.22.24 Changes: -------- --- /work/SRC/openSUSE:Factory/mate-themes/mate-themes.changes 2022-05-12 22:58:48.244671432 +0200 +++ /work/SRC/openSUSE:Factory/.mate-themes.new.25432/mate-themes.changes 2023-11-30 22:02:03.490688621 +0100 @@ -1,0 +2,14 @@ +Thu Nov 23 02:30:32 UTC 2023 - Mihai Moldovan <ionic(a)ionic.de> + +- Update to new upstream version 3.22.24: + * BlackMATE: fix issues with tasklist, charpick buttons + * BLACKMATE: fix dictionary applet in panel + * Fix button states of charpick-applet with Yaru themes + * Fix headerbar rendering in GNOME 1.41 apps + * Fix square corners, align halves of headerbar in gnome-disks + * Traditional*: Fix selectors for toolbar buttons (#302) + * Most themes: fix border-radius of csd decorations + * Translations update +- No packaging changes necessary. + +------------------------------------------------------------------- Old: ---- mate-themes-3.22.23.tar.xz New: ---- mate-themes-3.22.24.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ mate-themes.spec ++++++ --- /var/tmp/diff_new_pack.PP7dKD/_old 2023-11-30 22:02:04.010707777 +0100 +++ /var/tmp/diff_new_pack.PP7dKD/_new 2023-11-30 22:02:04.014707925 +0100 @@ -1,7 +1,7 @@ # # spec file for package mate-themes # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ # TODO: Split up packages into individual themes. Name: mate-themes -Version: 3.22.23 +Version: 3.22.24 Release: 0 Summary: Themes for the MATE desktop License: LGPL-2.1-or-later ++++++ mate-themes-3.22.23.tar.xz -> mate-themes-3.22.24.tar.xz ++++++ ++++ 28631 lines of diff (skipped)

1 0

commit warzone2100 for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package warzone2100 for openSUSE:Factory checked in at 2023-11-30 22:01:17 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/warzone2100 (Old) and /work/SRC/openSUSE:Factory/.warzone2100.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "warzone2100" Thu Nov 30 22:01:17 2023 rev:31 rq:1129872 version:4.4.1 Changes: -------- --- /work/SRC/openSUSE:Factory/warzone2100/warzone2100.changes 2023-11-21 21:34:38.413150288 +0100 +++ /work/SRC/openSUSE:Factory/.warzone2100.new.25432/warzone2100.changes 2023-11-30 22:02:00.558580606 +0100 @@ -1,0 +2,6 @@ +Sun Nov 26 16:42:20 UTC 2023 - Carsten Ziepke <kieltux(a)gmail.com> + +- Fix building for openSUSE Leap, + add DWZ_ENABLE_WARNINGS_AS_ERRORS=OFF + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ warzone2100.spec ++++++ --- /var/tmp/diff_new_pack.4uu7j9/_old 2023-11-30 22:02:03.218678600 +0100 +++ /var/tmp/diff_new_pack.4uu7j9/_new 2023-11-30 22:02:03.222678747 +0100 @@ -122,7 +122,10 @@ %if %{without vulkan} -DWZ_ENABLE_BACKEND_VULKAN=Off \ %endif - -DBUILD_SHARED_LIBS:BOOL=OFF \ + -DBUILD_SHARED_LIBS=OFF \ + -DCMAKE_BUILD_TYPE=Release \ + -DWZ_DISTRIBUTOR="openSUSE" \ + -DWZ_ENABLE_WARNINGS_AS_ERRORS=OFF \ -DWZ_APPSTREAM_ID=warzone2100 %cmake_build

1 0

commit gerbv for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package gerbv for openSUSE:Factory checked in at 2023-11-30 22:01:15 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/gerbv (Old) and /work/SRC/openSUSE:Factory/.gerbv.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "gerbv" Thu Nov 30 22:01:15 2023 rev:14 rq:1129871 version:2.10.0 Changes: -------- --- /work/SRC/openSUSE:Factory/gerbv/gerbv.changes 2023-01-25 17:46:55.785263142 +0100 +++ /work/SRC/openSUSE:Factory/.gerbv.new.25432/gerbv.changes 2023-11-30 22:01:59.598545240 +0100 @@ -1,0 +2,22 @@ +Fri Nov 24 19:18:18 UTC 2023 - Wojciech Kazubski <wk(a)ire.pw.edu.pl> + +- Update to 2.10.0: + * Security CVE-2023-4508: Out-of-bounds memory access of filename + * Japanese Language File (PR#183) + * Fix crash Edit-file-format dialog (PR#181) + * Allow gerbv foo.gvp to act like gerbv -p foo.gvp was specified + (PR#184) + * Fix Translation and Scale are not editable in Edit-layer dialog + (PR#182) + * Increase maximum zooming level (PR#186) + * Recommend a way of reporting security issues (PR#193) +- Update to 2.9.8: + * Using floating point math for arcs (PR#173) + * Bump APERTURE_PARAMETERS_MAX to 10006 in order to comply with + Gerber specification revision 2021.02 (PR#172) + * Recognize empty drill files (PR#170) +- Update to 2.9.7: + * The BUGS file now references GitHub instead of listing the + known issues for reach release (PR#132) + +------------------------------------------------------------------- Old: ---- gerbv-2.9.6.tar.gz New: ---- gerbv-2.10.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ gerbv.spec ++++++ --- /var/tmp/diff_new_pack.hNsxy8/_old 2023-11-30 22:02:00.094563513 +0100 +++ /var/tmp/diff_new_pack.hNsxy8/_new 2023-11-30 22:02:00.098563660 +0100 @@ -18,7 +18,7 @@ Name: gerbv %define libname lib%{name} -Version: 2.9.6 +Version: 2.10.0 Release: 0 %define somajor 1 Summary: Gerber File Viewer that supports the RS-274X Standard ++++++ gerbv-2.9.6.tar.gz -> gerbv-2.10.0.tar.gz ++++++ ++++ 4690 lines of diff (skipped)

1 0

