jjames pushed to rpms/libsvm (f38). "Dynamically generate python
BuildRequires."
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-02-28 22:39:32 UTC
From 95af0fae93accd68665d5e9457c62c1e49013b58 Mon Sep 17 00:00:00 2001
From: Jerry James <loganjerry(a)gmail.com>
Date: Feb 27 2023 20:32:52 +0000
Subject: Dynamically generate python BuildRequires.
---
diff --git a/libsvm.spec b/libsvm.spec
index 96fb645..f2046fc 100644
--- a/libsvm.spec
+++ b/libsvm.spec
@@ -72,11 +72,6 @@ Install this package if you want to develop programs with libsvm.
%package -n python3-%{name}
Summary: Python3 tools and interfaces for libsvm
BuildRequires: python3-devel
-BuildRequires: pyproject-rpm-macros
-BuildRequires: %{py3_dist pip}
-BuildRequires: %{py3_dist scipy}
-BuildRequires: %{py3_dist setuptools}
-BuildRequires: %{py3_dist wheel}
#gnuplot is required by easy.py
Requires: gnuplot
@@ -162,6 +157,12 @@ rm FAQ.html.orig
%py3_shebang_fix python/libsvm tools
%endif
+%if %{with python}
+%generate_buildrequires
+cd python
+%pyproject_buildrequires
+%endif
+
%build
# Build the library
make all RPM_CFLAGS='%{build_cflags}' LIBDIR='%{_libdir}' CPP_STD='%{cpp_std}'
@@ -303,6 +304,9 @@ cp -p README java/README-Java
%{_datadir}/applications/*%{name}-svm-toy-qt.desktop
%changelog
+* Mon Feb 27 2023 Jerry James <loganjerry(a)gmail.com> - 3.30-2
+- Dynamically generate python BuildRequires
+
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 3.30-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
https://src.fedoraproject.org/rpms/libsvm/c/95af0fae93accd68665d5e9457c62...
1Â year, 2Â months
pwouters pushed to rpms/strongswan (rawhide). "- Resolves:
CVE-2023-26463 authorization bypass in TLS-based EAP methods"
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-02-28 22:39:05 UTC
From 33fb3b13a38c25dcf57c3837539693d779d7012d Mon Sep 17 00:00:00 2001
From: Paul Wouters <paul.wouters(a)aiven.io>
Date: Feb 28 2023 22:38:50 +0000
Subject: - Resolves: CVE-2023-26463 authorization bypass in TLS-based EAP methods
---
diff --git a/strongswan-5.9.8-5.9.9_tls_auth_bypass_exp_pointer.patch b/strongswan-5.9.8-5.9.9_tls_auth_bypass_exp_pointer.patch
new file mode 100644
index 0000000..b63e6c5
--- /dev/null
+++ b/strongswan-5.9.8-5.9.9_tls_auth_bypass_exp_pointer.patch
@@ -0,0 +1,48 @@
+From 980750bde07136255784d6ef6cdb5c085d30e2f9 Mon Sep 17 00:00:00 2001
+From: Tobias Brunner <tobias(a)strongswan.org>
+Date: Fri, 17 Feb 2023 15:07:20 +0100
+Subject: [PATCH] libtls: Fix authentication bypass and expired pointer
+ dereference
+
+`public` is returned, but previously only if a trusted key was found.
+We obviously don't want to return untrusted keys. However, since the
+reference is released after determining the key type, the returned
+object also doesn't have the correct refcount.
+
+So when the returned reference is released after verifying the TLS
+signature, the public key object is actually destroyed. The certificate
+object then points to an expired pointer, which is dereferenced once it
+itself is destroyed after the authentication is complete. Depending on
+whether the pointer is valid (i.e. points to memory allocated to the
+process) and what was allocated there after the public key was freed,
+this could result in a segmentation fault or even code execution.
