commit shim for openSUSE:Factory
Hello community, here is the log from the commit of package shim for openSUSE:Factory checked in at 2014-04-21 11:05:08 Comparing /work/SRC/openSUSE:Factory/shim (Old) and /work/SRC/openSUSE:Factory/.shim.new (New) Package is shim Changes: --- /work/SRC/openSUSE:Factory/shim/shim.changes2014-04-20 11:35:07.0 +0200 +++ /work/SRC/openSUSE:Factory/.shim.new/shim.changes 2014-04-21 11:05:28.0 +0200 @@ -2,110 +1,0 @@ -Thu Apr 10 08:20:20 UTC 2014 - g...@suse.com - -- Replace shim-mokmanager-support-sha1.patch with - shim-mokmanager-support-sha-family.patch to support the SHA - family - -Mon Apr 7 09:32:21 UTC 2014 - g...@suse.com - -- Add shim-mokmanager-support-sha1.patch to support SHA1 hashes in - MOK - -Mon Mar 31 11:57:13 UTC 2014 - mch...@suse.com - -- snapper rollback support (fate#317062) - - refresh shim-install - -Thu Mar 13 02:32:15 UTC 2014 - g...@suse.com - -- Insert the right signature (bnc#867974) - -Mon Mar 10 07:56:44 UTC 2014 - g...@suse.com - -- Add shim-fix-uninitialized-variable.patch to fix the use of - uninitialzed variables in lib - -Fri Mar 7 09:09:12 UTC 2014 - g...@suse.com - -- Add shim-mokmanager-delete-bs-var-right.patch to delete the BS+NV - variables the right way -- Update shim-opensuse-cert-prompt.patch to delete openSUSE_Verify - correctly - -Thu Mar 6 07:37:57 UTC 2014 - g...@suse.com - -- Add shim-fallback-avoid-duplicate-bootorder.patch to fix the - duplicate entries in BootOrder -- Add shim-allow-fallback-use-system-loadimage.patch to handle the - shim protocol properly to keep only one protocol entity -- Refresh shim-opensuse-cert-prompt.patch - -Thu Mar 6 03:53:49 UTC 2014 - mch...@suse.com - -- shim-install: fix the $prefix to use grub2-mkrelpath for paths - on btrfs subvolume (bnc#866690). - -Tue Mar 4 04:19:05 UTC 2014 - g...@suse.com - -- FATE#315002: Update shim-install to install shim.efi as the EFI - default bootloader when none exists in \EFI\boot. - -Thu Feb 27 09:46:49 UTC 2014 - fcro...@suse.com - -- Update signature-sles.asc: shim signed by UEFI signing service, - based on code from Thu Feb 20 11:57:01 UTC 2014 - -Fri Feb 21 08:45:46 UTC 2014 - g...@suse.com - -- Add shim-opensuse-cert-prompt.patch to show the prompt to ask - whether the user trusts the openSUSE certificate or not - -Thu Feb 20 11:57:01 UTC 2014 - lnus...@suse.de - -- allow package to carry multiple signatures -- check correct certificate is embedded - -Thu Feb 20 10:06:47 UTC 2014 - lnus...@suse.de - -- always clean up generated files that embed certificates - (shim_cert.h shim.cer shim.crt) to make sure next build loop - rebuilds them properly - -Mon Feb 17 09:58:56 UTC 2014 - g...@suse.com - -- Add shim-bnc863205-mokmanager-fix-hash-delete.patch to fix the - hash deletion operation to avoid ruining the whole list - (bnc#863205) - -Tue Feb 11 06:30:02 UTC 2014 - g...@suse.com - -- Update shim-mokx-support.patch to support the resetting of MOK - blacklist -- Add shim-get-variable-check.patch to fix the variable checking - in get_variable_attr -- Add shim-improve-fallback-entries-creation.patch to improve the - boot entry pathes and avoid generating the boot entries that - are already there -- Update SUSE certificate -- Update attach_signature.sh, show_hash.sh, strip_signature.sh, - extract_signature.sh and show_signatures.sh to remove the - creation of the temporary nss database -- Add shim-only-os-name.patch: remove the kernel version of the - build server -- Match the the prefix of the project name properly by escaping the - percent sign. - Old: shim-allow-fallback-use-system-loadimage.patch shim-bnc863205-mokmanager-fix-hash-delete.patch shim-fallback-avoid-duplicate-bootorder.patch shim-fallback-improve-entries-creation.patch
commit filesystem for openSUSE:Factory
Hello community, here is the log from the commit of package filesystem for openSUSE:Factory checked in at 2014-04-22 07:35:20 Comparing /work/SRC/openSUSE:Factory/filesystem (Old) and /work/SRC/openSUSE:Factory/.filesystem.new (New) Package is filesystem Changes: --- /work/SRC/openSUSE:Factory/filesystem/filesystem.changes2014-01-09 07:13:17.0 +0100 +++ /work/SRC/openSUSE:Factory/.filesystem.new/filesystem.changes 2014-04-22 07:35:23.0 +0200 @@ -1,0 +2,39 @@ +Fri Apr 11 14:02:07 CEST 2014 - r...@suse.de + +- change /sys to mode 0555 (bnc#871640) + +--- +Wed Mar 12 10:19:17 CET 2014 - r...@suse.de + +- make /var/lock a symlink to /run/lock (bnc#867873) + +--- +Fri Mar 7 11:11:05 CET 2014 - r...@suse.de + +- use lazy umount + +--- +Thu Mar 6 01:03:53 CET 2014 - r...@suse.de + +- use os.execute(umount ...) instead of posix.umount(...) + bnc#866964 + +--- +Mon Mar 3 11:48:31 CET 2014 - r...@suse.de + +- change pre to pretrans for directory/symlink conversion + +--- +Fri Feb 28 13:56:47 CET 2014 - r...@suse.de + +- drop /var/lib/pam_devperm (bnc#866234) + +--- +Thu Feb 27 18:48:24 CET 2014 - r...@suse.de + +- replace /var/run by symlink to /run +- try to handle case where /var/run is a bind-mount +- extend lua script in preinstall to handle this transition +- bnc#865893 + +--- Other differences: -- ++ filesystem.spec ++ --- /var/tmp/diff_new_pack.Y1D2s1/_old 2014-04-22 07:35:24.0 +0200 +++ /var/tmp/diff_new_pack.Y1D2s1/_new 2014-04-22 07:35:24.0 +0200 @@ -189,9 +189,26 @@ exit 1 } -%pre -p lua +%pretrans -p lua os.remove (/usr/include/X11) os.remove (/usr/lib/X11) +st = posix.stat(/var/run) +if st and st.type == directory then + sta = posix.stat(/var/run/systemd) + if sta and sta.type == directory then +os.execute(umount -l /var/run) + end + os.rename(/var/run,/var/run.old) + posix.symlink(/run,/var/run) + os.execute(rm -rf /var/run.old) +end +st = posix.stat(/var/lock) +if st and st.type == directory then + os.execute(umount -l /var/lock) + os.rename(/var/lock,/var/lock.old) + posix.symlink(/run/lock,/var/lock) + os.execute(rm -rf /var/lock.old) +end %files -f filesystem.list ++ directory.list ++ --- /var/tmp/diff_new_pack.Y1D2s1/_old 2014-04-22 07:35:24.0 +0200 +++ /var/tmp/diff_new_pack.Y1D2s1/_new 2014-04-22 07:35:24.0 +0200 @@ -68,13 +68,14 @@ 0700 root root /root/.gnupg 0755 root root /root/bin 0755 root root /run +0775 root lock /run/lock 0755 root root /sbin 0755 root root /selinux 0755 root root /srv/ftp 0755 root root /srv/www 0755 root root /srv/www/cgi-bin 0755 root root /srv/www/htdocs -0755 root root /sys +0555 root root /sys 1777 root root /tmp 0755 root root /usr 0755 root root /usr/bin @@ -170,10 +171,7 @@ 0755 root root /var/games 0755 root root /var/lib/misc 0755 nobody root /var/lib/nobody -0700 root root /var/lib/pam_devperm 0755 wwwrun root /var/lib/wwwrun -1775 root lock /var/lock -0755 root root /var/run 0755 root root /var/spool 0755 lp lp /var/spool/lpd 0770 mail mail /var/spool/clientmqueue ++ filesystem.links ++ --- /var/tmp/diff_new_pack.Y1D2s1/_old 2014-04-22 07:35:24.0 +0200 +++ /var/tmp/diff_new_pack.Y1D2s1/_new 2014-04-22 07:35:24.0 +0200 @@ -1,7 +1,12 @@ # links to be created init.d /etc/rc.d ../var/tmp /usr/tmp -../lock/var/spool/locks # Required for FHS 2.1 spool/mail /var/mail +# systemd +../run /var/run +../run/lock /var/lock +# modify +../../run/lock /var/spool/locks + -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit screen for openSUSE:Factory