commit sca-server-report for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sca-server-report for openSUSE:Factory checked in at 2023-11-30 22:01:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sca-server-report (Old) and /work/SRC/openSUSE:Factory/.sca-server-report.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "sca-server-report" Thu Nov 30 22:01:14 2023 rev:9 rq:1129867 version:1.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/sca-server-report/sca-server-report.changes 2023-08-23 14:58:24.198074789 +0200 +++ /work/SRC/openSUSE:Factory/.sca-server-report.new.25432/sca-server-report.changes 2023-11-30 22:01:58.842517389 +0100 @@ -1,0 +2,6 @@ +Wed Nov 29 22:15:35 UTC 2023 - jason.record(a)suse.com + +- Changes in version 1.6.0 + + Updates for ALP using new classes and modules (bsc#1217674) + +------------------------------------------------------------------- Old: ---- sca-server-report-1.5.2.tar.gz New: ---- sca-server-report-1.6.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sca-server-report.spec ++++++ --- /var/tmp/diff_new_pack.AwFVyw/_old 2023-11-30 22:01:59.278533451 +0100 +++ /var/tmp/diff_new_pack.AwFVyw/_new 2023-11-30 22:01:59.278533451 +0100 @@ -17,12 +17,12 @@ %define sca_common sca -%define sca_config scatool +%define sca_config sca %define libbase /usr/lib/%{sca_common} %define sca_python %{libbase}/python Name: sca-server-report -Version: 1.5.2 +Version: 1.6.0 Release: 0 Summary: Supportconfig Analysis Server Report License: GPL-2.0-only @@ -30,7 +30,7 @@ Group: System/Monitoring Source: %{name}-%{version}.tar.gz Requires: python3-base -Requires: sca-patterns-base >= 1.5.0 +Requires: sca-patterns-template-gen2 BuildArch: noarch %description @@ -53,19 +53,15 @@ install -d %{buildroot}%{_mandir}/man5 install -d %{buildroot}%{_mandir}/man8 install -d %{buildroot}%{sca_python} -mkdir -p %{buildroot}%{_sbindir} -install -m 544 bin/scatool %{buildroot}%{_sbindir} -install -m 644 bin/scatool.py %{buildroot}/%{sca_python} +mkdir -p %{buildroot}%{_bindir} +install -m 755 bin/scatool %{buildroot}%{_bindir} install -m 644 config/scatool.conf %{buildroot}%{_sysconfdir}/%{sca_config} install -m 644 man/*.5.gz %{buildroot}%{_mandir}/man5 install -m 644 man/*.8.gz %{buildroot}%{_mandir}/man8 %files %defattr(-,root,root) -%{_sbindir}/scatool -%dir %{libbase} -%dir %{sca_python} -%{sca_python}/* +%{_bindir}/scatool %dir %{_sysconfdir}/%{sca_config} %config %{_sysconfdir}/%{sca_config}/* %doc %{_mandir}/man5/* ++++++ sca-server-report-1.5.2.tar.gz -> sca-server-report-1.6.0.tar.gz ++++++ ++++ 3514 lines of diff (skipped)

1 0

commit sca-patterns-base for openSUSE:Factory
by Source-Sync 30 Nov '23

30 Nov '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package sca-patterns-base for openSUSE:Factory checked in at 2023-11-30 22:01:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sca-patterns-base (Old) and /work/SRC/openSUSE:Factory/.sca-patterns-base.new.25432 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "sca-patterns-base" Thu Nov 30 22:01:13 2023 rev:11 rq:1129865 version:1.6.0 Changes: -------- --- /work/SRC/openSUSE:Factory/sca-patterns-base/sca-patterns-base.changes 2023-09-01 14:20:19.362613033 +0200 +++ /work/SRC/openSUSE:Factory/.sca-patterns-base.new.25432/sca-patterns-base.changes 2023-11-30 22:01:58.142491601 +0100 @@ -1,0 +2,6 @@ +Wed Nov 29 22:26:11 UTC 2023 - jason.record(a)suse.com + +- Changes in version 1.6.0 + + Updates for ALP using new classes and modules (bsc#1217674) + +------------------------------------------------------------------- Old: ---- sca-patterns-base-1.5.2.tar.gz New: ---- sca-patterns-base-1.6.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sca-patterns-base.spec ++++++ --- /var/tmp/diff_new_pack.oZUZyL/_old 2023-11-30 22:01:58.582507811 +0100 +++ /var/tmp/diff_new_pack.oZUZyL/_new 2023-11-30 22:01:58.586507958 +0100 @@ -19,12 +19,11 @@ %define sca_common sca %define patdirbase %{_prefix}/lib/%{sca_common} %define patdir %{patdirbase}/patterns -%define prodgrp sdp %define patuser root %define patgrp root Name: sca-patterns-base -Version: 1.5.2 +Version: 1.6.0 Release: 0 Summary: Supportconfig Analysis Pattern Base Libraries License: GPL-2.0-only @@ -34,6 +33,7 @@ Requires: bash Requires: perl Requires: python3-base +Provides: sca-patterns-template-gen2 BuildArch: noarch %description ++++++ sca-patterns-base-1.5.2.tar.gz -> sca-patterns-base-1.6.0.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sca-patterns-base-1.5.2/libraries/python/suse_base2.py new/sca-patterns-base-1.6.0/libraries/python/suse_base2.py --- old/sca-patterns-base-1.5.2/libraries/python/suse_base2.py 1970-01-01 01:00:00.000000000 +0100 +++ new/sca-patterns-base-1.6.0/libraries/python/suse_base2.py 2023-11-29 23:30:30.125592584 +0100 @@ -0,0 +1,738 @@ +''' +Supportconfig Analysis Library for SUSE python patterns + +Library of functions for creating python patterns specific to SUSE +''' +############################################################################## +# Copyright (C) 2023 SUSE LLC +############################################################################## +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; version 2 of the License. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, see <http://www.gnu.org/licenses/>. +# +############################################################################## +__author__ = 'Jason Record <jason.record(a)suse.com>' +__date_modified__ = '2023 Nov 13' +__version__ = '2.0.0_dev10' + +import re +import os +import sys +import suse_core2 as core +import datetime +import ast +import json + +# Kernel version constants +SLE9GA = '2.6.5-7.97' +SLE9SP0 = '2.6.5-7.97' +SLE9SP1 = '2.6.5-7.139' +SLE9SP2 = '2.6.5-7.191' +SLE9SP3 = '2.6.5-7.244' +SLE9SP4 = '2.6.5-7.308' +SLE9SP5 = '2.6.5-8' +SLE10GA = '2.6.16.21-0.8' +SLE10SP0 = '2.6.16.21-0.8' +SLE10SP1 = '2.6.16.46-0.12' +SLE10SP2 = '2.6.16.60-0.21' +SLE10SP3 = '2.6.16.60-0.54.5' +SLE10SP4 = '2.6.16.60-0.85.1' +SLE10SP5 = '2.6.17' +SLE11GA = '2.6.27.19-5' +SLE11SP0 = '2.6.27.19-5' +SLE11SP1 = '2.6.32.12-0.7' +SLE11SP2 = '3.0.13-0.27' +SLE11SP3 = '3.0.76-0.11.1' +SLE11SP4 = '3.0.101-0.63.1' +SLE12GA = '3.12.28-4' +SLE12SP0 = '3.12.28-4' +SLE12SP1 = '3.12.49-11.1' +SLE12SP2 = '4.4.21-69' +SLE12SP3 = '4.4.73-5.1' +SLE12SP4 = '4.12.14-94.41' +SLE12SP5 = '4.12.14-120.1' +SLE15GA = '4.12.14-23.1' +SLE15SP0 = '4.12.14-23.1' +SLE15SP1 = '4.12.14-195.1' +SLE15SP2 = '5.3.18-22.2' +SLE15SP3 = '5.3.18-57.3' +SLE15SP4 = '5.14.21-150400.22.1' +SLE15SP5 = '5.14.21-150500.46.4' +SLE15SP6 = '5.999' #Update to actual version when/if applicable +ALP1SP0 = '6.0' #Update to actual version when/if applicable + +def package_is_installed(package_name, _pat): + ''' + The package_name is installed on the server + Args: package_name - The RPM package name to check if installed + Returns: True or False + True package_name is installed + False package_name is NOT installed + Example: + + PACKAGE_NAME = 'bind' + if ( SUSE.package_is_installed(PACKAGE_NAME) ): + Core.updateStatus(Core.WARN, 'The package ' + PACKAGE_NAME + ' is installed') + else: + Core.updateStatus(Core.IGNORE, 'The package ' + PACKAGE_NAME + ' is NOT installed') + ''' + rpm_info = get_rpm_info(package_name, _pat) + if 'version' in rpm_info: + return True + return False + +def compare_rpm(package, version_to_compare, _pat): + try: + version_from_package = get_rpm_info(package, _pat)['version'] + return core.compare_versions(version_from_package, version_to_compare) + except Exception as error: + #error out... + _pat.update_status(core.ERROR, "ERROR: Package info not found -- " + str(error)) + +def compare_kernel(version_to_compare, _pat): + IDX_KERNEL_VERSION = 2 + version_running_kernel = "" + uname_section = core.get_file_section(_pat.get_supportconfig_path('basic-environment.txt'), 'uname -a') + if len(uname_section) > 0: + for line in uname_section: + if line != "": + version_running_kernel = line.split()[IDX_KERNEL_VERSION] + else: + _pat.update_status(core.ERROR, "ERROR: Missing uname section, no kernel version found") + + return core.compare_versions(version_running_kernel, version_to_compare) + + +def get_rpm_info(package_name, _pat): + ''' + Retrieves RPM package information from supportconfig files using the specified package_name + ''' + IDX_NAME = 0 + IDX_VERSION = -1 + rpm_info = {} + fileOpen = 'rpm.txt' + content = {} + tmp_content = {} + + rpm_file = core.get_entire_file(_pat.get_supportconfig_path('rpm.txt')) + content = core.get_content_section(rpm_file, '[0-9]{DISTRIBUTION}') + + #get name version and vendor + if len(content) > 0: + for line in content: + if line.startswith(package_name + ' '): + tmp_content = re.sub(' +', ' ', line) + tmp_content = tmp_content.split(' ') + rpm_info['name'] = tmp_content[IDX_NAME] + rpm_info['version'] = tmp_content[IDX_VERSION] + tmp_content.pop(0) + tmp_content.pop() + rpm_info['vendor'] = ' '.join(tmp_content).strip() #vendor + #rpm_info[1] = tmp_content[1,-2] + + #get install time + content = core.get_content_section(rpm_file, 'rpm -qa --last') + if len(content) > 0: + for line in content: + if line.startswith(package_name): + rpm_info['install_time'] = line.split(' ',1)[1].strip() + + del rpm_file + return rpm_info + +class SCAPatternGen2(): + TID_BASE = 'https://www.suse.com/support/kb/doc.php?id=' + BUG_BASE = 'https://bugzilla.suse.com/show_bug.cgi?id=' + CVE_BASE = 'https://www.suse.com/security/cve/' + meta = {'generation': 2, 'id': '', 'primary_solution': '', 'severity': core.TEMP, 'description': '', 'solution_links': {}, 'scpath': '', 'scname': ''} + + def __init__(self, meta_class, meta_category, meta_component): + self.meta['class'] = meta_class + self.meta['category'] = meta_category + self.meta['component'] = meta_component + + def __str__ (self): + pattern = ''' +Class instance of {} + class = {} + category = {} + component = {} + id = {} + primary_solution = {} + severity = {} + description = {} + solution_links = {} + scpath = {} + +''' + return pattern.format(self.__class__.