September 2023 - openSUSE Commits - openSUSE Mailing Lists

commit pam for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package pam for openSUSE:Factory checked in at 2023-09-01 14:19:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/pam (Old) and /work/SRC/openSUSE:Factory/.pam.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "pam" Fri Sep 1 14:19:14 2023 rev:133 rq:1108086 version:1.5.3 Changes: -------- --- /work/SRC/openSUSE:Factory/pam/pam.changes 2023-08-09 17:23:58.708904069 +0200 +++ /work/SRC/openSUSE:Factory/.pam.new.1766/pam.changes 2023-09-01 14:19:39.589193481 +0200 @@ -1,0 +2,5 @@ +Wed Aug 23 09:20:06 UTC 2023 - Thorsten Kukuk <kukuk(a)suse.com> + +- Fix building without SELinux + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ pam.spec ++++++ --- /var/tmp/diff_new_pack.hfgTEV/_old 2023-09-01 14:19:42.073282141 +0200 +++ /var/tmp/diff_new_pack.hfgTEV/_new 2023-09-01 14:19:42.077282283 +0200 @@ -551,8 +551,10 @@ %{_mandir}/man8/pam_rhosts.8%{?ext_man} %{_mandir}/man8/pam_rootok.8%{?ext_man} %{_mandir}/man8/pam_securetty.8%{?ext_man} +%if %{with selinux} %{_mandir}/man8/pam_selinux.8%{?ext_man} %{_mandir}/man8/pam_sepermit.8%{?ext_man} +%endif %{_mandir}/man8/pam_setquota.8%{?ext_man} %{_mandir}/man8/pam_shells.8%{?ext_man} %{_mandir}/man8/pam_stress.8%{?ext_man}