Hello community, here is the log from the commit of package screen for openSUSE:Factory checked in at 2014-04-22 07:35:21 Comparing /work/SRC/openSUSE:Factory/screen (Old) and /work/SRC/openSUSE:Factory/.screen.new (New) Package is screen Changes: --- /work/SRC/openSUSE:Factory/screen/screen.changes2013-09-14 19:09:11.0 +0200 +++ /work/SRC/openSUSE:Factory/.screen.new/screen.changes 2014-04-22 07:35:24.0 +0200 @@ -1,0 +2,10 @@ +Tue Apr 15 14:27:09 UTC 2014 - a...@suse.com + +- Fix comment. + +--- +Tue Apr 15 10:04:14 UTC 2014 - a...@suse.com + +- Use /run instead of /var/run. + +--- Other differences: -- ++ screen.spec ++ --- /var/tmp/diff_new_pack.P3g8Fo/_old 2014-04-22 07:35:25.0 +0200 +++ /var/tmp/diff_new_pack.P3g8Fo/_new 2014-04-22 07:35:25.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package screen # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -75,7 +75,7 @@ %build CFLAGS=-DMAXWIN=1000 $RPM_OPT_FLAGS %configure --prefix=/usr --infodir=%{_infodir} \ --mandir=%{_mandir} \ - --with-socket-dir='(eff_uid ? /var/run/uscreens : /var/run/screens)' \ + --with-socket-dir='(eff_uid ? /run/uscreens : /run/screens)' \ --with-sys-screenrc=/etc/screenrc \ --with-pty-group=5 \ --enable-use-locale \ @@ -92,10 +92,10 @@ mkdir -p $RPM_BUILD_ROOT/etc mkdir -p $RPM_BUILD_ROOT/usr/lib mkdir -p $RPM_BUILD_ROOT/usr/lib/tmpfiles.d -mkdir -p $RPM_BUILD_ROOT/var/run/screens -chmod 755 $RPM_BUILD_ROOT/var/run/screens -mkdir -p $RPM_BUILD_ROOT/var/run/uscreens -chmod 1777 $RPM_BUILD_ROOT/var/run/uscreens +mkdir -p $RPM_BUILD_ROOT/run/screens +chmod 755 $RPM_BUILD_ROOT/run/screens +mkdir -p $RPM_BUILD_ROOT/run/uscreens +chmod 1777 $RPM_BUILD_ROOT/run/uscreens install -m 644 screenrc $RPM_BUILD_ROOT/etc/screenrc install -m 644 %SOURCE1 $RPM_BUILD_ROOT/usr/lib/tmpfiles.d @@ -108,8 +108,8 @@ /usr/lib/tmpfiles.d/screen.conf /usr/share/screen/utf8encodings # Created via aaa_base or systemd on system boot -%ghost %dir /var/run/screens -%ghost %dir /var/run/uscreens +%ghost %dir /run/screens +%ghost %dir /run/uscreens %doc %{_infodir}/screen.info*.gz %doc %{_mandir}/man1/screen.1.gz @@ -118,8 +118,8 @@ # Create our dirs immediatly, after a manual package install. # After a reboot systemd/aaa_base will take care. -test -d /var/run/screens || mkdir -m 755 /var/run/screens -test -d /var/run/uscreens || mkdir -m 1777 /var/run/uscreens +test -d /run/screens || mkdir -m 755 /run/screens +test -d /run/uscreens || mkdir -m 1777 /run/uscreens %postun %install_info_delete --info-dir=%{_infodir} %{_infodir}/%{name}.info.gz ++ screen.conf ++ --- /var/tmp/diff_new_pack.P3g8Fo/_old 2014-04-22 07:35:25.0 +0200 +++ /var/tmp/diff_new_pack.P3g8Fo/_new 2014-04-22 07:35:25.0 +0200 @@ -1,4 +1,4 @@ -# Screen needs some files in /var/run: -d /var/run/screens 0755 root root - -d /var/run/uscreens 1777 root root - +# Screen needs some files in /run: +d /run/screens 0755 root root - +d /run/uscreens 1777 root root - -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit amarok for openSUSE:Factory
Hello community, here is the log from the commit of package amarok for openSUSE:Factory checked in at 2014-04-22 07:37:46 Comparing /work/SRC/openSUSE:Factory/amarok (Old) and /work/SRC/openSUSE:Factory/.amarok.new (New) Package is amarok Changes: --- /work/SRC/openSUSE:Factory/amarok/amarok.changes2013-10-03 15:42:49.0 +0200 +++ /work/SRC/openSUSE:Factory/.amarok.new/amarok.changes 2014-04-22 07:37:46.0 +0200 @@ -1,0 +2,4 @@ +Fri Mar 7 18:29:32 UTC 2014 - tittiatc...@gmail.com + +- Remove nepomuk-core from the buildrequires +--- Other differences: -- ++ amarok.spec ++ --- /var/tmp/diff_new_pack.IZlsZ2/_old 2014-04-22 07:37:48.0 +0200 +++ /var/tmp/diff_new_pack.IZlsZ2/_new 2014-04-22 07:37:48.0 +0200 @@ -70,7 +70,6 @@ BuildRequires: libqjson-devel BuildRequires: libqt4-devel = 4.8.2 BuildRequires: loudmouth-devel -BuildRequires: nepomuk-core-devel BuildRequires: oxygen-icon-theme BuildRequires: qt4-qtscript BuildRequires: taglib-devel -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit baloo for openSUSE:Factory
Hello community, here is the log from the commit of package baloo for openSUSE:Factory checked in at 2014-04-22 07:37:57 Comparing /work/SRC/openSUSE:Factory/baloo (Old) and /work/SRC/openSUSE:Factory/.baloo.new (New) Package is baloo Changes: --- /work/SRC/openSUSE:Factory/baloo/baloo.changes 2014-04-18 12:37:51.0 +0200 +++ /work/SRC/openSUSE:Factory/.baloo.new/baloo.changes 2014-04-22 07:37:58.0 +0200 @@ -1,0 +2,7 @@ +Sun Apr 20 16:56:53 UTC 2014 - hrvoje.sen...@gmail.com + +- Added 0001-Bug-333566-Quick-filter-in-KMail-4.13-stops-working-.patch: + fixes KMail searches with non-Latin characters, kde#333566; + triggers re-indexing of collections + +--- New: 0001-Bug-333566-Quick-filter-in-KMail-4.13-stops-working-.patch Other differences: -- ++ baloo.spec ++ --- /var/tmp/diff_new_pack.emvatJ/_old 2014-04-22 07:37:59.0 +0200 +++ /var/tmp/diff_new_pack.emvatJ/_new 2014-04-22 07:37:59.0 +0200 @@ -25,6 +25,8 @@ Source0:%{name}-%{version}.tar.xz # PATCH-FIX-OPENSUSE tittiatc...@gmail.com Don't build the filewatch_raiselimit to prevent security issues Patch1: kauth.patch +# PATCH-FIX-UPSTREAM 0001-Bug-333566-Quick-filter-in-KMail-4.13-stops-working-.patch -- fixes KMail searches with non-Latin characters +Patch2: 0001-Bug-333566-Quick-filter-in-KMail-4.13-stops-working-.patch BuildRequires: kfilemetadata-devel = %{version} BuildRequires: libakonadiprotocolinternals-devel BuildRequires: libattr-devel @@ -113,6 +115,7 @@ %prep %setup -q %patch1 -p1 +%patch2 -p1 %build %cmake_kde4 -d build @@ -166,6 +169,13 @@ %{_kde4_servicesdir}/baloo_filesearchstore.desktop %{_kde4_modulesdir}/baloo_filesearchstore.so %{_kde4_iconsdir}/hicolor/*/apps/baloo.png +%if 0 +# These files can only be activated once the security team did a full review +%{_kde4_modulesdir}/libexec/kde_baloo_filewatch_raiselimit +%{_kde4_datadir}/dbus-1/system-services/org.kde.baloo.filewatch.service +%{_kde4_datadir}/polkit-1/actions/org.kde.baloo.filewatch.policy +%{_kde4_sysconfdir}/dbus-1/system.d/org.kde.baloo.filewatch.conf +%endif %files kioslaves %defattr(-,root,root) ++ 0001-Bug-333566-Quick-filter-in-KMail-4.13-stops-working-.patch ++ From f99d93f4df844d4a9ed271bd9e505fdeaa5a20ee Mon Sep 17 00:00:00 2001 From: Montel Laurent mon...