__name__, self.meta['class'], self.meta['category'], self.meta['component'], self.meta['id'], self.meta['primary_solution'], self.meta['severity'], self.meta['description'], self.meta['solution_links'], self.meta['scpath']) + + def set_id(self, pattern_id): + self.meta['id'] = pattern_id + + def set_primary_link(self, tag): + self.meta['primary_solution'] = tag + + def add_solution_link(self, tag, url, set_primary=False): + link_tag = str(tag) + self.meta['solution_links'][link_tag] = url + if set_primary: + self.set_primary_link(link_tag) + + def set_tid(self, tid_id, is_primary=True): + self.add_solution_link('TID', self.TID_BASE + str(tid_id), set_primary=is_primary) + + def set_bug(self, bug_id, is_primary=False): + self.add_solution_link('BUG', self.BUG_BASE + str(bug_id), set_primary=is_primary) + + def set_cve(self, cve_id, is_primary=False): + self.add_solution_link('CVE', self.CVE_BASE + str(cve_id), set_primary=is_primary) + + def set_supportconfig_path(self, path): + if path.endswith('/'): + self.meta['scpath'] = path + self.meta['scname'] = os.path.basename(os.path.split(path)[0]) + else: + self.meta['scpath'] = path + '/' + self.meta['scname'] = os.path.basename(path) + + def set_status(self, severity, description): + self.meta['severity'] = severity + self.meta['description'] = description + + def update_status(self, severity, description): + if severity > self.meta['severity']: + self.meta['severity'] = severity + self.meta['description'] = description + + def get_supportconfig_path(self, scfile): + file_path = self.meta['scpath'] + scfile + if os.path.exists(file_path): + return file_path + else: + print('Error: File not found - {}'.format(file_path)) + sys.exit(2) + + def print_results(self): + all_links = [] + empty_keys = [] + for key, value in self.meta.items(): + if len(str(value)) < 1: + empty_keys.append(str(key)) + for key, value in self.meta['solution_links'].items(): + all_links.append(str(key) + '=' + value) + + if len(empty_keys) > 0: + print('Error: Missing SCAPattern instance result value(s): {}'.format(' '.join(empty_keys))) + sys.exit(2) + elif len(all_links) < 1: + print('Error: Missing solution links') + sys.exit(2) + else: + output = json.dumps(self.meta) + print(output) + +def get_systemd_service_data(service_name, _pat): + ''' + Returns a dictionary of systemd service information for service_name + ''' + + serviced_dictionary = {} + content = core.get_file_section(_pat.get_supportconfig_path('systemd.txt'), "systemctl show '{0}'".format(service_name)) + if( len(content) > 0 ): + for line in content: + element = line.split('=') + key = element[0] + # remove the key from the key/value pair + del element[0] + # assign the value to the dictionary key + serviced_dictionary[key] = '='.join(element) + return serviced_dictionary + +def evaluate_systemd_service(service_name, _pat): + ''' + Reports the health of the specified systemd service + ''' + service_dictionary = get_systemd_service_data(service_name, _pat) + if( not service_dictionary ): + _pat.update_status(core.ERROR, 'Error: Service not found - {}'.format(service_name)) + elif( service_dictionary['LoadState'] == 'not-found' ): + _pat.update_status(core.ERROR, 'Error: Service not found - {}'.format(service_name)) + elif( 'UnitFileState' in service_dictionary ): + if( service_dictionary['UnitFileState'] == 'enabled' ): + if( service_dictionary['SubState'] == 'running' ): + _pat.update_status(core.IGNORE, 'Ignore: Turned on at boot and currently running: {}'.format(service_name)) + else: + _pat.update_status(core.CRIT, 'Basic Service Health; Turned on at boot, but not running: {}'.format(service_name)) + elif( service_dictionary['UnitFileState'] == 'disabled' ): + if( service_dictionary['SubState'] == 'running' ): + _pat.update_status(core.WARN, 'Basic Service Health; Turned off at boot, but currently running: {}'.format(service_name)) + else: + _pat.update_status(core.IGNORE, 'Ignore: Turned off at boot, not not running: {}'.format(service_name)) + elif( service_dictionary['UnitFileState'] == 'static' ): + if( service_dictionary['SubState'] == 'running' ): + _pat.update_status(core.IGNORE, 'Ignore: Static service is currently running: {}'.format(service_name)) + else: + _pat.update_status(core.WARN, 'Basic Service Health; Static service SubState {0}: {1}'.format(service_name, service_dictionary['SubState'])) + else: + _pat.update_status(core.ERROR, 'Error: Unknown UnitFileState: {0}'.format(service_dictionary['UnitFileState'])) + else: + if( service_dictionary['ActiveState'] == 'failed' ): + _pat.update_status(core.CRIT, 'Basic Service Health; Service failure detected: {}'.format(service_name)) + elif( service_dictionary['ActiveState'] == 'inactive' ): + _pat.update_status(core.IGNORE, 'Basic Service Health; Service is not active: {}'.format(service_name)) + elif( service_dictionary['ActiveState'] == 'active' ): + if( service_dictionary['SubState'] == 'running' ): + _pat.update_status(core.IGNORE, 'Basic Service Health; Service is running: {}'.format(service_name)) + else: + _pat.update_status(core.CRIT, 'Basic Service Health; Service is active, but not running: {}'.format(service_name)) + else: + _pat.update_status(core.ERROR, 'Error: Unknown ActiveState: {}'.format(service_dictionary['ActiveState'])) + + return _pat + +def get_filesystem_data(_pat): + ''' + Gets all fields from the mounted and unmountd file systems with their associated fstab file and df command output. + + Args: SCAPattern instance + Returns: List of Dictionaries + Keys: + is_mounted = The device is: False = Not mounted, True = Mounted + dev_active = The active device path + dev_mounted = The device path from the mount command + dev_fstab = The device path from /etc/fstab + mount_point = The mount point + mount_options = List of mount options used when mounted as shown by the mount command + fstab_options = List of mount options defined in the /etc/fstab + fs_type = File system type + fs_dump = /etc/fstab