1 0

commit salt for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package salt for openSUSE:Factory checked in at 2023-09-01 14:19:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/salt (Old) and /work/SRC/openSUSE:Factory/.salt.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "salt" Fri Sep 1 14:19:13 2023 rev:140 rq:1108398 version:3006.0 Changes: -------- --- /work/SRC/openSUSE:Factory/salt/salt.changes 2023-08-30 10:21:42.858784283 +0200 +++ /work/SRC/openSUSE:Factory/.salt.new.1766/salt.changes 2023-09-01 14:19:32.576943208 +0200 @@ -1,0 +2,19 @@ +Fri Sep 1 07:33:18 UTC 2023 - Victor Zhestkov <vzhestkov(a)suse.com> + +- Revert usage of long running REQ channel to prevent possible + missing responses on requests and dublicated responses + (bsc#1213960, bsc#1213630, bsc#1213257) + +- Added: + * revert-usage-of-long-running-req-channel-bsc-1213960.patch + +------------------------------------------------------------------- +Thu Aug 31 09:51:20 UTC 2023 - Pablo Suárez Hernández <pablo.suarezhernandez(a)suse.com> + +- Fix gitfs cachedir basename to avoid hash collisions + (bsc#1193948, bsc#1214797, CVE-2023-20898) + +- Added: + * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch + +------------------------------------------------------------------- @@ -5 +24 @@ -- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897) +- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897, bsc#1214796) New: ---- fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch revert-usage-of-long-running-req-channel-bsc-1213960.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ salt.spec ++++++ --- /var/tmp/diff_new_pack.fziQA5/_old 2023-09-01 14:19:39.053174350 +0200 +++ /var/tmp/diff_new_pack.fziQA5/_new 2023-09-01 14:19:39.061174636 +0200 @@ -298,6 +298,10 @@ Patch76: do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch # PATCH-FIX_UPSTREAM: https://github.com/saltstack/salt/pull/64510 Patch77: make-sure-configured-user-is-properly-set-by-salt-bs.patch +# PATCH-FIX_UPSTREAM: https://github.com/saltstack/salt/pull/64959 +Patch78: fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch +# PATCH-FIX_OPENSUSE: https://github.com/openSUSE/salt/pull/600 +Patch79: revert-usage-of-long-running-req-channel-bsc-1213960.patch ### IMPORTANT: The line below is used as a snippet marker. Do not touch it. ### SALT PATCHES LIST END ++++++ _lastrevision ++++++ --- /var/tmp/diff_new_pack.fziQA5/_old 2023-09-01 14:19:39.137177348 +0200 +++ /var/tmp/diff_new_pack.fziQA5/_new 2023-09-01 14:19:39.141177491 +0200 @@ -1,3 +1,3 @@ -9c59105c906c6b5eb9345c79e71e7d33f119ed22 +27bd69d21f942f677c6f257ae1b69a6e6ac6ec39 (No newline at EOF) ++++++ fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch ++++++ ++++ 834 lines (skipped) ++++++ revert-usage-of-long-running-req-channel-bsc-1213960.patch ++++++ From 3cc2aee2290bd9a4fba9e0cebe3b65370aa76af6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Pablo=20Su=C3=A1rez=20Hern=C3=A1ndez?= <psuarezhernandez(a)suse.com> Date: Fri, 1 Sep 2023 08:22:44 +0100 Subject: [PATCH] Revert usage of long running REQ channel (bsc#1213960, bsc#1213630, bsc#1213257) * Revert usage of long running REQ channel (bsc#1213960, bsc#1213630, bsc#1213257) This reverts commits: https://github.com/saltstack/salt/commit/a99ffb557b8a1142225d4925aba4a5e493… https://github.com/saltstack/salt/commit/80ae5188807550e7592fa12d8661ee83c4… https://github.com/saltstack/salt/commit/3c7e1ec1f08abd7cd1ba78ad7880acb6ba… https://github.com/saltstack/salt/commit/171926cc57618b51bf3fdc042b62212e68… From this PR: https://github.com/saltstack/salt/pull/61468 See: https://github.com/saltstack/salt/issues/62959#issuecomment-1658335432 * Revert "Fix linter" This reverts commit d09d2d3f31e06c554b4ed869b7dc4f8b8bce5dc9. * Revert "add a regression test" This reverts commit b2c32be0a80c92585a9063409c42895357bb0dbe. * Fix failing tests after reverting commits --- doc/topics/development/architecture.rst | 8 +- salt/channel/client.py | 9 +-- salt/minion.py | 47 +++-------- salt/transport/ipc.py | 5 +- salt/utils/asynchronous.py | 2 +- .../transport/server/test_req_channel.py | 16 ++-- tests/pytests/unit/test_minion.py | 79 ++++--------------- 7 files changed, 39 insertions(+), 127 deletions(-) diff --git a/doc/topics/development/architecture.rst b/doc/topics/development/architecture.rst index 17400db001..1c717092f8 100644 --- a/doc/topics/development/architecture.rst +++ b/doc/topics/development/architecture.rst @@ -220,15 +220,11 @@ the received message. 4) The new minion thread is created. The _thread_return() function starts up and actually calls out to the requested function contained in the job. 5) The requested function runs and returns a result. [Still in thread.] -6) The result of the function that's run is published on the minion's local event bus with event -tag "__master_req_channel_payload" [Still in thread.] +6) The result of the function that's run is encrypted and returned to the +master's ReqServer (TCP 4506 on master). [Still in thread.] 7) Thread exits. Because the main thread was only blocked for the time that it took to initialize the worker thread, many other requests could have been received and processed during this time. -8) Minion event handler gets the event with tag "__master_req_channel_payload" -and sends the payload to master's ReqServer (TCP 4506 on master), via the long-running async request channel -that was opened when minion first started up. - A Note on ClearFuncs vs. AESFuncs diff --git a/salt/channel/client.py b/salt/channel/client.py index e5b073ccdb..76d7a8e5b9 100644 --- a/salt/channel/client.py +++ b/salt/channel/client.py @@ -98,7 +98,6 @@ class AsyncReqChannel: "_crypted_transfer", "_uncrypted_transfer", "send", - "connect", ] close_methods = [ "close", @@ -128,7 +127,7 @@ class AsyncReqChannel: else: auth = None - transport = salt.transport.request_client(opts, io_loop=io_loop) + transport = salt.transport.request_client(opts, io_loop) return cls(opts, transport, auth) def __init__(self, opts, transport, auth, **kwargs): @@ -271,10 +270,6 @@ class AsyncReqChannel: raise salt.ext.tornado.gen.Return(ret) - @salt.ext.tornado.gen.coroutine - def connect(self): - yield self.transport.connect() - @salt.ext.tornado.gen.coroutine def send(self, load, tries=3, timeout=60, raw=False): """ @@ -295,7 +290,7 @@ class AsyncReqChannel: ret = yield self._crypted_transfer(load, timeout=timeout, raw=raw) break except Exception as exc: # pylint: disable=broad-except - log.trace("Failed to send msg %r", exc) + log.error("Failed to send msg %r", exc) if _try >= tries: raise else: diff --git a/salt/minion.py b/salt/minion.py index c3b65f16c3..9597d6e63a 100644 --- a/salt/minion.py +++ b/salt/minion.py @@ -1361,30 +1361,11 @@ class Minion(MinionBase): """ Return a future which will complete when you are connected to a master """ - # Consider refactoring so that eval_master does not have a subtle side-effect on the contents of the opts array master, self.pub_channel = yield self.eval_master( self.opts, self.timeout, self.safe, failed ) - - # a long-running req channel - self.req_channel = salt.transport.client.AsyncReqChannel.factory( - self.opts, io_loop=self.io_loop - ) - - if hasattr( - self.req_channel, "connect" - ): # TODO: consider generalizing this for all channels - log.debug("Connecting minion's long-running req channel") - yield self.req_channel.connect() - yield self._post_master_init(master) - @salt.ext.tornado.gen.coroutine - def handle_payload(self, payload, reply_func): - self.payloads.append(payload) - yield reply_func(payload) - self.payload_ack.notify() - # TODO: better name... @salt.ext.tornado.gen.coroutine def _post_master_init(self, master): @@ -1599,6 +1580,7 @@ class Minion(MinionBase): return functions, returners, errors, executors def _send_req_sync(self, load, timeout): + if self.opts["minion_sign_messages"]: log.trace("Signing event to be published onto the bus.") minion_privkey_path = os.path.join(self.opts["pki_dir"], "minion.pem") @@ -1607,11 +1589,9 @@ class Minion(MinionBase): ) load["sig"] = sig - with salt.utils.event.get_event( - "minion", opts=self.opts, listen=False - ) as event: - return event.fire_event( - load, "__master_req_channel_payload", timeout=timeout + with salt.channel.client.ReqChannel.factory(self.opts) as channel: + return channel.send( + load, timeout=timeout, tries=self.opts["return_retry_tries"] ) @salt.ext.tornado.gen.coroutine @@ -1624,11 +1604,9 @@ class Minion(MinionBase): ) load["sig"] = sig - with salt.utils.event.get_event( - "minion", opts=self.opts, listen=False - ) as event: - ret = yield event.fire_event_async( - load, "__master_req_channel_payload", timeout=timeout + with salt.channel.client.AsyncReqChannel.factory(self.opts) as channel: + ret = yield channel.send( + load, timeout=timeout, tries=self.opts["return_retry_tries"] ) raise salt.ext.tornado.gen.Return(ret) @@ -2055,7 +2033,7 @@ class Minion(MinionBase): minion_instance._return_pub(ret) # Add default returners from minion config - # Should have been converted to comma-delimited string already + # Should have been coverted to comma-delimited string already if isinstance(opts.get("return"), str): if data["ret"]: data["ret"] = ",".join((data["ret"], opts["return"])) @@ -2662,7 +2640,6 @@ class Minion(MinionBase): """ Send mine data to the master """ - # Consider using a long-running req channel to send mine data with salt.channel.client.ReqChannel.factory(self.opts) as channel: data["tok"] = self.tok try: @@ -2699,12 +2676,6 @@ class Minion(MinionBase): force_refresh=data.get("force_refresh", False), notify=data.get("notify", False), ) - elif tag.startswith("__master_req_channel_payload"): - yield _minion.req_channel.send( - data, - timeout=_minion._return_retry_timer(), - tries=_minion.opts["return_retry_tries"], - ) elif tag.startswith("pillar_refresh"): yield _minion.pillar_refresh( force_refresh=data.get("force_refresh", False), @@ -3175,7 +3146,7 @@ class Minion(MinionBase): if self._target_load(payload["load"]): self._handle_decoded_payload(payload["load"]) elif self.opts["zmq_filtering"]: - # In the filtering enabled case, we'd like to know when minion sees something it shouldn't + # In the filtering enabled case, we'd like to know when minion sees something it shouldnt log.trace( "Broadcast message received not for this minion, Load: %s", payload["load"], diff --git a/salt/transport/ipc.py b/salt/transport/ipc.py index 3a3f0c7a5f..cee100b086 100644 --- a/salt/transport/ipc.py +++ b/salt/transport/ipc.py @@ -208,10 +208,7 @@ class IPCServer: log.error("Exception occurred while handling stream: %s", exc) def handle_connection(self, connection, address): - log.trace( - "IPCServer: Handling connection to address: %s", - address if address else connection, - ) + log.trace("IPCServer: Handling connection to address: %s", address) try: with salt.utils.asynchronous.current_ioloop(self.io_loop): stream = IOStream( diff --git a/salt/utils/asynchronous.py b/salt/utils/asynchronous.py index 0c645bbc3b..88596a4a20 100644 --- a/salt/utils/asynchronous.py +++ b/salt/utils/asynchronous.py @@ -34,7 +34,7 @@ class SyncWrapper: This is uses as a simple wrapper, for example: asynchronous = AsyncClass() - # this method would regularly return a future + # this method would reguarly return a future future = asynchronous.async_method() sync = SyncWrapper(async_factory_method, (arg1, arg2), {'kwarg1': 'val'}) diff --git a/tests/pytests/functional/transport/server/test_req_channel.py b/tests/pytests/functional/transport/server/test_req_channel.py index 4a74802a0d..555c040c1c 100644 --- a/tests/pytests/functional/transport/server/test_req_channel.py +++ b/tests/pytests/functional/transport/server/test_req_channel.py @@ -124,7 +124,7 @@ def req_channel_crypt(request): @pytest.fixture -def push_channel(req_server_channel, salt_minion, req_channel_crypt): +def req_channel(req_server_channel, salt_minion, req_channel_crypt): with salt.channel.client.ReqChannel.factory( salt_minion.config, crypt=req_channel_crypt ) as _req_channel: @@ -135,7 +135,7 @@ def push_channel(req_server_channel, salt_minion, req_channel_crypt): _req_channel.obj._refcount = 0 -def test_basic(push_channel): +def test_basic(req_channel): """ Test a variety of messages, make sure we get the expected responses """ @@ -145,11 +145,11 @@ def test_basic(push_channel): {"baz": "qux", "list": [1, 2, 3]}, ] for msg in msgs: - ret = push_channel.send(dict(msg), timeout=5, tries=1) + ret = req_channel.send(dict(msg), timeout=5, tries=1) assert ret["load"] == msg -def test_normalization(push_channel): +def test_normalization(req_channel): """ Since we use msgpack, we need to test that list types are converted to lists """ @@ -160,21 +160,21 @@ def test_normalization(push_channel): {"list": tuple([1, 2, 3])}, ] for msg in msgs: - ret = push_channel.send(msg, timeout=5, tries=1) + ret = req_channel.send(msg, timeout=5, tries=1) for key, value in ret["load"].items(): assert types[key] == type(value) -def test_badload(push_channel, req_channel_crypt): +def test_badload(req_channel, req_channel_crypt): """ Test a variety of bad requests, make sure that we get some sort of error """ msgs = ["", [], tuple()] if req_channel_crypt == "clear": for msg in msgs: - ret = push_channel.send(msg, timeout=5, tries=1) + ret = req_channel.send(msg, timeout=5, tries=1) assert ret == "payload and load must be a dict" else: for msg in msgs: with pytest.raises(salt.exceptions.AuthenticationError): - push_channel.send(msg, timeout=5, tries=1) + req_channel.send(msg, timeout=5, tries=1) diff --git a/tests/pytests/unit/test_minion.py b/tests/pytests/unit/test_minion.py index 1cee025a48..4508eaee95 100644 --- a/tests/pytests/unit/test_minion.py +++ b/tests/pytests/unit/test_minion.py @@ -55,27 +55,26 @@ def test_minion_load_grains_default(): @pytest.mark.parametrize( - "event", + "req_channel", [ ( - "fire_event", - lambda data, tag, cb=None, timeout=60: True, + "salt.channel.client.AsyncReqChannel.factory", + lambda load, timeout, tries: salt.ext.tornado.gen.maybe_future(tries), ), ( - "fire_event_async", - lambda data, tag, cb=None, timeout=60: salt.ext.tornado.gen.maybe_future( - True - ), + "salt.channel.client.ReqChannel.factory", + lambda load, timeout, tries: tries, ), ], ) -def test_send_req_fires_completion_event(event, minion_opts): - event_enter = MagicMock() - event_enter.send.side_effect = event[1] - event = MagicMock() - event.__enter__.return_value = event_enter +def test_send_req_tries(req_channel, minion_opts): + channel_enter = MagicMock() + channel_enter.send.side_effect = req_channel[1] + channel = MagicMock() + channel.__enter__.return_value = channel_enter - with patch("salt.utils.event.get_event", return_value=event): + with patch(req_channel[0], return_value=channel): + minion_opts = salt.config.DEFAULT_MINION_OPTS.copy() minion_opts["random_startup_delay"] = 0 minion_opts["return_retry_tries"] = 30 minion_opts["grains"] = {} @@ -85,62 +84,16 @@ def test_send_req_fires_completion_event(event, minion_opts): load = {"load": "value"} timeout = 60 - # XXX This is buggy because "async" in event[0] will never evaluate - # to True and if it *did* evaluate to true the test would fail - # because you Mock isn't a co-routine. - if "async" in event[0]: + if "Async" in req_channel[0]: rtn = minion._send_req_async(load, timeout).result() else: rtn = minion._send_req_sync(load, timeout) - # get the - for idx, call in enumerate(event.mock_calls, 1): - if "fire_event" in call[0]: - condition_event_tag = ( - len(call.args) > 1 - and call.args[1] == "__master_req_channel_payload" - ) - condition_event_tag_error = "{} != {}; Call(number={}): {}".format( - idx, call, call.args[1], "__master_req_channel_payload" - ) - condition_timeout = ( - len(call.kwargs) == 1 and call.kwargs["timeout"] == timeout - ) - condition_timeout_error = "{} != {}; Call(number={}): {}".format( - idx, call, call.kwargs["timeout"], timeout - ) - - fire_event_called = True - assert condition_event_tag, condition_event_tag_error - assert condition_timeout, condition_timeout_error - - assert fire_event_called - assert rtn - - -async def test_send_req_async_regression_62453(minion_opts): - event_enter = MagicMock() - event_enter.send.side_effect = ( - lambda data, tag, cb=None, timeout=60: salt.ext.tornado.gen.maybe_future(True) - ) - event = MagicMock() - event.__enter__.return_value = event_enter - - minion_opts["random_startup_delay"] = 0 - minion_opts["return_retry_tries"] = 30 - minion_opts["grains"] = {} - with patch("salt.loader.grains"): - minion = salt.minion.Minion(minion_opts) - - load = {"load": "value"} - timeout = 60 - - # We are just validating no exception is raised - rtn = await minion._send_req_async(load, timeout) - assert rtn is False + assert rtn == 30 -def test_mine_send_tries(): +@patch("salt.channel.client.ReqChannel.factory") +def test_mine_send_tries(req_channel_factory): channel_enter = MagicMock() channel_enter.send.side_effect = lambda load, timeout, tries: tries channel = MagicMock() -- 2.41.0

