diff --git a/packages/0/000update-repos/.files b/packages/0/000update-repos/.files
index 27f2b3f4a9c..6a0a230a84f 100644
Binary files a/packages/0/000update-repos/.files and b/packages/0/000update-repos/.files differ
diff --git a/packages/0/000update-repos/.rev b/packages/0/000update-repos/.rev
index 82a2aeadf97..b43a469a5e9 100644
--- a/packages/0/000update-repos/.rev
+++ b/packages/0/000update-repos/.rev
@@ -16616,4 +16616,11 @@ Switch to repomd for 42.1, its susetags are bugged
staging-bot
Automatic update
+
+ 1df2ab610729308f4328a694ab372336
+ unknown
+
+ staging-bot
+ Automatic update
+
diff --git a/packages/0/000update-repos/factory:non-oss_4184.2.packages.zst b/packages/0/000update-repos/factory:non-oss_4184.2.packages.zst
new file mode 120000
index 00000000000..b8567a6afa1
--- /dev/null
+++ b/packages/0/000update-repos/factory:non-oss_4184.2.packages.zst
@@ -0,0 +1 @@
+/ipfs/bafkreig2aax4npofdkvf7vv5pwocvq5zyntbzujvkzudpl7phw5o2gu2da
\ No newline at end of file
diff --git a/packages/0/000update-repos/factory_20241022.packages.zst b/packages/0/000update-repos/factory_20241022.packages.zst
new file mode 120000
index 00000000000..342aa027d06
--- /dev/null
+++ b/packages/0/000update-repos/factory_20241022.packages.zst
@@ -0,0 +1 @@
+/ipfs/bafybeictojchxghp4ljl2yz3jg4l2qluoanfozyccpm4d4aeqrwhqfcn6m
\ No newline at end of file
diff --git a/packages/_/_project/_config b/packages/_/_project/_config
index b525524adf1..75ce3507b15 100644
--- a/packages/_/_project/_config
+++ b/packages/_/_project/_config
@@ -3070,6 +3070,7 @@ BuildFlags: onlybuild:rust1.78
BuildFlags: onlybuild:rust1.79
BuildFlags: onlybuild:rust1.80
BuildFlags: onlybuild:rust1.81
+BuildFlags: onlybuild:rust1.82
BuildFlags: onlybuild:samba
BuildFlags: onlybuild:sane-backends
BuildFlags: onlybuild:sassc
diff --git a/packages/_/_project/_staging_workflow b/packages/_/_project/_staging_workflow
index 9b88c060a9b..669a1b56aeb 100644
--- a/packages/_/_project/_staging_workflow
+++ b/packages/_/_project/_staging_workflow
@@ -17,85 +17,22 @@
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
@@ -106,5 +43,15 @@
-
+
+
+
+
+
+
+
+
+
+
+
diff --git a/packages/a/AdwSteamGtk/.files b/packages/a/AdwSteamGtk/.files
index 052aaad9485..6794978fc37 100644
Binary files a/packages/a/AdwSteamGtk/.files and b/packages/a/AdwSteamGtk/.files differ
diff --git a/packages/a/AdwSteamGtk/.rev b/packages/a/AdwSteamGtk/.rev
index 1f8ccb9d5c9..50dc8a61761 100644
--- a/packages/a/AdwSteamGtk/.rev
+++ b/packages/a/AdwSteamGtk/.rev
@@ -7,4 +7,14 @@
1174711
+
+ 9814c78222dc37ecfdb8d95a59075a62
+ 0.6.11
+
+ anag+factory
+ - add missing requirement for XdpGtk4
+
+fix #bsc1231577
+ 1217036
+
diff --git a/packages/a/AdwSteamGtk/AdwSteamGtk.changes b/packages/a/AdwSteamGtk/AdwSteamGtk.changes
index 1330e3fd9a2..975fd370cbb 100644
--- a/packages/a/AdwSteamGtk/AdwSteamGtk.changes
+++ b/packages/a/AdwSteamGtk/AdwSteamGtk.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:19:38 UTC 2024 - Dirk Stoecker
+
+- add missing requirement for XdpGtk4
+
-------------------------------------------------------------------
Fri May 17 02:30:14 UTC 2024 - Richard Rahl
diff --git a/packages/a/AdwSteamGtk/AdwSteamGtk.spec b/packages/a/AdwSteamGtk/AdwSteamGtk.spec
index ec4e176560f..772e6fd408b 100644
--- a/packages/a/AdwSteamGtk/AdwSteamGtk.spec
+++ b/packages/a/AdwSteamGtk/AdwSteamGtk.spec
@@ -25,16 +25,17 @@ License: GPL-3.0-only
URL: https://github.com/Foldex/AdwSteamGtk
Source: %{url}/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
BuildArch: noarch
+BuildRequires: appstream-glib
+BuildRequires: hicolor-icon-theme
BuildRequires: meson
BuildRequires: patch
-BuildRequires: update-desktop-files
-BuildRequires: hicolor-icon-theme
BuildRequires: python3-packaging
-BuildRequires: appstream-glib
-BuildRequires: pkgconfig(gtk4)
+BuildRequires: update-desktop-files
BuildRequires: pkgconfig(blueprint-compiler)
+BuildRequires: pkgconfig(gtk4)
BuildRequires: pkgconfig(libadwaita-1)
BuildRequires: pkgconfig(libportal)
+Requires: typelib(XdpGtk4)
%description
A GTK wrapper that installs and updates the Adwaita for Steam skin.
diff --git a/packages/b/brltty/.files b/packages/b/brltty/.files
index 0ea2e927ba0..a6daaae7858 100644
Binary files a/packages/b/brltty/.files and b/packages/b/brltty/.files differ
diff --git a/packages/b/brltty/.rev b/packages/b/brltty/.rev
index ec119c3f68b..4fd80074cec 100644
--- a/packages/b/brltty/.rev
+++ b/packages/b/brltty/.rev
@@ -632,4 +632,12 @@
Set LD_LIBRARY_PATH to allow that. (forwarded request 1203523 from rmax)
1203552
+
+ 4f4a71d93c1970bde229ffff4f11634a
+ 6.7
+
+ anag+factory
+
+ 1217115
+
diff --git a/packages/b/brltty/brltty-6.6.tar.xz b/packages/b/brltty/brltty-6.6.tar.xz
deleted file mode 120000
index 66f2259ba2b..00000000000
--- a/packages/b/brltty/brltty-6.6.tar.xz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeif3emvcgdyy3zbrmzadhc5fhc7fgfez7qbzruy6dkk6d2klkic2hu
\ No newline at end of file
diff --git a/packages/b/brltty/brltty-6.7.tar.xz b/packages/b/brltty/brltty-6.7.tar.xz
new file mode 120000
index 00000000000..61168b19cac
--- /dev/null
+++ b/packages/b/brltty/brltty-6.7.tar.xz
@@ -0,0 +1 @@
+/ipfs/bafybeifhf5afbk44tbrdhuskp4spahjrtgvpytz73qnpfgo63f6ung6qqi
\ No newline at end of file
diff --git a/packages/b/brltty/brltty-reproducible-jar-mtime.patch b/packages/b/brltty/brltty-reproducible-jar-mtime.patch
new file mode 100644
index 00000000000..02595739755
--- /dev/null
+++ b/packages/b/brltty/brltty-reproducible-jar-mtime.patch
@@ -0,0 +1,12 @@
+--- brltty-6.6/Bindings/Java/Makefile.in 2024-09-26 17:16:12.903477065 +0200
++++ brltty-6.6/Bindings/Java/Makefile.in 2024-09-26 17:17:37.427440398 +0200
+@@ -52,7 +52,8 @@
+ jar: $(JAVA_JAR_FILE)
+
+ $(JAVA_JAR_FILE): classes.made
+- $(JAR) cfm $@ $(SRC_DIR)/manifest -C classes .
++ $(JAR) --date="$$(date -u -d @$${SOURCE_DATE_EPOCH:-$$(date +%s)} +%Y-%m-%dT%H:%M:%SZ)" \
++ --create --file=$@ --manifest=$(SRC_DIR)/manifest -C classes .
+
+ JAVAC_LINT_OPTIONS = cast,deprecation,fallthrough,finally,overrides,rawtypes,unchecked
+
diff --git a/packages/b/brltty/brltty.changes b/packages/b/brltty/brltty.changes
index c56eb85b142..fac571a3259 100644
--- a/packages/b/brltty/brltty.changes
+++ b/packages/b/brltty/brltty.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Thu Oct 17 18:22:43 UTC 2024 - Michael Gorse
+
+- Update to version 6.7:
+ + Too many changes; please read ChangeLog
+- Drop e6707d5e.patch: fixed upstream.
+- API version is now 0.8.6.
+
+-------------------------------------------------------------------
+Thu Sep 26 15:29:27 UTC 2024 - Fridrich Strba
+
+- Added patch:
+ * brltty-reproducible-jar-mtime.patch
+ + Use SOURCE_DATE_EPOCH for reproducible jar mtime
+ + Applied if building with Java >= 17
+
-------------------------------------------------------------------
Wed Sep 25 10:26:16 UTC 2024 - Reinhard Max
diff --git a/packages/b/brltty/brltty.spec b/packages/b/brltty/brltty.spec
index a2f3dae0ee9..08bc620edf9 100644
--- a/packages/b/brltty/brltty.spec
+++ b/packages/b/brltty/brltty.spec
@@ -17,11 +17,11 @@
%global _lto_cflags %_lto_cflags -ffat-lto-objects
-%define api_version 0.8.5
+%define api_version 0.8.6
%define sover 0_8
%define soname libbrlapi%{sover}
Name: brltty
-Version: 6.6
+Version: 6.7
Release: 0
# FIXME libbraille driver when libbraille is in factory
Summary: Braille display driver for Linux/Unix
@@ -33,7 +33,7 @@ Source0: https://brltty.app/archive/%name-%version.tar.xz
Source1: README.SUSE
Source2: %name.rpmlintrc
Patch0: brltty-udev-dir.patch
-Patch1: https://github.com/brltty/brltty/commit/e6707d5e.patch
+Patch2: brltty-reproducible-jar-mtime.patch
Requires(pre): system-user-brltty = %version-%release
@@ -319,7 +319,12 @@ System user for the Braille display driver for Linux/Unix
%lang_package
%prep
-%autosetup -p1
+%setup
+%patch -P 0 -p1
+# The "--date" option was added into jar in OpenJDK 17
+%if %{?pkg_vcmp:%pkg_vcmp java-devel >= 17}%{!?pkg_vcmp:0}
+%patch -P 2 -p1
+%endif
%build
%sysusers_generate_pre Autostart/Systemd/sysusers system-user-brltty %name.conf
diff --git a/packages/b/brltty/e6707d5e.patch b/packages/b/brltty/e6707d5e.patch
deleted file mode 100644
index 2f9bfaf3882..00000000000
--- a/packages/b/brltty/e6707d5e.patch
+++ /dev/null
@@ -1,44 +0,0 @@
-From e6707d5e094dc36db4319ce4d052a6ad568a5d26 Mon Sep 17 00:00:00 2001
-From: Samuel Thibault
-Date: Tue, 15 Aug 2023 16:29:13 +0200
-Subject: [PATCH] brlapi: Fix python crash on connection error
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-From Lukáš Tyrychtr:
-“
-Cython 3.0 started using the new Python object finalization APIs from PEP 442
-”
-
-This means that __del__ gets called even when raising an exception from
-__init__, while it was not before. To cope with both behaviors, we can
-set self.h to NULL to determine whether it still exists or not.
-
-Thanks Lukáš Tyrychtr for the investigation and patch draft!
----
- Bindings/Python/brlapi.pyx | 4 +++-
- 1 file changed, 3 insertions(+), 1 deletion(-)
-
-diff --git a/Bindings/Python/brlapi.pyx b/Bindings/Python/brlapi.pyx
-index 0136895eaf..af62cc9be0 100644
---- a/Bindings/Python/brlapi.pyx
-+++ b/Bindings/Python/brlapi.pyx
-@@ -453,6 +453,7 @@ cdef class Connection:
- c_brlapi.brlapi_protocolExceptionInit(self.h)
- if self.fd == -1:
- c_brlapi.free(self.h)
-+ self.h = NULL
- raise ConnectionError(self.settings.host, self.settings.auth)
-
- def closeConnection(self):
-@@ -465,7 +466,8 @@ cdef class Connection:
- """Release resources used by the connection"""
- if self.fd != -1:
- c_brlapi.brlapi__closeConnection(self.h)
-- c_brlapi.free(self.h)
-+ if self.h != NULL:
-+ c_brlapi.free(self.h)
-
- property host:
- """To get authorized to connect, libbrlapi has to tell the BrlAPI server a secret key, for security reasons. This is the path to the file which holds it; it will hence have to be readable by the application."""
diff --git a/packages/b/bs1770gain/.files b/packages/b/bs1770gain/.files
deleted file mode 100644
index e6f1513e8ee..00000000000
Binary files a/packages/b/bs1770gain/.files and /dev/null differ
diff --git a/packages/b/bs1770gain/.meta b/packages/b/bs1770gain/.meta
deleted file mode 100644
index 97022aba721..00000000000
--- a/packages/b/bs1770gain/.meta
+++ /dev/null
@@ -1,11 +0,0 @@
-
- A loudness scanner compliant with ITU-R BS.1770
- The command line tool bs1770gain is a loudness scanner compliant with
-ITU-R BS.1770 and its flavors EBU R128, ATSC A/85, and ReplayGain 2.0.
-It helps normalizing the loudness of audio and video files to the same
-level.
-
-
-
- https://sourceforge.net/projects/bs1770gain/
-
diff --git a/packages/b/bs1770gain/.rev b/packages/b/bs1770gain/.rev
deleted file mode 100644
index 2265a211622..00000000000
--- a/packages/b/bs1770gain/.rev
+++ /dev/null
@@ -1,26 +0,0 @@
-
-
- 0b03eb80cb83c96549b3478bc6607f39
- 0.6.9
-
- dimstar_suse
- I want to maintain bs1770gain in Factory
- 799857
-
-
- 36476229332655906fd17b626995d6b0
- 0.7.0
-
- dimstar_suse
-
- 810346
-
-
- 111cbc0ec570157de4f7df8f44991ade
- 0.8.4.1
-
- dimstar_suse
-
- 1002354
-
-
diff --git a/packages/b/bs1770gain/bs1770gain-0.8.4.1.tar.gz b/packages/b/bs1770gain/bs1770gain-0.8.4.1.tar.gz
deleted file mode 120000
index 564f987fe89..00000000000
--- a/packages/b/bs1770gain/bs1770gain-0.8.4.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreicjndlizeftf6ogkag32by4iykdu5jdmd6i4trnj3kmebhcp5f2ka
\ No newline at end of file
diff --git a/packages/b/bs1770gain/bs1770gain.changes b/packages/b/bs1770gain/bs1770gain.changes
deleted file mode 100644
index 2833c49fdf8..00000000000
--- a/packages/b/bs1770gain/bs1770gain.changes
+++ /dev/null
@@ -1,26 +0,0 @@
--------------------------------------------------------------------
-Fri Sep 9 07:19:11 UTC 2022 - Bjørn Lie
-
-- Update to version 0.8.4:
- * No changelog provided from upstream.
- * Package now builds against ffmpeg-5.
-- Rebase patch.
-
--------------------------------------------------------------------
-Fri May 29 19:25:41 UTC 2020 - Martin Hauke
-
-- Update to version 0.7.0
- * Improved configuration w.r.t. pthreads.
- * Fixed some synchronization issues.
- * Support multiple threads from within bs1770gain
- option --threads=
- Currently option --threads= just makes
- sense when used in conjunction with options -o/--output or
- --overwrite and may result in a significant performance gain
- (it's meant for mass replay-gain tagging):
- * Fixed a flaw with option -x rename.