@kde.org Date: Sun, 20 Apr 2014 17:17:53 +0200 Subject: [PATCH 1/1] Bug 333566 - Quick filter in KMail 4.13 stops working with non-Latin characters (Cyrillic Russian Unicode) - search empty result FIXED-IN: 4.13.1 BUG: 333566 We need to update database --- src/pim/agent/agent.cpp | 4 ++-- src/pim/agent/akonotesindexer.cpp | 2 +- src/pim/agent/emailindexer.cpp| 4 ++-- src/pim/lib/contactquery.cpp | 27 --- src/pim/lib/emailquery.cpp| 27 --- src/pim/lib/notequery.cpp | 6 -- 6 files changed, 41 insertions(+), 29 deletions(-) diff --git a/src/pim/agent/agent.cpp b/src/pim/agent/agent.cpp index 3cb0a0c..7de454e 100644 --- a/src/pim/agent/agent.cpp +++ b/src/pim/agent/agent.cpp @@ -63,7 +63,7 @@ namespace { } } -#define INDEXING_AGENT_VERSION 3 +#define INDEXING_AGENT_VERSION 4 BalooIndexingAgent::BalooIndexingAgent(const QString id) : AgentBase(id), @@ -144,7 +144,7 @@ qlonglong BalooIndexingAgent::indexedItemsInDatabase(const std::string term, co { Xapian::Database db; try { -db = Xapian::Database(dbPath.toStdString()); +db = Xapian::Database(dbPath.toUtf8().constData()); } catch (const Xapian::DatabaseError e) { kError() Failed to open database dbPath : QString::fromStdString(e.get_msg()); return 0; diff --git a/src/pim/agent/akonotesindexer.cpp b/src/pim/agent/akonotesindexer.cpp index b12d607..93d8de9 100644 --- a/src/pim/agent/akonotesindexer.cpp +++ b/src/pim/agent/akonotesindexer.cpp @@ -28,7 +28,7 @@ AkonotesIndexer::AkonotesIndexer(const QString path) : AbstractIndexer(), m_termGen( 0 ) { -m_db = new Xapian::WritableDatabase(path.toStdString(), Xapian::DB_CREATE_OR_OPEN); +m_db = new Xapian::WritableDatabase(path.toUtf8().constData(), Xapian::DB_CREATE_OR_OPEN); } AkonotesIndexer::~AkonotesIndexer() diff --git a/src/pim/agent/emailindexer.cpp b/src/pim/agent/emailindexer.cpp index 0176c27..14acea6 100644 --- a/src/pim/agent/emailindexer.cpp +++ b/src/pim/agent/emailindexer.cpp @@ -32,8 +32,8 @@ EmailIndexer::EmailIndexer(const QString path, const QString contactDbPath): AbstractIndexer(), m_doc( 0 ), m_termGen( 0 ) { -m_db = new Xapian::WritableDatabase(path.toStdString(),
commit nagios-plugins for openSUSE:Factory
Hello community, here is the log from the commit of package nagios-plugins for openSUSE:Factory checked in at 2014-04-22 07:38:15 Comparing /work/SRC/openSUSE:Factory/nagios-plugins (Old) and /work/SRC/openSUSE:Factory/.nagios-plugins.new (New) Package is nagios-plugins Changes: --- /work/SRC/openSUSE:Factory/nagios-plugins/nagios-plugins.changes 2013-03-14 17:29:40.0 +0100 +++ /work/SRC/openSUSE:Factory/.nagios-plugins.new/nagios-plugins.changes 2014-04-22 07:38:17.0 +0200 @@ -1,0 +2,144 @@ +Sat Apr 12 14:34:01 UTC 2014 - l...@linux-schulserver.de + +- do not package check_game for openSUSE 13.1 as the needed binary + is not in Factory + +--- +Fri Mar 28 11:16:53 UTC 2014 - l...@linux-schulserver.de + +- also recommend/require apparmor-profiles to get tunables/global +- do not package check_apt on 13.1 and beyond as Factory maintainers + do not want a package requiring the binary + +--- +Tue Mar 11 15:21:27 UTC 2014 - l...@linux-schulserver.de + +- remove nagios-plugins-xenvm as this is now provided by + nagios-xen-host package + +--- +Sat Mar 1 23:19:24 UTC 2014 - l...@linux-schulserver.de + +- added new check_ircd, which allows to monitor SSL enabled IRCd + and prints out perfdata + + require IO::Socket::SSL and IO::Socket::INET6 + +--- +Wed Jan 22 09:31:45 UTC 2014 - l...@linux-schulserver.de + +- remove left overs from former bgpstate package +- add dbi-{mysql,pgsql,sqlite3} plugin package(s) +- add nagios-plugins-rpmlintrc for the virtual packages that + require the appropriate library for the dbi check + +--- +Sun Jan 19 01:47:43 UTC 2014 - l...@linux-schulserver.de + +- adapt URL to new upstream page (bnc#859105) + +--- +Sun Dec 22 11:14:55 UTC 2013 - jcnen...@gmail.com + +- Add SNMPv3 context support to check_snmp following an idea of + Lars Mathwig math...@gmx.de + +--- +Wed Nov 27 19:56:08 UTC 2013 - ms...@suse.com + +- Get rid of the old SUSE spelling in READMEs + +--- +Tue Nov 19 11:37:39 UTC 2013 - schneem...@b1-systems.de + +- update to 1.5 + * removed contrib directory + * New check_dbi plugin for checking an (SQL) database using DBI + * Let OpenSSL load its configuration file (see the + OPENSSL_config(3) man page) + * Add performance data to check_apt + * Add performance data to check_procs + * Added -4/-6 options to check_dig + * New check_oracle --connect option to perform real login + * New check_nagios -t option to override the default timeout + * New check_disk -f/--freespace-ignore-reserved option to + ignore space reserved for root + * New check_disk -N/--include-type option to limit the filesystem + types to check + * Allow for building the plugins in parallel + * Add --without-{dbi,ldap,radius} options to ./configure + * Made Verbose output of check_sensors compliant + * New switch -E/--extended-perfdata for check_http to print + additional performance data + * New check_http -d option to specify a string to expect within + the response headers + * New check_http -J/-K options for client certificate + authentication support + * Add support for executing queries to check_pgsql + * Let check_pgsql accept a UNIX socket directory as hostname + * New check_pgsql -o option to specify additional connection parameters + * New check_fping -S option to specify the source IP address + * New check_fping -I option to specify the interface to bind to + * Let check_fping support IPv6 + * New check_procs -k option to ignore kernel threads (on Linux) + * Let check_procs use /proc/PID/exe (if available) instead of + getpid(2), unless -T is specified + * Let check_mysql support SSL + * Let check_mysql add perfromance metrics for all checks + * New check_mysql -f option to specify a client options file + * New check_mysql -g option to specify a client options group + * New check_snmp --offset option to allow for adding/substracting + an offset value to sensor data + * Let check_snmp support an arbitrary number of OIDs + + * Fixes: + + Change the MAIL FROM command generated by check_smtp to be + RFC compliant + + Fix compilation of check_http without SSL support + + Fix check_snmp reversed threshold ranges + (backward-compatibility) + + Fix check_snmp memory violation when using more than 8 OIDs + + Fix check_apt security regular expression + + Fix
commit python-kde4 for openSUSE:Factory
Hello community, here is the log from the commit of package python-kde4 for openSUSE:Factory checked in at 2014-04-22 07:40:14 Comparing /work/SRC/openSUSE:Factory/python-kde4 (Old) and /work/SRC/openSUSE:Factory/.python-kde4.new (New) Package is python-kde4 Changes: --- /work/SRC/openSUSE:Factory/python-kde4/python-kde4.changes 2014-04-18 12:37:02.0 +0200 +++ /work/SRC/openSUSE:Factory/.python-kde4.new/python-kde4.changes 2014-04-22 07:40:15.0 +0200 @@ -1,0 +2,6 @@ +Sat Apr 19 16:34:28 UTC 2014 - hrvoje.sen...@gmail.com + +- Obsolete nepomuk soprano bindings, which are no longer built + with KDE's 4.13 release + +--- python3-kde4.changes: same change Other differences: -- ++ python-kde4.spec ++ --- /var/tmp/diff_new_pack.xIg2p6/_old 2014-04-22 07:40:16.0 +0200 +++ /var/tmp/diff_new_pack.xIg2p6/_new 2014-04-22 07:40:16.0 +0200 @@ -40,6 +40,9 @@ Recommends: %{name}-knewstuff Recommends: %{name}-plasma Recommends: %{name}-phonon +# no more nepomuk soprano with KDE's 4.13 release +Obsoletes: %{name}-nepomuk +Obsoletes: %{name}-soprano BuildRoot: %{_tmppath}/%{name}-%{version}-build %if 0%{?suse_version} 0%{?suse_version} = 1110 %{!?python_sitearch: %global python_sitearch %(python -c from distutils.sysconfig import get_python_lib; print get_python_lib(1))} ++ python3-kde4.spec ++ --- /var/tmp/diff_new_pack.xIg2p6/_old 2014-04-22 07:40:16.0 +0200 +++ /var/tmp/diff_new_pack.xIg2p6/_new 2014-04-22 07:40:16.0 +0200 @@ -40,6 +40,9 @@ Recommends: %{name}-knewstuff Recommends: %{name}-plasma Recommends: %{name}-phonon +# no more nepomuk soprano with KDE's 4.13 release +Obsoletes: %{name}-nepomuk +Obsoletes: %{name}-soprano BuildRoot: %{_tmppath}/%{name}-%{version}-build %requires_python3_sip_api %kde4_runtime_requires -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit rubygem-rake for openSUSE:Factory