1 0

commit open-vm-tools for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package open-vm-tools for openSUSE:Factory checked in at 2023-09-01 14:19:12 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/open-vm-tools (Old) and /work/SRC/openSUSE:Factory/.open-vm-tools.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "open-vm-tools" Fri Sep 1 14:19:12 2023 rev:114 rq:1108318 version:12.2.0 Changes: -------- --- /work/SRC/openSUSE:Factory/open-vm-tools/open-vm-tools.changes 2023-06-30 19:58:31.557519891 +0200 +++ /work/SRC/openSUSE:Factory/.open-vm-tools.new.1766/open-vm-tools.changes 2023-09-01 14:19:30.184857832 +0200 @@ -1,0 +2,7 @@ +Mon Aug 28 15:10:27 UTC 2023 - Kirk Allan <kallan(a)suse.com> + +- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900: + open-vm-tools: SAML token signature bypass vulnerability + + Add patch: CVE-20230-20900.patch + +------------------------------------------------------------------- New: ---- CVE-20230-20900.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ open-vm-tools.spec ++++++ --- /var/tmp/diff_new_pack.II5sLc/_old 2023-09-01 14:19:32.164928502 +0200 +++ /var/tmp/diff_new_pack.II5sLc/_new 2023-09-01 14:19:32.172928788 +0200 @@ -156,6 +156,7 @@ Patch2: 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch Patch3: 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch Patch4: 2023-20867-Remove-some-dead-code.patch +Patch5: CVE-20230-20900.patch #SUSE specific patches Patch0: pam-vmtoolsd.patch @@ -261,6 +262,7 @@ %patch2 -p2 %patch3 -p2 %patch4 -p2 +%patch5 -p2 #SUSE specific patches %patch0 -p2 ++++++ CVE-20230-20900.patch ++++++ From eb4f36dfeb8b89443f7d5ade03316ba49a295eee Mon Sep 17 00:00:00 2001 From: John Wolfe <jwolfe(a)vmware.com> Date: Fri, 18 Aug 2023 11:23:53 -0700 Subject: [PATCH] Address CVE-2023-20900 VGAuth: Allow only X509 certs to verify the SAML token signature. --- open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c b/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c index f5541a9..0b2a945 100644 --- a/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c +++ b/open-vm-tools/vgauth/serviceImpl/saml-xmlsec1.c @@ -1335,7 +1335,14 @@ VerifySignature(xmlDocPtr doc, */ bRet = RegisterID(xmlDocGetRootElement(doc), "ID"); if (bRet == FALSE) { - g_warning("failed to register ID\n"); + g_warning("Failed to register ID\n"); + goto done; + } + + /* Use only X509 certs to validate the signature */ + if (xmlSecPtrListAdd(&(dsigCtx->keyInfoReadCtx.enabledKeyData), + BAD_CAST xmlSecKeyDataX509Id) < 0) { + g_warning("Failed to limit allowed key data\n"); goto done; } -- 2.6.2

1 0

commit openexr for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openexr for openSUSE:Factory checked in at 2023-09-01 14:19:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openexr (Old) and /work/SRC/openSUSE:Factory/.openexr.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "openexr" Fri Sep 1 14:19:10 2023 rev:61 rq:1108302 version:3.1.11 Changes: -------- --- /work/SRC/openSUSE:Factory/openexr/openexr.changes 2023-07-19 19:09:55.376316599 +0200 +++ /work/SRC/openSUSE:Factory/.openexr.new.1766/openexr.changes 2023-09-01 14:19:28.248788731 +0200 @@ -1,0 +2,29 @@ +Thu Aug 24 13:21:39 UTC 2023 - pgajdos(a)suse.com + +- version update to 3.1.11 + ## Version 3.1.11 (August 13, 2023) + Patch release that fixes a build failure with `-march=x86-64-v3` + * Initialize `regs[]` to 0 in `check_for_x86_simd` + * Fix CPUID detection with `-march=x86-64-v3` + ## Version 3.1.10 (August 2, 2023) + Patch release that addresses miscellaneous build issues, test + failures, and performance regressions, as well as: + * OSS-fuzz [59457](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59457) + Heap-buffer-overflow in `LossyDctDecoder_execute` + * Readdress #1456: disallow NaNs in `testOptimizedInterleavePatterns` + * Revert pre-computed values + * Fix handling for corrupt number of DC components + * Add `OPENEXR_MISSING_ARM_VLD1` workaround to `internal_dwa_simd.h` + * Fix Huffman performance regression on Linux/clang + * Fix range check in dwa compressor + * Fix build with i386 and musl libc + * Fix the code contains unhandled character + * Fix cpu detection of sse2 on non-64 x86 + * Fix the code contains unhandled character + * Fix gcc-11 warnings: signed/unsigned integer comparison, unused variables + * Fix macOS and Windows build failures when threading is disabled + * Fix build error on win_arm64 +- deleted patches + - 1488.patch (upstreamed) + +------------------------------------------------------------------- Old: ---- 1488.patch v3.1.9.tar.gz New: ---- v3.1.11.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openexr.spec ++++++ --- /var/tmp/diff_new_pack.24tawO/_old 2023-09-01 14:19:29.976850408 +0200 +++ /var/tmp/diff_new_pack.24tawO/_new 2023-09-01 14:19:29.984850693 +0200 @@ -22,7 +22,7 @@ %define sonum 30 %global so_suffix -3_1 Name: openexr -Version: 3.1.9 +Version: 3.1.11 Release: 0 Summary: Utilities for working with HDR images in OpenEXR format License: BSD-3-Clause @@ -30,8 +30,6 @@ URL: https://www.openexr.com/ Source0: https://github.com/openexr/openexr/archive/v%{version}.tar.gz Source2: baselibs.conf -# PATCH-FIX-UPSTREAM - https://github.com/AcademySoftwareFoundation/openexr/issues/1460 -Patch0: 1488.patch BuildRequires: cmake >= 3.12 BuildRequires: freeglut-devel BuildRequires: gcc-c++ ++++++ v3.1.9.tar.gz -> v3.1.11.tar.gz ++++++ /work/SRC/openSUSE:Factory/openexr/v3.1.9.tar.gz /work/SRC/openSUSE:Factory/.openexr.new.1766/v3.1.11.tar.gz differ: char 12, line 1

1 0

commit libreoffice for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package libreoffice for openSUSE:Factory checked in at 2023-09-01 14:18:54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/libreoffice (Old) and /work/SRC/openSUSE:Factory/.libreoffice.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "libreoffice" Fri Sep 1 14:18:54 2023 rev:282 rq:1108284 version:7.6.1.1 Changes: -------- --- /work/SRC/openSUSE:Factory/libreoffice/libreoffice.changes 2023-08-22 08:55:53.406529584 +0200 +++ /work/SRC/openSUSE:Factory/.libreoffice.new.1766/libreoffice.changes 2023-09-01 14:19:14.640303032 +0200 @@ -1,0 +2,6 @@ +Wed Aug 30 15:17:53 UTC 2023 - Danilo Spinella <danilo.spinella(a)suse.com> + +- Update to 7.6.1.1: + https://wiki.documentfoundation.org/Releases/7.6.1/RC1 + +------------------------------------------------------------------- Old: ---- libreoffice-7.6.0.3.tar.xz libreoffice-7.6.0.3.tar.xz.asc libreoffice-help-7.6.0.3.tar.xz libreoffice-help-7.6.0.3.tar.xz.asc libreoffice-translations-7.6.0.3.tar.xz libreoffice-translations-7.6.0.3.tar.xz.asc New: ---- libreoffice-7.6.1.1.tar.xz libreoffice-7.6.1.1.tar.xz.asc libreoffice-help-7.6.1.1.tar.xz libreoffice-help-7.6.1.1.tar.xz.asc libreoffice-translations-7.6.1.1.tar.xz libreoffice-translations-7.6.1.1.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ libreoffice.spec ++++++ --- /var/tmp/diff_new_pack.o9B5d9/_old 2023-09-01 14:19:27.504762177 +0200 +++ /var/tmp/diff_new_pack.o9B5d9/_new 2023-09-01 14:19:27.508762319 +0200 @@ -52,7 +52,7 @@ %endif %bcond_with firebird Name: libreoffice -Version: 7.6.0.3 +Version: 7.6.1.1 Release: 0 Summary: A Free Office Suite (Framework) License: LGPL-3.0-or-later AND MPL-2.0+ ++++++ libreoffice-7.6.0.3.tar.xz -> libreoffice-7.6.1.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/libreoffice/libreoffice-7.6.0.3.tar.xz /work/SRC/openSUSE:Factory/.libreoffice.new.1766/libreoffice-7.6.1.1.tar.xz differ: char 15, line 1 ++++++ libreoffice-help-7.6.0.3.tar.xz -> libreoffice-help-7.6.1.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/libreoffice/libreoffice-help-7.6.0.3.tar.xz /work/SRC/openSUSE:Factory/.libreoffice.new.1766/libreoffice-help-7.6.1.1.tar.xz differ: char 15, line 1 ++++++ libreoffice-translations-7.6.0.3.tar.xz -> libreoffice-translations-7.6.1.1.tar.xz ++++++ /work/SRC/openSUSE:Factory/libreoffice/libreoffice-translations-7.6.0.3.tar.xz /work/SRC/openSUSE:Factory/.libreoffice.new.1766/libreoffice-translations-7.6.1.1.tar.xz differ: char 15, line 1

1 0

commit cockpit for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cockpit for openSUSE:Factory checked in at 2023-09-01 14:18:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cockpit (Old) and /work/SRC/openSUSE:Factory/.cockpit.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cockpit" Fri Sep 1 14:18:49 2023 rev:34 rq:1108267 version:298 Changes: -------- --- /work/SRC/openSUSE:Factory/cockpit/cockpit.changes 2023-08-22 08:55:41.234506457 +0200 +++ /work/SRC/openSUSE:Factory/.cockpit.new.1766/cockpit.changes 2023-09-01 14:19:02.559871871 +0200 @@ -1,0 +2,5 @@ +Thu Aug 31 10:00:06 UTC 2023 - Miika Alikirri <miika.alikirri(a)suse.com> + +- Fix building for SLE15.5 and SLE15.4 + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cockpit.spec ++++++ --- /var/tmp/diff_new_pack.ChY6fi/_old 2023-09-01 14:19:05.643981945 +0200 +++ /var/tmp/diff_new_pack.ChY6fi/_new 2023-09-01 14:19:05.647982088 +0200 @@ -130,11 +130,16 @@ BuildRequires: autoconf automake BuildRequires: make BuildRequires: /usr/bin/python3 -%if 0%{?rhel} && 0%{?rhel} <= 8 +%if ( 0%{?rhel} && 0%{?rhel} <= 8 ) || 0%{?suse_version} <= 1500 # RHEL 8's gettext does not yet have metainfo.its BuildRequires: gettext >= 0.19.7 +%if 0%{?rhel} BuildRequires: libappstream-glib-devel %else +# Suse's package has a different name +BuildRequires: appstream-glib-devel +%endif +%else BuildRequires: gettext >= 0.21 %endif %if 0%{?build_basic} ++++++ _service ++++++ --- /var/tmp/diff_new_pack.ChY6fi/_old 2023-09-01 14:19:05.707984230 +0200 +++ /var/tmp/diff_new_pack.ChY6fi/_new 2023-09-01 14:19:05.711984372 +0200 @@ -7,6 +7,9 @@ </service> <service mode="buildtime" name="tar"> <param name="obsinfo">cockpit-suse-theme.obsinfo</param> +  + <param name="filename">cockpit-suse-theme</param> </service> <service name="obs_scm" mode="manual"> <param name="versionformat">@PARENT_TAG@</param>