+
+Fixes: 63fd718915b5 ("libtls: call create_public_enumerator() with key_type")
+Fixes: CVE-2023-26463
+---
+ src/libtls/tls_server.c | 8 ++++----
+ 1 file changed, 4 insertions(+), 4 deletions(-)
+
+diff --git a/src/libtls/tls_server.c b/src/libtls/tls_server.c
+index c9c300917dd6..573893f2efb5 100644
+--- a/src/libtls/tls_server.c
++++ b/src/libtls/tls_server.c
+@@ -183,11 +183,11 @@ public_key_t *tls_find_public_key(auth_cfg_t *peer_auth, identification_t *id)
+ cert = peer_auth->get(peer_auth, AUTH_HELPER_SUBJECT_CERT);
+ if (cert)
+ {
+- public = cert->get_public_key(cert);
+- if (public)
++ current = cert->get_public_key(cert);
++ if (current)
+ {
+- key_type = public->get_type(public);
+- public->destroy(public);
++ key_type = current->get_type(current);
++ current->destroy(current);
+ }
+ enumerator = lib->credmgr->create_public_enumerator(lib->credmgr,
+ key_type, id, peer_auth, TRUE);
+--
+2.25.1
+
diff --git a/strongswan.spec b/strongswan.spec
index 4a17976..9704c91 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -16,7 +16,7 @@
Name: strongswan
Version: 5.9.9
-Release: 2%{?dist}
+Release: 3%{?dist}
Summary: An OpenSource IPsec-based VPN and TNC solution
License: GPLv2+
URL: https://www.strongswan.org/
@@ -31,6 +31,7 @@ Patch1: strongswan-5.9.7-error-no-format.patch
# https://github.com/strongswan/strongswan/pull/1511
# https://github.com/strongswan/strongswan/commit/e99de2aee9f26e3ab97d88902...
Patch2: strongswan-5.9.9-man-paths.patch
+Patch3: strongswan-5.9.8-5.9.9_tls_auth_bypass_exp_pointer.patch
BuildRequires: autoconf
BuildRequires: automake
@@ -419,6 +420,9 @@ install -D -m 0644 %{SOURCE3} %{buildroot}/%{_tmpfilesdir}/strongswan-starter.co
%endif
%changelog
+* Tue Feb 28 2023 Paul Wouters <paul.wouters(a)aiven.io - 5.9.9-3
+- Resolves: CVE-2023-26463 authorization bypass in TLS-based EAP methods
+
* Mon Jan 16 2023 Petr MenÅ¡Ãk <pemensik(a)redhat.com> - 5.9.9-2
- Use configure paths in manual pages (#2106120)
https://src.fedoraproject.org/rpms/strongswan/c/33fb3b13a38c25dcf57c38375...
1Â year, 2Â months
stefanberger pushed to rpms/libtpms (rawhide). "Build of libtpms
0.9.6 with fixes for CVE-2023-1017 & CVE-2023-1018"
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-02-28 22:36:42 UTC
From b2efabc236d4e2179933383c4d91abf3657b3f55 Mon Sep 17 00:00:00 2001
From: Stefan Berger <stefanb(a)linux.vnet.ibm.com>
Date: Feb 28 2023 22:36:33 +0000
Subject: Build of libtpms 0.9.6 with fixes for CVE-2023-1017 & CVE-2023-1018
---
diff --git a/.gitignore b/.gitignore
index a87aeee..4c6571c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -33,3 +33,4 @@
/libtpms-20220425.tar.xz
/libtpms-0.9.4.tar.gz
/libtpms-0.9.5.tar.gz
+/libtpms-0.9.6.tar.gz
diff --git a/libtpms.spec b/libtpms.spec
index f8f4197..d384ee7 100644
--- a/libtpms.spec
+++ b/libtpms.spec
@@ -1,6 +1,6 @@
Name: libtpms
-Version: 0.9.5
-Release: 3%{?dist}
+Version: 0.9.6
+Release: 1%{?dist}
Summary: Library providing Trusted Platform Module (TPM) functionality
License: BSD
@@ -58,6 +58,9 @@ make check
%{_mandir}/man3/TPM*
%changelog
+* Tue Feb 28 2023 Stefan Berger <stefanb(a)linux.ibm.com> - 0.9.6-1
+- Build of libtpms 0.9.6 with fixes for CVE-2023-1017 & CVE-2023-1018
+
* Thu Jan 19 2023 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.9.5-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
diff --git a/sources b/sources
index 51045bf..d7ed1ea 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (libtpms-0.9.5.tar.gz) = 96b8d6dd66a6c4bc7b72d172d0b75444c7725a7fb5b0f792cd1cff9d8f7ec894c51e94493816f033198cc8adf2f95cf473629431dadb70b423068d834de09e21
+SHA512 (libtpms-0.9.6.tar.gz) = 35f26e4849eb98cd73461aff439c19f77bbbcde9b7661402e3d419354c4dcddd057349c4f7178573f1ceea2e95326498eb9afea3bd48064bbff534fc7f6939c3
https://src.fedoraproject.org/rpms/libtpms/c/b2efabc236d4e2179933383c4d91...