Hello community, here is the log from the commit of package rubygem-rake for openSUSE:Factory checked in at 2014-04-22 07:41:12 Comparing /work/SRC/openSUSE:Factory/rubygem-rake (Old) and /work/SRC/openSUSE:Factory/.rubygem-rake.new (New) Package is rubygem-rake Changes: --- /work/SRC/openSUSE:Factory/rubygem-rake/rubygem-rake.changes 2014-04-08 12:49:09.0 +0200 +++ /work/SRC/openSUSE:Factory/.rubygem-rake.new/rubygem-rake.changes 2014-04-22 07:41:14.0 +0200 @@ -1,0 +2,28 @@ +Mon Apr 21 16:55:26 UTC 2014 - co...@suse.com + +- updated to version 10.3.1 + Bug fixes: + + * Really stop reporting an error when cleaning already-deleted files. Pull + request #269 by Randy Coulman + * Fixed infinite loop when cleaning already-deleted files on windows. + + === 10.3 / 2014-04-15 + + Enhancements: + + * Added --build-all option to rake which treats all file prerequisites as + out-of-date. Pull request #254 by Andrew Gilbert. + * Added Rake::NameSpace#scope. Issue #263 by Jon San Miguel. + + Bug fixes: + + * Suppress org.jruby package files in rake error messages for JRuby users. + Issue #213 by Charles Nutter. + * Fixed typo, removed extra h. Pull request #267 by Hsing-Hui Hsu. + * Rake no longer reports an error when cleaning already-deleted files. Pull + request #266 by Randy Coulman. + * Consume stderr while determining CPU count to avoid hang. Issue #268 by + Albert Sun. + +--- Old: rake-10.2.2.gem New: rake-10.3.1.gem Other differences: -- ++ rubygem-rake.spec ++ --- /var/tmp/diff_new_pack.aTj3Qs/_old 2014-04-22 07:41:14.0 +0200 +++ /var/tmp/diff_new_pack.aTj3Qs/_new 2014-04-22 07:41:14.0 +0200 @@ -17,12 +17,12 @@ Name: rubygem-rake -Version:10.2.2 +Version:10.3.1 Release:0 %define mod_name rake %define mod_full_name %{mod_name}-%{version} %define mod_branch -%{version} -%define mod_weight 100202 +%define mod_weight 100301 BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: ruby-macros = 3 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit rubygem-jquery-ui-rails for openSUSE:Factory
Hello community, here is the log from the commit of package rubygem-jquery-ui-rails for openSUSE:Factory checked in at 2014-04-22 07:41:08 Comparing /work/SRC/openSUSE:Factory/rubygem-jquery-ui-rails (Old) and /work/SRC/openSUSE:Factory/.rubygem-jquery-ui-rails.new (New) Package is rubygem-jquery-ui-rails Changes: --- /work/SRC/openSUSE:Factory/rubygem-jquery-ui-rails/rubygem-jquery-ui-rails.changes 2013-12-19 12:37:18.0 +0100 +++ /work/SRC/openSUSE:Factory/.rubygem-jquery-ui-rails.new/rubygem-jquery-ui-rails.changes 2014-04-22 07:41:10.0 +0200 @@ -1,0 +2,12 @@ +Mon Apr 21 17:23:09 UTC 2014 - co...@suse.com + +- updated to version 4.2.1 + * Update to jQuery UI 1.10.4 + +--- +Sat Feb 22 08:10:50 UTC 2014 - co...@suse.com + +- updated to version 4.2.0 + * Bump Rails dependency to `=3.2.16` + +--- Old: jquery-ui-rails-4.1.1.gem New: jquery-ui-rails-4.2.1.gem Other differences: -- ++ rubygem-jquery-ui-rails.spec ++ --- /var/tmp/diff_new_pack.prKrES/_old 2014-04-22 07:41:10.0 +0200 +++ /var/tmp/diff_new_pack.prKrES/_new 2014-04-22 07:41:10.0 +0200 @@ -1,7 +1,7 @@ # # spec file for package rubygem-jquery-ui-rails # -# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,13 +17,13 @@ Name: rubygem-jquery-ui-rails -Version:4.1.1 +Version:4.2.1 Release:0 %define mod_name jquery-ui-rails %define mod_full_name %{mod_name}-%{version} BuildRoot: %{_tmppath}/%{name}-%{version}-build -BuildRequires: ruby-macros = 1 +BuildRequires: ruby-macros = 3 Url:https://github.com/joliss/jquery-ui-rails Source: http://rubygems.org/gems/%{mod_full_name}.gem Summary:jQuery UI packaged for the Rails asset pipeline @@ -53,19 +53,19 @@ %install %gem_install -f mkdir -p %{buildroot}%{_docdir}/%{name} -ln -s %{_libdir}/ruby/gems/%{rb_ver}/gems/%{mod_full_name}/History.md %buildroot/%{_docdir}/%{name}/History.md -ln -s %{_libdir}/ruby/gems/%{rb_ver}/gems/%{mod_full_name}/License.txt %buildroot/%{_docdir}/%{name}/License.txt -ln -s %{_libdir}/ruby/gems/%{rb_ver}/gems/%{mod_full_name}/README.md %buildroot/%{_docdir}/%{name}/README.md +ln -s %{gem_base}/gems/%{mod_full_name}/History.md %buildroot/%{_docdir}/%{name}/History.md +ln -s %{gem_base}/gems/%{mod_full_name}/License.txt %buildroot/%{_docdir}/%{name}/License.txt +ln -s %{gem_base}/gems/%{mod_full_name}/README.md %buildroot/%{_docdir}/%{name}/README.md %files %defattr(-,root,root,-) %{_docdir}/%{name} -%{_libdir}/ruby/gems/%{rb_ver}/cache/%{mod_full_name}.gem -%{_libdir}/ruby/gems/%{rb_ver}/gems/%{mod_full_name}/ -%{_libdir}/ruby/gems/%{rb_ver}/specifications/%{mod_full_name}.gemspec +%{gem_base}/cache/%{mod_full_name}.gem +%{gem_base}/gems/%{mod_full_name}/ +%{gem_base}/specifications/%{mod_full_name}.gemspec %files doc %defattr(-,root,root,-) -%doc %{_libdir}/ruby/gems/%{rb_ver}/doc/%{mod_full_name}/ +%doc %{gem_base}/doc %changelog -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit rubygem-bundler for openSUSE:Factory
Hello community, here is the log from the commit of package rubygem-bundler for openSUSE:Factory checked in at 2014-04-22 07:40:45 Comparing /work/SRC/openSUSE:Factory/rubygem-bundler (Old) and /work/SRC/openSUSE:Factory/.rubygem-bundler.new (New) Package is rubygem-bundler Changes: --- /work/SRC/openSUSE:Factory/rubygem-bundler/rubygem-bundler.changes 2014-04-08 12:48:38.0 +0200 +++ /work/SRC/openSUSE:Factory/.rubygem-bundler.new/rubygem-bundler.changes 2014-04-22 07:40:46.0 +0200 @@ -1,0 +2,16 @@ +Mon Apr 21 17:11:35 UTC 2014 - co...@suse.com + +- updated to version 1.6.2 + Bugfixes: + + - fix an exception when using builtin gems (#2915, #2963, @gnufied) + - cache gems that are built in to the running ruby (#2975, @indirect) + - re-allow deploying cached git gems without git installed (#2968, @aughr) + - keep standalone working even with builtin gems (@indirect) + - don't update vendor/cache in deployment mode (#2921, @indirect) + + Features: + + - warn informatively when `bundle install` is run as root (#2936, @1337807) + +--- Old: bundler-1.6.1.gem New: bundler-1.6.2.gem Other differences: -- ++ rubygem-bundler.spec ++ --- /var/tmp/diff_new_pack.CtYa5e/_old 2014-04-22 07:40:46.0 +0200 +++ /var/tmp/diff_new_pack.CtYa5e/_new 2014-04-22 07:40:46.0 +0200 @@ -17,12 +17,12 @@ Name: rubygem-bundler -Version:1.6.1 +Version:1.6.2 Release:0 %define mod_name bundler %define mod_full_name %{mod_name}-%{version} %define mod_branch -%{version} -%define mod_weight 10601 +%define mod_weight 10602 BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: ruby-macros = 3 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit rubygem-thread_safe for openSUSE:Factory