1 0

commit python-hypothesis for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-hypothesis for openSUSE:Factory checked in at 2023-09-01 14:18:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-hypothesis (Old) and /work/SRC/openSUSE:Factory/.python-hypothesis.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-hypothesis" Fri Sep 1 14:18:49 2023 rev:67 rq:1108256 version:6.82.7 Changes: -------- --- /work/SRC/openSUSE:Factory/python-hypothesis/python-hypothesis.changes 2023-08-22 08:55:35.246495080 +0200 +++ /work/SRC/openSUSE:Factory/.python-hypothesis.new.1766/python-hypothesis.changes 2023-09-01 14:19:00.947814335 +0200 @@ -0,0 +1,13 @@ +------------------------------------------------------------------- +Tue Aug 29 17:43:45 UTC 2023 - Ben Greiner <code(a)bnavigator.de> + +- Update to 6.82.7 + * This patch updates our autoformatting tools, improving our code + style without any API changes. +- Release 6.82.6 + * This patch enables and fixes many more of ruff‘s lint rules. +- Release 6.82.5 + * Fixes the error message for missing [cli] extra. +- Use slow 'obs' profile for testing and disable healthcheck + tests because of it. + Old: ---- hypothesis-python-6.82.4.tar.gz New: ---- hypothesis-python-6.82.7.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-hypothesis.spec ++++++ --- /var/tmp/diff_new_pack.7HpGQr/_old 2023-09-01 14:19:02.203859164 +0200 +++ /var/tmp/diff_new_pack.7HpGQr/_new 2023-09-01 14:19:02.207859307 +0200 @@ -37,7 +37,7 @@ %endif %{?sle15_python_module_pythons} Name: python-hypothesis%{psuffix} -Version: 6.82.4 +Version: 6.82.7 Release: 0 Summary: A library for property based testing License: MPL-2.0 @@ -149,35 +149,58 @@ donttest+=" or test_can_learn_to_normalize_the_unnormalized" # Fail because typing comparison donttest+=" or test_ghostwriter_on_hypothesis" +if [ $(getconf LONG_BIT) -eq 32 ]; then +donttest+=" or test_gets_right_dtype_for_empty_indices" +donttest+=" or test_has_string_of_max_length" +fi +# https://github.com/HypothesisWorks/hypothesis/issues/3704 +donttest+=" or (test_make_full_patch and covering)" +donttest+=" or test_overflowing_integers_are_deprecated" +# we're disabling the healthcheck below, obs is too flaky with it +donttest+=" or fails_health_check or slow_tests or on_healthcheck or a_health_check" +donttest+=" or test_statistics_with_events_and_target" +donttest+=" or test_self_ref_regression" # adapted from pytest.ini in github repo toplevel dir (above hypothesis-python) echo '[pytest] addopts= + -rfE --strict-markers --tb=native - -p pytester --runpytest=subprocess + -p pytester + --runpytest=subprocess + --hypothesis-profile=obs -v -n auto - -ra +xfail_strict = False filterwarnings = - error + # error <-- disabled for obs packaging ignore::hypothesis.errors.NonInteractiveExampleWarning # https://github.com/pandas-dev/pandas/issues/41199 default:Creating a LegacyVersion has been deprecated and will be removed in the next major release:DeprecationWarning default:distutils Version classes are deprecated\. Use packaging\.version instead:DeprecationWarning # https://github.com/pandas-dev/pandas/issues/32056 (?) default:numpy\.ufunc size changed, may indicate binary incompatibility\. Expected 216 from C header, got 232 from PyObject:RuntimeWarning - # https://github.com/lark-parser/lark/pull/1140 - default:module 'sre_constants' is deprecated:DeprecationWarning - default:module 'sre_parse' is deprecated:DeprecationWarning # https://github.com/pandas-dev/pandas/issues/34848 default:`np\.bool` is a deprecated alias for the builtin `bool`:DeprecationWarning default:`np\.complex` is a deprecated alias for the builtin `complex`:DeprecationWarning default:`np\.object` is a deprecated alias for the builtin `object`:DeprecationWarning ' > pytest.ini +# increase test deadline for slow obs executions +echo " +import hypothesis + +hypothesis.settings.register_profile( + 'obs', + deadline=5000, + suppress_health_check=[ + hypothesis.HealthCheck.too_slow, + ] +) +" >> tests/conftest.py %if %{without complete_tests} export PYTEST_ADDOPTS="--ignore=tests/pandas/ --ignore=tests/redis/test_redis_exampledatabase.py" %endif -%pytest -c pytest.ini -k "not ($donttest)" tests +%pytest -c pytest.ini -k "not ($donttest)" tests; rm -rf .pytest_cache %endif %if !%{with test} ++++++ _service ++++++ --- /var/tmp/diff_new_pack.7HpGQr/_old 2023-09-01 14:19:02.247860735 +0200 +++ /var/tmp/diff_new_pack.7HpGQr/_new 2023-09-01 14:19:02.251860877 +0200 @@ -2,7 +2,7 @@ <service name="tar_scm" mode="disabled"> <param name="url">https://github.com/HypothesisWorks/hypothesis.git</param> <param name="scm">git</param> - <param name="revision">hypothesis-python-6.82.4</param> + <param name="revision">hypothesis-python-6.82.7</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">hypothesis-python-(.*)</param> <param name="subdir">hypothesis-python</param> ++++++ hypothesis-python-6.82.4.tar.gz -> hypothesis-python-6.82.7.tar.gz ++++++ ++++ 2163 lines of diff (skipped)