1Â year, 2Â months
salimma pushed to rpms/rust-serial_test (epel9). "Merge branch
'rawhide' into epel9"
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-02-28 22:33:02 UTC
From 7d9394cdb6024a98ad2d825a2d9ce59ab007af51 Mon Sep 17 00:00:00 2001
From: Michel Alexandre Salim <salimma(a)fedoraproject.org>
Date: Feb 28 2023 22:17:54 +0000
Subject: Merge branch 'rawhide' into epel9
---
diff --git a/rust-serial_test.spec b/rust-serial_test.spec
index a5f8de3..621ab9c 100644
--- a/rust-serial_test.spec
+++ b/rust-serial_test.spec
@@ -1,23 +1,20 @@
-# Generated by rust2rpm 21
+# Generated by rust2rpm 24
%bcond_without check
%global debug_package %{nil}
%global crate serial_test
-Name: rust-%{crate}
-Version: 0.6.0
+Name: rust-serial_test
+Version: 1.0.0
Release: %autorelease
Summary: Allows for the creation of serialised Rust tests
-# Upstream license specification: MIT
License: MIT
URL: https://crates.io/crates/serial_test
Source: %{crates_source}
-# Initial patched metadata
+# Manually created patch for downstream crate metadata changes
# * drop doc-specific dependencies (only used when building docs on docs.rs)
-Patch0: serial_test-fix-metadata.diff
-
-ExclusiveArch: %{rust_arches}
+Patch: serial_test-fix-metadata.diff
BuildRequires: rust-packaging >= 21
@@ -52,6 +49,18 @@ use the "default" feature of the "%{crate}" crate.
%files -n %{name}+default-devel
%ghost %{crate_instdir}/Cargo.toml
+%package -n %{name}+async-devel
+Summary: %{summary}
+BuildArch: noarch
+
+%description -n %{name}+async-devel %{_description}
+
+This package contains library source intended for building other packages which
+use the "async" feature of the "%{crate}" crate.
+
+%files -n %{name}+async-devel
+%ghost %{crate_instdir}/Cargo.toml
+
%package -n %{name}+file_locks-devel
Summary: %{summary}
BuildArch: noarch
@@ -76,6 +85,42 @@ use the "fslock" feature of the "%{crate}" crate.
%files -n %{name}+fslock-devel
%ghost %{crate_instdir}/Cargo.toml
+%package -n %{name}+futures-devel
+Summary: %{summary}
+BuildArch: noarch
+
+%description -n %{name}+futures-devel %{_description}
+
+This package contains library source intended for building other packages which
+use the "futures" feature of the "%{crate}" crate.
+
+%files -n %{name}+futures-devel
+%ghost %{crate_instdir}/Cargo.toml
+
+%package -n %{name}+log-devel
+Summary: %{summary}
+BuildArch: noarch
+
+%description -n %{name}+log-devel %{_description}
+
+This package contains library source intended for building other packages which
+use the "log" feature of the "%{crate}" crate.