Hello community, here is the log from the commit of package rubygem-thread_safe for openSUSE:Factory checked in at 2014-04-22 07:41:50 Comparing /work/SRC/openSUSE:Factory/rubygem-thread_safe (Old) and /work/SRC/openSUSE:Factory/.rubygem-thread_safe.new (New) Package is rubygem-thread_safe Changes: --- /work/SRC/openSUSE:Factory/rubygem-thread_safe/rubygem-thread_safe.changes 2014-04-08 12:51:01.0 +0200 +++ /work/SRC/openSUSE:Factory/.rubygem-thread_safe.new/rubygem-thread_safe.changes 2014-04-22 07:41:51.0 +0200 @@ -1,0 +2,5 @@ +Mon Apr 21 17:03:41 UTC 2014 - co...@suse.com + +- updated to version 0.3.3, no changelog + +--- Old: thread_safe-0.3.2.gem New: thread_safe-0.3.3.gem Other differences: -- ++ rubygem-thread_safe.spec ++ --- /var/tmp/diff_new_pack.TyePVw/_old 2014-04-22 07:41:52.0 +0200 +++ /var/tmp/diff_new_pack.TyePVw/_new 2014-04-22 07:41:52.0 +0200 @@ -17,7 +17,7 @@ Name: rubygem-thread_safe -Version:0.3.2 +Version:0.3.3 Release:0 %define mod_name thread_safe %define mod_full_name %{mod_name}-%{version} -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit rubygem-sass for openSUSE:Factory
Hello community, here is the log from the commit of package rubygem-sass for openSUSE:Factory checked in at 2014-04-22 07:41:39 Comparing /work/SRC/openSUSE:Factory/rubygem-sass (Old) and /work/SRC/openSUSE:Factory/.rubygem-sass.new (New) Package is rubygem-sass Changes: --- /work/SRC/openSUSE:Factory/rubygem-sass/rubygem-sass.changes 2014-03-25 13:28:20.0 +0100 +++ /work/SRC/openSUSE:Factory/.rubygem-sass.new/rubygem-sass.changes 2014-04-22 07:41:40.0 +0200 @@ -1,0 +2,6 @@ +Mon Apr 21 17:25:01 UTC 2014 - co...@suse.com + +- updated to version 3.3.5 + see https://github.com/guard/listen/releases + +--- Old: sass-3.3.4.gem New: sass-3.3.5.gem Other differences: -- ++ rubygem-sass.spec ++ --- /var/tmp/diff_new_pack.DXxHKh/_old 2014-04-22 07:41:40.0 +0200 +++ /var/tmp/diff_new_pack.DXxHKh/_new 2014-04-22 07:41:40.0 +0200 @@ -17,12 +17,12 @@ Name: rubygem-sass -Version:3.3.4 +Version:3.3.5 Release:0 %define mod_name sass %define mod_full_name %{mod_name}-%{version} %define mod_branch -%{version} -%define mod_weight 30304 +%define mod_weight 30305 BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: ruby-macros = 3 -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit rubygem-turbolinks for openSUSE:Factory
Hello community, here is the log from the commit of package rubygem-turbolinks for openSUSE:Factory checked in at 2014-04-22 07:42:08 Comparing /work/SRC/openSUSE:Factory/rubygem-turbolinks (Old) and /work/SRC/openSUSE:Factory/.rubygem-turbolinks.new (New) Package is rubygem-turbolinks Changes: --- /work/SRC/openSUSE:Factory/rubygem-turbolinks/rubygem-turbolinks.changes 2014-02-12 22:05:13.0 +0100 +++ /work/SRC/openSUSE:Factory/.rubygem-turbolinks.new/rubygem-turbolinks.changes 2014-04-22 07:42:09.0 +0200 @@ -1,0 +2,5 @@ +Mon Apr 21 17:02:42 UTC 2014 - co...@suse.com + +- updated to version 2.2.2, no changelog + +--- Old: turbolinks-2.2.1.gem New: turbolinks-2.2.2.gem Other differences: -- ++ rubygem-turbolinks.spec ++ --- /var/tmp/diff_new_pack.IzGohm/_old 2014-04-22 07:42:09.0 +0200 +++ /var/tmp/diff_new_pack.IzGohm/_new 2014-04-22 07:42:09.0 +0200 @@ -17,7 +17,7 @@ Name: rubygem-turbolinks -Version:2.2.1 +Version:2.2.2 Release:0 %define mod_name turbolinks %define mod_full_name %{mod_name}-%{version} @@ -61,8 +61,8 @@ %install %gem_install -f mkdir -p %{buildroot}%{_docdir}/%{name} -ln -s %{gem_base}/gems/%{mod_full_name}/README.md %buildroot/%{_docdir}/%{name}/README.md ln -s %{gem_base}/gems/%{mod_full_name}/MIT-LICENSE %buildroot/%{_docdir}/%{name}/MIT-LICENSE +ln -s %{gem_base}/gems/%{mod_full_name}/README.md %buildroot/%{_docdir}/%{name}/README.md %files %defattr(-,root,root,-) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit audit for openSUSE:Factory
Hello community, here is the log from the commit of package audit for openSUSE:Factory checked in at 2014-04-22 07:42:23 Comparing /work/SRC/openSUSE:Factory/audit (Old) and /work/SRC/openSUSE:Factory/.audit.new (New) Package is audit Changes: --- /work/SRC/openSUSE:Factory/audit/audit-secondary.changes2014-03-30 12:09:12.0 +0200 +++ /work/SRC/openSUSE:Factory/.audit.new/audit-secondary.changes 2014-04-22 07:42:24.0 +0200 @@ -1,0 +2,6 @@ +Tue Apr 15 00:52:16 UTC 2014 - to...@suse.com + +- Update to version 2.3.6. See audit.spec (libaudit1) for upstream + changelog + +--- --- /work/SRC/openSUSE:Factory/audit/audit.changes 2014-02-09 13:17:30.0 +0100 +++ /work/SRC/openSUSE:Factory/.audit.new/audit.changes 2014-04-22 07:42:24.0 +0200 @@ -1,0 +2,35 @@ +Tue Apr 15 00:50:50 UTC 2014 - to...@suse.com + +- Update to version 2.3.6 + + Changelog 2.3.6 + - Add an option to auditctl to interpret a0 - a3 of syscall rules when listing + - Improve ARM and AARCH64 support (AKASHI Takahiro) + - Add ausearch --checkpoint feature (Burn Alting) + - Add --arch option to ausearch + - Improve too long config line in audispd, auditd, and auparse (#1071580) + - Fix aulast to accept the new AUDIT_LOGIN record format + - Remove clear_config symbol in auparse + + Changelog 2.3.5 + - In CRYPTO_KEY_USER events, do not interpret the 'fp' field + - Change formatting of rules listing in auditctl to look like audit.rules + - Change auditctl to do all netlink comm and then print rules + - Add a debug option to ausearch to find skipped events + - Parse subject, auid, and ses in LOGIN events (3.14 kernel changed format) + - In auditd, when shifting logs, ignore the num_logs setting (#950158) + - Allow passing a directory as the input file for ausearch/report (LC Bruzenak) + - Interpret syscall fields in SECCOMP events + - Increase a couple buffers to handle longer input + + Changelog 2.3.4 + - Parse path in CONFIG_CHANGE events + - In audisp-remote, fix retry logic for temporary network failures + - In auparse, add get_type_name function + - Add --no-config command option to aureport + - Fix interpretting MCS seliunx contexts in ausearch (#970675) + - In auparse, classify selinux contexts as MAC_LABEL field type + - In ausearch/report parse vm-ctx and img-ctx as selinux labels + - Update translation tables for the 3.14 kernel + +--- Old: audit-2.3.3.tar.gz New: audit-2.3.6.tar.gz Other differences: -- ++ audit-secondary.spec ++ --- /var/tmp/diff_new_pack.ukGe2Z/_old 2014-04-22 07:42:25.0 +0200 +++ /var/tmp/diff_new_pack.ukGe2Z/_new 2014-04-22 07:42:25.0 +0200 @@ -30,7 +30,7 @@ Summary:Secondary packages for audit License:GPL-2.0+ Group: System/Monitoring -Version:2.3.3 +Version:2.3.6 Release:0 Url:http://people.redhat.com/sgrubb/audit/ Source0: http://people.redhat.com/sgrubb/audit/%{_name}-%{version}.tar.gz ++ audit.spec ++ --- /var/tmp/diff_new_pack.ukGe2Z/_old 2014-04-22 07:42:25.0 +0200 +++ /var/tmp/diff_new_pack.ukGe2Z/_new 2014-04-22 07:42:25.0 +0200 @@ -20,7 +20,7 @@ Summary:First part of auditing package License:GPL-2.0+ Group: System/Monitoring -Version:2.3.3 +Version:2.3.6 Release:0 Url:http://people.redhat.com/sgrubb/audit/ Source0:http://people.redhat.com/sgrubb/audit/%{name}-%{version}.tar.gz ++ audit-2.3.3.tar.gz - audit-2.3.6.tar.gz ++ 5275 lines of diff (skipped) -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit patterns-openSUSE for openSUSE:Factory