dump field, '' if missing + fs_check = /etc/fstab fsck field, '' if missing + space_size = File system size in bytes, '' if missing + space_used = File system space used in bytes, '' if missing + space_avail = file system space available in bytes, '' if missing + space_percent_used = file system percent used, -1 if unknown + ''' + FREE_TOTAL = 1 + FREE_USED = 2 + FREE_AVAIL = 3 + + DF_ELEMENTS_REQUIRED = 6 + DF_line_WRAP = 1 + DF_DEV = 0 + DF_SIZE = 1 + DF_USED = 2 + DF_AVAIL = 3 + DF_PERCENT_USED = 4 + DF_MOUNT_POINT = 5 + + FSTAB_ELEMENTS_REQUIRED = 6 + FSTAB_DEV = 0 + FSTAB_MOUNT_POINT = 1 + FSTAB_TYPE = 2 + FSTAB_OPTIONS = 3 + FSTAB_DUMP = 4 + FSTAB_FSCK = 5 + + MNT_ELEMENTS_REQUIRED = 6 + MNT_MOUNT_POINT = 2 + MNT_OPTIONS = 5 + MNT_DEV = 0 + MNT_TYPE = 4 + + normalized_mount = [] + normalized_fstab = [] + normalized_df = [] + swap = {'total': 0, 'used': 0, 'free': 0, 'percent_used': 0, 'on': False} + + fs_list = [] # this list of filesysetm dictionaries to be returned + + diskio_file = core.get_entire_file(_pat.get_supportconfig_path('fs-diskio.txt')) + health_file = core.get_entire_file(_pat.get_supportconfig_path('basic-health-check.txt')) + section_mount = core.get_content_section(diskio_file, '/mount$') + section_fstab = core.get_content_section(diskio_file, '/etc/fstab') + section_df = core.get_content_section(health_file, 'df -h') + section_free = core.get_content_section(health_file, 'free -k') + del diskio_file + del health_file + + if( len(section_mount) > 0 and len(section_fstab) > 0 and len(section_df) > 0 ): + # gather swap information + if len(section_free) > 0: + for line_free in section_free: #swap sizes come from free -k, not df command + if line_free.startswith("Swap:"): + entry_free = line_free.split() + swap['total'] = int(entry_free[FREE_TOTAL]) + if swap['total'] > 0: + swap['used'] = int(entry_free[FREE_USED]) + swap['free'] = int(entry_free[FREE_AVAIL]) + swap['percent_free'] = int(swap['used'] * 100 / swap['total']) + swap['on'] = True + break + + # normalize mount section + for line_mount in section_mount: #load each mount line output into the entry list + line_mount = line_mount.replace("(", '').replace(")", '') + entry_mount = line_mount.split() + if( len(entry_mount) != MNT_ELEMENTS_REQUIRED ): #ignore non-standard mount entries. They should only have six fields. + entry_mount = [] + continue + else: + normalized_mount.append(entry_mount) + + # normalize fstab section + for line_fstab in section_fstab: #check each line_fstab to the current line_mount + entry_fstab = line_fstab.split() + if( len(entry_fstab) != FSTAB_ELEMENTS_REQUIRED ): #consider non-standard entries as not mount_point_matches + entry_fstab = [] + continue + else: + normalized_fstab.append(entry_fstab) + + # normalize df data + this_entry = [] + for line_df in section_df: + if line_df.startswith('Filesystem'): + continue + else: + line_df = line_df.replace('%', '') + entry_df = line_df.strip().split() + line_len = len(entry_df) + if( line_len == DF_ELEMENTS_REQUIRED ): + normalized_df.append(entry_df) + elif( line_len == DF_line_WRAP ): # Line wraps because the first field is a very long device name + this_entry = entry_df + elif( line_len < DF_ELEMENTS_REQUIRED ): # Adds the rest of the fields to the device from the first line + this_entry.extend(entry_df) + if( len(this_entry) == DF_ELEMENTS_REQUIRED ): + normalized_df.append(this_entry) + + # combine fstab and df data with matching mounted filesystems + for list_mount in normalized_mount: + this_fs = { + 'is_mounted': True, + 'dev_active': list_mount[MNT_DEV], + 'dev_mounted': list_mount[MNT_DEV], + 'mount_point': list_mount[MNT_MOUNT_POINT], + 'mount_options': list_mount[MNT_OPTIONS].split(','), + 'fs_type': list_mount[MNT_TYPE] + } + mount_point_matches = False + for list_fstab in normalized_fstab: + if( list_fstab[FSTAB_MOUNT_POINT] == list_mount[MNT_MOUNT_POINT] ): #mount points match + mount_point_matches = True + this_fs['dev_fstab'] = list_fstab[FSTAB_DEV] + this_fs['fstab_options'] = list_fstab[FSTAB_OPTIONS].split(',') + this_fs['fs_dump'] = list_fstab[FSTAB_DUMP] + this_fs['fs_check'] = list_fstab[FSTAB_FSCK] + break + if not mount_point_matches: #mounted, but not defined in /etc/fstab + this_fs['dev_fstab'] = '' + this_fs['fstab_options'] = [] + this_fs['fs_dump'] = '' + this_fs['fs_check'] = '' + + mount_point_matches = False + for list_df in normalized_df: + if( list_df[DF_MOUNT_POINT] == list_mount[MNT_MOUNT_POINT] ): #mount points match + mount_point_matches = True + this_fs['space_size'] = list_df[DF_SIZE] + this_fs['space_used'] = list_df[DF_USED] + this_fs['space_avail'] = list_df[DF_AVAIL] + this_fs['space_percent_used'] = int(list_df[DF_PERCENT_USED]) + if( not mount_point_matches ): #entry_df_normalized doesn't match line_mount, so use undefined values + this_fs['space_size'] = '' + this_fs['space_used'] = '' + this_fs['space_avail'] = '' + this_fs['space_percent_used'] = -1 + + fs_list.append(this_fs) + + #now add swap and any unmounted filesystems found in /etc/fstab + for list_fstab in normalized_fstab: + if( list_fstab[FSTAB_MOUNT_POINT].lower() == "swap" ): # If there is more than one swap device, the same free -k swap data is used for each + fs_list.append({ + 'is_mounted': swap['on'], + 'dev_active': list_fstab[FSTAB_DEV], + 'dev_mounted': '', + 'mount_point': list_fstab[FSTAB_MOUNT_POINT], + 'mount_options': [], + 'fs_type': list_fstab[FSTAB_TYPE], + 'dev_fstab': list_fstab[FSTAB_DEV], + 'fstab_options': list_fstab[FSTAB_OPTIONS].split(','), + 'fs_dump': list_fstab[FSTAB_DUMP], + 'fs_check': list_fstab[FSTAB_FSCK], + 'space_size': swap['total'], + 'space_used': swap['used'], + 'space_avail': swap['free'], + 'space_percent_used': swap['percent_used'] + }) + # check for unmounted filesystems + else: + found_fstab_dev = False + for this_fs in fs_list: + if this_fs['mount_point'] == list_fstab[FSTAB_MOUNT_POINT]: + found_fstab_dev = True + break + if not found_fstab_dev: + fs_list.append({ + 'is_mounted': False, + 'dev_active': list_fstab[FSTAB_DEV], + 'dev_mounted': '', + 'mount_point': list_fstab[FSTAB_MOUNT_POINT], + 'mount_options': [], + 'fs_type': list_fstab[FSTAB_TYPE], + 'dev_fstab': list_fstab[FSTAB_DEV], + 'fstab_options': list_fstab[FSTAB_OPTIONS].split(','), + 'fs_dump': list_fstab[FSTAB_DUMP], + 'fs_check': list_fstab[FSTAB_FSCK], + 'space_size': '', + 'space_used': '', + 'space_avail': '', + 'space_percent_used': -1 + }) + else: + _pat.set_status(core.ERROR, "ERROR: get_filesystem_data: Cannot find /bin/mount(fs-diskio.txt), /etc/fstab(fs-diskio.txt), df -h(basic-health-check.txt) sections") + + del section_mount + del section_fstab + del section_df + del section_free + + return fs_list + +def get_scc_info(_pat): + ''' + Gets information provided by the SUSEConnect --status command in SLE12 + + Requires: None + Args: SCAPattern instance + Returns: List of Dictionaries + Keys: The dictionary key names correspond to the field names from SUSEConnect command. The dictionaries are variable in length. + ''' + suseconnect_section = core.get_file_section(_pat.get_supportconfig_path('updates.txt'), 'SUSEConnect --status') + scc_info = [] + for line in suseconnect_section: + if "identifier" in line.lower(): + # SUSEConnect --status generates output that looks like a python list of dictionaries. + # eval is used to convert it to just that: a list of dictionaries. + # Since the source is not trusted, literal_eval is used to secure the evaluation. + scc_info = ast.literal_eval(line.replace(':null,', ':"",').replace(':null}', ':""}')) +# for i in range(len(scc_info)): +# print('scc_info[{0}]: {1}'.format(i, scc_info[i])) +# print() + + return scc_info + +def get_server_info(_pat): + ''' + Gets information about the server + + Args: None + Returns: Dictionary with keys + hostname (String) - The hostname of the server analyzed + kernel_ver (String) - The running kernel version + arch (String) + distro_name (String) - The name of the distribution + ver_major (Int) - The major distribution version number + ver_minor (Int) - The distribution service patch level + ''' + + REQUIRED_ELEMENTS = 6 + IDX_HOSTNAME = 1 + IDX_VERSION = 2 + IDX_ARCH = -2 + IDX_KEY = 0 + IDX_VALUE = -1 + + server_dictionary = {} + + basic_env_file = core.get_entire_file(_pat.get_supportconfig_path('basic-environment.txt')) + uname_section = core.get_content_section(basic_env_file, 'uname -a') + os_release_section = core.get_content_section(basic_env_file, '/etc/os-release') + del basic_env_file + + for line in uname_section: + if "linux" in line.lower(): + server_dictionary['hostname'] = line.split()[IDX_HOSTNAME] + server_dictionary['kernel_ver'] = line.split()[IDX_VERSION] + server_dictionary['arch'] = line.split()[IDX_ARCH] + + for line in os_release_section: + line = line.replace('"', '').strip() + if line.startswith('VERSION_ID'): + version_id_list = line.strip().split('=')[IDX_VALUE].split('.') + if( len(version_id_list) > 1 ): + server_dictionary['ver_major'] = int(version_id_list[IDX_KEY]) + server_dictionary['ver_minor'] = int(version_id_list[IDX_VALUE]) + else: + server_dictionary['ver_major'] = int(version_id_list[IDX_KEY]) + server_dictionary['ver_minor'] = 0 + elif line.startswith('PRETTY_NAME'): + server_dictionary['distro_name'] = line.split('=')[IDX_VALUE] + + if len(server_dictionary) < REQUIRED_ELEMENTS: + _pat.set_status(core.ERROR, "Error: <get_server_info> Cannot find complete server information") + + return server_dictionary + +def get_basic_virt_info(_pat): + ''' + Gathers Virtualization section of the basic-environment.txt file. + + Args: None + Returns: Dictionary + + Converts the basic-environment.txt section from this: + + #==[ System ]=======================================# + # Virtualization + Manufacturer: HP + Hardware: ProLiant DL380 Gen9 + Hypervisor: None + Identity: Not Detected + + to this dictionary: + + {'Hardware': 'ProLiant DL380 Gen9', 'Hypervisor': 'None', 'Identity': 'Not Detected', 'Manufacturer': 'HP'} + if Hypervisor == None, is_virtual is set to False, otherwise is_virtual is True. + ''' + + virt_section = core.get_file_section(_pat.get_supportconfig_path('basic-environment.txt'), 'Virtualization') + dictionary = {} + for line in virt_section: + if ":" in line: + key, value = line.split(":", 1) + dictionary[key] = value.strip() + if dictionary['Hypervisor'] == "None": + dictionary['is_virtual'] = False + else: + dictionary['is_virtual'] = True + + return dictionary + +def