-
--------------------------------------------------------------------
-Sat May 2 12:36:14 UTC 2020 - Martin Hauke
-
-- Initial package, version 0.6.9
diff --git a/packages/b/bs1770gain/bs1770gain.spec b/packages/b/bs1770gain/bs1770gain.spec
deleted file mode 100644
index b048e2a8665..00000000000
--- a/packages/b/bs1770gain/bs1770gain.spec
+++ /dev/null
@@ -1,63 +0,0 @@
-#
-# spec file for package bs1770gain
-#
-# Copyright (c) 2022 SUSE LLC
-# Copyright (c) 2020, Martin Hauke
-#
-# All modifications and additions to the file contributed by third parties
-# remain the property of their copyright owners, unless otherwise agreed
-# upon. The license for this file, and modifications and additions to the
-# file, is the same license as for the pristine package itself (unless the
-# license for the pristine package is not an Open Source License, in which
-# case the license is the MIT License). An "Open Source License" is a
-# license that conforms to the Open Source Definition (Version 1.9)
-# published by the Open Source Initiative.
-
-# Please submit bugfixes or comments via https://bugs.opensuse.org/
-#
-
-
-Name: bs1770gain
-Version: 0.8.4.1
-Release: 0
-Summary: A loudness scanner compliant with ITU-R BS.1770
-License: GPL-2.0-or-later
-Group: Productivity/Multimedia/Sound/Players
-URL: http://pbelkner.de/projects/web/bs1770gain
-Source0: http://pbelkner.de/count/download.php?path=projects/files/%{name}/%{name}/%{version}&file=%{name}-%{version}.tar.gz#/%{name}-%{version}.tar.gz
-Patch0: remove-inappropriate-text.patch
-
-BuildRequires: pkgconfig
-BuildRequires: pkgconfig(libavcodec)
-BuildRequires: pkgconfig(libavfilter)
-BuildRequires: pkgconfig(libavformat)
-BuildRequires: pkgconfig(libavutil)
-BuildRequires: pkgconfig(libpostproc)
-BuildRequires: pkgconfig(libswresample)
-BuildRequires: pkgconfig(libswscale)
-
-%description
-The command line tool bs1770gain is a loudness scanner compliant with
-ITU-R BS.1770 and its flavors EBU R128, ATSC A/85, and ReplayGain 2.0.
-It helps normalizing the loudness of audio and video files to the same
-level.
-
-%prep
-%autosetup -p1
-
-%build
-export CPPFLAGS="$CPPFLAGS $(pkg-config --cflags libavutil)"
-%configure \
- --with-ffmpeg=%{_prefix} \
- %{nil}
-%make_build
-
-%install
-%make_install
-
-%files
-%license COPYING
-%doc README
-%{_bindir}/bs1770gain
-
-%changelog
diff --git a/packages/b/bs1770gain/remove-inappropriate-text.patch b/packages/b/bs1770gain/remove-inappropriate-text.patch
deleted file mode 100644
index 51dd6916360..00000000000
--- a/packages/b/bs1770gain/remove-inappropriate-text.patch
+++ /dev/null
@@ -1,20 +0,0 @@
---- orig-bs1770gain-0.8.4.1/libbg/bgx.c 2022-04-01 11:38:39.000000000 +0200
-+++ bs1770gain-0.8.4.1/libbg/bgx.c 2022-09-09 09:18:38.759946752 +0200
-@@ -40,17 +40,8 @@
- * once meant as an example program on how to deal with "libbg.a" (and in
- * turn with "libff.a") finally serving as bs1770gain's implementation.
- */
--#if 1 // [
--#if 1 // [
--#define BG_TEAM_WHITE \
-- " #WLM"
--#else // ] [
- #define BG_TEAM_WHITE \
- ""
--#endif // ]
--#define BG_NANOS_GIGANTUM_HUMERIS_INSIDENTES \
-- "Nanos gigantum humeris insidentes." BG_TEAM_WHITE "\n"
--#endif // ]
-
- ///////////////////////////////////////////////////////////////////////////////
- static const ffchar_t *bg_version(const ffchar_t *path, FILE *f)
diff --git a/packages/c/coppwr/.files b/packages/c/coppwr/.files
index b1d3d589305..7ce14a6d728 100644
Binary files a/packages/c/coppwr/.files and b/packages/c/coppwr/.files differ
diff --git a/packages/c/coppwr/.rev b/packages/c/coppwr/.rev
index d108b2488ed..896512e3e76 100644
--- a/packages/c/coppwr/.rev
+++ b/packages/c/coppwr/.rev
@@ -35,4 +35,12 @@
1172275
+
+ d171fa5759b834569bc989d83138167a
+ 1.6.1
+
+ anag+factory
+
+ 1217112
+
diff --git a/packages/c/coppwr/coppwr-1.6.0.tar.gz b/packages/c/coppwr/coppwr-1.6.0.tar.gz
deleted file mode 120000
index 3ddbcef675d..00000000000
--- a/packages/c/coppwr/coppwr-1.6.0.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeictx5kahsp32sdfl6swqu5fj5k66fj5ziewkgyvlfi37do6posvyu
\ No newline at end of file
diff --git a/packages/c/coppwr/coppwr-1.6.1.tar.gz b/packages/c/coppwr/coppwr-1.6.1.tar.gz
new file mode 120000
index 00000000000..4e6880bd05b
--- /dev/null
+++ b/packages/c/coppwr/coppwr-1.6.1.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeicgfpes544oemzadtlkffec2zoo472wj4eb7cjtmv7lq5gqleeqfu
\ No newline at end of file
diff --git a/packages/c/coppwr/coppwr.changes b/packages/c/coppwr/coppwr.changes
index e1f03fc3f4e..919673b73b4 100644
--- a/packages/c/coppwr/coppwr.changes
+++ b/packages/c/coppwr/coppwr.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Tue Oct 22 18:54:41 UTC 2024 - Muhammad Akbar Yanuar Mantari
+
+- Update to version 1.6.1
+ * Added explanations to the profiler graphs when hovering their
+ titles
+ * Added Update Rate setting to change the rate at which the UI
+ refreshes with new PipeWire data
+ * Fixed Gloal Tracker list not refreshing when "Group Subobjects"
+ is changed
+ * Slightly changed icon for better contrast
+ * Fixed crashing when PipeWire sends unknown profiler data
+
-------------------------------------------------------------------
Mon May 6 13:23:15 UTC 2024 - Muhammad Akbar Yanuar Mantari
diff --git a/packages/c/coppwr/coppwr.spec b/packages/c/coppwr/coppwr.spec
index 649bd1be396..785adbd6dc9 100644
--- a/packages/c/coppwr/coppwr.spec
+++ b/packages/c/coppwr/coppwr.spec
@@ -18,7 +18,7 @@
%define appid io.github.dimtpap.coppwr
Name: coppwr
-Version: 1.6.0
+Version: 1.6.1
Release: 0
Summary: Low level PipeWire control GUI
License: GPL-3.0-or-later
diff --git a/packages/c/coppwr/vendor.tar.zst b/packages/c/coppwr/vendor.tar.zst
index 8cffd62bce2..9aee69a197b 120000
--- a/packages/c/coppwr/vendor.tar.zst
+++ b/packages/c/coppwr/vendor.tar.zst
@@ -1 +1 @@
-/ipfs/bafybeig5xvk2vktpkxlsfwjyt3w3y2kvpy255gzlorxnj6k4qw5zgwchue
\ No newline at end of file
+/ipfs/bafybeigjchmtqhywhbhm543majdenohek6nigxl63xlmdoxch3awp6hxwa
\ No newline at end of file
diff --git a/packages/d/distrobox/.files b/packages/d/distrobox/.files
index 878d5c922bd..cf4d9ba5edb 100644
Binary files a/packages/d/distrobox/.files and b/packages/d/distrobox/.files differ
diff --git a/packages/d/distrobox/.rev b/packages/d/distrobox/.rev
index 989d4371a7c..c468ad4ddd0 100644
--- a/packages/d/distrobox/.rev
+++ b/packages/d/distrobox/.rev
@@ -190,4 +190,12 @@
1173947
+
+ d5d4dc92af0b7fddcbd913c4d5785368
+ 1.8.0
+
+ anag+factory
+
+ 1217050
+
diff --git a/packages/d/distrobox/distrobox-1.7.2.1.tar.gz b/packages/d/distrobox/distrobox-1.7.2.1.tar.gz
deleted file mode 120000
index dd703391838..00000000000
--- a/packages/d/distrobox/distrobox-1.7.2.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeicsqtyxtprdlbj4n6xuqinqc6uxetorxf73x45ybvdpq3q2j4bea4
\ No newline at end of file
diff --git a/packages/d/distrobox/distrobox-1.8.0.tar.gz b/packages/d/distrobox/distrobox-1.8.0.tar.gz
new file mode 120000
index 00000000000..ddccb134d1b
--- /dev/null
+++ b/packages/d/distrobox/distrobox-1.8.0.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeiaesxzao33xhrgjfz3bgz2qqhqjrdbg756w5c4g4356ksz3sja56u
\ No newline at end of file
diff --git a/packages/d/distrobox/distrobox.changes b/packages/d/distrobox/distrobox.changes
index 12aae896be9..6b3e9b38902 100644
--- a/packages/d/distrobox/distrobox.changes
+++ b/packages/d/distrobox/distrobox.changes
@@ -1,3 +1,102 @@
+-------------------------------------------------------------------
+Wed Oct 16 10:14:35 UTC 2024 - Martin Sirringhaus
+
+- update to 1.8.0
+ * Improvements
+ + Improvements on Nvidia integration
+ + Improvements on XDG_* env variables management
+ + Remote distrobox assemble files! Keep them remote with distrobox assemble create --file https://foo.com/file.ini!
+ + A lot of new container distros, from @ublue-os and @toolbx-images, New Fedora, Ubuntu, Alpine and @wolfi-dev wolfi-toolbox!
+ * all: ensure env variables are set and have values
+ * all: use registry.fedoraproject.org/fedora-toolbox:latest image by default, Fix #1402
+ * assemble: add support for remote manifest files
+ * assemble: ensure variables are reset correctly
+ * assemble: fix name detection with hyphens, Fix #1507
+ * assemble: fix possible empty lines, Fix #1514
+ * assemble: improve handling of hooks, pass around b64 encoded string to avoid unwanted evaluations
+ * compatibility: add missing url for ubuntu:23.04 by @sheevy in #1439
+ * create: better explain init/pre-init hooks
+ * create: ignore trailing slashes on custom homes, Fix #1575
+ * docs: Add kali icon by @andyspectre in #1451
+ * docs: Document support for alpine 3.20 containers by @Ferenc- in #1504
+ * docs: Fix issue with user not having permissions to write containers.conf by @nhermosilla14 in #1456
+ * docs: Seperate curl and wget commands by @axtloss in #1434
+ * docs: Update microos -> aeon/kalpa in docs by @TheRsKing in #1427
+ * docs: Update openSUSE and SLES compatibility guide by @alexandrevicenzi in #1489
+ * docs: add BlackaArch Linux compatibility, Fix #1358
+ * docs: add compatibility with ghcr.io/ublue-os/bluefin-cli, Fix #1453
+ * docs: document an official way to detect when you're in a distrobox
+ * docs: document pipewire/alsa packages for ubuntu initful containers. Fix #1374
+ * docs: fix subuids spelling mistake by @yocoldle in #1431
+ * docs: fix link for Crystal linux. Fix #1418
+ * docs: fix linting
+ * docs: fix obsolete Chainguard Wolfi notes
+ * docs: point to new nixos wiki by @Mic92 in #1384
+ * docs: remove rhel-toolbox image from compatibility, it's now behind paywall
+ * docs: support for 3d acceleration in: run_libvirt_in_distrobox.md by @TheRsKing in #1426
+ * docs: update compatibility, add ublue toolboxes, update Alpine and Fedora versions, Fix #1501
+ * docs: update vscode integration docs
+ * enter: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shorter than 5 symbols by @senioroman4uk in #1545
+ * enter: Fix support for Active Directory usernames including backslashes pt. 2 by @phoppermann in #1458
+ * enter: fix additional flags evaluation, Fix #1541
+ * enter: fix docker timestamp incompatibility, Fix #1382, Fix #1424, Fix #1392
+ * enter: fix regression in login for initful container, Fix #1428
+ * enter: get rid of eval and pass arguments using set. This will avoid maniupulating args, and simplify our life. Fix #749, Fix #1461
+ * enter: improve positional args handling, treat enter command accordingly, improve comments explaining the black magic
+ * export: Actually fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @TigerGorilla2 in #1582
+ * export: Fix XDG_DATA_DIRS and XDG_DATA_HOME handling by @e-luks in #1496
+ * export: ensure destpath exists, Fix #1405
+ * export: fix CONTAINER_ID fallback
+ * export: fix grep errors on list-apps
+ * export: improve documentation of the spec. Fix #1444
+ * export: simplify and cleanup code
+ * export: support exporting app launchers by full-path.
+ * extras: vscode- improve podman wrapper, add docker wrapper, fix reconnections
+ * fix for 1440 by @dtg01100 in #1441
+ * fix: init package in Gentoo Stage3 image by @xz-dev in #1455
+ * fix:[#1525] handle container creation failure by @jardon in #1526
+ * generate-entry: add 'Remove' action to entry, Fix #1433
+ * generate-entry: add timeout to downloads, Fix #1459
+ * generate-entry: fix generic icon download and setup
+ * generate-entry: fix linting
+ * generate-entry: use XDG_DATA_HOME by @Samueru-sama in #1468
+ * host-exec: fix arm naming, Fix #1442
+ * host-exec: fix host-spawn version
+ * host-exec: update host-spawn version
+ * init: fix arch locale-gen by @Boria138 in #1520
+ * init: Exclude repos from bind-mounting by @lunacd in #1503
+ * init: Fix SHELL using absolute path and disable duplicate profile inclusion by @eugenesan in #1397
+ * init: Generate host locales in container (fixed issue #1399) by @Boria138 in #1404
+ * init: add fallback values for host locale variables
+ * init: add iputils
+ * init: add iputils in setup_pacman by @intzaaa in #1576
+ * init: apt-get upgrade, force keeping old configs when non interactive
+ * init: arrange package manager to avoid conflicts when using more than one (eg: packaging containers)
+ * init: auto-link /usr/bin/flatpak, to better support opening links on host's browser, if those are flatpaks
+ * init: do not fail in "Setting up read-only mounts" if findmnt does not exist by @phoppermann in #1454
+ * init: ensure we have DBUS variables set for host-spawn to work in login scripts, Fix #1383
+ * init: fallback case where mounting /etc/localtime fails, Fix #1435
+ * init: fix detection of 32bit nvidia libs on suse family
+ * init: fix failing chpasswd on systemd-homed managed users, Fix #1423
+ * init: fix locale generation for minimal images
+ * init: fix locale generation on musl and older systems
+ * init: fix missing allowerasing flag for dnf
+ * init: fix nvidia integration mounting files from boost libs, Fix #1500
+ * init: fix nvidia integration, improve search of nvidia files, Fix #1500
+ * init: fix typo in fallback locale values
+ * init: fix udev clash on rootful initful systems
+ * init: fix void-linux failing due to runit, Fix #1380
+ * init: perform upgrade before setting up archlinux packages
+ * init: proper fix for void extraction paths. Fix #1457
+ * init: remove su-exec workaround for Wolfi, now that it supports proper sudo
+ * init: rework package managment code
+ * init: separate 'mount --rbind -o rslave ...' into 'mount --rbind ...'… by @timwa0669 in #1583
+ * rm: Fix distrobox-enter and distrobox-rm to handle containers that have environment variables shoter than 5 symbols by @senioroman4uk in #1545
+ * rm: add fallback value to response_force
+ * rm: ask to force-delete if running and in interactive mode
+ * rm: fix IFS overwriting, Fix #1400
+ * rm: remove dead code, remove container volumes.