Hello community, here is the log from the commit of package patterns-openSUSE for openSUSE:Factory checked in at 2014-04-22 07:42:16 Comparing /work/SRC/openSUSE:Factory/patterns-openSUSE (Old) and /work/SRC/openSUSE:Factory/.patterns-openSUSE.new (New) Package is patterns-openSUSE Changes: --- /work/SRC/openSUSE:Factory/patterns-openSUSE/patterns-openSUSE.changes 2014-04-14 21:22:08.0 +0200 +++ /work/SRC/openSUSE:Factory/.patterns-openSUSE.new/patterns-openSUSE.changes 2014-04-22 07:42:18.0 +0200 @@ -1,0 +2,5 @@ +Tue Apr 15 09:32:35 UTC 2014 - co...@suse.com + +- suggests postfix *and* recommend postfix + +--- Other differences: -- ++ patterns-openSUSE.spec ++ --- /var/tmp/diff_new_pack.jNkBrn/_old 2014-04-22 07:42:19.0 +0200 +++ /var/tmp/diff_new_pack.jNkBrn/_new 2014-04-22 07:42:19.0 +0200 @@ -3647,9 +3647,11 @@ Recommends: vacation Suggests: dovecot12 Suggests: mlmmj -#pragma ignore Suggests: sendmail Suggests: bogofilter +# this duplicates the recommend, but works around a problem with the solver +# as everything is weak required, it needs one more hint for postfix +Suggests: postfix %description mail_server Software to set up electronic mail and message services to handle e-mail, mailing, and news lists, including a virus scanner to scan messages at the server level. -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit elfutils for openSUSE:Factory
Hello community, here is the log from the commit of package elfutils for openSUSE:Factory checked in at 2014-04-22 07:42:52 Comparing /work/SRC/openSUSE:Factory/elfutils (Old) and /work/SRC/openSUSE:Factory/.elfutils.new (New) Package is elfutils Changes: --- /work/SRC/openSUSE:Factory/elfutils/elfutils.changes2014-03-25 13:20:41.0 +0100 +++ /work/SRC/openSUSE:Factory/.elfutils.new/elfutils.changes 2014-04-22 07:42:54.0 +0200 @@ -1,0 +2,6 @@ +Tue Apr 15 18:56:25 UTC 2014 - to...@suse.com + +- Fix integer overflow in check_section (CVE-2014-0172, bnc#872785) + Add patch: elfutils-check-for-overflow-before-calling-malloc-to-uncompress-data.patch + +--- New: elfutils-check-for-overflow-before-calling-malloc-to-uncompress-data.patch Other differences: -- ++ elfutils.spec ++ --- /var/tmp/diff_new_pack.buGaEd/_old 2014-04-22 07:42:55.0 +0200 +++ /var/tmp/diff_new_pack.buGaEd/_new 2014-04-22 07:42:55.0 +0200 @@ -34,6 +34,7 @@ Patch6: elfutils-0.137-dwarf-header-check-fix.diff Patch7: elfutils-0.148-dont-crash.diff Patch8: elfutils-revert-portability-scanf.patch +Patch9: elfutils-check-for-overflow-before-calling-malloc-to-uncompress-data.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildRequires: bison BuildRequires: flex @@ -144,6 +145,7 @@ %patch6 -p1 %patch7 -p1 %patch8 -p1 -R +%patch9 -p1 %build # Change DATE/TIME macros to use last change time of elfutils.changes @@ -213,7 +215,6 @@ %defattr(-,root,root) %{_libdir}/libelf.so %{_libdir}/libelf.a -#%{_libdir}/libelf_pic.a %{_includedir}/libelf.h %{_includedir}/gelf.h %{_includedir}/nlist.h ++ elfutils-check-for-overflow-before-calling-malloc-to-uncompress-data.patch ++ From: Mark Wielaard m...@redhat.com Subject: Check for overflow before calling malloc to uncompress data. Date: Wed Apr 9 11:33:23 2014 +0200 Git-commit: 7f1eec317db79627b473c5b149a22a1b20d1f68f References: CVE-2014-0172, bnc#872785 Signed-off-by: Tony Jones to...@suse.de CVE-2014-0172 Check for overflow before calling malloc to uncompress data. https://bugzilla.redhat.com/show_bug.cgi?id=1085663 Reported-by: Florian Weimer fwei...@redhat.com Signed-off-by: Mark Wielaard m...@redhat.com diff --git a/libdw/dwarf_begin_elf.c b/libdw/dwarf_begin_elf.c index 79daeac..34ea373 100644 --- a/libdw/dwarf_begin_elf.c +++ b/libdw/dwarf_begin_elf.c @@ -1,5 +1,5 @@ /* Create descriptor from ELF descriptor for processing file. - Copyright (C) 2002-2011 Red Hat, Inc. + Copyright (C) 2002-2011, 2014 Red Hat, Inc. This file is part of elfutils. Written by Ulrich Drepper drep...@redhat.com, 2002. @@ -282,6 +282,12 @@ check_section (Dwarf *result, GElf_Ehdr *ehdr, Elf_Scn *scn, bool inscngrp) memcpy (size, data-d_buf + 4, sizeof size); size = be64toh (size); + /* Check for unsigned overflow so malloc always allocated + enough memory for both the Elf_Data header and the + uncompressed section data. */ + if (unlikely (sizeof (Elf_Data) + size size)) + break; + Elf_Data *zdata = malloc (sizeof (Elf_Data) + size); if (unlikely (zdata == NULL)) break; -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit glibc for openSUSE:Factory
Hello community, here is the log from the commit of package glibc for openSUSE:Factory checked in at 2014-04-22 07:47:56 Comparing /work/SRC/openSUSE:Factory/glibc (Old) and /work/SRC/openSUSE:Factory/.glibc.new (New) Package is glibc Changes: --- /work/SRC/openSUSE:Factory/glibc/glibc-testsuite.changes2014-04-08 17:05:53.0 +0200 +++ /work/SRC/openSUSE:Factory/.glibc.new/glibc-testsuite.changes 2014-04-22 07:47:57.0 +0200 @@ -1,0 +2,18 @@ +Thu Apr 17 09:13:32 UTC 2014 - sch...@suse.de + +- ibm-long-double-frexpl.patch: Correct IBM long double frexpl + (bnc#872573, BZ #16740, BZ #16619) + +--- +Tue Apr 15 14:23:54 UTC 2014 - sch...@suse.de + +- ibm-long-double-math.patch: Remove faulty assembler implementations of + ceil, nearbyintl, roundl for IBM long double (bnc#873457, BZ #16701, BZ + #16706, BZ #16707) + +--- +Tue Apr 15 11:00:59 UTC 2014 - a...