get_proc_cmdline(_pat): + ''' + Gathers the /proc/cmdline and assigns each value to a list element. + + Args: None + Returns: List + ''' + cmdline_section = core.get_file_section(_pat.get_supportconfig_path('boot.txt'), '/proc/cmdline') + list = [] + for line in cmdline_section: + list = line.split() + + return list + +def get_zypper_repo_list(_pat): + ''' + Gathers zypper repos output into a list of dictionaries + + Args: None + Returns: List of Dictionaries + Keys: The dictionary key names correspond to the field names from zypper repos command. + Num - repository number + Alias + Name + Enabled - True (Yes) if the repository is enabled, otherwise False (No). + Refresh - True (Yes) is the repository is set to refresh, otherwise False (No). + ''' + repos_section = core.get_file_section(_pat.get_supportconfig_path('updates.txt'), '/zypper\s--.*\srepos') + startrepos = re.compile("^-*\+-*\+") + endrepos = re.compile("^#==|^$") + repos = [] + in_repos = False + + for line in repos_section: + if in_repos: + if endrepos.search(line): + in_repos = False + else: + one_repo = line.split('|') + for this_repo in range(len(one_repo)): + one_repo[this_repo] = one_repo[this_repo].strip() + #Converts one_repo into a dictionary with the named keys + one_dict = dict(list(zip(['Num', 'Alias', 'Name', 'Enabled', 'Refresh'], one_repo))) + repos.append(one_dict) + elif startrepos.search(line): + in_repos = True + + for this_repo in range(len(repos)): + if 'yes' in repos[this_repo]['Enabled'].lower(): + repos[this_repo]['Enabled'] = True + else: + repos[this_repo]['Enabled'] = False + if 'yes' in repos[this_repo]['Refresh'].lower(): + repos[this_repo]['Refresh'] = True + else: + repos[this_repo]['Refresh'] = False + + for repo in repos: + print('repo = {}'.format(repo['Name'])) + for key, value in repo.items(): + print("+ {0:15} = {1}".format(key, value)) + print() + print('------------------\n') + + return repos + +def get_zypper_product_list(_pat): + ''' + Gathers zypper products output into a list of dictionaries + + Args: None + Returns: List of Dictionaries + Keys: The dictionary key names correspond to the field names from zypper products command. + Status (S) - Product status + repository + InternalName + Name + Version + Architecture (Arch) + is_base - True (Yes) is the product is a base product, otherwise False (No). + ''' + prod_section = core.get_file_section(_pat.get_supportconfig_path('updates.txt'), '/zypper\s--.*\sproducts') + startProducts = re.compile("^-*\+-*\+") + endProducts = re.compile("^#==|^$") + products = [] + in_products = False + for line in prod_section: + if( in_products ): + if endProducts.search(line): + in_products = False + else: + one_product = line.split('|') + for this_product in range(len(one_product)): + one_product[this_product] = one_product[this_product].strip() + #Converts one_product into a dictionary with the named keys + one_dict = dict(list(zip(['Status', 'Respository', 'Internal Name', 'Name', 'Version', 'Architecture', 'Is Base'], one_product))) + products.append(one_dict) + elif startProducts.search(line): + in_products = True + + for this_product in range(len(products)): + if 'yes' in products[this_product]['Is Base'].lower(): + products[this_product]['Is Base'] = True + else: + products[this_product]['Is Base'] = False + + for prod in products: + print('prod = {}'.format(prod['Name'])) + for key, value in prod.items(): + print("+ {0:15} = {1}".format(key, value)) + print() + print('------------------\n') + + return products + + diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sca-patterns-base-1.5.2/libraries/python/suse_core2.py new/sca-patterns-base-1.6.0/libraries/python/suse_core2.py --- old/sca-patterns-base-1.5.2/libraries/python/suse_core2.py 1970-01-01 01:00:00.000000000 +0100 +++ new/sca-patterns-base-1.6.0/libraries/python/suse_core2.py 2023-11-29 23:30:30.125592584 +0100 @@ -0,0 +1,239 @@ +''' +Supportconfig Analysis Library for Core python patterns + +Core library of functions for creating and processing python patterns +''' +############################################################################## +# Copyright (C) 2023 SUSE LLC +############################################################################## +# +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; version 2 of the License. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program; if not, see <http://www.gnu.org/licenses/>. +# +############################################################################## +__author__ = 'Jason Record <jason.record(a)suse.com>' +__date_modified__ = '2023 Oct 05' +__version__ = '2.0.0_dev3' + +import sys +import os +import re +from distutils.version import LooseVersion +path = '' + +STATUS_TEMPORARY = -2 +STATUS_PARTIAL = -1 +STATUS_SUCCESS = 0 +STATUS_RECOMMEND = 1 +STATUS_PROMOTION = 2 +STATUS_WARNING = 3 +STATUS_CRITICAL = 4 +STATUS_ERROR = 5 +STATUS_IGNORE = 6 + +TEMP = STATUS_TEMPORARY +PART = STATUS_PARTIAL +SUCC = STATUS_SUCCESS +REC = STATUS_RECOMMEND +WARN = STATUS_WARNING +CRIT = STATUS_CRITICAL +ERROR = STATUS_ERROR +IGNORE = STATUS_IGNORE + +PASS = 0 +EXIT = 5 + +def is_file_active(file_open): + ''' + Checks if the suportconfig file is at least MIN_FILE_SIZE_BYTES. + file_open