+
-------------------------------------------------------------------
Sat May 11 03:38:58 UTC 2024 - jun wang
diff --git a/packages/d/distrobox/distrobox.spec b/packages/d/distrobox/distrobox.spec
index 8dd63e9b89e..00dcabeb4b4 100644
--- a/packages/d/distrobox/distrobox.spec
+++ b/packages/d/distrobox/distrobox.spec
@@ -17,7 +17,7 @@
Name: distrobox
-Version: 1.7.2.1
+Version: 1.8.0
Release: 0
Summary: Use any linux distribution inside your terminal
License: GPL-3.0-only
diff --git a/packages/d/dtc/.files b/packages/d/dtc/.files
index e525bede735..1e1fb747851 100644
Binary files a/packages/d/dtc/.files and b/packages/d/dtc/.files differ
diff --git a/packages/d/dtc/.rev b/packages/d/dtc/.rev
index e2baff33afb..4f0cf361355 100644
--- a/packages/d/dtc/.rev
+++ b/packages/d/dtc/.rev
@@ -334,4 +334,12 @@
1083214
+
+ dc5b5cdd9bd5fb0e44c5626589052562
+ 1.7.1
+
+ anag+factory
+
+ 1217247
+
diff --git a/packages/d/dtc/dtc-1.7.0.tar.gz b/packages/d/dtc/dtc-1.7.0.tar.gz
deleted file mode 120000
index 1a518c07f10..00000000000
--- a/packages/d/dtc/dtc-1.7.0.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreiceqrhlknz7q6amug33j5sma45tjhnborvkvv3mkmpwlko5esbsgi
\ No newline at end of file
diff --git a/packages/d/dtc/dtc-1.7.0.tar.sign b/packages/d/dtc/dtc-1.7.0.tar.sign
deleted file mode 100644
index b0d9816e372..00000000000
--- a/packages/d/dtc/dtc-1.7.0.tar.sign
+++ /dev/null
@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEEO+dNsU4E3yXUXRK2zQJF27ox2GcFAmP7EOQACgkQzQJF27ox
-2GcU3RAAixXFsHnx8a2CENeoa/prw3qI7pUpw3YVqEHRAZHsHy3GCQr3cxL8hZOq
-W21ZfqI6vueVloRI/+qP4yv7aozzv/40jLGAvHY+Mh83BOjjBkxyHeQxRPo/LfV8
-CMfh157Cvt/2lWF39csqVoid5P+qF8RahaZiRObiMpuillrFCxS20N2WZW4PmbO+
-fSwW1FWnlWGgPK17K15m2YKJaxIy0UijlW/gAVVHWU4tEQjGvvkOlEyB2brJbUO8
-ObjfoczMCNdDbsb0aFw019J878BfgKLBqEe2q96k+E77O3PDDJ8zag15JWFC7rYK
-tKhy0KFHoV3DNBupViGuTzn5hAs4OUZmTfmiaW7+dum+EUY5KGJDdDP4gjbOTl8N
-a27I2Q9ycP9+YXlcFzEHnrSR2k04Wcmx3LSlSo2/qZZo8Z2wy/sCLwodFg6EWRNw
-nBEW5SfBQZGVjdO9EX3/YmEhIJqR74+QeHSj4JnlesIIpdcoXK0305S0VgolDLTV
-63TDrXTlBAkW0nS4JGv+hKJYMdL9TcxL61CchAYXxxO2xRPw9iiXawa4AdIESllq
-fzs0ytyF3nbyNBrrlt9H2YveDvGaJBoAIp8phZqYkdeZJKLS+JtgWz3SA9rLGTQO
-M7ZPCJe1s4lDIXq9MqOdBFUx1t9WN6Xld39bjNKCZNVv2pruBy8=
-=Kv5g
------END PGP SIGNATURE-----
diff --git a/packages/d/dtc/dtc-1.7.1.tar.gz b/packages/d/dtc/dtc-1.7.1.tar.gz
new file mode 120000
index 00000000000..0fe02f2839b
--- /dev/null
+++ b/packages/d/dtc/dtc-1.7.1.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreievglyqbgcfk4i2jwrxqfx5kz67zbjdxma7lgwwyreipiis4vj5ty
\ No newline at end of file
diff --git a/packages/d/dtc/dtc-1.7.1.tar.sign b/packages/d/dtc/dtc-1.7.1.tar.sign
new file mode 100644
index 00000000000..c687b3deb8a
--- /dev/null
+++ b/packages/d/dtc/dtc-1.7.1.tar.sign
@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=zsJV
+-----END PGP SIGNATURE-----
diff --git a/packages/d/dtc/dtc.changes b/packages/d/dtc/dtc.changes
index 359405b9af2..d4d5c143ed3 100644
--- a/packages/d/dtc/dtc.changes
+++ b/packages/d/dtc/dtc.changes
@@ -1,3 +1,32 @@
+-------------------------------------------------------------------
+Tue Oct 22 07:24:23 UTC 2024 - Guillaume GARDET
+
+- Update to 1.7.1:
+ * dtc
+ * Fix check for 10-bit I2C addresses
+ * Improve documentation of -@ option
+ * Update to libyaml >= 0.2.3
+ * Improvements & fixes for device graph checks
+ * Add -L / --local-fixups option
+ * Add check for length of interrupt-map properties
+ * libfdt
+ * Add fdt_path_getprop_namelen()
+ * Add fdt_get_symbol() and fdt_get_symbol_namelen()
+ * Correct documentation of fdt_path_offset()
+ * Correct documentation of fdt_appendprop_addrrange()
+ * Validate aliases is fdt_get_alias_namelen()
+ * Don't overwrite phandles when applying overlays
+ * Require Python 3
+ * pylibfdt
+ * Support boolean properties
+ * Fixes for current Python versions
+ * General
+ * Assorted bugfixes
+ * Assorted build improvements
+ * Assorted typo fixes in docs
+ * Some additional testcases
+ * Move to GitHub Actions based CI
+
-------------------------------------------------------------------
Tue Apr 25 08:42:48 UTC 2023 - Guillaume GARDET
diff --git a/packages/d/dtc/dtc.spec b/packages/d/dtc/dtc.spec
index a87ab668bf5..b186ff39339 100644
--- a/packages/d/dtc/dtc.spec
+++ b/packages/d/dtc/dtc.spec
@@ -1,7 +1,7 @@
#
# spec file for package dtc
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%define sover 1
Name: dtc
-Version: 1.7.0
+Version: 1.7.1
Release: 0
Summary: Device-tree compiler
License: GPL-2.0-or-later
@@ -89,7 +89,6 @@ export EXTRA_CFLAGS="%{optflags}"
%postun -n libfdt%{sover} -p /sbin/ldconfig
%files -n libfdt%{sover}
-%{_libdir}/libfdt-%{version}.so
%{_libdir}/libfdt.so.*
%files -n libfdt-devel
diff --git a/packages/f/freerdp/.files b/packages/f/freerdp/.files
index 7754bf50dd5..a95b34ac3c8 100644
Binary files a/packages/f/freerdp/.files and b/packages/f/freerdp/.files differ
diff --git a/packages/f/freerdp/.rev b/packages/f/freerdp/.rev
index b990febe3cf..0e6657e2a96 100644
--- a/packages/f/freerdp/.rev
+++ b/packages/f/freerdp/.rev
@@ -690,4 +690,12 @@ This is a less intrusive change than the original https://build.opensuse.org/req
1198158
+
+ a58b02876f8f7bc7b79727c7f2543e7e
+ 3.9.0
+
+ anag+factory
+
+ 1217228
+
diff --git a/packages/f/freerdp/FreeRDP-3.8.0.tar.gz b/packages/f/freerdp/FreeRDP-3.8.0.tar.gz
deleted file mode 120000
index 9675e0cec73..00000000000
--- a/packages/f/freerdp/FreeRDP-3.8.0.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeig45dczx56u6jpb74b2ynzvvknhqyj27mgxmtvwp6hkc3xqbi3zbq
\ No newline at end of file
diff --git a/packages/f/freerdp/FreeRDP-3.9.0.tar.gz b/packages/f/freerdp/FreeRDP-3.9.0.tar.gz
new file mode 120000
index 00000000000..aaf39cfc6fd
--- /dev/null
+++ b/packages/f/freerdp/FreeRDP-3.9.0.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeif7xy4otrepqfhhgxljpya3cpyf7v3tcmdz4zcwvv4rxybxgn75ve
\ No newline at end of file
diff --git a/packages/f/freerdp/freerdp.changes b/packages/f/freerdp/freerdp.changes
index a5e7dde8d43..7e8352ee326 100644
--- a/packages/f/freerdp/freerdp.changes
+++ b/packages/f/freerdp/freerdp.changes
@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Wed Oct 23 05:10:01 UTC 2024 - ecsos
+
+- Update to 3.9.0
+ So, what is new:
+ * Support for RDPEAR (remote credential guard) /remoteGuard option for non windows clients
+ * Global configuration file support, allowing to configure certificate
+ accept/ignore/... default settings for all users
+ * Simplified manpage generation, eliminates docbook and xmlto dependencies
+ speeding up builds
+ * New API for client channels to run tasks on RDP thread
+ * New extended transport layer API
+ * RDPECAM MJPEG support
+ * the first updates of timezone definitions from our automated ci
+ Noteworthy changes:
+ * Fix bugs in SSE4.1/AVX2 image copy (#10720)
+ * Add warnings for invalid monitor settings during connect (#10672)
+ * Fix ALSA microphone support (#10664)
+ * Fix modal windows in RAILS mode (#10629)
+ * Update experimental SDL3 client (SDL3 API should now have been stabilized,
+ various pull requests)
+ * Fix keyboard layouts, the external JSON did miss a few (#10639)
+
-------------------------------------------------------------------
Sun Sep 1 09:58:36 UTC 2024 - ecsos
diff --git a/packages/f/freerdp/freerdp.spec b/packages/f/freerdp/freerdp.spec
index eaf7708981d..52621a1d5f9 100644
--- a/packages/f/freerdp/freerdp.spec
+++ b/packages/f/freerdp/freerdp.spec
@@ -37,7 +37,7 @@
%define uwac_package %{uwac_version}-%{uwac_version}
Name: freerdp
-Version: 3.8.0
+Version: 3.9.0
Release: 0
Summary: Remote Desktop Viewer Client
License: Apache-2.0
diff --git a/packages/g/ghostscript/.files b/packages/g/ghostscript/.files
index 97966b5bad1..8d97edb193c 100644
Binary files a/packages/g/ghostscript/.files and b/packages/g/ghostscript/.files differ
diff --git a/packages/g/ghostscript/.rev b/packages/g/ghostscript/.rev
index 1cd5c4459a6..fa769bc0e41 100644
--- a/packages/g/ghostscript/.rev
+++ b/packages/g/ghostscript/.rev
@@ -604,4 +604,19 @@
Security fixes for CVE-2024-33869 bsc#1226946 and CVE-2023-52722 bsc#1223852 and CVE-2024-33870 bsc#1226944 and CVE-2024-33871 bsc#1225491 and CVE-2024-29510 bsc#1226945 for ghostscript and ghostscript-mini (forwarded request 1184312 from jsmeix)
1184313
+
+ ef2145a6f3e5941d1d08edc06e802124
+ 10.04.0
+
+ anag+factory
+ - update to 10.04.0 (bsc#1232173):
+ * Amongst other general bugs fixes, this release addresses:
+ + CVE-2024-46951
+ + CVE-2024-46952
+ + CVE-2024-46953
+ + CVE-2024-46954
+ + CVE-2024-46955
+ + CVE-2024-46956
+ 1217373
+
diff --git a/packages/g/ghostscript/ghostscript-10.03.1.tar.gz b/packages/g/ghostscript/ghostscript-10.03.1.tar.gz
deleted file mode 120000
index 218de61b2b7..00000000000
--- a/packages/g/ghostscript/ghostscript-10.03.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeibu6odcfvf3i7bdnmddpjhpyzgvifw3cx53fxf6wuj5exaucfl3ra
\ No newline at end of file
diff --git a/packages/g/ghostscript/ghostscript-10.04.0.tar.gz b/packages/g/ghostscript/ghostscript-10.04.0.tar.gz
new file mode 120000
index 00000000000..99a98ee48f4
--- /dev/null
+++ b/packages/g/ghostscript/ghostscript-10.04.0.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeifi5rbd2f56s5noyxshrbsbunea36vm327j63h3dr3w7ty3mrzosa
\ No newline at end of file
diff --git a/packages/g/ghostscript/ghostscript.changes b/packages/g/ghostscript/ghostscript.changes
index 9bf981a6534..35e6b8a194f 100644
--- a/packages/g/ghostscript/ghostscript.changes
+++ b/packages/g/ghostscript/ghostscript.changes
@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Wed Oct 23 08:54:59 UTC 2024 - Dirk Müller
+
+- update to 10.04.0 (bsc#1232173):
+ * Amongst other general bugs fixes, this release addresses:
+ + CVE-2024-46951
+ + CVE-2024-46952
+ + CVE-2024-46953
+ + CVE-2024-46954
+ + CVE-2024-46955
+ + CVE-2024-46956
+
-------------------------------------------------------------------
Mon Jul 1 11:56:34 UTC 2024 - Johannes Meixner
diff --git a/packages/g/ghostscript/ghostscript.spec b/packages/g/ghostscript/ghostscript.spec
index a452bc25ec3..e335c946a47 100644
--- a/packages/g/ghostscript/ghostscript.spec
+++ b/packages/g/ghostscript/ghostscript.spec
@@ -1,5 +1,5 @@
#
-# spec file
+# spec file for package ghostscript
#
# Copyright (c) 2024 SUSE LLC
#
@@ -24,19 +24,14 @@
%bcond_without apparmor
%endif
Name: ghostscript%{psuffix}
-Version: 10.03.1
+Version: 10.04.0
Release: 0
Summary: The Ghostscript interpreter for PostScript and PDF
License: AGPL-3.0-only
Group: Productivity/Office/Other
URL: https://www.ghostscript.com/
-# How to manually get Source0:
-# Go to https://www.ghostscript.com
-# -> "The current Ghostscript release 10.03.1 can be downloaded here" https://www.ghostscript.com/releases/index.html
-# -> "Ghostscript" https://www.ghostscript.com/releases/gsdnld.html
-# -> "Ghostscript 10.03.1 Source for all platforms / GNU Affero General Public License" = "Ghostscript AGPL Release"
-# https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10031/ghostscript-10.03.1.tar.gz
-Source0: https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10031/ghostscript-10.03.1.tar.gz
+# use "osc service manualrun" to fetch
+Source0: https://github.com/ArtifexSoftware/ghostpdl-downloads/releases/download/gs10040/ghostscript-%{version}.tar.gz
Source10: apparmor_ghostscript
# Patch0...Patch9 is for patches from upstream:
# Source10...Source99 is for sources from SUSE which are intended for upstream:
@@ -57,7 +52,7 @@ BuildRequires: pkgconfig
BuildRequires: update-alternatives
BuildRequires: zlib-devel
Requires(post): update-alternatives
-Requires(preun):update-alternatives
+Requires(preun): update-alternatives
# Provide the additional RPM Provides of the ghostscript-library package
# (ghostscript_x11 is provided by the ghostscript-x11 sub-package, see below).
# The "Provides: ghostscript_any" is there to support "BuildRequires: ghostscript_any"
diff --git a/packages/g/gmic/.files b/packages/g/gmic/.files
index bea224308f0..8a750f0a6f8 100644
Binary files a/packages/g/gmic/.files and b/packages/g/gmic/.files differ
diff --git a/packages/g/gmic/.rev b/packages/g/gmic/.rev
index 96e324cd725..caa72159d3c 100644
--- a/packages/g/gmic/.rev
+++ b/packages/g/gmic/.rev
@@ -399,4 +399,12 @@
Update to 3.4.2
1204722
+
+ 8717c4e5ce7eb9ab7ae9bbed8d0d24e6
+ 3.4.3
+
+ anag+factory
+ update to 3.4.3
+ 1217124
+
diff --git a/packages/g/gmic/gmic.changes b/packages/g/gmic/gmic.changes
index 13e9cefb3ce..863d064cb30 100644
--- a/packages/g/gmic/gmic.changes
+++ b/packages/g/gmic/gmic.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:19:18 UTC 2024 - Christophe Marin
+
+- Update to 3.4.3. No changelog.