@suse.com + +- Use /run for nscd instead of /var/run. + +--- glibc-utils.changes: same change glibc.changes: same change New: ibm-long-double-frexpl.patch ibm-long-double-math.patch Other differences: -- ++ glibc-testsuite.spec ++ --- /var/tmp/diff_new_pack.Q0Fckt/_old 2014-04-22 07:47:58.0 +0200 +++ /var/tmp/diff_new_pack.Q0Fckt/_new 2014-04-22 07:47:58.0 +0200 @@ -248,6 +248,12 @@ Patch1007: ppc64-copysign.patch # PATCH-FIX-UPSTREAM Correct IBM long double nextafterl (BZ #16739) Patch1008: nextafterl-ibm-ldouble.patch +# PATCH-FIX-UPSTREAM Remove faulty assembler implementations for IBM long double (BZ #16701, BZ #16706, BZ #16707) +Patch1009: ibm-long-double-math.patch +# PATCH-FIX-UPSTREAM Correct IBM long double frexpl (BZ #16740, BZ #16619) +Patch1010: ibm-long-double-frexpl.patch +# PATCH-FIX-UPSTREAM Fix aarch64 setcontext clobbering alternate signal stack (BZ #16629) +Patch1011: aarch64-setcontext.patch ### # Patches awaiting upstream approval @@ -262,8 +268,6 @@ Patch2003: abort-no-flush.patch # PATCH-FIX-UPSTREAM Properly handle forced elision in pthread_mutex_trylock (BZ #16657) Patch2004: pthread-mutex-trylock-elision.patch -# PATCH-FIX-UPSTREAM Fix aarch64 setcontext clobbering alternate signal stack (BZ #16629) -Patch2005: aarch64-setcontext.patch # Non-glibc patches # PATCH-FIX-OPENSUSE Remove debianisms from manpages @@ -473,13 +477,15 @@ %patch1006 -p1 %patch1007 -p1 %patch1008 -p1 +%patch1009 -p1 +%patch1010 -p1 +%patch1011 -p1 %patch2000 -p1 %patch2001 -p1 %patch2002 -p1 %patch2003 -p1 %patch2004 -p1 -%patch2005 -p1 %patch3000 @@ -887,9 +893,9 @@ cp nscd/nscd.conf %{buildroot}/etc mkdir -p %{buildroot}/etc/init.d ln -sf /sbin/service %{buildroot}/usr/sbin/rcnscd -mkdir -p %{buildroot}/var/run/nscd -touch %{buildroot}/var/run/nscd/{passwd,group,hosts,services,netgroup} -touch %{buildroot}/var/run/nscd/{socket,nscd.pid} +mkdir -p %{buildroot}/run/nscd +touch %{buildroot}/run/nscd/{passwd,group,hosts,services,netgroup} +touch %{buildroot}/run/nscd/{socket,nscd.pid} # # Create ld.so.conf @@ -971,7 +977,7 @@ rm -f %{buildroot}/etc/*nscd* %{buildroot}%{_sbindir}/*nscd* rm -rf %{buildroot}/usr/lib/systemd rm -rf %{buildroot}/usr/lib/tmpfiles.d -rm -rf %{buildroot}/var/run/nscd +rm -rf %{buildroot}/run/nscd %endif # i686 %endif # %{normal_build} @@ -1021,7 +1027,7 @@ %pre -n nscd getent group nscd /dev/null || %{_sbindir}/groupadd -r nscd -getent passwd nscd /dev/null || %{_sbindir}/useradd -r -g nscd -c User for nscd -s /sbin/nologin -d /var/run/nscd nscd +getent passwd nscd /dev/null || %{_sbindir}/useradd -r -g nscd -c User for nscd -s /sbin/nologin -d /run/nscd nscd %service_add_pre nscd.service %preun -n nscd @@ -1029,7 +1035,7 @@ %post -n nscd %service_add_post nscd.service -mkdir -p /var/run/nscd +mkdir -p /run/nscd # Previously we had nscd.socket, remove it test -x /usr/bin/systemctl /usr/bin/systemctl stop nscd.socket 2/dev/null || : test -x /usr/bin/systemctl /usr/bin/systemctl disable nscd.socket 2/dev/null || : @@ -1274,14 +1280,14 @@ /usr/lib/systemd/system/nscd.service %dir /usr/lib/tmpfiles.d /usr/lib/tmpfiles.d/nscd.conf -%dir %attr(0755,root,root) %ghost /var/run/nscd -%attr(0644,root,root) %verify(not md5 size mtime) %ghost %config(missingok,noreplace) /var/run/nscd/nscd.pid -%attr(0666,root,root) %verify(not md5 size mtime) %ghost %config(missingok,noreplace) /var/run/nscd/socket -%attr(0600,root,root) %verify(not md5 size mtime) %ghost %config(missingok,noreplace) /var/run/nscd/passwd -%attr(0600,root,root)
commit pam for openSUSE:Factory
Hello community, here is the log from the commit of package pam for openSUSE:Factory checked in at 2014-04-22 07:49:15 Comparing /work/SRC/openSUSE:Factory/pam (Old) and /work/SRC/openSUSE:Factory/.pam.new (New) Package is pam Changes: --- /work/SRC/openSUSE:Factory/pam/pam.changes 2014-04-09 13:15:15.0 +0200 +++ /work/SRC/openSUSE:Factory/.pam.new/pam.changes 2014-04-22 07:49:16.0 +0200 @@ -1,0 +2,6 @@ +Wed Apr 9 16:02:17 UTC 2014 - ckornac...@suse.com + +- Fix CVE-2014-2583: pam_timestamp path injection (bnc#870433) + bug-870433_pam_timestamp-fix-directory-traversal.patch + +--- New: bug-870433_pam_timestamp-fix-directory-traversal.patch Other differences: -- ++ pam.spec ++ --- /var/tmp/diff_new_pack.hhrxbV/_old 2014-04-22 07:49:16.0 +0200 +++ /var/tmp/diff_new_pack.hhrxbV/_new 2014-04-22 07:49:16.0 +0200 @@ -55,6 +55,7 @@ Patch1: Linux-PAM-git-20140127.diff Patch2: pam_loginuid-log_write_errors.diff Patch3: pam_xauth-sigpipe.diff +Patch4: bug-870433_pam_timestamp-fix-directory-traversal.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build %description @@ -102,6 +103,7 @@ %patch1 -p2 %patch2 -p1 %patch3 -p1 +%patch4 -p1 %build export CFLAGS=%optflags -DNDEBUG ++ bug-870433_pam_timestamp-fix-directory-traversal.patch ++ From 9dcead87e6d7f66d34e7a56d11a30daca367dffb Mon Sep 17 00:00:00 2001 From: Dmitry V. Levin l...@altlinux.org Date: Wed, 26 Mar 2014 22:17:23 + Subject: [PATCH] pam_timestamp: fix potential directory traversal issue (ticket #27) pam_timestamp uses values of PAM_RUSER and PAM_TTY as components of the timestamp pathname it creates, so extra care should be taken to avoid potential directory traversal issues. * modules/pam_timestamp/pam_timestamp.c (check_tty): Treat . and .. tty values as invalid. (get_ruser): Treat . and .. ruser values, as well as any ruser value containing '/', as invalid. Fixes CVE-2014-2583. Reported-by: Sebastian Krahmer krah...@suse.de --- modules/pam_timestamp/pam_timestamp.c | 13 - 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/modules/pam_timestamp/pam_timestamp.c b/modules/pam_timestamp/pam_timestamp.c index 5193733..b3f08b1 100644 --- a/modules/pam_timestamp/pam_timestamp.c +++ b/modules/pam_timestamp/pam_timestamp.c @@ -158,7 +158,7 @@ check_tty(const char *tty) tty = strrchr(tty, '/') + 1; } /* Make sure the tty wasn't actually a directory (no basename). */ - if (strlen(tty) == 0) { + if (!strlen(tty) || !strcmp(tty, .) || !strcmp(tty, ..)) { return NULL; } return tty; @@ -243,6 +243,17 @@ get_ruser(pam_handle_t *pamh, char *ruserbuf, size_t ruserbuflen) if (pwd != NULL) { ruser = pwd-pw_name; } + } else { + /* +* This ruser is used by format_timestamp_name as a component +* of constructed timestamp pathname, so ., .., and '/' +* are disallowed to avoid potential path traversal issues. +*/ + if (!strcmp(ruser, .) || + !strcmp(ruser, ..) || + strchr(ruser, '/')) { + ruser = NULL; + } } if (ruser == NULL || strlen(ruser) = ruserbuflen) { *ruserbuf = '\0'; -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
commit util-linux for openSUSE:Factory
Hello community, here is the log from the commit of package util-linux for openSUSE:Factory checked in at 2014-04-22 07:49:58 Comparing /work/SRC/openSUSE:Factory/util-linux (Old) and /work/SRC/openSUSE:Factory/.util-linux.new (New) Package is util-linux Changes: --- /work/SRC/openSUSE:Factory/util-linux/util-linux.changes2014-04-06 09:56:40.0 +0200 +++ /work/SRC/openSUSE:Factory/.util-linux.new/util-linux.changes 2014-04-22 07:49:59.0 +0200 @@ -1,0 +2,19 @@ +Thu Apr 17 22:43:31 CEST 2014 - sbra...@suse.cz + +- Enable socket activation needed by systemd service (bnc#872807). + +--- +Fri Apr 11 16:45:03 CEST 2014 - sbra...@suse.cz + +- libblkid: Drop the broken ext2/ext3/ext4 discrimination logic + (util-linux-libblkid-ext-probe.patch, bnc#864703). + +--- +Fri Apr 11 16:27:11 CEST 2014 - h...@suse.de + +- Abort blkid probing on I/O errors (bnc#859062, + blkid-stop-scanning-on-I-O-error.patch, + blkid-convert-superblocks-to-new-calling-convention.patch, + http://www.spinics.net/lists/util-linux-ng/msg08976.html) + +--- New: blkid-convert-superblocks-to-new-calling-convention.patch blkid-stop-scanning-on-I-O-error.patch util-linux-libblkid-ext-probe.patch Other differences: -- ++ util-linux.spec ++ --- /var/tmp/diff_new_pack.ZOW7Jm/_old 2014-04-22 07:50:00.0 +0200 +++ /var/tmp/diff_new_pack.ZOW7Jm/_new 2014-04-22 07:50:00.0 +0200 @@ -124,6 +124,13 @@ Patch23:util-linux-ng-2.19.1-barrier_documentation.patch # PATCH-FEATURE-SLES util-linux-lscpu-improve-hypervisor-detection.patch fate310255 pu...