must be the full supportconfig path and filename + ''' + MIN_FILE_SIZE_BYTES=500 #most inactive files are less than this, but it's not exact + + try: + file_stat = os.stat(file_open) + except Exception as error: + return False + +# print FILE.st_size + if( file_stat.st_size > MIN_FILE_SIZE_BYTES ): + return True + else: + return False + +def get_entire_file(file_open): + ''' + Loads the entire supportconfig file + + Args: file_open (String) - The supportconfig path and filename to open + Returns: File content list + ''' + content = [] + try: + with open(file_open, "rt", errors='ignore') as f: + for line in f.readlines(): + line = line.strip("\n") + content.append(line) + except Exception as error: + print("Error: Cannot open file - {}: {}".format(_file, str(error))) + sys.exit(3) + + return content + +def get_sections_in_file(file_open): + ''' + Extracts all section names from file_open and returns section_list. + + Args: file_open (String) - The supportconfig path and filename to open + Returns: list of section names + ''' + section_list = [] + in_section = False + section = re.compile('^#==\[') + + entire_file = get_entire_file(_file) + + for line in entire_file: + if in_section: + section_list.append(re.sub('^#\s+', '', line)) + in_section = False + elif section.search(line): + in_section = True + + del entire_file + return section_list + +def get_content_section(_content, _section, include_commented_lines=False): + ''' + Extracts the first section of a supportconfig file _content list matching _section. + ''' + section_found = False + section_name = '' + section_content = [] + section_tag = re.compile(_section) + commented_line = re.compile('^#|^\s+#') + + for line in _content: + line = line.strip("\n") + if line.startswith('#==['): + section_name = '' + if section_found: + break + elif ( section_name == '' ): + section_name = re.sub('^#', '', line).strip() + elif section_tag.search(section_name): + if( len(line) > 0 ): + if include_commented_lines: + section_content.append(line) + section_found = True + else: + if commented_line.search(line): + continue + else: + section_content.append(line) + section_found = True + + return section_content + +def get_file_section(_file, _section, include_commented_lines=False): + ''' + Extracts the first section of a supportconfig file matching _section. + ''' + section_content = [] + entire_file = get_entire_file(_file) + section_content = get_content_section(entire_file, _section, include_commented_lines) + + del entire_file + return section_content + +def normalize_version_string(version_to_normalize): + ''' + Converts a version string to a list of version elements + + Args: version_to_normalize + Returns: A list of version string elements + ''' + version_to_normalize = re.sub("[\.,\-,_,+]", "|", version_to_normalize) + version_to_normalize = re.sub("([A-Z,a-z]+)", "|\\1|", version_to_normalize) + version_to_normalize = version_to_normalize.lstrip("0") + version_to_normalize = re.sub("\|\|", "|", version_to_normalize) + version_to_normalize = version_to_normalize.rstrip("|") + + return version_to_normalize.split("|") + +def compare_loose_versions(version1, version2): + ''' + Compares two version strings using LooseVersion + + Args: version1 (String) - The first version string + version2 (String) - The second version string + Returns: -1, 0, 1 + -1 version1 is older than version2 + 0 version1 is the same as version2 + 1 version1 is newer than version2 + Example: + + thisVersion = '1.1.0-2' + thatVersion = '1.2' + if( Core.compare_loose_versions(thisVersion, thatVersion) > 0 ): + Core.updateStatus(Core.WARN, "The version is too old, update the system") + else: + Core.updateStatus(Core.IGNORE, "The version is sufficient") + ''' + if(LooseVersion(version1) > LooseVersion(version2)): + return 1 + elif (LooseVersion(version1) < LooseVersion(version2)): + return -1 + return 0 + +def compare_versions(version1, version2): + ''' + Compares the left most significant version string elements + + Args: version1 (String) - The first version string + version2 (String) - The second version string + Returns: -1, 0, 1 + -1 version1 is older than version2 + 0 version1 is the same as version2 + 1 version1 is newer than version2 + Example: + + thisVersion = '1.1.0-2' + thatVersion = '1.2' + if( compare_versions(thisVersion, thatVersion) > 0 ): + Core.updateStatus(Core.WARN, "The version is too old, update the system") + else: + Core.updateStatus(Core.IGNORE, "The version is sufficient") + ''' + total_elements = 0 + if( str(version1) == str(version2) ): + return 0 + else: + first_version = normalize_version_string(version1) + second_version = normalize_version_string(version2) + if( len(first_version) <= len(second_version) ): + total_elements = len(first_version) + else: + total_elements = len(second_version) + for i in range(total_elements): + if( first_version[i].isdigit() and second_version[i].isdigit() ): + if( int(first_version[i]) > int(second_version[i]) ): + return 1 + elif( int(first_version[i]) < int(second_version[i]) ): + return -1 + else: + if( str(first_version[i]) > str(second_version[i]) ): + return 1 + elif( str(first_version[i]) < str(second_version[i]) ): + return -1 + return 0 +

1 0