+
-------------------------------------------------------------------
Mon Sep 23 08:39:16 UTC 2024 - Christophe Marin
diff --git a/packages/g/gmic/gmic.spec b/packages/g/gmic/gmic.spec
index fec524cd97b..1f0c7d78b1b 100644
--- a/packages/g/gmic/gmic.spec
+++ b/packages/g/gmic/gmic.spec
@@ -40,7 +40,7 @@
%define gmic_datadir %{_datadir}/gmic
Name: gmic
-Version: 3.4.2
+Version: 3.4.3
Release: 0
Summary: GREYC's Magick for Image Computing (denoise and others)
# gmic-qt is GPL-3.0-or-later, zart is CECILL-2.0, libgmic and cli program are
@@ -87,6 +87,7 @@ BuildRequires: pkgconfig(libheif)
BuildRequires: pkgconfig(libjpeg)
BuildRequires: pkgconfig(libpng)
BuildRequires: pkgconfig(libtiff-4)
+BuildRequires: pkgconfig(libwebp)
BuildRequires: pkgconfig(opencv4)
BuildRequires: pkgconfig(x11)
BuildRequires: pkgconfig(xcb-shm)
diff --git a/packages/g/gmic/gmic_3.4.2.tar.gz b/packages/g/gmic/gmic_3.4.2.tar.gz
deleted file mode 120000
index f92f7f90d92..00000000000
--- a/packages/g/gmic/gmic_3.4.2.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeiejffsenahceqrggp23i5zfbrth2zqbjz4by65ugfy2oj5cihyvum
\ No newline at end of file
diff --git a/packages/g/gmic/gmic_3.4.3.tar.gz b/packages/g/gmic/gmic_3.4.3.tar.gz
new file mode 120000
index 00000000000..484151a28c0
--- /dev/null
+++ b/packages/g/gmic/gmic_3.4.3.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeigy4c5qhrjhhfsvdufuwe4nplw4ka3uc43lrzz62goweypdkvaomm
\ No newline at end of file
diff --git a/packages/g/gnome-control-center/.files b/packages/g/gnome-control-center/.files
index 0d68b3eea99..a9db19c412f 100644
Binary files a/packages/g/gnome-control-center/.files and b/packages/g/gnome-control-center/.files differ
diff --git a/packages/g/gnome-control-center/.rev b/packages/g/gnome-control-center/.rev
index c050c476763..de7f3b6b282 100644
--- a/packages/g/gnome-control-center/.rev
+++ b/packages/g/gnome-control-center/.rev
@@ -2218,4 +2218,12 @@ New stable rel
SCripted push of GNOME 47
1205445
+
+ 7e5e0bc67d1252312b3c3b9aa1be6779
+ 47.1.1
+
+ anag+factory
+
+ 1217069
+
diff --git a/packages/g/gnome-control-center/_service b/packages/g/gnome-control-center/_service
index 09c8bb0697b..247c4948818 100644
--- a/packages/g/gnome-control-center/_service
+++ b/packages/g/gnome-control-center/_service
@@ -3,11 +3,11 @@
git
https://gitlab.gnome.org/GNOME/gnome-control-center.git
- 9c6b639a45e2e5643d7e7541dededef43751c79c
+ 47.1.1
@PARENT_TAG@+@TAG_OFFSET@
(.*)\+0
\1
- enable
+ disable
diff --git a/packages/g/gnome-control-center/_servicedata b/packages/g/gnome-control-center/_servicedata
deleted file mode 100644
index 757ad48bc60..00000000000
--- a/packages/g/gnome-control-center/_servicedata
+++ /dev/null
@@ -1,4 +0,0 @@
-
-
- https://gitlab.gnome.org/GNOME/gnome-control-center.git
- 9c6b639a45e2e5643d7e7541dededef43751c79c
\ No newline at end of file
diff --git a/packages/g/gnome-control-center/gnome-control-center-47.0.1+8.obscpio b/packages/g/gnome-control-center/gnome-control-center-47.0.1+8.obscpio
deleted file mode 120000
index 1843ae472e7..00000000000
--- a/packages/g/gnome-control-center/gnome-control-center-47.0.1+8.obscpio
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeiffdi4wlf4jisbdiqxqlaboverof324iwyqjfrcjytvv4vz5oycee
\ No newline at end of file
diff --git a/packages/g/gnome-control-center/gnome-control-center-47.1.1.obscpio b/packages/g/gnome-control-center/gnome-control-center-47.1.1.obscpio
new file mode 120000
index 00000000000..53dbdf091e7
--- /dev/null
+++ b/packages/g/gnome-control-center/gnome-control-center-47.1.1.obscpio
@@ -0,0 +1 @@
+/ipfs/bafybeihzhzivnvay4p2h34g2ct4ptsoicky6vnksqeffdefkxulck45ncu
\ No newline at end of file
diff --git a/packages/g/gnome-control-center/gnome-control-center.changes b/packages/g/gnome-control-center/gnome-control-center.changes
index 4e64d6a44ba..0cdffb546eb 100644
--- a/packages/g/gnome-control-center/gnome-control-center.changes
+++ b/packages/g/gnome-control-center/gnome-control-center.changes
@@ -1,3 +1,33 @@
+-------------------------------------------------------------------
+Tue Oct 22 15:12:56 UTC 2024 - Bjørn Lie
+
+- Update to version 47.1.1:
+ + Fix crash on display scales > 1 due to conflicting type
+ registration.
+
+-------------------------------------------------------------------
+Mon Oct 21 16:31:01 UTC 2024 - Bjørn Lie
+
+- Update to version 47.1:
+ + About: Allow FQDN hostnames
+ + Appearance: Fix thumbnailing of backgrounds causing OOM kills
+ + Date and Time: Fix resize issue in the time format row when
+ shown in small window sizes
+ + Online Accounts: Fix untranslated account provider info string
+ + Region and Language: Update language row after closing language
+ selector
+ + Remote Desktop: Hide "Remote Desktop" row when
+ gnome-remote-desktop is not available
+ + Wacom:
+ - Don't crash when handling an unknown stylus ID
+ - Don't show Map Buttons for fallback devices
+ - Handle all external remotes like an external TV remote-like
+ device
+ - Make assets recolaborable, supporting dark-style,
+ high-contrast, and accent colors
+ - Support HDPI for tablet/stylus illustration images
+ + Updated translations.
+
-------------------------------------------------------------------
Fri Sep 27 17:25:17 UTC 2024 - bjorn.lie@gmail.com
diff --git a/packages/g/gnome-control-center/gnome-control-center.obsinfo b/packages/g/gnome-control-center/gnome-control-center.obsinfo
index 645ce53a245..46bebe9dbc6 100644
--- a/packages/g/gnome-control-center/gnome-control-center.obsinfo
+++ b/packages/g/gnome-control-center/gnome-control-center.obsinfo
@@ -1,4 +1,4 @@
name: gnome-control-center
-version: 47.0.1+8
-mtime: 1727359874
-commit: 9c6b639a45e2e5643d7e7541dededef43751c79c
+version: 47.1.1
+mtime: 1729605818
+commit: 7985fc671ad43f5925b9012e6c51231ad73a628d
diff --git a/packages/g/gnome-control-center/gnome-control-center.spec b/packages/g/gnome-control-center/gnome-control-center.spec
index ea69fead6a7..792ac42f98d 100644
--- a/packages/g/gnome-control-center/gnome-control-center.spec
+++ b/packages/g/gnome-control-center/gnome-control-center.spec
@@ -26,7 +26,7 @@
%endif
Name: gnome-control-center
-Version: 47.0.1+8
+Version: 47.1.1
Release: 0
Summary: The GNOME Control Center
License: GPL-2.0-or-later
@@ -81,7 +81,7 @@ BuildRequires: pkgconfig(goa-1.0) >= 3.51.0
BuildRequires: pkgconfig(goa-backend-1.0)
BuildRequires: pkgconfig(gobject-2.0)
BuildRequires: pkgconfig(gobject-introspection-1.0)
-BuildRequires: pkgconfig(gsettings-desktop-schemas) >= 47.alpha
+BuildRequires: pkgconfig(gsettings-desktop-schemas) >= 47.0
BuildRequires: pkgconfig(gsound)
BuildRequires: pkgconfig(gthread-2.0)
BuildRequires: pkgconfig(gtk4) >= 4.15.2
diff --git a/packages/g/gnome-remote-desktop/.files b/packages/g/gnome-remote-desktop/.files
index 679c67562bb..c8f61fce2be 100644
Binary files a/packages/g/gnome-remote-desktop/.files and b/packages/g/gnome-remote-desktop/.files differ
diff --git a/packages/g/gnome-remote-desktop/.rev b/packages/g/gnome-remote-desktop/.rev
index 8dec179c822..43f419fe5ff 100644
--- a/packages/g/gnome-remote-desktop/.rev
+++ b/packages/g/gnome-remote-desktop/.rev
@@ -269,4 +269,12 @@ need to be staged with libVNCServer sr#862644 (forwarded request 862647 from fcr
1208455
+
+ 767c458dcc6e0e1d6eca9795d5dd48b2
+ 47.1
+
+ anag+factory
+
+ 1216981
+
diff --git a/packages/g/gnome-remote-desktop/_service b/packages/g/gnome-remote-desktop/_service
index 83136e36abb..67c8aa6c73b 100644
--- a/packages/g/gnome-remote-desktop/_service
+++ b/packages/g/gnome-remote-desktop/_service
@@ -3,7 +3,7 @@
https://gitlab.gnome.org/GNOME/gnome-remote-desktop.git
git
- 47.0
+ 47.1
@PARENT_TAG@
disable
diff --git a/packages/g/gnome-remote-desktop/gnome-remote-desktop-47.0.obscpio b/packages/g/gnome-remote-desktop/gnome-remote-desktop-47.0.obscpio
deleted file mode 120000
index 291b42322a6..00000000000
--- a/packages/g/gnome-remote-desktop/gnome-remote-desktop-47.0.obscpio
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeihdutclqkqwy7hzhqazbz6zenbfc3qp7xopo7vlvxc7v2qwyfw37e
\ No newline at end of file
diff --git a/packages/g/gnome-remote-desktop/gnome-remote-desktop-47.1.obscpio b/packages/g/gnome-remote-desktop/gnome-remote-desktop-47.1.obscpio
new file mode 120000
index 00000000000..50d17bb8bb1
--- /dev/null
+++ b/packages/g/gnome-remote-desktop/gnome-remote-desktop-47.1.obscpio
@@ -0,0 +1 @@
+/ipfs/bafybeibhdgposdf2qk3decfecqkttogtn7iesxgpdkkpzt2hplieaxvpxe
\ No newline at end of file
diff --git a/packages/g/gnome-remote-desktop/gnome-remote-desktop.changes b/packages/g/gnome-remote-desktop/gnome-remote-desktop.changes
index 9c02f37feb7..2483d5d2170 100644
--- a/packages/g/gnome-remote-desktop/gnome-remote-desktop.changes
+++ b/packages/g/gnome-remote-desktop/gnome-remote-desktop.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Oct 21 16:38:36 UTC 2024 - Bjørn Lie
+
+- Update to version 47.1:
+ + General code improvements
+ + Updated translations.
+
-------------------------------------------------------------------
Mon Sep 16 12:23:29 UTC 2024 - Bjørn Lie
diff --git a/packages/g/gnome-remote-desktop/gnome-remote-desktop.obsinfo b/packages/g/gnome-remote-desktop/gnome-remote-desktop.obsinfo
index c69fb0ead73..cebede1ece6 100644
--- a/packages/g/gnome-remote-desktop/gnome-remote-desktop.obsinfo
+++ b/packages/g/gnome-remote-desktop/gnome-remote-desktop.obsinfo
@@ -1,4 +1,4 @@
name: gnome-remote-desktop
-version: 47.0
-mtime: 1726344664
-commit: 8bbf350a854ebac43dd8c5f395de641df0290745
+version: 47.1
+mtime: 1729521174
+commit: c82ebcaf1efad929e3a052c30490d348b785e1b7
diff --git a/packages/g/gnome-remote-desktop/gnome-remote-desktop.spec b/packages/g/gnome-remote-desktop/gnome-remote-desktop.spec
index 9810fe4ceca..b4713b643e6 100644
--- a/packages/g/gnome-remote-desktop/gnome-remote-desktop.spec
+++ b/packages/g/gnome-remote-desktop/gnome-remote-desktop.spec
@@ -23,7 +23,7 @@
%define polkit_req >= 122
Name: gnome-remote-desktop
-Version: 47.0
+Version: 47.1
Release: 0
Summary: GNOME Remote Desktop screen sharing service
License: GPL-2.0-or-later
diff --git a/packages/g/gnome-terminal/.files b/packages/g/gnome-terminal/.files
index 3ed3b9b0d52..8e5f8ce3364 100644
Binary files a/packages/g/gnome-terminal/.files and b/packages/g/gnome-terminal/.files differ
diff --git a/packages/g/gnome-terminal/.rev b/packages/g/gnome-terminal/.rev
index 0bbe28435aa..b435863dd68 100644
--- a/packages/g/gnome-terminal/.rev
+++ b/packages/g/gnome-terminal/.rev
@@ -2503,4 +2503,12 @@
SCripted push of GNOME 47
1205462
+
+ 884a46d3cf00e5bc75896a248607b8cb
+ 3.54.1
+
+ anag+factory
+
+ 1216976
+
diff --git a/packages/g/gnome-terminal/_service b/packages/g/gnome-terminal/_service
index 0fcc9fe2d1f..1234a66037d 100644
--- a/packages/g/gnome-terminal/_service
+++ b/packages/g/gnome-terminal/_service
@@ -5,7 +5,7 @@
git
@PARENT_TAG@
disable
- 3.54.0
+ 3.54.1
diff --git a/packages/g/gnome-terminal/gnome-terminal-3.54.0.obscpio b/packages/g/gnome-terminal/gnome-terminal-3.54.0.obscpio
deleted file mode 120000
index 8ffda046ff6..00000000000
--- a/packages/g/gnome-terminal/gnome-terminal-3.54.0.obscpio
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeicnh7s3zsqgsd2mxth3uos5d5hh6gfs5vvy44xeywgcsbzam7hlxm
\ No newline at end of file
diff --git a/packages/g/gnome-terminal/gnome-terminal-3.54.1.obscpio b/packages/g/gnome-terminal/gnome-terminal-3.54.1.obscpio
new file mode 120000
index 00000000000..b777b2419da
--- /dev/null
+++ b/packages/g/gnome-terminal/gnome-terminal-3.54.1.obscpio
@@ -0,0 +1 @@
+/ipfs/bafybeihh3yr3mc3frudillgnerhosaljtp5uzszrwpzkwlz4rkhswh4bi4
\ No newline at end of file
diff --git a/packages/g/gnome-terminal/gnome-terminal.changes b/packages/g/gnome-terminal/gnome-terminal.changes
index ac929a729e1..bbfe15276ec 100644
--- a/packages/g/gnome-terminal/gnome-terminal.changes
+++ b/packages/g/gnome-terminal/gnome-terminal.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Oct 22 07:50:35 UTC 2024 - Bjørn Lie
+
+- Update to version 3.54.1:
+ + prefs: Follow the theme variant setting
+ + Updated translations.