+
+%files -n %{name}+log-devel
+%ghost %{crate_instdir}/Cargo.toml
+
+%package -n %{name}+logging-devel
+Summary: %{summary}
+BuildArch: noarch
+
+%description -n %{name}+logging-devel %{_description}
+
+This package contains library source intended for building other packages which
+use the "logging" feature of the "%{crate}" crate.
+
+%files -n %{name}+logging-devel
+%ghost %{crate_instdir}/Cargo.toml
+
%prep
%autosetup -n %{crate}-%{version_no_tilde} -p1
%cargo_prep
diff --git a/serial_test-fix-metadata.diff b/serial_test-fix-metadata.diff
index 5c4c9bf..132e13c 100644
--- a/serial_test-fix-metadata.diff
+++ b/serial_test-fix-metadata.diff
@@ -1,21 +1,20 @@
---- serial_test-0.6.0/Cargo.toml 1970-01-01T00:00:01+00:00
-+++ serial_test-0.6.0/Cargo.toml 2022-04-12T10:01:55.038717+00:00
-@@ -20,12 +20,6 @@
- categories = ["development-tools::testing"]
- license = "MIT"
- repository = "https://github.com/palfrey/serial_test/"
--[package.metadata.docs.rs]
--all-features = true
--rustdoc-args = ["--cfg", "docsrs"]
+--- serial_test-1.0.0/Cargo.toml 1970-01-01T00:00:01+00:00
++++ serial_test-1.0.0/Cargo.toml 2023-02-21T19:38:47.185565+00:00
+@@ -34,10 +34,6 @@
+
+ [dependencies.dashmap]
+ version = "5"
+-
-[dependencies.document-features]
-version = "0.2"
-optional = true
[dependencies.fslock]
version = "0.2"
-@@ -42,5 +36,4 @@
-
- [features]
- default = []
+@@ -81,6 +77,5 @@
+ "logging",
+ "async",
+ ]
-docsrs = ["document-features"]
file_locks = ["fslock"]
+ logging = ["log"]
diff --git a/sources b/sources
index a27c46a..a918e6e 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (serial_test-0.6.0.crate) = 36340e6234b44ef99d0e4f25a6f98dbe080cb0c2b0de06bdb8fe72cf7c6398110ca0489e556b7ba24be708e7fae3fc63400075e1d061a86d5d612d70b216d46f
+SHA512 (serial_test-1.0.0.crate) = d87d35acefcd483408c1f78fbf3d66a4c7a13f1f8ce3b0065781dfd436b8fd6ffaec22f87bb3ca238c199fac4ef4b4a867dd27b831ba7bedb6a051930d1aacf5
https://src.fedoraproject.org/rpms/rust-serial_test/c/7d9394cdb6024a98ad2...
1Â year, 2Â months
salimma pushed to rpms/rust-serial_test (epel9). "Re-apply
accidentally dropped patch"
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-02-28 22:33:02 UTC
From 1025a1085fab3d5123d4e1dd023020891855f6a9 Mon Sep 17 00:00:00 2001
From: Fabio Valentini <decathorpe(a)gmail.com>
Date: Feb 21 2023 19:41:22 +0000
Subject: Re-apply accidentally dropped patch
---
diff --git a/rust-serial_test.spec b/rust-serial_test.spec
index 01aca09..621ab9c 100644
--- a/rust-serial_test.spec
+++ b/rust-serial_test.spec
@@ -12,6 +12,9 @@ Summary: Allows for the creation of serialised Rust tests
License: MIT
URL: https://crates.io/crates/serial_test
Source: %{crates_source}
+# Manually created patch for downstream crate metadata changes
+# * drop doc-specific dependencies (only used when building docs on docs.rs)
+Patch: serial_test-fix-metadata.diff
BuildRequires: rust-packaging >= 21
@@ -58,30 +61,6 @@ use the "async" feature of the "%{crate}" crate.
%files -n %{name}+async-devel
%ghost %{crate_instdir}/Cargo.toml
-%package -n %{name}+docsrs-devel
-Summary: %{summary}
-BuildArch: noarch
-
-%description -n %{name}+docsrs-devel %{_description}
-
-This package contains library source intended for building other packages which
-use the "docsrs" feature of the "%{crate}" crate.
-
-%files -n %{name}+docsrs-devel
-%ghost %{crate_instdir}/Cargo.toml
-
-%package -n %{name}+document-features-devel
-Summary: %{summary}
-BuildArch: noarch
-
-%description -n %{name}+document-features-devel %{_description}
-
-This package contains library source intended for building other packages which
-use the "document-features" feature of the "%{crate}" crate.
-
-%files -n %{name}+document-features-devel
-%ghost %{crate_instdir}/Cargo.toml
-
%package -n %{name}+file_locks-devel
Summary: %{summary}
BuildArch: noarch
diff --git a/serial_test-fix-metadata.diff b/serial_test-fix-metadata.diff
index 293068f..132e13c 100644
--- a/serial_test-fix-metadata.diff
+++ b/serial_test-fix-metadata.diff
@@ -1,5 +1,5 @@
---- serial_test-0.9.0/Cargo.toml 1970-01-01T00:00:01+00:00
-+++ serial_test-0.9.0/Cargo.toml 2022-11-28T14:00:56.711227+00:00
+--- serial_test-1.0.0/Cargo.toml 1970-01-01T00:00:01+00:00
++++ serial_test-1.0.0/Cargo.toml 2023-02-21T19:38:47.185565+00:00
@@ -34,10 +34,6 @@
[dependencies.dashmap]
@@ -11,7 +11,7 @@
[dependencies.fslock]
version = "0.2"
-@@ -78,6 +74,5 @@
+@@ -81,6 +77,5 @@
"logging",
"async",
]
https://src.fedoraproject.org/rpms/rust-serial_test/c/1025a1085fab3d5123d...
1Â year, 2Â months
salimma pushed to rpms/rust-serial_test (epel9). "Update to version
0.9.0; Fixes RHBZ#2093654"
by notificationsï¼ fedoraproject.org
Notification time stamped 2023-02-28 22:33:02 UTC
From 3c7fbaef5c707a2b35dffdedfad2481564015add Mon Sep 17 00:00:00 2001
From: Fabio Valentini <decathorpe(a)gmail.com>
Date: Nov 28 2022 21:01:00 +0000
Subject: Update to version 0.9.0; Fixes RHBZ#2093654
---
diff --git a/rust-serial_test.spec b/rust-serial_test.spec
index a5f8de3..f91d1d7 100644
--- a/rust-serial_test.spec
+++ b/rust-serial_test.spec
@@ -1,23 +1,19 @@
-# Generated by rust2rpm 21
+# Generated by rust2rpm 23
%bcond_without check
%global debug_package %{nil}
%global crate serial_test
-Name: rust-%{crate}
-Version: 0.6.0
+Name: rust-serial_test
+Version: 0.9.0
Release: %autorelease
Summary: Allows for the creation of serialised Rust tests
-# Upstream license specification: MIT
License: MIT
URL: https://crates.io/crates/serial_test
Source: %{crates_source}
-# Initial patched metadata
-# * drop doc-specific dependencies (only used when building docs on docs.rs)
-Patch0: serial_test-fix-metadata.diff
-
-ExclusiveArch: %{rust_arches}
+# Manually created patch for downstream crate metadata changes
+Patch: serial_test-fix-metadata.diff
BuildRequires: rust-packaging >= 21
@@ -52,6 +48,18 @@ use the "default" feature of the "%{crate}" crate.
%files -n %{name}+default-devel
%ghost %{crate_instdir}/Cargo.toml
+%package -n %{name}+async-devel
+Summary: %{summary}
+BuildArch: noarch
+
+%description -n %{name}+async-devel %{_description}
+
+This package contains library source intended for building other packages which
+use the "async" feature of the "%{crate}" crate.
+
+%files -n %{name}+async-devel
+%ghost %{crate_instdir}/Cargo.toml
+
%package -n %{name}+file_locks-devel
Summary: %{summary}
BuildArch: noarch
@@ -76,6 +84,42 @@ use the "fslock" feature of the "%{crate}" crate.
%files -n %{name}+fslock-devel
%ghost %{crate_instdir}/Cargo.toml
+%package -n %{name}+futures-devel
+Summary: %{summary}
+BuildArch: noarch
+
+%description -n %{name}+futures-devel %{_description}
+
+This package contains library source intended for building other packages which
+use the "futures" feature of the "%{crate}" crate.
+
+%files -n %{name}+futures-devel
+%ghost %{crate_instdir}/Cargo.toml
+
+%package -n %{name}+log-devel
+Summary: %{summary}
+BuildArch: noarch
+
+%description -n %{name}+log-devel %{_description}
+
+This package contains library source intended for building other packages which
+use the "log" feature of the "%{crate}" crate.
+
+%files -n %{name}+log-devel
+%ghost %{crate_instdir}/Cargo.toml
+
+%package -n %{name}+logging-devel
+Summary: %{summary}
+BuildArch: noarch
+
+%description -n %{name}+logging-devel %{_description}
+
+This package contains library source intended for building other packages which
+use the "logging" feature of the "%{crate}" crate.
+
+%files -n %{name}+logging-devel
+%ghost %{crate_instdir}/Cargo.toml
+
%prep
%autosetup -n %{crate}-%{version_no_tilde} -p1
%cargo_prep
diff --git a/serial_test-fix-metadata.diff b/serial_test-fix-metadata.diff
index 5c4c9bf..293068f 100644
--- a/serial_test-fix-metadata.diff
+++ b/serial_test-fix-metadata.diff
@@ -1,21 +1,20 @@
---- serial_test-0.6.0/Cargo.toml 1970-01-01T00:00:01+00:00
-+++ serial_test-0.6.0/Cargo.toml 2022-04-12T10:01:55.038717+00:00
-@@ -20,12 +20,6 @@
- categories = ["development-tools::testing"]
- license = "MIT"
- repository = "https://github.com/palfrey/serial_test/"
--[package.metadata.docs.rs]
--all-features = true
--rustdoc-args = ["--cfg", "docsrs"]
+--- serial_test-0.9.0/Cargo.toml 1970-01-01T00:00:01+00:00
++++ serial_test-0.9.0/Cargo.toml 2022-11-28T14:00:56.711227+00:00
+@@ -34,10 +34,6 @@
+
+ [dependencies.dashmap]
+ version = "5"
+-
-[dependencies.document-features]
-version = "0.2"
-optional = true
[dependencies.fslock]
version = "0.2"
-@@ -42,5 +36,4 @@
-
- [features]
- default = []
+@@ -78,6 +74,5 @@
+ "logging",
+ "async",
+ ]
-docsrs = ["document-features"]
file_locks = ["fslock"]
+ logging = ["log"]
diff --git a/sources b/sources
index a27c46a..c5d9b2b 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (serial_test-0.6.0.crate) = 36340e6234b44ef99d0e4f25a6f98dbe080cb0c2b0de06bdb8fe72cf7c6398110ca0489e556b7ba24be708e7fae3fc63400075e1d061a86d5d612d70b216d46f
+SHA512 (serial_test-0.9.0.crate) = 2ecd241cfb43f061e3c97ea6e8e00561ff812966ad79f6a52954ee5f49f7a2ed790166cf9588d9a1b467cf30923b53d4c387e40311f7e1bf0483a8081bcf8ff3
https://src.fedoraproject.org/rpms/rust-serial_test/c/3c7fbaef5c707a2b35d...
1Â year, 2Â months