@novell.com -- Improve hypervisor detection. Patch24:util-linux-lscpu-improve-hypervisor-detection.patch +# PATH-FIX-SLES blkid-stop-scanning-on-I-O-error.patch bnc859062 h...@suse.de -- Abort blkid probing on I/O errors +Patch30:blkid-stop-scanning-on-I-O-error.patch +# PATH-FIX-SLES lkid-convert-superblocks-to-new-calling-convention.patch bnc859062 h...@suse.de -- convert blkid probing functions to new calling sequence +Patch31:blkid-convert-superblocks-to-new-calling-convention.patch +# PATH-FIX-UPSTREAM util-linux-libblkid-ext-probe.patch bnc864703 sbra...@suse.cz -- libblkid: Drop the broken ext2/ext3/ext4 discrimination logic. +Patch32:util-linux-libblkid-ext-probe.patch + ## ## klogconsole ## @@ -256,6 +263,9 @@ %patch21 -p1 %patch23 -p1 %patch24 -p1 +%patch30 -p1 +%patch31 -p1 +%patch32 -p1 # # setctsid cp -p %{S:22} %{S:23} . @@ -311,6 +321,7 @@ --enable-new-mount \ --enable-login-utils \ --enable-tunelp \ + --enable-socket-activation \ %if %{with enable_last} --enable-last \ %else ++ blkid-convert-superblocks-to-new-calling-convention.patch ++ 2268 lines (skipped) ++ blkid-stop-scanning-on-I-O-error.patch ++ From 65245d440656a8df4352f9a5b9ec047bf4b6a663 Mon Sep 17 00:00:00 2001 From: Hannes Reinecke h...@suse.de Date: Tue, 21 Jan 2014 09:16:46 +0100 Subject: [PATCH] blkid: stop scanning on I/O error Whenever we fail to read from a device it's pointless to continue with probing; we should be failing immediately. Otherwise the system will continue logging I/O errors. This patch updates the probe functions to return -1 on error and 1 if not found. Signed-off-by: Hannes Reinecke h...@suse.de --- libblkid/src/partitions/partitions.c | 13 + libblkid/src/probe.c | 13 +++-- libblkid/src/superblocks/superblocks.c | 13 ++--- 3 files changed, 30 insertions(+), 9 deletions(-) diff --git a/libblkid/src/partitions/partitions.c b/libblkid/src/partitions/partitions.c index 6c915d9..98baece 100644 --- a/libblkid/src/partitions/partitions.c +++ b/libblkid/src/partitions/partitions.c @@ -540,7 +540,8 @@ static int idinfo_probe(blkid_probe pr, const struct blkid_idinfo *id, if (pr-size = 0 || (id-minsz id-minsz pr-size)) goto nothing; /* the device is too small */ - if (blkid_probe_get_idmag(pr, id, off, mag)) + rc = blkid_probe_get_idmag(pr, id, off, mag); + if (rc != 0) goto nothing; /* final check by probing function */ @@ -548,12 +549,13 @@ static int idinfo_probe(blkid_probe pr, const struct blkid_idinfo *id, DBG(LOWPROBE, blkid_debug( %s: --- call probefunc(), id-name)); rc = id-probefunc(pr, mag); - if (rc == -1) { + if (rc != 0) { /* reset after error */
commit openstack-heat for openSUSE:Factory
Hello community, here is the log from the commit of package openstack-heat for openSUSE:Factory checked in at 2014-04-22 07:52:04 Comparing /work/SRC/openSUSE:Factory/openstack-heat (Old) and /work/SRC/openSUSE:Factory/.openstack-heat.new (New) Package is openstack-heat Changes: --- /work/SRC/openSUSE:Factory/openstack-heat/openstack-heat.changes 2014-04-14 10:54:55.0 +0200 +++ /work/SRC/openSUSE:Factory/.openstack-heat.new/openstack-heat.changes 2014-04-22 07:52:05.0 +0200 @@ -1,0 +2,30 @@ +Thu Apr 17 12:51:48 UTC 2014 - dmuel...@suse.com + +- update to 2014.1: + * no change + +--- +Mon Apr 14 08:57:22 UTC 2014 - dmuel...@suse.com + +- update to 2014.1.rc2: + * Cherry pick oslo-incubator db fixes + * Add handle_update to VolumeAttachment + * Ensure outputs are resolved for adopted stacks + * Pass and use the environment in validate_template + * Cherry pick oslo rpc HA fixes + * Check top-level sections when parsing a template + * Fix timeout for stack actions + * Credentials for native heat os-collect-config polling + * Allow for stack users in _authorize_stack_user + * Fix Jenkins translation jobs + * Add a resource_facade intrinsic function to HOT + * Resolve data from Resource Facade + * Add a default DeletionPolicy for Fn::ResourceFacade + * Always answer empty list if deployments not ready + * Ensure parameter timeout_mins available in update + * Insertion port id in address attribute of server + * Disable check_uptodate.sh check in pep8 + * Updated from global requirements + + +--- Old: heat-2014.1.rc1.tar.gz New: heat-2014.1.tar.gz Other differences: -- ++ openstack-heat-doc.spec ++ --- /var/tmp/diff_new_pack.APTPIy/_old 2014-04-22 07:52:06.0 +0200 +++ /var/tmp/diff_new_pack.APTPIy/_new 2014-04-22 07:52:06.0 +0200 @@ -19,7 +19,7 @@ %define component heat Name: openstack-%{component}-doc -Version:2014.1.rc1 +Version:2014.1 Release:0 Summary:OpenStack Orchestration (Heat) - Documentation License:Apache-2.0 ++ openstack-heat.spec ++ --- /var/tmp/diff_new_pack.APTPIy/_old 2014-04-22 07:52:06.0 +0200 +++ /var/tmp/diff_new_pack.APTPIy/_new 2014-04-22 07:52:06.0 +0200 @@ -21,7 +21,7 @@ %define username %{component} Name: openstack-%{component} -Version:2014.1.rc1 +Version:2014.1 Release:0 Summary:Openstack Orchestration (Heat) License:Apache-2.0 @@ -73,32 +73,32 @@ Group: Development/Languages/Python Requires: python = 2.6.8 Requires: python-Babel = 1.3 -Requires: python-PasteDeploy = 1.5.0 -Requires: python-PyYAML = 3.1.0 +Requires: python-PasteDeploy = 1.5 +Requires: python-PyYAML = 3.1 Requires: python-Routes = 1.12.3 Requires: python-SQLAlchemy = 0.7.8 Requires: python-WebOb = 1.2.3 Requires: python-argparse Requires: python-ceilometerclient = 1.0.6 Requires: python-cinderclient = 1.0.6 -Requires: python-eventlet = 0.13.0 +Requires: python-eventlet = 0.13 Requires: python-greenlet = 0.3.2 Requires: python-heatclient = 0.2.3 Requires: python-httplib2 = 0.7.5 -Requires: python-iso8601 = 0.1.8 -Requires: python-keystoneclient = 0.6.0 +Requires: python-iso8601 = 0.1.9 +Requires: python-keystoneclient = 0.7 Requires: python-kombu = 2.4.8 Requires: python-lockfile = 0.8 Requires: python-lxml = 2.3 Requires: python-netaddr = 0.7.6 Requires: python-neutronclient = 2.3.4 -Requires: python-novaclient = 2.15.0 -Requires: python-oslo.config = 1.2.0 -Requires: python-paramiko = 1.9.0 +Requires: python-novaclient = 2.17 +Requires: python-oslo.config = 1.2 +Requires: python-paramiko = 1.9 Requires: python-pbr = 0.6 Requires: python-pycrypto = 2.6 Requires: python-requests = 1.1 -Requires: python-six = 1.4.1 +Requires: python-six = 1.5.2 Requires: python-sqlalchemy-migrate = 0.8.2 Requires: python-troveclient = 1.0.3 @@ -145,10 +145,10 @@ %if 0%{?suse_version} 0%{?suse_version} = 1110 Requires: python-discover %endif -Requires: python-glanceclient = 0.9.0 -Requires: python-mock = 1.0 +Requires: python-glanceclient = 0.9 +Requires: python-mock = 1 Requires: python-mox = 0.5.3 -Requires: python-paramiko = 1.9.0 +Requires: python-paramiko = 1.9 Requires: python-testrepository = 0.0.18 Requires: