Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package OpenIPMI for openSUSE:Factory checked in at 2024-09-29 18:09:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/OpenIPMI (Old) and /work/SRC/openSUSE:Factory/.OpenIPMI.new.29891 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "OpenIPMI" Sun Sep 29 18:09:08 2024 rev:57 rq:1203915 version:2.0.36.4+git.c114912 Changes: -------- --- /work/SRC/openSUSE:Factory/OpenIPMI/OpenIPMI.changes 2024-08-13 13:22:22.904090758 +0200 +++ /work/SRC/openSUSE:Factory/.OpenIPMI.new.29891/OpenIPMI.changes 2024-09-29 18:09:13.722137532 +0200 @@ -1,0 +2,82 @@ +Wed Sep 25 10:40:09 UTC 2024 - tr...@suse.de + +- Fix bsc#1229910 CVE-2024-42934 by below 2 patches: + * lanserv: Fix an issue with authorization range checking + * lanserv: Check some bounds on incoming messages +- Remove mainlined patches: +D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch +D OpenIPMI-c99.patch +- Update to version 2.0.36.4+git.c114912: + * strings: Fix an incorrect string in sensor type 0x1f + * lanserv: Check that message and negotiated authtypes are the same + * Update some strings for newer IPMI standards + * Fix error report in startup_set_sel_time + * Move to version 2.0.36 + * lanserv: Fix an issue with authorization range checking + * lanserv: Fix an issue logging an error on a message + * include: Add a doc for the lifetime of ipmi_entity_get_fru() + * Move to version 2.0.35 + * lanserv: Check some bounds on incoming messages + * Create SECURITY.md + * swig: Cast some values to get proper passing of values + * sample: Fix an snprintf overflow issue + * ui: Fix an snprintf overflow issue + * Add github actions + * cmdlang: Remove yet more dead code + * swig: Remove a double free + * ui: More print issues + * sensor: Remove more dead code + * swig: Fix more resource leaks + * Finish up error updates + * ui: Fix a ton of formatting errors + * cmdlang: Remove some dead code + * cmdlang: Remove some dead code + * cmdlang: Remove an unneeded if + * cmdlang: Remove an unnecessary loop + * cmdlang: Remove some dead code + * lanserv: Fix an invalid overlapping copy + * lanserv: Add a missing break for watchdog handling + * lanserv: Add a check for the picmg address controller not found + * lanserv: Add a missing NULL pointer check + * lanserv: Fix an error report + * lanserv: Fix an unsigned compare issue + * lanserv: Remove some dead code + * lanserv: Fix reading persistance data + * domain: Fix some various bugs + * entity: Fix a ordering check issue + * fru: Remove unnecessary check + * smi: Remove some dead code + * utils: Fix address comparison + * fru: Fix record with possible NULL data + * mc: Fix sel re-fetch + * atca: Fix some various issues + * oem_motorola_mxp: Fix some minor issues + * control,sensor: Fix some string handling + * sel: Add a missing NULL check + * sample: Remove some dead code + * sensor: Fix some wrong sizes + * tcl: Fix an infinite loop + * swig: Fix a wrong malloc size + * lanserv: Fix a memory leak in sdrcomp + * unix: Add missing unlock on an error handler + * unix: Cast a variable to int from time() + * swig: Fix issues with memory handling + * Don't run perl tests in parallel + * C type errors in the SWIG-generated Perl bindings + * Move to version 2.0.34 + * swig:perl: Fix the tests + * swig:perl: Add a way to print the test environment + * lanserv: Allow zero to be specified for the port + * lanserv: Return an error if sensor data is requested before ready + * unix: Handle EAGAIN along with EINTR + * ipmi_sim:sensor: Add the low 8 bits of discrete value to sensor reading + * fix coredump when use ipmi_ui + * Fix the name of global event support for sensors + * Update configure.ac + * Move to version 2.0.33 + * exec: fix race in symlink install + * Make lan.conf and simulator startup file 600 permissions + * Update the python m4 file + * Avoid searching host library path + +------------------------------------------------------------------- Old: ---- OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch OpenIPMI-c99.patch openipmi-2.0.32.3+git.05faa36e.obscpio New: ---- openipmi-2.0.36.4+git.c114912.obscpio BETA DEBUG BEGIN: Old:- Remove mainlined patches: D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch D OpenIPMI-c99.patch Old:D OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch D OpenIPMI-c99.patch - Update to version 2.0.36.4+git.c114912: BETA DEBUG END: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ OpenIPMI.spec ++++++ --- /var/tmp/diff_new_pack.kL1Sai/_old 2024-09-29 18:09:15.174197523 +0200 +++ /var/tmp/diff_new_pack.kL1Sai/_new 2024-09-29 18:09:15.174197523 +0200 @@ -1,7 +1,7 @@ # # spec file for package OpenIPMI # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,11 +16,6 @@ # -#Compat macro for new _fillupdir macro introduced in Nov 2017 -%if ! %{defined _fillupdir} - %define _fillupdir %{_localstatedir}/adm/fillup-templates -%endif - # IPMI.pdf build for devel package # It is not worth to build, but as I got it running I add it # how it worked for me in Tumbleweed, Leap 42.2 and 42.3 and SLE 15 @@ -29,9 +24,12 @@ %if 0%{?suse_version} < 1500 %define doc_build 0 %endif - +#Compat macro for new _fillupdir macro introduced in Nov 2017 +%if ! %{defined _fillupdir} + %define _fillupdir %{_localstatedir}/adm/fillup-templates +%endif Name: OpenIPMI -Version: 2.0.32.3+git.05faa36e +Version: 2.0.36.4+git.c114912 Release: 0 Summary: Service processor access via IPMI License: LGPL-2.1-or-later @@ -49,13 +47,6 @@ Patch3: OpenIMPI-add-libncurses.patch Patch4: fix_dia_version_detection.patch Patch5: use_python3_shebang -# PATCH-FIX-UPSTREAM OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch -# replace autoconf script serial18 addtion by serial 25 capable of finding python3.10 -# retains upstream change https://sourceforge.net/p/openipmi/code/ci/53d2b36b58383d155e2410cae3b30975a92f417d -Patch6: OpenIPMI-autoconf-m4-ax-python-devel-serial25.patch -# Backport of upstream https://sourceforge.net/p/openipmi/patches/38/ to fix boo#1225871 -Patch7: OpenIPMI-c99.patch - BuildRequires: autoconf-archive BuildRequires: gd-devel BuildRequires: gdbm-devel @@ -79,6 +70,12 @@ BuildRequires: systemd-rpm-macros BuildRequires: tcl-devel BuildRequires: tix +Requires(post): %fillup_prereq +Provides: ipmi_ui +Provides: ipmicmd +Provides: ipmilan +%{?systemd_ordering} +%{?perl_requires} %if 0%{?doc_build} BuildRequires: dia BuildRequires: ghostscript @@ -89,13 +86,6 @@ BuildRequires: texlive-moreverb %endif -Requires(post): %fillup_prereq -Provides: ipmi_ui -Provides: ipmicmd -Provides: ipmilan -%{?systemd_ordering} -%{?perl_requires} - %description OpenIPMI allows access to IPMI information on a server and to abstract it. @@ -137,8 +127,8 @@ Requires: OpenIPMI Requires: python3-tk Requires: tix -Provides: openipmigui Conflicts: OpenIPMI-python +Provides: openipmigui %description python3 The Python parts provide an OpenIPMI Python library and a GUI, openipmigui, ++++++ _service ++++++ --- /var/tmp/diff_new_pack.kL1Sai/_old 2024-09-29 18:09:15.242200333 +0200 +++ /var/tmp/diff_new_pack.kL1Sai/_new 2024-09-29 18:09:15.246200498 +0200 @@ -2,6 +2,7 @@ <service name="obs_scm" mode="localonly"> <param name="url">https://github.com/cminyard/openipmi.git</param> <param name="scm">git</param> +<!-- <param name="basename">OpenIPMI</param> --> <param name="versionrewrite-pattern">v(.*)</param> <param name="versionformat">@PARENT_TAG@.@TAG_OFFSET@+git.%h</param> <param name="changesgenerate">enable</param> ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.kL1Sai/_old 2024-09-29 18:09:15.262201159 +0200 +++ /var/tmp/diff_new_pack.kL1Sai/_new 2024-09-29 18:09:15.266201325 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/cminyard/openipmi.git</param> - <param name="changesrevision">05faa36e93eaf7e150bd43d7935e755b6e8ca617</param></service></servicedata> + <param name="changesrevision">c1149129b5d478032cc7ea91a47a938d98792bce</param></service></servicedata> (No newline at EOF) ++++++ openipmi-2.0.32.3+git.05faa36e.obscpio -> openipmi-2.0.36.4+git.c114912.obscpio ++++++ /work/SRC/openSUSE:Factory/OpenIPMI/openipmi-2.0.32.3+git.05faa36e.obscpio /work/SRC/openSUSE:Factory/.OpenIPMI.new.29891/openipmi-2.0.36.4+git.c114912.obscpio differ: char 19, line 1 ++++++ openipmi.obsinfo ++++++ --- /var/tmp/diff_new_pack.kL1Sai/_old 2024-09-29 18:09:15.334204134 +0200 +++ /var/tmp/diff_new_pack.kL1Sai/_new 2024-09-29 18:09:15.338204299 +0200 @@ -1,5 +1,5 @@ name: openipmi -version: 2.0.32.3+git.05faa36e -mtime: 1649625713 -commit: 05faa36e93eaf7e150bd43d7935e755b6e8ca617 +version: 2.0.36.4+git.c114912 +mtime: 1727253048 +commit: c1149129b5d478032cc7ea91a47a938d98792bce