1 0

commit bcel for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package bcel for openSUSE:Factory checked in at 2023-09-01 14:18:48 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/bcel (Old) and /work/SRC/openSUSE:Factory/.bcel.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "bcel" Fri Sep 1 14:18:48 2023 rev:32 rq:1108225 version:6.7.0 Changes: -------- --- /work/SRC/openSUSE:Factory/bcel/bcel.changes 2022-11-22 16:09:27.181807559 +0100 +++ /work/SRC/openSUSE:Factory/.bcel.new.1766/bcel.changes 2023-09-01 14:18:58.975743950 +0200 @@ -1,0 +2,60 @@ +Thu Aug 31 08:38:22 UTC 2023 - Fridrich Strba <fstrba(a)suse.com> + +- Update to version 6.7.0 + * 6.7.0 (2022-11-28) Maintenance and bug fix release. + * 6.6.1 (2022-10-29) Maintenance and bug fix release. + * 6.6.0 (2022-10-08) Minor feature and bug fix release. + * 6.5.0 (2020-06-05) Minor feature and bug fix release. + * 6.4.1 (2019-09-26) Bug fix release. + * 6.4.0 (2019-09-20) Feature and bug fix release. + * 6.3.1 (2019-03-20) Bug fix release + * 6.3 (2019-01-23) Experimental Java 9, 10, 11, 12-EA, and 13-EA + Support + * 6.2 (2017-12-08) Experimental Java 9 Support + * 6.1 (2017-09-14) Experimental Java 9 Support + * 6.0 (2016-07-10) Apache Commons BCEL 6.0 is a major release + supporting the new features introduced in Java 6, 7 and 8. It + requires Java 7 or higher to run. + COMPATIBILITY with 5.2 + + Binary compatible + - not strictly compatible + - The constant interface org.apache.bcel.Constants has been + deprecated. Classes which implemented this interface in 5.2 + now use the constants defined in the org.apache.bcel.Const + class. + - The constant interface + org.apache.bcel.generic.InstructionConstants has been + deprecated. Classes which implemented this interface in 5.2 + now use the constants defined in the + org.apache.bcel.generic.InstructionConsts class. + - Return type of method 'public java.lang.Object + getElementAt(int)' in org.apache.bcel.verifier + .VerifierFactoryListModel has been changed to + java.lang.String. + - The BCEL classes do no longer implement java.io.Serializable. + + Source compatible + - Yes, sort of; + - The org.apache.bcel.classfile.Visitor interface has been + enhanced with additional methods. If you implemented it + directly instead of extending the EmptyVisitor class you'll + have to implement the new methods. + - The org.apache.bcel.generic.Visitor interface has been + enhanced with an additional method. If you implemented it + directly instead of extending the EmptyVisitor class you'll + have to implement the new methods. + + Semantic compatible + - Yes, except: + - BCEL 6.0 handles new attributes such as code annotations + that could only be processed by implementing a custom + AttributeReader in the previous versions. Code relying on + this behavior will have to be adjusted since the + AttributeReader will no longer be called in these cases. + + For full information about API changes please see the extended + Clirr report: https://commons.apache.org/bcel/clirr-report.html +- Removed patches: + * bcel-5.2-encoding.patch + + part of our own build.xml file generated to build with ant + * bcel-CVE-2022-42920.patch + + integrated upstrea + +------------------------------------------------------------------- Old: ---- bcel-5.2-encoding.patch bcel-5.2-src.tar.gz bcel-5.2-src.tar.gz.asc bcel-5.2.pom bcel-CVE-2022-42920.patch bcel.keyring New: ---- bcel-6.7.0-src.tar.gz bcel-build.xml ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ bcel.spec ++++++ --- /var/tmp/diff_new_pack.EjmKGp/_old 2023-09-01 14:19:00.275790350 +0200 +++ /var/tmp/diff_new_pack.EjmKGp/_new 2023-09-01 14:19:00.283790635 +0200 @@ -1,7 +1,7 @@ # # spec file for package bcel # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,25 +17,20 @@ Name: bcel -Version: 5.2 +Version: 6.7.0 Release: 0 Summary: Byte Code Engineering Library License: Apache-2.0 Group: Development/Libraries/Java -URL: http://commons.apache.org/proper/commons-bcel/ -Source0: http://archive.apache.org/dist/commons/bcel/source/%{name}-%{version}-src.t… -Source1: http://archive.apache.org/dist/commons/bcel/source/%{name}-%{version}-src.t… -Source2: http://repo.maven.apache.org/maven2/org/apache/%{name}/%{name}/%{version}/%… -Source3: bcel.keyring -Patch0: bcel-5.2-encoding.patch -#PATCH-FIX-UPSTREAM bsc#1205125 CVE-2022-42920 Out-of-bounds writing issue -Patch1: bcel-CVE-2022-42920.patch +URL: https://commons.apache.org/proper/commons-bcel/ +Source0: https://archive.apache.org/dist/commons/bcel/source/%{name}-%{version}-src.… +Source1: %{name}-build.xml BuildRequires: ant +BuildRequires: apache-commons-lang3 +BuildRequires: fdupes BuildRequires: java-devel >= 1.8 -BuildRequires: javapackages-local -BuildRequires: regexp +BuildRequires: javapackages-local >= 6 #!BuildIgnore: xalan-j2 xerces-j2 xml-apis xml-resolver -Requires: regexp BuildArch: noarch %description @@ -60,36 +55,39 @@ much better information about what is wrong with your code than the standard JVM message. -%prep -%autosetup -p1 +%package javadoc +Summary: Javadoc for %{name} +Group: Documentation/HTML + +%description javadoc +This package contains the API documentation for %{name}. -# remove all binary libs -find . -name "*.jar" -exec rm -f {} \; -# very broken build -perl -p -i -e 's| depends=\"examples\"||g;' build.xml -touch manifest.txt +%prep +%setup -q -n %{name}-%{version}-src +cp %{SOURCE1} build.xml %build -export CLASSPATH=%(build-classpath regexp) -export OPT_JAR_LIST="ant/ant-nodeps" -ant \ - -Dant.build.javac.target=8 -Dant.build.javac.source=8 \ - -Dbuild.dest=./build -Dbuild.dir=./build -Dname=%{name} \ - compile jar +mkdir -p lib +build-jar-repository -s lib apache-commons-lang3 +%ant jar javadoc %install -# jars +# jar mkdir -p %{buildroot}%{_javadir} -install -m 644 target/%{name}-%{version}.jar %{buildroot}%{_javadir}/%{name}-%{version}.jar -(cd %{buildroot}%{_javadir} && for jar in *-%{version}*; do ln -s ${jar} `echo $jar| sed "s|-%{version}||g"`; done) - +install -m 644 target/%{name}-%{version}.jar %{buildroot}%{_javadir}/%{name}.jar +# pom mkdir -p %{buildroot}%{_mavenpomdir} -install -m 644 %{SOURCE2} %{buildroot}%{_mavenpomdir}/%{name}-%{version}.pom - -%add_maven_depmap %{name}-%{version}.pom %{name}-%{version}.jar -a "bcel:bcel" +%mvn_install_pom pom.xml %{buildroot}%{_mavenpomdir}/%{name}.pom +%add_maven_depmap %{name}.pom %{name}.jar -a "bcel:bcel" +# javadoc +mkdir -p %{buildroot}%{_javadocdir}/%{name} +cp -a target/site/apidocs/* %{buildroot}%{_javadocdir}/%{name} +%fdupes -s %{buildroot}%{_javadocdir}/%{name} %files -f .mfiles %license LICENSE.txt -%{_javadir}/* + +%files javadoc +%{_javadocdir}/%{name} %changelog ++++++ bcel-5.2-src.tar.gz -> bcel-6.7.0-src.tar.gz ++++++ ++++ 220181 lines of diff (skipped) ++++++ bcel-build.xml ++++++ <?xml version="1.0" encoding="UTF-8"?> <project name="bcel" default="package" basedir=".">    <property file="build.properties"/> <property name="project.groupId" value="org.apache.bcel"/> <property name="project.artifactId" value="bcel"/> <property name="project.version" value="6.7.0"/> <property name="spec.version" value="6.7"/> <property name="compiler.source" value="1.8"/> <property name="compiler.target" value="${compiler.source}"/> <property name="build.finalName" value="${project.artifactId}-${project.version}"/> <property name="build.dir" value="target"/> <property name="build.outputDir" value="${build.dir}/classes"/> <property name="build.srcDir" value="src/main/java"/> <property name="build.resourceDir" value="."/> <property name="reporting.outputDirectory" value="${build.dir}/site"/>    <path id="build.classpath"> <fileset dir="lib"> <include name="**/*"/> </fileset> </path>    <target name="clean" description="Clean the output directory"> <delete dir="${build.dir}"/> </target>    <target name="compile" description="Compile the code"> <mkdir dir="${build.outputDir}"/> <javac destdir="${build.outputDir}" encoding="iso-8859-1" nowarn="false" debug="true" optimize="false" deprecation="true" target="${compiler.target}" verbose="false" fork="false" source="${compiler.source}"> <src> <pathelement location="${build.srcDir}"/> </src> <classpath refid="build.classpath"/> </javac> <mkdir dir="${build.outputDir}/META-INF"/> <copy todir="${build.outputDir}/META-INF"> <fileset dir="${build.resourceDir}"> <include name="NOTICE.txt"/> <include name="LICENSE.txt"/> <include name="NOTICE"/> <include name="LICENSE"/> </fileset> </copy> </target>    <target name="javadoc" description="Generates the Javadoc of the application"> <javadoc sourcepath="${build.srcDir}" packagenames="*" destdir="${reporting.outputDirectory}/apidocs" access="protected" verbose="false" encoding="iso-8859-1" version="true" use="true" author="true" splitindex="false" nodeprecated="false" nodeprecatedlist="false" notree="false" noindex="false" nohelp="false" nonavbar="false" serialwarn="false" docencoding="iso-8859-1" source="${compiler.source}" linksource="true" breakiterator="false"> <classpath refid="build.classpath"/> </javadoc> </target>    <target name="package" depends="compile" description="Package the application"> <jar jarfile="${build.dir}/${build.finalName}.jar" compress="true" index="false" basedir="${build.outputDir}" excludes="**/package.html"> <manifest> <attribute name="Automatic-Module-Name" value="org.apache.bcel"/> <attribute name="Bundle-Description" value="Apache Commons Bytecode Engineering Library"/> <attribute name="Bundle-DocURL" value="https://commons.apache.org/proper/commons-bcel"/> <attribute name="Bundle-License" value="https://www.apache.org/licenses/LICENSE-2.0.txt"/> <attribute name="Bundle-ManifestVersion" value="2"/> <attribute name="Bundle-Name" value="Apache Commons BCEL"/> <attribute name="Bundle-SymbolicName" value="org.apache.bcel"/> <attribute name="Bundle-Vendor" value="The Apache Software Foundation"/> <attribute name="Bundle-Version" value="${project.version}"/> <attribute name="Export-Package" value="org.apache.bcel.classfile;version="${project.version}",org.apache.bcel.generic;version="${project.version}",org.apache.bcel.util;version="${project.version}",org.apache.bcel.verifier.exc;version="${project.version}",org.apache.bcel.verifier.statics;version="${project.version}",org.apache.bcel.verifier.structurals;version="${project.version}",org.apache.bcel.verifier;version="${project.version}",org.apache.bcel;version="${project.version}""/> <attribute name="Implementation-Title" value="Apache Commons BCEL"/> <attribute name="Implementation-Vendor" value="The Apache Software Foundation"/> <attribute name="Implementation-Version" value="${project.version}"/> <attribute name="Import-Package" value="javax.swing,javax.swing.border,javax.swing.event,org.apache.commons.lang3"/> <attribute name="Include-Resource" value="META-INF/NOTICE.txt=NOTICE.txt,META-INF/LICENSE.txt=LICENSE.txt"/> <attribute name="Require-Capability" value="osgi.ee;filter:="(&(osgi.ee=JavaSE)(version=${compiler.target}))""/> <attribute name="Specification-Title" value="Apache Commons BCEL"/> <attribute name="Specification-Vendor" value="The Apache Software Foundation"/> <attribute name="Specification-Version" value="${spec.version}"/> </manifest> </jar> </target>    <target name="jar" depends="package" description="Builds the jar for the application"/> </project>

1 0

commit xalan-j2 for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package xalan-j2 for openSUSE:Factory checked in at 2023-09-01 14:18:47 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xalan-j2 (Old) and /work/SRC/openSUSE:Factory/.xalan-j2.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "xalan-j2" Fri Sep 1 14:18:47 2023 rev:31 rq:1108224 version:2.7.3 Changes: -------- --- /work/SRC/openSUSE:Factory/xalan-j2/xalan-j2.changes 2022-03-28 16:59:31.084884351 +0200 +++ /work/SRC/openSUSE:Factory/.xalan-j2.new.1766/xalan-j2.changes 2023-09-01 14:18:56.387651578 +0200 @@ -1,0 +2,33 @@ +Thu Aug 31 08:42:41 UTC 2023 - Fridrich Strba <fstrba(a)suse.com> + +- Update to upstream version 2.7.3 + * Java 8 requirement + + This XalanJ release, requires users to use Java minimum + version 8 for working with XalanJ. + * Fix for CVE-2022-34169 (bsc#1201684) An integer truncation issue + when processing malicious XSLT stylesheets + + This issue was fixed within XalanJ's XSLTC processor. This + XalanJ issue, when present causes following problems: + Malicious XSLT stylesheets may be written, which could result + in XalanJ invalid translet Java byte code to be produced by + XalanJ XSLTC processor. The XalanJ translet is a Java byte + code compiled representation, of an XSLT transformation. + * Upgrade to Apache Commons BCEL 6.7.0 + + This XalanJ release, contains upgraded version of Apache + Commons BCEL library. + * Enhancements for, performing XalanJ build and running of XalanJ + tests from source distribution + + The XalanJ users, can now make XalanJ builds and perform + XalanJ tests from the XalanJ source distribution. The XalanJ + build scripts for the implementation and the tests, both for + the Windows and Linux platforms, were enhanced to support + building XalanJ with JDK 1.8. + * Upgrade to Xerces-J 2.12.2 + + This XalanJ release, contains upgraded versions of + xercesImpl.jar and xml-apis.jar (Xerces-J 2.12.2). +- Modified patches: + * openjdk-build.patch + * xalan-j2-manifest.patch + + rediff to changed context + +------------------------------------------------------------------- Old: ---- serializer-2.7.2.pom xalan-2.7.2.pom xalan-j_2_7_2-src.tar.gz xsltc-2.7.2.pom New: ---- serializer-2.7.3.pom xalan-2.7.3.pom xalan-j_2_7_3-src.tar.gz xsltc-2.7.3.pom ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xalan-j2.spec ++++++ --- /var/tmp/diff_new_pack.CmFrXw/_old 2023-09-01 14:18:58.623731386 +0200 +++ /var/tmp/diff_new_pack.CmFrXw/_new 2023-09-01 14:18:58.631731671 +0200 @@ -1,7 +1,7 @@ # # spec file for package xalan-j2 # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,17 +16,17 @@ # -%define cvs_version 2_7_2 +%define cvs_version 2_7_3 Name: xalan-j2 -Version: 2.7.2 +Version: 2.7.3 Release: 0 Summary: Java XSLT processor License: Apache-2.0 Group: Development/Libraries/Java URL: https://xalan.apache.org/index.html -Source0: http://www.apache.org/dist/xalan/xalan-j/source/xalan-j_%{cvs_version}-src.… -Source1: http://repo1.maven.org/maven2/xalan/xalan/%{version}/xalan-%{version}.pom -Source2: http://repo1.maven.org/maven2/xalan/serializer/%{version}/serializer-%{vers… +Source0: https://www.apache.org/dist/xalan/xalan-j/source/xalan-j_%{cvs_version}-src… +Source1: https://repo1.maven.org/maven2/xalan/xalan/%{version}/xalan-%{version}.pom +Source2: https://repo1.maven.org/maven2/xalan/serializer/%{version}/serializer-%{ver… Source3: xsltc-%{version}.pom Source4: xalan-j2-serializer-MANIFEST.MF Source5: xalan-j2-MANIFEST.MF @@ -43,8 +43,10 @@ BuildRequires: java-devel >= 1.8 BuildRequires: javapackages-local BuildRequires: jlex +BuildRequires: regexp BuildRequires: servletapi5 BuildRequires: xml-commons-apis-bootstrap +#!BuildIgnore: apache-commons-lang3 #!BuildIgnore: java-cup #!BuildIgnore: xerces-j2 #!BuildIgnore: xml-commons @@ -122,14 +124,11 @@ cp %{SOURCE1} xalan.pom cp %{SOURCE2} serializer.pom -%pom_remove_parent xalan.pom -%pom_remove_parent serializer.pom - %build if [ ! -e "$JAVA_HOME" ] ; then export JAVA_HOME="%{java_home}" ; fi pushd lib ln -sf $(build-classpath java-cup-runtime) runtime.jar -ln -sf $(build-classpath bcel) BCEL.jar +ln -sf $(build-classpath bcel) bcel-6.7.0.jar ln -sf $(build-classpath regexp) regexp.jar ln -sf $(build-classpath xerces-j2) xercesImpl.jar ln -sf $(build-classpath xml-commons-apis) xml-apis.jar @@ -140,7 +139,7 @@ ln -sf $(build-classpath jlex) JLex.jar ln -sf $(build-classpath stylebook) stylebook-1.0-b3_xalan-2.jar popd -ant \ +%{ant} \ -Dservlet-api.jar=$(build-classpath servletapi5) \ -Dcompiler.source=1.8 -Dcompiler.target=1.8 \ -Djava.awt.headless=true \ ++++++ openjdk-build.patch ++++++ --- /var/tmp/diff_new_pack.CmFrXw/_old 2023-09-01 14:18:58.659732671 +0200 +++ /var/tmp/diff_new_pack.CmFrXw/_new 2023-09-01 14:18:58.659732671 +0200 @@ -1,6 +1,7 @@ ---- xalan-j_2_7_2/build.xml 2014-03-26 16:21:31.000000000 +0100 -+++ xalan-j_2_7_2/build.xml 2017-10-03 13:58:53.759678877 +0200 -@@ -216,14 +216,12 @@ +diff -urEbwB xalan-j_2_7_3.orig/build.xml xalan-j_2_7_3/build.xml +--- xalan-j_2_7_3.orig/build.xml 2023-08-30 18:36:44.177771503 +0200 ++++ xalan-j_2_7_3/build.xml 2023-08-30 18:49:32.266249508 +0200 +@@ -221,14 +221,12 @@ <pathelement location="${taglet.jar}" /> <pathelement location="${build.serializer.jar}" /> <pathelement location="${build.xalan.jar}" /> @@ -15,15 +16,15 @@ </path> <path id="compile.class.path">  -@@ -232,7 +230,6 @@ +@@ -237,7 +235,6 @@ <pathelement location="${xmlapis.jar}" /> <pathelement location="${build.serializer.jar}" /> <pathelement location="${parser.jar}" /> - <pathelement path="${java.class.path}" /> </path> + <path id="xslt.boot.class.path"> -  -@@ -392,7 +389,6 @@ +@@ -398,7 +395,6 @@ <exclude name="**/IncrementalSAXSource_Xerces.java" unless="xerces.present" /> <classpath refid="compile.class.path" /> @@ -31,7 +32,7 @@ </javac>  <copy todir="${build.classes}"> -@@ -408,6 +404,12 @@ +@@ -414,6 +410,12 @@  <target name="xalan-interpretive.compile" depends="xml.compile" description="Compile the Xalan interpretive classes (skips XSLTC)" > @@ -44,7 +45,7 @@ <echo message="Compiling Xalan interpretive classes" /> <javac srcdir="${src.dir}" destdir="${build.classes}" -@@ -418,7 +420,6 @@ +@@ -425,7 +427,6 @@ <include name="${xalan.reldir}/**/*.java" /> <exclude name="${xsltc.reldir}/**/*.java" /> <classpath refid="compile.class.path" /> @@ -52,7 +53,7 @@ <sourcepath refid="compile.source.path" /> </javac>  -@@ -447,7 +448,6 @@ +@@ -454,7 +455,6 @@  <pathelement location="${build.classes}" /> @@ -60,146 +61,159 @@ </path>  -@@ -461,7 +461,6 @@ - debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> +@@ -469,7 +469,6 @@ + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="xsltc.class.path" /> - <bootclasspath refid="xslt.boot.class.path" /> </javac>  <javac srcdir="${samples.dir}/SimpleTransform" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" -+ debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> ++ debug="${build.debug}" + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/UseStylesheetPI" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/UseStylesheetParam" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/SAX2SAX" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/DOM2DOM" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/Pipe" destdir="${build.samples}" excludes="${exclude}" -- debug="${build.debug}" bootclasspathref="xslt.boot.class.path" > -+ debug="${build.debug}"> +- debug="${build.debug}" bootclasspathref="xslt.boot.class.path" ++ debug="${build.debug}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/UseXMLFilters" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/Trace" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/ApplyXPath" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/ApplyXPathDOM" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/trax" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/extensions" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/Validate" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/TransformThread" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> </javac> <javac srcdir="${samples.dir}/XPathAPI" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> - </javac> -@@ -864,7 +861,7 @@ +@@ -889,7 +886,6 @@ <javac srcdir="${samples.dir}/servlet" destdir="${build.servlet}/WEB-INF/classes" debug="${build.debug}" - bootclasspathref="xslt.boot.class.path" -+ - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath refid="samples.class.path" /> - <classpath location="${servlet-api.jar}" /> -@@ -904,13 +901,13 @@ +@@ -930,14 +926,14 @@ <target name="xsltc.samples.nojardepends"> <mkdir dir="${build.samples}"/> <javac srcdir="${samples.dir}/translets" @@ -207,52 +221,53 @@ + classpath="${build.xalan.jar}" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" -+ debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"/> ++ debug="${build.debug}" + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"/> <javac srcdir="${samples.dir}/CompiledJAXP" destdir="${build.samples}" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"/> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"/> </target> - -@@ -923,7 +920,7 @@ +@@ -951,7 +947,7 @@ <mkdir dir="${build.samples}/CompiledApplet"/> <javac srcdir="${samples.dir}/CompiledApplet" destdir="${build.samples}/CompiledApplet" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"/> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"/> <jar jarfile="${build.xsltc.applet.jar}" - basedir="${build.samples}/CompiledApplet" -@@ -939,7 +936,7 @@ +@@ -968,7 +964,7 @@ <mkdir dir="${build.samples}/CompiledBrazil"/> <javac srcdir="${samples.dir}/CompiledBrazil" destdir="${build.samples}/CompiledBrazil" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath location="${brazil.jar}"/> - </javac> -@@ -959,7 +956,7 @@ +@@ -989,7 +985,7 @@ <mkdir dir="${build.samples}/CompiledEJB"/> <javac srcdir="${samples.dir}/CompiledEJB" destdir="${build.samples}/CompiledEJB" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> + target="${compiler.target}" source="${compiler.source}" + nowarn="${compiler.nowarn}"> <classpath location="${javaee-api.jar}"/> - </javac> -@@ -977,7 +974,7 @@ +@@ -1008,7 +1004,7 @@ <mkdir dir="${build.samples}/CompiledServlet"/> <javac srcdir="${samples.dir}/CompiledServlet" destdir="${build.samples}/CompiledServlet" excludes="${exclude}" - debug="${build.debug}" bootclasspathref="xslt.boot.class.path" + debug="${build.debug}" - target="${compiler.target}" source="${compiler.source}"> - <classpath location="${servlet-api.jar}"/> - </javac> -@@ -1554,7 +1551,7 @@ + target="${compiler.target}" source="${compiler.source}" + classpath="${build.xalan.jar}:${servlet-api.jar}" + nowarn="${compiler.nowarn}"> +@@ -1627,7 +1623,7 @@  <java fork="yes" classname="org.apache.fop.apps.CommandLine" @@ -261,12 +276,14 @@ <arg line="${build.docs}/xalan-collate.fo build/docs/xalan.pdf"/> </java> </target> -@@ -1690,7 +1687,6 @@ - target="${compiler.target}" source="${compiler.source}"> +@@ -1764,7 +1760,6 @@ + nowarn="${compiler.nowarn}"> <include name="${serializer.reldir}/**/*.java" /> <classpath refid="compile.class.path" /> - <bootclasspath refid="xslt.boot.class.path" /> </javac>  <copy todir="${serializer.build.classes}"> +Only in xalan-j_2_7_3: build.xml.orig +Only in xalan-j_2_7_3: build.xml.rej ++++++ serializer-2.7.2.pom -> serializer-2.7.3.pom ++++++ --- /work/SRC/openSUSE:Factory/xalan-j2/serializer-2.7.2.pom 2018-11-10 16:47:40.596622616 +0100 +++ /work/SRC/openSUSE:Factory/.xalan-j2.new.1766/serializer-2.7.3.pom 2023-09-01 14:18:56.207645153 +0200 @@ -1,39 +1,8 @@ <?xml version="1.0" encoding="UTF-8"?> -<project - xmlns="http://maven.apache.org/POM/4.0.0" - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> - +<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <modelVersion>4.0.0</modelVersion> - <parent> - <groupId>org.apache</groupId> - <artifactId>apache</artifactId> - <version>4</version> - </parent> - <groupId>xalan</groupId> <artifactId>serializer</artifactId> - <version>2.7.2</version> - - <name>Xalan Java Serializer</name> - <description> - Serializer to write out XML, HTML etc. as a stream of characters from an input DOM or from input - SAX events. - </description> - <url>http://xml.apache.org/xalan-j/</url> - - <dependencies> - <dependency> - <groupId>xml-apis</groupId> - <artifactId>xml-apis</artifactId> - <version>1.3.04</version> - </dependency> - <dependency> - <groupId>xerces</groupId> - <artifactId>xercesImpl</artifactId> - <version>2.9.1</version> - <optional>true</optional> - </dependency> - </dependencies> - + <version>2.7.3</version> </project> ++++++ xalan-2.7.2.pom -> xalan-2.7.3.pom ++++++ --- /work/SRC/openSUSE:Factory/xalan-j2/xalan-2.7.2.pom 2018-11-10 16:47:40.904622225 +0100 +++ /work/SRC/openSUSE:Factory/.xalan-j2.new.1766/xalan-2.7.3.pom 2023-09-01 14:18:56.271647438 +0200 @@ -1,41 +1,8 @@ <?xml version="1.0" encoding="UTF-8"?> -<project - xmlns="http://maven.apache.org/POM/4.0.0" - xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" - xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd"> - +<project xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd" xmlns="http://maven.apache.org/POM/4.0.0" + xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <modelVersion>4.0.0</modelVersion> - <parent> - <groupId>org.apache</groupId> - <artifactId>apache</artifactId> - <version>4</version> - </parent> - <groupId>xalan</groupId> <artifactId>xalan</artifactId> - <version>2.7.2</version> - - <name>Xalan Java</name> - <description> - Xalan-Java is an XSLT processor for transforming XML documents into HTML, - text, or other XML document types. It implements XSL Transformations (XSLT) - Version 1.0 and XML Path Language (XPath) Version 1.0 and can be used from - the command line, in an applet or a servlet, or as a module in other program. - </description> - <url>http://xml.apache.org/xalan-j/</url> - - <dependencies> - <dependency> - <groupId>xalan</groupId> - <artifactId>serializer</artifactId> - <version>2.7.2</version> - </dependency> - <dependency> - <groupId>xerces</groupId> - <artifactId>xercesImpl</artifactId> - <version>2.9.1</version> - <optional>true</optional> - </dependency> - </dependencies> - -</project> \ No newline at end of file + <version>2.7.3</version> +</project> ++++++ xalan-j2-MANIFEST.MF ++++++ --- /var/tmp/diff_new_pack.CmFrXw/_old 2023-09-01 14:18:58.711734527 +0200 +++ /var/tmp/diff_new_pack.CmFrXw/_new 2023-09-01 14:18:58.715734670 +0200 @@ -2,48 +2,48 @@ Bundle-ManifestVersion: 2 Bundle-Name: %Bundle-Name.0 Bundle-SymbolicName: org.apache.xalan -Bundle-Version: 2.7.2 +Bundle-Version: 2.7.3 Bundle-Vendor: %Bundle-Vendor.0 -Export-Package: org.apache.regexp;version="2.7.2", - org.apache.xalan;version="2.7.2", - org.apache.xalan.client;version="2.7.2", - org.apache.xalan.extensions;version="2.7.2", - org.apache.xalan.lib;version="2.7.2", - org.apache.xalan.lib.sql;version="2.7.2", - org.apache.xalan.processor;version="2.7.2", - org.apache.xalan.res;version="2.7.2", - org.apache.xalan.serialize;version="2.7.2", - org.apache.xalan.templates;version="2.7.2", - org.apache.xalan.trace;version="2.7.2", - org.apache.xalan.transformer;version="2.7.2", - org.apache.xalan.xslt;version="2.7.2", - org.apache.xalan.xsltc;version="2.7.2", - org.apache.xalan.xsltc.cmdline;version="2.7.2", - org.apache.xalan.xsltc.cmdline.getopt;version="2.7.2", - org.apache.xalan.xsltc.compiler;version="2.7.2", - org.apache.xalan.xsltc.compiler.util;version="2.7.2", - org.apache.xalan.xsltc.dom;version="2.7.2", - org.apache.xalan.xsltc.runtime;version="2.7.2", - org.apache.xalan.xsltc.runtime.output;version="2.7.2", - org.apache.xalan.xsltc.trax;version="2.7.2", - org.apache.xalan.xsltc.util;version="2.7.2", - org.apache.xml.dtm;version="2.7.2", - org.apache.xml.dtm.ref;version="2.7.2", - org.apache.xml.dtm.ref.dom2dtm;version="2.7.2", - org.apache.xml.dtm.ref.sax2dtm;version="2.7.2", - org.apache.xml.res;version="2.7.2", - org.apache.xml.utils;version="2.7.2", - org.apache.xml.utils.res;version="2.7.2", - org.apache.xpath;version="2.7.2", - org.apache.xpath.axes;version="2.7.2", - org.apache.xpath.compiler;version="2.7.2", - org.apache.xpath.domapi;version="2.7.2", - org.apache.xpath.functions;version="2.7.2", - org.apache.xpath.jaxp;version="2.7.2", - org.apache.xpath.objects;version="2.7.2", - org.apache.xpath.operations;version="2.7.2", - org.apache.xpath.patterns;version="2.7.2", - org.apache.xpath.res;version="2.7.2" +Export-Package: org.apache.regexp;version="2.7.3", + org.apache.xalan;version="2.7.3", + org.apache.xalan.client;version="2.7.3", + org.apache.xalan.extensions;version="2.7.3", + org.apache.xalan.lib;version="2.7.3", + org.apache.xalan.lib.sql;version="2.7.3", + org.apache.xalan.processor;version="2.7.3", + org.apache.xalan.res;version="2.7.3", + org.apache.xalan.serialize;version="2.7.3", + org.apache.xalan.templates;version="2.7.3", + org.apache.xalan.trace;version="2.7.3", + org.apache.xalan.transformer;version="2.7.3", + org.apache.xalan.xslt;version="2.7.3", + org.apache.xalan.xsltc;version="2.7.3", + org.apache.xalan.xsltc.cmdline;version="2.7.3", + org.apache.xalan.xsltc.cmdline.getopt;version="2.7.3", + org.apache.xalan.xsltc.compiler;version="2.7.3", + org.apache.xalan.xsltc.compiler.util;version="2.7.3", + org.apache.xalan.xsltc.dom;version="2.7.3", + org.apache.xalan.xsltc.runtime;version="2.7.3", + org.apache.xalan.xsltc.runtime.output;version="2.7.3", + org.apache.xalan.xsltc.trax;version="2.7.3", + org.apache.xalan.xsltc.util;version="2.7.3", + org.apache.xml.dtm;version="2.7.3", + org.apache.xml.dtm.ref;version="2.7.3", + org.apache.xml.dtm.ref.dom2dtm;version="2.7.3", + org.apache.xml.dtm.ref.sax2dtm;version="2.7.3", + org.apache.xml.res;version="2.7.3", + org.apache.xml.utils;version="2.7.3", + org.apache.xml.utils.res;version="2.7.3", + org.apache.xpath;version="2.7.3", + org.apache.xpath.axes;version="2.7.3", + org.apache.xpath.compiler;version="2.7.3", + org.apache.xpath.domapi;version="2.7.3", + org.apache.xpath.functions;version="2.7.3", + org.apache.xpath.jaxp;version="2.7.3", + org.apache.xpath.objects;version="2.7.3", + org.apache.xpath.operations;version="2.7.3", + org.apache.xpath.patterns;version="2.7.3", + org.apache.xpath.res;version="2.7.3" Require-Bundle: system.bundle, org.apache.xerces Eclipse-BuddyPolicy: registered @@ -53,21 +53,21 @@ Specification-Vendor: Sun Microsystems Inc. Specification-Version: 1.3 Implementation-Title: org.apache.xalan -Implementation-Version: 2.7.2 +Implementation-Version: 2.7.3 Implementation-Vendor: Apache Software Foundation Implementation-URL: http://xml.apache.org/xalan-j/dist/ Name: org/apache/xml/ Comment: DTM implementation and utilities Implementation-Title: org.apache.xml -Implementation-Version: 2.7.2 +Implementation-Version: 2.7.3 Implementation-Vendor: Apache Software Foundation Implementation-URL: http://xml.apache.org/xalan-j/dist/ Name: org/apache/xpath/ Comment: XPath engine Implementation-Title: org.apache.xpath -Implementation-Version: 2.7.2 +Implementation-Version: 2.7.3 Implementation-Vendor: Apache Software Foundation Implementation-URL: http://xml.apache.org/xalan-j/dist/ ++++++ xalan-j2-manifest.patch ++++++ --- /var/tmp/diff_new_pack.CmFrXw/_old 2023-09-01 14:18:58.731735241 +0200 +++ /var/tmp/diff_new_pack.CmFrXw/_new 2023-09-01 14:18:58.735735384 +0200 @@ -1,6 +1,6 @@ -diff -urN xalan-j_2_7_2.old/src/MANIFEST.MF xalan-j_2_7_2/src/MANIFEST.MF ---- xalan-j_2_7_2.old/src/MANIFEST.MF 2014-06-23 09:21:30.815410307 +0200 -+++ xalan-j_2_7_2/src/MANIFEST.MF 2014-06-23 09:42:52.044528782 +0200 +diff -urEbwB xalan-j_2_7_3.orig/src/MANIFEST.MF xalan-j_2_7_3/src/MANIFEST.MF +--- xalan-j_2_7_3.orig/src/MANIFEST.MF 2023-08-30 18:36:44.211105060 +0200 ++++ xalan-j_2_7_3/src/MANIFEST.MF 2023-08-30 18:39:12.542098631 +0200 @@ -1,7 +1,6 @@ Manifest-Version: 1.0 Created-By: @java.version@ (@java.vendor@) @@ -11,7 +11,7 @@ Name: org/apache/xalan/ @@ -38,33 +37,3 @@ Implementation-Vendor: Apache Software Foundation - Implementation-URL: http://xml.apache.org/xalan-j/ + Implementation-URL: https://xalan.apache.org/xalan-j/ -Name: java_cup/runtime/ -Comment: Runtime component of JCup @@ -24,14 +24,14 @@ -Implementation-URL: http://www.cs.princeton.edu/~appel/modern/java/CUP/ - -Name: org/apache/bcel/ --Comment: Byte Code Engineering Library --Specification-Title: Byte Code Engineering Library --Specification-Vendor: Markus Dahm --Specification-Version: 5.0 rc1 +-Comment: Apache Commons Byte Code Engineering Library +-Specification-Title: Apache Commons BCEL +-Specification-Vendor: Apache Software Foundation +-Specification-Version: 6.7.0 -Implementation-Title: org.apache.bcel -Implementation-Version: @impl.version@ -Implementation-Vendor: Apache Software Foundation --Implementation-URL: http://jakarta.apache.org/bcel +-Implementation-URL: https://commons.apache.org/proper/commons-bcel - -Name: org/apache/regexp/ -Comment: Java Regular Expression package @@ -43,9 +43,9 @@ -Implementation-Vendor: Apache Software Foundation -Implementation-URL: http://jakarta.apache.org/regexp - -diff -urN xalan-j_2_7_2.old/src/MANIFEST.SERIALIZER xalan-j_2_7_2/src/MANIFEST.SERIALIZER ---- xalan-j_2_7_2.old/src/MANIFEST.SERIALIZER 2014-06-23 09:21:30.815410307 +0200 -+++ xalan-j_2_7_2/src/MANIFEST.SERIALIZER 2014-06-23 09:43:13.107530730 +0200 +diff -urEbwB xalan-j_2_7_3.orig/src/MANIFEST.SERIALIZER xalan-j_2_7_3/src/MANIFEST.SERIALIZER +--- xalan-j_2_7_3.orig/src/MANIFEST.SERIALIZER 2023-08-30 18:36:44.211105060 +0200 ++++ xalan-j_2_7_3/src/MANIFEST.SERIALIZER 2023-08-30 18:38:46.375256700 +0200 @@ -1,7 +1,6 @@ Manifest-Version: 1.0 Created-By: @java.version@ (@java.vendor@) @@ -54,9 +54,9 @@ Name: org/apache/xml/serializer/ Comment: Serializer to write out XML, HTML etc. as a stream of characters from an input DOM or from input SAX events. -diff -urN xalan-j_2_7_2.old/src/manifest.xalan-interpretive xalan-j_2_7_2/src/manifest.xalan-interpretive ---- xalan-j_2_7_2.old/src/manifest.xalan-interpretive 2014-06-23 09:21:30.838410309 +0200 -+++ xalan-j_2_7_2/src/manifest.xalan-interpretive 2014-06-23 09:43:28.403532145 +0200 +diff -urEbwB xalan-j_2_7_3.orig/src/manifest.xalan-interpretive xalan-j_2_7_3/src/manifest.xalan-interpretive +--- xalan-j_2_7_3.orig/src/manifest.xalan-interpretive 2023-08-30 18:36:44.211105060 +0200 ++++ xalan-j_2_7_3/src/manifest.xalan-interpretive 2023-08-30 18:38:46.375256700 +0200 @@ -1,7 +1,6 @@ Manifest-Version: 1.0 Created-By: @java.version@ (@java.vendor@) @@ -65,9 +65,9 @@ Name: org/apache/xalan/ Comment: Main Xalan engine implementing TrAX/JAXP -diff -urN xalan-j_2_7_2.old/src/manifest.xsltc xalan-j_2_7_2/src/manifest.xsltc ---- xalan-j_2_7_2.old/src/manifest.xsltc 2014-06-23 09:21:30.816410307 +0200 -+++ xalan-j_2_7_2/src/manifest.xsltc 2014-06-23 09:43:46.395533808 +0200 +diff -urEbwB xalan-j_2_7_3.orig/src/manifest.xsltc xalan-j_2_7_3/src/manifest.xsltc +--- xalan-j_2_7_3.orig/src/manifest.xsltc 2023-08-30 18:36:44.211105060 +0200 ++++ xalan-j_2_7_3/src/manifest.xsltc 2023-08-30 18:39:52.469032707 +0200 @@ -1,6 +1,5 @@ Manifest-Version: 1.0 Created-By: @java.version@ (@java.vendor@) @@ -93,7 +93,7 @@ -Comment: Byte Code Engineering Library -Specification-Title: Byte Code Engineering Library -Specification-Vendor: Markus Dahm --Specification-Version: 5.0 rc1 +-Specification-Version: 6.6.0 -Implementation-Title: org.apache.bcel -Implementation-Version: @impl.version@ -Implementation-Vendor: Apache Software Foundation ++++++ xalan-j2-serializer-MANIFEST.MF ++++++ --- /var/tmp/diff_new_pack.CmFrXw/_old 2023-09-01 14:18:58.759736241 +0200 +++ /var/tmp/diff_new_pack.CmFrXw/_new 2023-09-01 14:18:58.763736383 +0200 @@ -4,7 +4,7 @@ Bundle-ManifestVersion: 2 Bundle-Name: %Bundle-Name.0 Bundle-Localization: plugin -Bundle-Version: 2.7.2 +Bundle-Version: 2.7.3 Bundle-Vendor: %Bundle-Vendor.0 Export-Package: org.apache.xml.serializer,org.apache.xml.serializer.do m3 ++++++ xalan-j_2_7_2-src.tar.gz -> xalan-j_2_7_3-src.tar.gz ++++++ /work/SRC/openSUSE:Factory/xalan-j2/xalan-j_2_7_2-src.tar.gz /work/SRC/openSUSE:Factory/.xalan-j2.new.1766/xalan-j_2_7_3-src.tar.gz differ: char 13, line 1 ++++++ xsltc-2.7.2.pom -> xsltc-2.7.3.pom ++++++ --- /work/SRC/openSUSE:Factory/xalan-j2/xsltc-2.7.2.pom 2018-12-07 14:31:29.387362215 +0100 +++ /work/SRC/openSUSE:Factory/.xalan-j2.new.1766/xsltc-2.7.3.pom 2023-09-01 14:18:56.599659145 +0200 @@ -2,12 +2,12 @@ <modelVersion>4.0.0</modelVersion> <groupId>xalan</groupId> <artifactId>xsltc</artifactId> - <version>2.7.2</version> + <version>2.7.3</version> <dependencies> <dependency> <groupId>xalan</groupId> <artifactId>xalan</artifactId> - <version>2.7.2</version> + <version>2.7.3</version> </dependency> </dependencies> </project>

1 0

commit python-tqdm for openSUSE:Factory
by Source-Sync 01 Sep '23

01 Sep '23

Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-tqdm for openSUSE:Factory checked in at 2023-09-01 14:18:46 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-tqdm (Old) and /work/SRC/openSUSE:Factory/.python-tqdm.new.1766 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "python-tqdm" Fri Sep 1 14:18:46 2023 rev:56 rq:1108219 version:4.66.1 Changes: -------- --- /work/SRC/openSUSE:Factory/python-tqdm/python-tqdm.changes 2023-08-13 19:17:41.756006115 +0200 +++ /work/SRC/openSUSE:Factory/.python-tqdm.new.1766/python-tqdm.changes 2023-09-01 14:18:54.843596469 +0200 @@ -1,0 +2,5 @@ +Wed Aug 30 13:36:56 UTC 2023 - ecsos <ecsos(a)opensuse.org> + +- %{?sle15_python_module_pythons} must at beginning of spec to work. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-tqdm.spec ++++++ --- /var/tmp/diff_new_pack.sTlixR/_old 2023-09-01 14:18:55.995637587 +0200 +++ /var/tmp/diff_new_pack.sTlixR/_new 2023-09-01 14:18:55.999637730 +0200 @@ -26,6 +26,7 @@ %define pkg_suffix %{nil} %bcond_with test %endif +%{?sle15_python_module_pythons} Name: python-tqdm%{pkg_suffix} Version: 4.66.1 Release: 0 @@ -45,7 +46,6 @@ Requires(postun):update-alternatives Enhances: python-ipython BuildArch: noarch -%{?sle15_python_module_pythons} %if %{with test} # SECTION test requirements BuildRequires: %{python_module numpy if (python-base without python36-base)}

1 0