+
-------------------------------------------------------------------
Tue Sep 17 17:27:40 UTC 2024 - Bjørn Lie
diff --git a/packages/g/gnome-terminal/gnome-terminal.obsinfo b/packages/g/gnome-terminal/gnome-terminal.obsinfo
index b40b9a5c88c..c7d9ce6140d 100644
--- a/packages/g/gnome-terminal/gnome-terminal.obsinfo
+++ b/packages/g/gnome-terminal/gnome-terminal.obsinfo
@@ -1,4 +1,4 @@
name: gnome-terminal
-version: 3.54.0
-mtime: 1726342421
-commit: 965cb9307713c618253918633416fcad86bcc5d2
+version: 3.54.1
+mtime: 1729094525
+commit: bc7a5ad0cae22bc7724254eb5fe2e75698fb90a4
diff --git a/packages/g/gnome-terminal/gnome-terminal.spec b/packages/g/gnome-terminal/gnome-terminal.spec
index 4b88fdeb2d0..f03e6072a86 100644
--- a/packages/g/gnome-terminal/gnome-terminal.spec
+++ b/packages/g/gnome-terminal/gnome-terminal.spec
@@ -18,7 +18,7 @@
%bcond_without nautilus_extension
Name: gnome-terminal
-Version: 3.54.0
+Version: 3.54.1
Release: 0
Summary: GNOME Terminal
License: GPL-3.0-or-later AND LGPL-2.1-or-later
diff --git a/packages/g/google-guest-agent/.files b/packages/g/google-guest-agent/.files
index 25a010a3549..229abe9a843 100644
Binary files a/packages/g/google-guest-agent/.files and b/packages/g/google-guest-agent/.files differ
diff --git a/packages/g/google-guest-agent/.rev b/packages/g/google-guest-agent/.rev
index 7cb1fe3af81..96960a27ec2 100644
--- a/packages/g/google-guest-agent/.rev
+++ b/packages/g/google-guest-agent/.rev
@@ -513,4 +513,41 @@
- Drop dont_overwrite_ifcfg.patch, fixed upstream
1197809
+
+ d4d45c7251bccba320842cb9e98fbf9c
+ 20241018.01
+
+ anag+factory
+ - Update to version 20241018.01 (bsc#1231775, bsc#1231776)
+ * Add support for including agent manager in guest-agent package (#456)
+ * plugin manager: Introduce the systemd service file (#455)
+ * documentation: Update metadata script runner details (#453)
+- from version 20241013.00
+ * Update OWNERS (#452)
+- from version 20241011.01
+ * SUSE no overwrite bug fix, Ubuntu 18.04 exception (#451)
+- from version 20241011.00
+ * Skip MDS setup by default for this release (#450)
+- from version 20241010.01
+ * Revert "network/netplan: Adjust link-local accordingly (#443)" (#448)
+ * Set enable regardless of previous check failed or not (#447)
+- from version 20241009.03
+ * Avoid unnecessary reloads, check before overwriting configs (#446)
+- from version 20241009.02
+ * network/netplan: Do generate instead of apply (#445)
+- from version 20241009.01
+ * Skip SetupInterfaces if configs are already applied (#444)
+ * network/netplan: Adjust link-local accordingly (#443)
+ * Repeated logging could be mistaken for a recurring issue,
+ log mds mtls endpoint error only once (#439)
+ * Retry MDS PUT operation, reload netplan/networkctl
+ only if configs are changed (#438)
+ * Log interface state after setting up network (#437)
+ * network: Debian 12 rollback only if default netplan is ok (#436)
+- from version 20240930.01
+ * Change mtls mds defaults, update log message to assure error is harmless (#434)
+- from version 20240930.00
+ * network: Restore Debian 12 netplan configuration. (#433) (forwarded request 1217002 from glaubitz)
+ 1217007
+
diff --git a/packages/g/google-guest-agent/_service b/packages/g/google-guest-agent/_service
index 3de9a86b9e4..78f07a12049 100644
--- a/packages/g/google-guest-agent/_service
+++ b/packages/g/google-guest-agent/_service
@@ -3,8 +3,8 @@
https://github.com/GoogleCloudPlatform/guest-agent/
git
.git
- 20240816.00
- 20240816.00
+ 20241018.01
+ 20241018.01
enable
@@ -15,6 +15,6 @@
guest-agent
- guest-agent-20240816.00.tar.gz
+ guest-agent-20241018.01.tar.gz
diff --git a/packages/g/google-guest-agent/_servicedata b/packages/g/google-guest-agent/_servicedata
index 5c205e1a504..90c603f53fc 100644
--- a/packages/g/google-guest-agent/_servicedata
+++ b/packages/g/google-guest-agent/_servicedata
@@ -1,4 +1,4 @@
https://github.com/GoogleCloudPlatform/guest-agent/
- da50bde8e5f732376eeb96066339c1c2be716382
\ No newline at end of file
+ b57b78084040636ecffb1ec2a351e1f192e43768
\ No newline at end of file
diff --git a/packages/g/google-guest-agent/google-guest-agent.changes b/packages/g/google-guest-agent/google-guest-agent.changes
index 00a3333ec47..c44708a5bae 100644
--- a/packages/g/google-guest-agent/google-guest-agent.changes
+++ b/packages/g/google-guest-agent/google-guest-agent.changes
@@ -1,3 +1,105 @@
+-------------------------------------------------------------------
+Tue Oct 22 06:30:47 UTC 2024 - John Paul Adrian Glaubitz
+
+- Update to version 20241018.01 (bsc#1231775, bsc#1231776)
+ * Add support for including agent manager in guest-agent package (#456)
+ * plugin manager: Introduce the systemd service file (#455)
+ * documentation: Update metadata script runner details (#453)
+- from version 20241013.00
+ * Update OWNERS (#452)
+- from version 20241011.01
+ * SUSE no overwrite bug fix, Ubuntu 18.04 exception (#451)
+- from version 20241011.00
+ * Skip MDS setup by default for this release (#450)
+- from version 20241010.01
+ * Revert "network/netplan: Adjust link-local accordingly (#443)" (#448)
+ * Set enable regardless of previous check failed or not (#447)
+- from version 20241009.03
+ * Avoid unnecessary reloads, check before overwriting configs (#446)
+- from version 20241009.02
+ * network/netplan: Do generate instead of apply (#445)
+- from version 20241009.01
+ * Skip SetupInterfaces if configs are already applied (#444)
+ * network/netplan: Adjust link-local accordingly (#443)
+ * Repeated logging could be mistaken for a recurring issue,
+ log mds mtls endpoint error only once (#439)
+ * Retry MDS PUT operation, reload netplan/networkctl
+ only if configs are changed (#438)
+ * Log interface state after setting up network (#437)
+ * network: Debian 12 rollback only if default netplan is ok (#436)
+- from version 20240930.01
+ * Change mtls mds defaults, update log message to assure error is harmless (#434)
+- from version 20240930.00
+ * network: Restore Debian 12 netplan configuration. (#433)
+ * network: Remove primary NIC left over configs. (#432)
+ * Update VLAN interfaces format to match with MDS (#431)
+ * Fix panics in agent when setting up VLAN with netplan (#430)
+ * Add VLAN NIC support for NetworkManager (#429)
+ * Fix debian12 netplan config issue, use ptr receiver (#428)
+ * Update README to reflect new network manager changes (#427)
+ * Introduce a configuration toggle for enabling/disabling cloud logging (#413)
+ * Adapt and update config key to be consistent with MDS (#426)
+ * Allow users to enable/disable the mds mtls via metadata key (#423)
+ * Make primary nic management config consistent across all network managers (#422)
+ * Document disabling account manager on AD (#421)
+ * Update README with MDS MTLS docs (#418)
+ * Avoid writing configuration files when they already exist on wicked and (#410)
+ * Update golang.org/x/net dependencies to catch up on CVEs (#412)
+ * Get rid of deperecated dependencies in snapshot service generate code (#411)
+ * Fix where agent panics on nil event (#409)
+ * Configure primary nic if only set in cfg file (#408)
+ * Update NIC management strategy (#402)
+ * Only release dhclient leases for an interface if the
+ respective dhclient is still running (#407)
+ * Disable OS Login without pruning off any extra suffix. (#400)
+ * Skip root cert rotation if installed once (#405)
+ * Add ipv6 support to guest agent (#404)
+ * Update Accounts documentation (#403)
+ * Update google-startup-scripts.service to enable logging (#399)
+ * Network subsystem remove os rules (#396)
+ * oslogin: Don't remove sshca watcher when oslogin is disabled (#398)
+ * Update dependencies to catch up on CVE fixes (#397)
+ * Network manager netplan implementation (#386)
+ * Update dependencies to catch up on CVE fixes (#391)
+ * Log current available routes on error (#388)
+ * Fix command monitor bugs (#389)
+ * windows account: Ignore "user already belogs to group" error (#387)
+ * Add more error logging in snapshot handling requests, use common retry util (#384)
+ * All non-200 status code from MDS should raise error (#383)
+ * Change metadata key to enable-oslogin-certificates (#382)
+ * Update dhclient pid/lease file directory to abide apparmor rules (#381)
+ * Add COS homedir-gid patch to upstream. (#365)
+ * Add require-oslogin-certificates logic to disable keys (#368)
+ * systemd-networkd: Support Debian 12's version (#372)
+ * Minor update typo in comment (#380)
+ * NetworkManager: Only set secondary interfaces as up (#378)
+ * address manager: Make sure we check for oldMetadata (#375)
+ * network: Early setup network (#374)
+ * NetworkManager: Fix ipv6 and ipv4 mode attribute (#373)
+ * Network Manager: Make sure we clean up ifcfg files (#371)
+ * metadata script runner: Fix script download (#370)
+ * oslogin: Avoid adding extra empty line at the end of /etc/security/group.conf (#369)
+ * Dynamic vlan (#361)
+ * Check for nil response (#366)
+ * Create NetworkManager implementation (#362)
+ * Skip interface manager on Windows (#363)
+ * network: Remove ignore setup (#360)
+ * Create wicked network service implementation and its respective unit (#356)
+ * Update metadata script runner, add tests (#357)
+ * Refactor guest-agent to use common retry util (#355)
+ * Flush logs before exiting #358 (#359)
+ * Create systemd-networkd unit tests. (#354)
+ * Update network manager unit tests (#351)
+ * Implement retry util (#350)
+ * Refactor utils package to not dump everything unrelated into one file (#352)
+ * Set version on metadata script runner (#353)
+ * Implement cleanup of deprecated configuration directives (#348)
+ * Ignore DHCP offered routes only for secondary nics (#347)
+ * Deprecate DHClient in favor of systemd-networkd (#342)
+ * Generate windows and linux licenses (#346)
+ * Remove quintonamore from OWNERS (#345)
+ * Delete integration tests (#343)
+
-------------------------------------------------------------------
Wed Aug 28 11:02:37 UTC 2024 - John Paul Adrian Glaubitz
diff --git a/packages/g/google-guest-agent/google-guest-agent.spec b/packages/g/google-guest-agent/google-guest-agent.spec
index 395050922e1..4ef41969b42 100644
--- a/packages/g/google-guest-agent/google-guest-agent.spec
+++ b/packages/g/google-guest-agent/google-guest-agent.spec
@@ -24,7 +24,7 @@
%global import_path %{provider_prefix}
Name: google-guest-agent
-Version: 20240816.00
+Version: 20241018.01
Release: 0
Summary: Google Cloud Guest Agent
License: Apache-2.0
diff --git a/packages/g/google-guest-agent/guest-agent-20240816.00.tar.gz b/packages/g/google-guest-agent/guest-agent-20240816.00.tar.gz
deleted file mode 120000
index dad07c9309e..00000000000
--- a/packages/g/google-guest-agent/guest-agent-20240816.00.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreia7mjfr6d36kmcar7clnp4k7v2k3lgshy5nxprlo3ightaxtjrv4y
\ No newline at end of file
diff --git a/packages/g/google-guest-agent/guest-agent-20241018.01.tar.gz b/packages/g/google-guest-agent/guest-agent-20241018.01.tar.gz
new file mode 120000
index 00000000000..c24ac37e676
--- /dev/null
+++ b/packages/g/google-guest-agent/guest-agent-20241018.01.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreibtplweeaootg7g26nkwrtoaqy46ke32mteco6256swi5avi3wjdm
\ No newline at end of file
diff --git a/packages/g/google-guest-agent/vendor.tar.gz b/packages/g/google-guest-agent/vendor.tar.gz
index 497d78fcfe3..1ccc09a750e 120000
--- a/packages/g/google-guest-agent/vendor.tar.gz
+++ b/packages/g/google-guest-agent/vendor.tar.gz
@@ -1 +1 @@
-/ipfs/bafybeifomql4ybrzr37tjmotpy6drcv73gzhtxkfjqius6hbpp2umm5zfe
\ No newline at end of file
+/ipfs/bafybeih2ov7lskcqk5z7jlnfxku5fc2tvl2ploiyumx6riwq2wsotd2kmi
\ No newline at end of file
diff --git a/packages/g/google-guest-configs/.files b/packages/g/google-guest-configs/.files
index c634936a9a8..e8f17e0a6a7 100644
Binary files a/packages/g/google-guest-configs/.files and b/packages/g/google-guest-configs/.files differ
diff --git a/packages/g/google-guest-configs/.rev b/packages/g/google-guest-configs/.rev
index 0d559fe6687..d481990a466 100644
--- a/packages/g/google-guest-configs/.rev
+++ b/packages/g/google-guest-configs/.rev
@@ -234,4 +234,22 @@
1206067
+
+ 9ace537f2fa1ee3f9fee87caedda85b2
+ 20241021.00
+
+ anag+factory
+ - Update to version 20241021.00 (bsc#1231775, bsc#1231776)
+ * Add GCE-specific config for systemd-resolved (#82)
+- from version 20241015.00
+ * Update google_set_multiqueue to enable on A3Ultra family (#79)
+- from version 20241013.00
+ * Update OWNERS (#81)
+- from version 20241010.00
+ * Depend on jq in enterprise linux (#80)
+- from version 20241008.00
+ * Always use IP from primary NIC in the
+ networkd-dispatcher routable hook (#78) (forwarded request 1217003 from glaubitz)
+ 1217008
+
diff --git a/packages/g/google-guest-configs/google-guest-configs-20240925.00.tar.gz b/packages/g/google-guest-configs/google-guest-configs-20240925.00.tar.gz
deleted file mode 120000
index 483a1d35eca..00000000000
--- a/packages/g/google-guest-configs/google-guest-configs-20240925.00.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreih42hxxabnwb6moyadhg43chameg4ubjuu625zbnsjvtqblr4nb7i
\ No newline at end of file
diff --git a/packages/g/google-guest-configs/google-guest-configs-20241021.00.tar.gz b/packages/g/google-guest-configs/google-guest-configs-20241021.00.tar.gz
new file mode 120000
index 00000000000..6a3f51f99ef
--- /dev/null
+++ b/packages/g/google-guest-configs/google-guest-configs-20241021.00.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreigqvgoe3hds3x32i22st7zg7ypiumoxhzb5nglcpi453hoqiqp6tq
\ No newline at end of file
diff --git a/packages/g/google-guest-configs/google-guest-configs.changes b/packages/g/google-guest-configs/google-guest-configs.changes
index e5019bf1103..6273d4548b3 100644
--- a/packages/g/google-guest-configs/google-guest-configs.changes
+++ b/packages/g/google-guest-configs/google-guest-configs.changes
@@ -1,3 +1,18 @@
+-------------------------------------------------------------------
+Tue Oct 22 06:46:40 UTC 2024 - John Paul Adrian Glaubitz
+
+- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
+ * Add GCE-specific config for systemd-resolved (#82)
+- from version 20241015.00
+ * Update google_set_multiqueue to enable on A3Ultra family (#79)
+- from version 20241013.00
+ * Update OWNERS (#81)
+- from version 20241010.00
+ * Depend on jq in enterprise linux (#80)
+- from version 20241008.00
+ * Always use IP from primary NIC in the
+ networkd-dispatcher routable hook (#78)
+
-------------------------------------------------------------------
Mon Sep 30 11:14:31 UTC 2024 - John Paul Adrian Glaubitz
diff --git a/packages/g/google-guest-configs/google-guest-configs.spec b/packages/g/google-guest-configs/google-guest-configs.spec
index 669ac7f087a..373f6a87603 100644
--- a/packages/g/google-guest-configs/google-guest-configs.spec
+++ b/packages/g/google-guest-configs/google-guest-configs.spec
@@ -23,7 +23,7 @@
%define _udevdir %(pkg-config --variable udev_dir udev)
%endif
Name: google-guest-configs
-Version: 20240925.00
+Version: 20241021.00
Release: 0
Summary: Google Cloud Guest Configs
License: Apache-2.0
diff --git a/packages/g/google-guest-oslogin/.files b/packages/g/google-guest-oslogin/.files
index b57ed19cab6..d4f53d8c2d8 100644
Binary files a/packages/g/google-guest-oslogin/.files and b/packages/g/google-guest-oslogin/.files differ
diff --git a/packages/g/google-guest-oslogin/.rev b/packages/g/google-guest-oslogin/.rev
index 49ee4aeef57..3ac44082424 100644
--- a/packages/g/google-guest-oslogin/.rev
+++ b/packages/g/google-guest-oslogin/.rev
@@ -292,4 +292,13 @@
1206068
+
+ eabf2b1202241ed7c9728cd2bfc4859f
+ 20241021.00
+
+ anag+factory
+ - Update to version 20241021.00 (bsc#1231775, bsc#1231776)
+ * Update OWNERS (#142) (forwarded request 1217004 from glaubitz)
+ 1217009
+
diff --git a/packages/g/google-guest-oslogin/google-guest-oslogin-20240925.00.tar.gz b/packages/g/google-guest-oslogin/google-guest-oslogin-20240925.00.tar.gz
deleted file mode 120000
index c33868bf604..00000000000
--- a/packages/g/google-guest-oslogin/google-guest-oslogin-20240925.00.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreiampz32bdrurhpjt5cacu5n3fh2wjtvtzw54xrxyl4cvh7oqh5qla
\ No newline at end of file
diff --git a/packages/g/google-guest-oslogin/google-guest-oslogin-20241021.00.tar.gz b/packages/g/google-guest-oslogin/google-guest-oslogin-20241021.00.tar.gz
new file mode 120000
index 00000000000..fe203c7ebd0
--- /dev/null
+++ b/packages/g/google-guest-oslogin/google-guest-oslogin-20241021.00.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreifn3i7hhhr7iacgrhorgnaunrfv4uxuxwegf45bm3vlnn3m4jr6de
\ No newline at end of file
diff --git a/packages/g/google-guest-oslogin/google-guest-oslogin.changes b/packages/g/google-guest-oslogin/google-guest-oslogin.changes
index 084367a0ea1..96c350dea3d 100644
--- a/packages/g/google-guest-oslogin/google-guest-oslogin.changes
+++ b/packages/g/google-guest-oslogin/google-guest-oslogin.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 22 07:40:29 UTC 2024 - John Paul Adrian Glaubitz
+
+- Update to version 20241021.00 (bsc#1231775, bsc#1231776)
+ * Update OWNERS (#142)
+
-------------------------------------------------------------------
Tue Oct 1 06:14:34 UTC 2024 - John Paul Adrian Glaubitz
diff --git a/packages/g/google-guest-oslogin/google-guest-oslogin.spec b/packages/g/google-guest-oslogin/google-guest-oslogin.spec
index f9cf965551f..01827b0dcb4 100644
--- a/packages/g/google-guest-oslogin/google-guest-oslogin.spec
+++ b/packages/g/google-guest-oslogin/google-guest-oslogin.spec
@@ -19,7 +19,7 @@
%{!?_pam_moduledir: %define _pam_moduledir %{_pamdir}}
Name: google-guest-oslogin
-Version: 20240925.00
+Version: 20241021.00
Release: 0
Summary: Google Cloud Guest OS Login
License: Apache-2.0
diff --git a/packages/g/google-osconfig-agent/.files b/packages/g/google-osconfig-agent/.files
index 734656120a9..1d8a2b128a4 100644
Binary files a/packages/g/google-osconfig-agent/.files and b/packages/g/google-osconfig-agent/.files differ
diff --git a/packages/g/google-osconfig-agent/.rev b/packages/g/google-osconfig-agent/.rev
index 531cf4743f9..25044c8ae22 100644
--- a/packages/g/google-osconfig-agent/.rev
+++ b/packages/g/google-osconfig-agent/.rev
@@ -469,4 +469,16 @@
1206069
+
+ b7f3730c3e254f665cab094a0e4a4255
+ 20241017.00
+
+ anag+factory
+ - Update to version 20241017.00 (bsc#1231775, bsc#1231776)
+ * Add a new CloudBuild trigger config-file for auto updating the
+ presubmit test container image on every new commit (#704)
+- from version 20241004.00
+ * Add new packagebuild presubmit that will use cloud-build (#694) (forwarded request 1217005 from glaubitz)
+ 1217038
+
diff --git a/packages/g/google-osconfig-agent/_service b/packages/g/google-osconfig-agent/_service
index 81bf4b10ec2..d5922c2afba 100644
--- a/packages/g/google-osconfig-agent/_service
+++ b/packages/g/google-osconfig-agent/_service
@@ -3,8 +3,8 @@
https://github.com/GoogleCloudPlatform/osconfig
git
.git
- 20240927.00
- 20240927.00
+ 20241017.00
+ 20241017.00
enable
@@ -15,6 +15,6 @@
osconfig
- osconfig-20240927.00.tar.gz
+ osconfig-20241017.00.tar.gz
diff --git a/packages/g/google-osconfig-agent/_servicedata b/packages/g/google-osconfig-agent/_servicedata
index 0b049654849..6be63ebac57 100644
--- a/packages/g/google-osconfig-agent/_servicedata
+++ b/packages/g/google-osconfig-agent/_servicedata
@@ -1,4 +1,4 @@
https://github.com/GoogleCloudPlatform/osconfig
- 54192dd5ce4d962a6ae08dfac8479a371db3951b
\ No newline at end of file
+ 207d00c00a9ee872ec7220086119e6aaaebc9500
\ No newline at end of file
diff --git a/packages/g/google-osconfig-agent/google-osconfig-agent.changes b/packages/g/google-osconfig-agent/google-osconfig-agent.changes
index 3461a823814..af2ed78b3ce 100644
--- a/packages/g/google-osconfig-agent/google-osconfig-agent.changes
+++ b/packages/g/google-osconfig-agent/google-osconfig-agent.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Tue Oct 22 08:06:48 UTC 2024 - John Paul Adrian Glaubitz
+
+- Update to version 20241017.00 (bsc#1231775, bsc#1231776)
+ * Add a new CloudBuild trigger config-file for auto updating the
+ presubmit test container image on every new commit (#704)
+- from version 20241004.00
+ * Add new packagebuild presubmit that will use cloud-build (#694)
+
-------------------------------------------------------------------
Mon Sep 30 11:22:04 UTC 2024 - John Paul Adrian Glaubitz
diff --git a/packages/g/google-osconfig-agent/google-osconfig-agent.spec b/packages/g/google-osconfig-agent/google-osconfig-agent.spec
index 1523ae186c9..bad9055ea8c 100644
--- a/packages/g/google-osconfig-agent/google-osconfig-agent.spec
+++ b/packages/g/google-osconfig-agent/google-osconfig-agent.spec
@@ -24,7 +24,7 @@
%global import_path %{provider_prefix}
Name: google-osconfig-agent
-Version: 20240927.00
+Version: 20241017.00
Release: 0
Summary: Google Cloud Guest Agent
License: Apache-2.0
diff --git a/packages/g/google-osconfig-agent/osconfig-20240927.00.tar.gz b/packages/g/google-osconfig-agent/osconfig-20240927.00.tar.gz
deleted file mode 120000
index 58a042f445a..00000000000
--- a/packages/g/google-osconfig-agent/osconfig-20240927.00.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeid6gjnmujhujztint5jlcduzjuoij4jgx2eyxglynh2jw4zgithgm
\ No newline at end of file
diff --git a/packages/g/google-osconfig-agent/osconfig-20241017.00.tar.gz b/packages/g/google-osconfig-agent/osconfig-20241017.00.tar.gz
new file mode 120000
index 00000000000..6d0fedd4d11
--- /dev/null
+++ b/packages/g/google-osconfig-agent/osconfig-20241017.00.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeigevr3brb47gqaouarstqtkiynxsq7r42gj3jrjgoamv5x4am7nny
\ No newline at end of file
diff --git a/packages/g/google-osconfig-agent/vendor.tar.gz b/packages/g/google-osconfig-agent/vendor.tar.gz
index dd225dc13e7..fd6e2019d1d 120000
--- a/packages/g/google-osconfig-agent/vendor.tar.gz
+++ b/packages/g/google-osconfig-agent/vendor.tar.gz
@@ -1 +1 @@
-/ipfs/bafybeib3ej6k2eovorcqeyr5gtlbtnalyqmq4gd2d3pifyy5z5tma73ncy
\ No newline at end of file
+/ipfs/bafybeif4kx3j6f7zu77qtsigi6kebksxvb6fkve6xktqysjxevkuxioieu
\ No newline at end of file
diff --git a/packages/g/gpu-screen-recorder-gtk/.files b/packages/g/gpu-screen-recorder-gtk/.files
index 3502e5f3fc2..a9b8a56555c 100644
Binary files a/packages/g/gpu-screen-recorder-gtk/.files and b/packages/g/gpu-screen-recorder-gtk/.files differ
diff --git a/packages/g/gpu-screen-recorder-gtk/.rev b/packages/g/gpu-screen-recorder-gtk/.rev
index 1327490ff03..cad2741e74c 100644
--- a/packages/g/gpu-screen-recorder-gtk/.rev
+++ b/packages/g/gpu-screen-recorder-gtk/.rev
@@ -51,4 +51,12 @@
1207361
+
+ 8406e7f3b9420e3469ecbdc1d0e8f813
+ 20241022
+
+ anag+factory
+
+ 1217106
+
diff --git a/packages/g/gpu-screen-recorder-gtk/_servicedata b/packages/g/gpu-screen-recorder-gtk/_servicedata
index 58d03cfa2e0..1fbe3d7431e 100644
--- a/packages/g/gpu-screen-recorder-gtk/_servicedata
+++ b/packages/g/gpu-screen-recorder-gtk/_servicedata
@@ -1,4 +1,4 @@
https://repo.dec05eba.com/gpu-screen-recorder-gtk.git
- 48d34f51a79883f14f2715ade1e2ab998176a863
\ No newline at end of file
+ 7fb7608b720068d3c114330e8d274b04ef310cf2
\ No newline at end of file
diff --git a/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk-20241012.tar.zst b/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk-20241012.tar.zst
deleted file mode 120000
index b8af5438abc..00000000000
--- a/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk-20241012.tar.zst
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreiagyzxu6pkid4lh4npy4epsstrw3hntkhzvxieq24oeerx5nach34
\ No newline at end of file
diff --git a/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk-20241022.tar.zst b/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk-20241022.tar.zst
new file mode 120000
index 00000000000..5ec2252bfb9
--- /dev/null
+++ b/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk-20241022.tar.zst
@@ -0,0 +1 @@
+/ipfs/bafkreifwqdblooxeiges5pihum53qn5o7ftbpexzhycyepp5cxt73flrm4
\ No newline at end of file
diff --git a/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk.changes b/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk.changes
index 0be69ce906d..b560d422558 100644
--- a/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk.changes
+++ b/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 22 18:58:44 UTC 2024 - mantarimay@pm.me
+
+- Update to version 20241022:
+ * Properly fallback to software encoding
+
-------------------------------------------------------------------
Sat Oct 12 00:16:09 UTC 2024 - mantarimay@pm.me
diff --git a/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk.spec b/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk.spec
index 0eca45b582b..4028dd311af 100644
--- a/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk.spec
+++ b/packages/g/gpu-screen-recorder-gtk/gpu-screen-recorder-gtk.spec
@@ -19,7 +19,7 @@
%bcond_with test
%define appid com.dec05eba.gpu_screen_recorder
Name: gpu-screen-recorder-gtk
-Version: 20241012
+Version: 20241022
Release: 0
Summary: GTK frontend for GPU Screen Recorder
License: GPL-3.0-only
diff --git a/packages/g/gpu-screen-recorder/.files b/packages/g/gpu-screen-recorder/.files
index c44e05c5d2d..71816ec65df 100644
Binary files a/packages/g/gpu-screen-recorder/.files and b/packages/g/gpu-screen-recorder/.files differ
diff --git a/packages/g/gpu-screen-recorder/.rev b/packages/g/gpu-screen-recorder/.rev
index f3cbb9c0f08..6f579b5d1fc 100644
--- a/packages/g/gpu-screen-recorder/.rev
+++ b/packages/g/gpu-screen-recorder/.rev
@@ -47,4 +47,12 @@
1207357
+
+ 03d597b06a8ac5b14811ba1527cda468
+ 20241022
+
+ anag+factory
+
+ 1217107
+
diff --git a/packages/g/gpu-screen-recorder/_servicedata b/packages/g/gpu-screen-recorder/_servicedata
index eecfa7b383e..cf4c3495a6f 100644
--- a/packages/g/gpu-screen-recorder/_servicedata
+++ b/packages/g/gpu-screen-recorder/_servicedata
@@ -1,4 +1,4 @@
https://repo.dec05eba.com/gpu-screen-recorder.git
- 1e6866236d0ce6e8b50b7c72f617bd45e02532d6
\ No newline at end of file
+ 422f214283ba50649acca4d9b5a9778d313fe05b
\ No newline at end of file
diff --git a/packages/g/gpu-screen-recorder/gpu-screen-recorder-20241012.tar.zst b/packages/g/gpu-screen-recorder/gpu-screen-recorder-20241012.tar.zst
deleted file mode 120000
index 1ae7646e5e2..00000000000
--- a/packages/g/gpu-screen-recorder/gpu-screen-recorder-20241012.tar.zst
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreigic6rculve3gjnzain33nrnaspirvsttentebydwz4lhitkggahq
\ No newline at end of file
diff --git a/packages/g/gpu-screen-recorder/gpu-screen-recorder-20241022.tar.zst b/packages/g/gpu-screen-recorder/gpu-screen-recorder-20241022.tar.zst
new file mode 120000
index 00000000000..a6f147303af
--- /dev/null
+++ b/packages/g/gpu-screen-recorder/gpu-screen-recorder-20241022.tar.zst
@@ -0,0 +1 @@
+/ipfs/bafkreidxe22y25eeenb4fwae7nx2kor73lhird77vix4ho3n7eqsu7grlm
\ No newline at end of file
diff --git a/packages/g/gpu-screen-recorder/gpu-screen-recorder.changes b/packages/g/gpu-screen-recorder/gpu-screen-recorder.changes
index fd88f51cb00..300a25261e3 100644
--- a/packages/g/gpu-screen-recorder/gpu-screen-recorder.changes
+++ b/packages/g/gpu-screen-recorder/gpu-screen-recorder.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Tue Oct 22 18:58:39 UTC 2024 - mantarimay@pm.me
+
+- Update to version 20241022:
+ * Fix capture not working if one of the audio inputs is a virtual
+ audio device with forward slash in its name, for example if
+ NoiseTorch is used
+ * Enable AMD low latency mode
+ * Better frame timing when hardware is too slow to record at the
+ desired framerate
+
-------------------------------------------------------------------
Sat Oct 12 00:15:35 UTC 2024 - mantarimay@pm.me
diff --git a/packages/g/gpu-screen-recorder/gpu-screen-recorder.spec b/packages/g/gpu-screen-recorder/gpu-screen-recorder.spec
index 52c166fbd98..f3d9e8e8e96 100644
--- a/packages/g/gpu-screen-recorder/gpu-screen-recorder.spec
+++ b/packages/g/gpu-screen-recorder/gpu-screen-recorder.spec
@@ -18,7 +18,7 @@
%bcond_with test
Name: gpu-screen-recorder
-Version: 20241012
+Version: 20241022
Release: 0
Summary: An extremely fast hardware-accelerated screen recorder
License: GPL-3.0-only
diff --git a/packages/g/grub2/.files b/packages/g/grub2/.files
index a4ded75b998..12600cd777a 100644
Binary files a/packages/g/grub2/.files and b/packages/g/grub2/.files differ
diff --git a/packages/g/grub2/.rev b/packages/g/grub2/.rev
index f7ee3ca74b0..9ccbcf94320 100644
--- a/packages/g/grub2/.rev
+++ b/packages/g/grub2/.rev
@@ -2869,4 +2869,12 @@ pretty much the same. The main user visible changes are
1205665
+
+ 3ffbe7070676dfeb62b32b1a1af7ec91
+ 2.12
+
+ anag+factory
+
+ 1217306
+
diff --git a/packages/g/grub2/0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch b/packages/g/grub2/0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch
deleted file mode 100644
index 5a1a8ddbe91..00000000000
--- a/packages/g/grub2/0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch
+++ /dev/null
@@ -1,44 +0,0 @@
-From a59b58f6ae327a8f6949991cb5531db01e1ba14d Mon Sep 17 00:00:00 2001
-From: Wen Xiong
-Date: Tue, 7 Feb 2023 15:10:15 -0500
-Subject: [PATCH] grub2: Can't setup a default boot device correctly on nvme
- device in Beta3
-
-The patch in Bug 200486 - SUSE1205666 - SLES15SP5 Beta1: Setup multiple dev path
- for a nvmf boot device in grub2 caused the issue. That patch didn't consider
-nvme devices carefully.
-
-The new patch will check "nvme-of" instead of "nvme" to call
-build_multi_boot_device().
-
-Signed-off-by: Wen Xiong
----
- grub-core/osdep/unix/platform.c | 10 +++++++---
- 1 file changed, 7 insertions(+), 3 deletions(-)
-
-diff --git a/grub-core/osdep/unix/platform.c b/grub-core/osdep/unix/platform.c
-index db8fa4b95..fb47c0ffa 100644
---- a/grub-core/osdep/unix/platform.c
-+++ b/grub-core/osdep/unix/platform.c
-@@ -288,11 +288,15 @@ grub_install_register_ieee1275 (int is_prep, const char *install_device,
- }
- *ptr = '\0';
- }
-- else if (grub_strstr(install_device, "nvme"))
-- boot_device = build_multi_boot_device(install_device);
-- else
-+ else {
- boot_device = get_ofpathname (install_device);
-
-+ if (grub_strstr(boot_device, "nvme-of")) {
-+ free (boot_device);
-+ boot_device = build_multi_boot_device(install_device);
-+ }
-+ }
-+
- if (grub_util_exec ((const char * []){ "nvsetenv", "boot-device",
- boot_device, NULL }))
- {
---
-2.39.1
-
diff --git a/packages/g/grub2/0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch b/packages/g/grub2/0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch
deleted file mode 100644
index 18476261603..00000000000
--- a/packages/g/grub2/0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch
+++ /dev/null
@@ -1,164 +0,0 @@
-From 3e77c5494fd06f430588ae9c304fea370439d531 Mon Sep 17 00:00:00 2001
-From: Wen Xiong
-Date: Thu, 15 Dec 2022 21:33:41 -0500
-Subject: [PATCH] grub2: Set multiple device path for a nvmf boot device
-
-nvmf support native multipath(ANA) by default.
-The patch added the support for setting multiple
-device path for a nvmf boot device.
-
-localhost:~ grub2-install -v /dev/nvme1n1p1
-...
-...
-...
-grub2-install: info: executing nvsetenv boot-device /pci@800000020000132/fibre-channel@0,1/nvme-of/controller@5005076810193675,ffff:nqn=nqn.1986-03.com.ibm:nvme:2145.0000020420006CEA/namespace@ec /pci@800000020000132/fibre-channel@0/nvme-of/controller@5005076810193675,ffff:nqn=nqn.1986-03.com.ibm:nvme:2145.0000020420006CEA/namespace@ec /pci@800000020000132/fibre-channel@0/nvme-of/controller@50050768101935e5,ffff:nqn=nqn.1986-03.com.ibm:nvme:2145.0000020420006CEA/namespace@ec /pci@800000020000132/fibre-channel@0,1/nvme-of/controller@50050768101935e5,ffff:nqn=nqn.1986-03.com.ibm:nvme:2145.0000020420006CEA/namespace@ec.
-Installation finished. No error reported.
-
-localhost:~ # bootlist -m normal -o
-nvme7n1
-nvme5n1
-nvme1n1
-nvme4n1
-
-localhost:~ # bootlist -m normal -r
-/pci@800000020000132/fibre-channel@0,1/nvme-of/controller@5005076810193675,ffff:nqn=nqn.1986-03.com.ibm:nvme:2145.0000020420006CEA/namespace@ec
-/pci@800000020000132/fibre-channel@0/nvme-of/controller@5005076810193675,ffff:nqn=nqn.1986-03.com.ibm:nvme:2145.0000020420006CEA/namespace@ec
-/pci@800000020000132/fibre-channel@0/nvme-of/controller@50050768101935e5,ffff:nqn=nqn.1986-03.com.ibm:nvme:2145.0000020420006CEA/namespace@ec
-/pci@800000020000132/fibre-channel@0,1/nvme-of/controller@50050768101935e5,ffff:nqn=nqn.1986-03.com.ibm:nvme:2145.0000020420006CEA/namespace@ec
-
-Signed-off-by: Wen Xiong
----
- grub-core/osdep/linux/ofpath.c | 6 ++---
- grub-core/osdep/unix/platform.c | 48 +++++++++++++++++++++++++++++++++
- include/grub/util/install.h | 3 +++
- include/grub/util/ofpath.h | 9 +++++++
- 4 files changed, 63 insertions(+), 3 deletions(-)
-
---- a/grub-core/osdep/linux/ofpath.c
-+++ b/grub-core/osdep/linux/ofpath.c
-@@ -209,7 +209,7 @@
- }
- }
-
--static char *
-+char *
- xrealpath (const char *in)
- {
- char *out;
-@@ -224,7 +224,7 @@
- return out;
- }
-
--static char *
-+char *
- block_device_get_sysfs_path_and_link(const char *devicenode)
- {
- char *rpath;
-@@ -535,7 +535,7 @@
-
- }
-
--static char *
-+char *
- nvme_get_syspath(const char *nvmedev)
- {
- char *sysfs_path, *controller_node;
---- a/grub-core/osdep/unix/platform.c
-+++ b/grub-core/osdep/unix/platform.c
-@@ -19,6 +19,7 @@
- #include
-
- #include
-+#include
- #include
- #include
- #include
-@@ -131,6 +132,51 @@
- return rc;
- }
-
-+char *
-+build_multi_boot_device(const char *install_device)
-+{
-+ char *sysfs_path;
-+ char *nvme_ns;
-+ unsigned int nsid;
-+ char *ptr;
-+ char *boot_device_string;
-+ struct dirent *ep;
-+ DIR *dp;
-+
-+ nvme_ns = strchr(install_device, 'n');
-+ nsid = of_path_get_nvme_nsid(nvme_ns);
-+ sysfs_path = nvme_get_syspath(nvme_ns);
-+ strcat(sysfs_path, "/device");
-+ sysfs_path = xrealpath(sysfs_path);
-+
-+ dp = opendir(sysfs_path);
-+ ptr = boot_device_string = xmalloc (1000);
-+
-+ /* We cannot have a boot list with more than five entries */
-+ while((ep = readdir(dp)) != NULL){
-+ char *nvme_device;
-+
-+ if (grub_strstr(ep->d_name, "nvme")) {
-+ nvme_device = xasprintf ("%s%s%x ",
-+ get_ofpathname(ep->d_name),"/namespace@", nsid);
-+ if ((strlen(boot_device_string) + strlen(nvme_device)) >= 200*5 - 1) {
-+ grub_util_warn (_("More than five entries cannot be specified in the bootlist"));
-+ free(nvme_device);
-+ break;
-+ }
-+
-+ strncpy(ptr, nvme_device, strlen(nvme_device));
-+ ptr += strlen(nvme_device);
-+ free(nvme_device);
-+ }
-+ }
-+
-+ *--ptr = '\0';
-+ closedir(dp);
-+
-+ return boot_device_string;
-+}
-+
- int
- grub_install_register_efi (const grub_disk_t *efidir_grub_disk,
- const char *efifile_path,
-@@ -242,6 +288,8 @@
- }
- *ptr = '\0';
- }
-+ else if (grub_strstr(install_device, "nvme"))
-+ boot_device = build_multi_boot_device(install_device);
- else
- boot_device = get_ofpathname (install_device);
-
---- a/include/grub/util/install.h
-+++ b/include/grub/util/install.h
-@@ -241,6 +241,9 @@
- const char *efi_distributor,
- const char *force_disk);
-
-+char *
-+build_multi_boot_device(const char *install_device);
-+
- void
- grub_install_register_ieee1275 (int is_prep, const char *install_device,
- int partno, const char *relpath);
---- a/include/grub/util/ofpath.h
-+++ b/include/grub/util/ofpath.h
-@@ -32,4 +32,13 @@
-
- char* of_find_fc_host(char* host_wwpn);
-
-+char* nvme_get_syspath(const char *nvmedev);
-+
-+char* block_device_get_sysfs_path_and_link(const char *devicenode);
-+
-+char* xrealpath (const char *in);
-+
-+unsigned int of_path_get_nvme_nsid(const char* devname);
-+
-+
- #endif /* ! GRUB_OFPATH_MACHINE_UTIL_HEADER */
diff --git a/packages/g/grub2/0001-ieee1275-Platform-Keystore-PKS-Support.patch b/packages/g/grub2/0001-ieee1275-Platform-Keystore-PKS-Support.patch
new file mode 100644
index 00000000000..8f1a599c9e9
--- /dev/null
+++ b/packages/g/grub2/0001-ieee1275-Platform-Keystore-PKS-Support.patch
@@ -0,0 +1,171 @@
+From 04e8509f04a4cd123bc9f290e60f582d57b2f258 Mon Sep 17 00:00:00 2001
+From: Sudhakar Kuppusamy
+Date: Tue, 27 Dec 2022 17:47:41 +0530
+Subject: [PATCH 1/8] ieee1275: Platform Keystore (PKS) Support
+
+enhancing the infrastructure to enable the Platform Keystore (PKS) feature,
+which provides access to the SB VERSION, DB, and DBX secure boot variables
+from PKS.
+
+Signed-off-by: Sudhakar Kuppusamy
+Reviewed-by: Stefan Berger
+Tested-by: Nageswara Sastry
+---
+ grub-core/kern/ieee1275/ieee1275.c | 117 +++++++++++++++++++++++++++++
+ include/grub/ieee1275/ieee1275.h | 15 ++++
+ 2 files changed, 132 insertions(+)
+
+diff --git a/grub-core/kern/ieee1275/ieee1275.c b/grub-core/kern/ieee1275/ieee1275.c
+index 36ca2dbfc..8d0048844 100644
+--- a/grub-core/kern/ieee1275/ieee1275.c
++++ b/grub-core/kern/ieee1275/ieee1275.c
+@@ -807,3 +807,120 @@ grub_ieee1275_get_block_size (grub_ieee1275_ihandle_t ihandle)
+
+ return args.size;
+ }
++
++int
++grub_ieee1275_test (const char *name, grub_ieee1275_cell_t *missing)
++{
++ struct test_args
++ {
++ struct grub_ieee1275_common_hdr common;
++ grub_ieee1275_cell_t name;
++ grub_ieee1275_cell_t missing;
++ } args;
++
++ INIT_IEEE1275_COMMON (&args.common, "test", 1, 1);
++ args.name = (grub_ieee1275_cell_t) name;
++
++ if (IEEE1275_CALL_ENTRY_FN (&args) == -1)
++ return -1;
++
++ if (args.missing == IEEE1275_CELL_INVALID)
++ return -1;
++
++ *missing = args.missing;
++
++ return 0;
++}
++
++int
++grub_ieee1275_pks_max_object_size (grub_size_t *result)
++{
++ struct mos_args
++ {
++ struct grub_ieee1275_common_hdr common;
++ grub_ieee1275_cell_t size;
++ } args;
++
++ INIT_IEEE1275_COMMON (&args.common, "pks-max-object-size", 0, 1);
++
++ if (IEEE1275_CALL_ENTRY_FN (&args) == -1)
++ return -1;
++
++ if (args.size == IEEE1275_CELL_INVALID)
++ return -1;
++
++ *result = args.size;
++
++ return 0;
++}
++
++int
++grub_ieee1275_pks_read_object (grub_uint8_t consumer, grub_uint8_t *label,
++ grub_size_t label_len, grub_uint8_t *buffer,
++ grub_size_t buffer_len, grub_size_t *data_len,
++ grub_uint32_t *policies)
++{
++ struct pks_read_args
++ {
++ struct grub_ieee1275_common_hdr common;
++ grub_ieee1275_cell_t consumer;
++ grub_ieee1275_cell_t label;
++ grub_ieee1275_cell_t label_len;
++ grub_ieee1275_cell_t buffer;
++ grub_ieee1275_cell_t buffer_len;
++ grub_ieee1275_cell_t data_len;
++ grub_ieee1275_cell_t policies;
++ grub_ieee1275_cell_t rc;
++ } args;
++
++ INIT_IEEE1275_COMMON (&args.common, "pks-read-object", 5, 3);
++ args.consumer = (grub_ieee1275_cell_t) consumer;
++ args.label = (grub_ieee1275_cell_t) label;
++ args.label_len = (grub_ieee1275_cell_t) label_len;
++ args.buffer = (grub_ieee1275_cell_t) buffer;
++ args.buffer_len = (grub_ieee1275_cell_t) buffer_len;
++
++ if (IEEE1275_CALL_ENTRY_FN (&args) == -1)
++ return -1;
++
++ if (args.data_len == IEEE1275_CELL_INVALID)
++ return -1;
++
++ *data_len = args.data_len;
++ *policies = args.policies;
++
++ return (int) args.rc;
++}
++
++int
++grub_ieee1275_pks_read_sbvar (grub_uint8_t sbvarflags, grub_uint8_t sbvartype,
++ grub_uint8_t *buffer, grub_size_t buffer_len,
++ grub_size_t *data_len)
++{
++ struct pks_read_sbvar_args
++ {
++ struct grub_ieee1275_common_hdr common;
++ grub_ieee1275_cell_t sbvarflags;
++ grub_ieee1275_cell_t sbvartype;
++ grub_ieee1275_cell_t buffer;
++ grub_ieee1275_cell_t buffer_len;
++ grub_ieee1275_cell_t data_len;
++ grub_ieee1275_cell_t rc;
++ } args;
++
++ INIT_IEEE1275_COMMON (&args.common, "pks-read-sbvar", 4, 2);
++ args.sbvarflags = (grub_ieee1275_cell_t) sbvarflags;
++ args.sbvartype = (grub_ieee1275_cell_t) sbvartype;
++ args.buffer = (grub_ieee1275_cell_t) buffer;
++ args.buffer_len = (grub_ieee1275_cell_t) buffer_len;
++
++ if (IEEE1275_CALL_ENTRY_FN (&args) == -1)
++ return -1;
++
++ if (args.data_len == IEEE1275_CELL_INVALID)
++ return -1;
++
++ *data_len = args.data_len;
++
++ return (int) args.rc;
++}
+diff --git a/include/grub/ieee1275/ieee1275.h b/include/grub/ieee1275/ieee1275.h
+index ea90d79f7..6d8dd9463 100644
+--- a/include/grub/ieee1275/ieee1275.h
++++ b/include/grub/ieee1275/ieee1275.h
+@@ -237,6 +237,21 @@ char *EXPORT_FUNC(grub_ieee1275_encode_uint4) (grub_ieee1275_ihandle_t ihandle,
+ grub_size_t *size);
+ int EXPORT_FUNC(grub_ieee1275_get_block_size) (grub_ieee1275_ihandle_t ihandle);
+
++int EXPORT_FUNC (grub_ieee1275_test) (const char *name,
++ grub_ieee1275_cell_t *missing);
++
++// not exported: I don't want modules interacting with PKS.
++int grub_ieee1275_pks_max_object_size (grub_size_t *result);
++
++int grub_ieee1275_pks_read_object (grub_uint8_t consumer, grub_uint8_t *label,
++ grub_size_t label_len, grub_uint8_t *buffer,
++ grub_size_t buffer_len, grub_size_t *data_len,
++ grub_uint32_t *policies);
++
++int grub_ieee1275_pks_read_sbvar (grub_uint8_t sbvarflags, grub_uint8_t sbvartype,
++ grub_uint8_t *buffer, grub_size_t buffer_len,
++ grub_size_t *data_len);
++
+ grub_err_t EXPORT_FUNC(grub_claimmap) (grub_addr_t addr, grub_size_t size);
+ void EXPORT_FUNC(grub_releasemap) (void);
+
+--
+2.47.0
+
diff --git a/packages/g/grub2/0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch b/packages/g/grub2/0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
new file mode 100644
index 00000000000..1f689bbc6dc
--- /dev/null
+++ b/packages/g/grub2/0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
@@ -0,0 +1,170 @@
+From 219b06c69d38a10349183002efb82bfec3b7ff5b Mon Sep 17 00:00:00 2001
+From: Avnish Chouhan
+Date: Wed, 21 Aug 2024 14:13:05 +0530
+Subject: [PATCH] ieee1275: support added for multiple nvme bootpaths
+
+This patch sets mupltiple NVMe boot-devices for more robust boot.
+Scenario where NVMe multipaths are available, all the available bootpaths (Max 5)
+will be added as the boot-device.
+
+Signed-off-by: Avnish Chouhan
+---
+ grub-core/osdep/linux/ofpath.c | 6 +--
+ grub-core/osdep/unix/platform.c | 65 ++++++++++++++++++++++++++++++++-
+ include/grub/util/install.h | 3 ++
+ include/grub/util/ofpath.h | 4 ++
+ 4 files changed, 74 insertions(+), 4 deletions(-)
+
+diff --git a/grub-core/osdep/linux/ofpath.c b/grub-core/osdep/linux/ofpath.c
+index 51d331f06..55ed7ddf2 100644
+--- a/grub-core/osdep/linux/ofpath.c
++++ b/grub-core/osdep/linux/ofpath.c
+@@ -209,7 +209,7 @@ find_obppath (const char *sysfs_path_orig)
+ }
+ }
+
+-static char *
++char *
+ xrealpath (const char *in)
+ {
+ char *out;
+@@ -224,7 +224,7 @@ xrealpath (const char *in)
+ return out;
+ }
+
+-static char *
++char *
+ block_device_get_sysfs_path_and_link(const char *devicenode)
+ {
+ char *rpath;
+@@ -535,7 +535,7 @@ of_path_get_nvme_nsid(const char* devname)
+
+ }
+
+-static char *
++char *
+ nvme_get_syspath(const char *nvmedev)
+ {
+ char *sysfs_path, *controller_node;
+diff --git a/grub-core/osdep/unix/platform.c b/grub-core/osdep/unix/platform.c
+index 1e2961e00..bafcc84d7 100644
+--- a/grub-core/osdep/unix/platform.c
++++ b/grub-core/osdep/unix/platform.c
+@@ -28,6 +28,8 @@
+ #include
+ #include
+ #include
++#include
++#define BOOTDEV_BUFFER 1000
+
+ static char *
+ get_ofpathname (const char *dev)
+@@ -203,6 +205,56 @@ grub_install_register_efi (const grub_disk_t *efidir_grub_disk,
+ return 0;
+ }
+
++char *
++add_multiple_nvme_bootdevices (const char *install_device)
++{
++ char *sysfs_path, *nvme_ns, *ptr;
++ unsigned int nsid;
++ char *multipath_boot;
++ struct dirent *ep;
++ DIR *dp;
++
++ /*
++ * Extracting the namespace from install_device.
++ * ex. install_device : /dev/nvme1n1
++ */
++ nvme_ns = grub_strstr (install_device, "nvme");
++ nsid = of_path_get_nvme_nsid (nvme_ns);
++ if (nsid == 0)
++ return NULL;
++
++ sysfs_path = nvme_get_syspath (nvme_ns);
++ strcat (sysfs_path, "/subsystem");
++ sysfs_path = xrealpath (sysfs_path);
++ dp = opendir (sysfs_path);
++ if (!dp)
++ return NULL;
++
++ ptr = multipath_boot = xmalloc (BOOTDEV_BUFFER);
++ while ((ep = readdir (dp)) != NULL)
++ {
++ char *path;
++ if (grub_strstr (ep->d_name, "nvme"))
++ {
++ path = xasprintf ("%s%s%x ", get_ofpathname (ep->d_name), "/namespace@", nsid);
++ if ((strlen (multipath_boot) + strlen (path)) > BOOTDEV_BUFFER)
++ {
++ grub_util_warn (_("Maximum five entries are allowed in the bootlist"));
++ free (path);
++ break;
++ }
++ strncpy (ptr, path, strlen (path));
++ ptr += strlen (path);
++ free (path);
++ }
++ }
++
++ *--ptr = '\0';
++ closedir (dp);
++
++ return multipath_boot;
++}
++
+ void
+ grub_install_register_ieee1275 (int is_prep, const char *install_device,
+ int partno, const char *relpath)
+@@ -242,8 +294,19 @@ grub_install_register_ieee1275 (int is_prep, const char *install_device,
+ }
+ *ptr = '\0';
+ }
++ else if (grub_strstr (install_device, "nvme"))
++ {
++ boot_device = add_multiple_nvme_bootdevices (install_device);
++ }
+ else
+- boot_device = get_ofpathname (install_device);
++ {
++ boot_device = get_ofpathname (install_device);
++ if (grub_strstr (boot_device, "nvme-of"))
++ {
++ free (boot_device);
++ boot_device = add_multiple_nvme_bootdevices (install_device);
++ }
++ }
+
+ if (grub_util_exec ((const char * []){ "nvsetenv", "boot-device",
+ boot_device, NULL }))
+diff --git a/include/grub/util/install.h b/include/grub/util/install.h
+index 563cf68e9..2fd102649 100644
+--- a/include/grub/util/install.h
++++ b/include/grub/util/install.h
+@@ -241,6 +241,9 @@ grub_install_register_efi (const grub_disk_t *efidir_grub_disk,
+ const char *efi_distributor,
+ const char *force_disk);
+
++char *
++add_multiple_nvme_bootdevices (const char *install_device);
++
+ void
+ grub_install_register_ieee1275 (int is_prep, const char *install_device,
+ int partno, const char *relpath);
+diff --git a/include/grub/util/ofpath.h b/include/grub/util/ofpath.h
+index a0ec30620..cc3c4bfbd 100644
+--- a/include/grub/util/ofpath.h
++++ b/include/grub/util/ofpath.h
+@@ -31,5 +31,9 @@ void add_filename_to_pile(char *filename, struct ofpath_files_list_root* root);
+ void find_file(char* filename, char* directory, struct ofpath_files_list_root* root, int max_depth, int depth);
+
+ char* of_find_fc_host(char* host_wwpn);
++char* nvme_get_syspath (const char *nvmedev);
++char* block_device_get_sysfs_path_and_link (const char *devicenode);
++char* xrealpath (const char *in);
++unsigned int of_path_get_nvme_nsid (const char* devname);
+
+ #endif /* ! GRUB_OFPATH_MACHINE_UTIL_HEADER */
+--
+2.47.0
+
diff --git a/packages/g/grub2/0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch b/packages/g/grub2/0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
new file mode 100644
index 00000000000..ef0f700e05a
--- /dev/null
+++ b/packages/g/grub2/0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
@@ -0,0 +1,671 @@
+From 8ef821ea18ed35f5969b98f2df6a76fefb71b175 Mon Sep 17 00:00:00 2001
+From: Sudhakar Kuppusamy
+Date: Wed, 28 Dec 2022 17:49:24 +0530
+Subject: [PATCH 2/8] ieee1275: Read the DB and DBX secure boot variables
+
+If secure boot is enabled with PKS, it will read secure boot variables
+such as db and dbx from PKS and extract certificates from ESL.
+It would be saved in the platform keystore buffer, and
+the appendedsig (module) would read it later to extract
+the certificate's details.
+
+In the following scenarios, static key mode will be activated:
+ 1. When secure boot is enabled with static
+ 2. When SB Version is unavailable but Secure Boot is enabled
+ 3. When PKS support is unavailable but secure boot is enabled
+
+Note:-
+
+SB Version - secure boot mode
+1 - PKS
+0 - static key (embeded key)
+
+Signed-off-by: Sudhakar Kuppusamy
+Reviewed-by: Stefan Berger
+Tested-by: Nageswara Sastry
+---
+ grub-core/Makefile.am | 1 +
+ grub-core/Makefile.core.def | 1 +
+ grub-core/kern/ieee1275/init.c | 12 +-
+ grub-core/kern/ieee1275/platform_keystore.c | 377 ++++++++++++++++++++
+ include/grub/platform_keystore.h | 190 ++++++++++
+ 5 files changed, 580 insertions(+), 1 deletion(-)
+ create mode 100644 grub-core/kern/ieee1275/platform_keystore.c
+ create mode 100644 include/grub/platform_keystore.h
+
+diff --git a/grub-core/Makefile.am b/grub-core/Makefile.am
+index 9d3d5f519..4630e2ba3 100644
+--- a/grub-core/Makefile.am
++++ b/grub-core/Makefile.am
+@@ -79,6 +79,7 @@ KERNEL_HEADER_FILES += $(top_srcdir)/include/grub/file.h
+ KERNEL_HEADER_FILES += $(top_srcdir)/include/grub/fs.h
+ KERNEL_HEADER_FILES += $(top_srcdir)/include/grub/i18n.h
+ KERNEL_HEADER_FILES += $(top_srcdir)/include/grub/kernel.h
++KERNEL_HEADER_FILES += $(top_srcdir)/include/grub/platform_keystore.h
+ KERNEL_HEADER_FILES += $(top_srcdir)/include/grub/list.h
+ KERNEL_HEADER_FILES += $(top_srcdir)/include/grub/lockdown.h
+ KERNEL_HEADER_FILES += $(top_srcdir)/include/grub/misc.h
+diff --git a/grub-core/Makefile.core.def b/grub-core/Makefile.core.def
+index dc639dd24..4ff35afb7 100644
+--- a/grub-core/Makefile.core.def
++++ b/grub-core/Makefile.core.def
+@@ -170,6 +170,7 @@ kernel = {
+ ieee1275 = kern/ieee1275/openfw.c;
+ ieee1275 = term/ieee1275/console.c;
+ ieee1275 = kern/ieee1275/init.c;
++ ieee1275 = kern/ieee1275/platform_keystore.c;
+
+ uboot = disk/uboot/ubootdisk.c;
+ uboot = kern/uboot/uboot.c;
+diff --git a/grub-core/kern/ieee1275/init.c b/grub-core/kern/ieee1275/init.c
+index 38f1f1f6e..bb800b275 100644
+--- a/grub-core/kern/ieee1275/init.c
++++ b/grub-core/kern/ieee1275/init.c
+@@ -50,6 +50,7 @@
+ #include
+ #endif
+ #include
++#include
+
+ /* The maximum heap size we're going to claim at boot. Not used by sparc. */
+ #ifdef __i386__
+@@ -915,7 +916,16 @@ grub_get_ieee1275_secure_boot (void)
+ * We only support enforce.
+ */
+ if (rc >= 0 && is_sb >= 2)
+- grub_lockdown ();
++ {
++ grub_printf ("secure boot enabled\n");
++ rc = grub_platform_keystore_init ();
++ if (rc != GRUB_ERR_NONE)
++ grub_printf ("Warning: initialization of the platform keystore failed!\n");
++
++ grub_lockdown ();
++ }
++ else
++ grub_printf ("secure boot disabled\n");
+ }
+
+ grub_addr_t grub_modbase;
+diff --git a/grub-core/kern/ieee1275/platform_keystore.c b/grub-core/kern/ieee1275/platform_keystore.c
+new file mode 100644
+index 000000000..976e4e9b5
+--- /dev/null
++++ b/grub-core/kern/ieee1275/platform_keystore.c
+@@ -0,0 +1,377 @@
++#include
++#include
++#include
++#include
++#include
++#include
++
++#define PKS_CONSUMER_FW 1
++#define SB_VERSION_KEY_NAME ((grub_uint8_t *) "SB_VERSION")
++#define SB_VERSION_KEY_LEN 10
++#define DB 1
++#define DBX 2
++
++#define PKS_OBJECT_NOT_FOUND -7
++#define PKS_UNPACK_ERROR 0x200
++#define PKS_UNPACK_VERSION_ERROR 0x201
++
++struct pks_timestamp
++{
++ grub_uint16_t year;
++ grub_uint8_t month;
++ grub_uint8_t day;
++ grub_uint8_t hour;
++ grub_uint8_t minute;
++ grub_uint8_t second;
++} GRUB_PACKED;
++
++struct pks_signed_var
++{
++ grub_uint8_t version;
++ struct pks_timestamp time;
++} GRUB_PACKED;
++
++/* Platform Keystore */
++static grub_size_t pks_max_object_size;
++grub_uint8_t grub_use_platform_keystore = 0;
++grub_pks_t grub_platform_keystore = { .use_static_keys = 0, .db = NULL, .dbx = NULL, .db_entries = 0, .dbx_entries = 0 };
++
++/* converts the esl data into the ESL */
++static grub_esl_t *
++grub_convert_to_esl (const grub_uint8_t *esl_data, const grub_size_t esl_data_size)
++{
++ grub_esl_t *esl = NULL;
++
++ if (esl_data_size < sizeof (grub_esl_t) || esl_data == NULL)
++ return esl;
++
++ esl = (grub_esl_t *) esl_data;
++
++ return esl;
++}
++
++/*
++ * imports the GUID, esd, and its size into the pks sd buffer and
++ * pks sd entries from the EFI signature list.
++ */
++static grub_err_t
++grub_esd_from_esl (const grub_uint8_t *esl_data, grub_size_t esl_size,
++ const grub_size_t signature_size, const grub_uuid_t *guid,
++ grub_pks_sd_t **pks_sd, grub_size_t *pks_sd_entries)
++{
++ grub_esd_t *esd = NULL;
++ grub_pks_sd_t *signature = *pks_sd;
++ grub_size_t entries = *pks_sd_entries;
++ grub_size_t data_size = 0, offset = 0;
++
++ /* reads the esd from esl */
++ while (esl_size > 0)
++ {
++ esd = (grub_esd_t *) (esl_data + offset);
++ data_size = signature_size - sizeof (grub_esd_t);
++
++ if (signature != NULL)
++ signature = grub_realloc (signature, (entries + 1) * sizeof (grub_pks_sd_t));
++ else
++ signature = grub_malloc (sizeof (grub_pks_sd_t));
++
++ if (signature == NULL)
++ return grub_error (GRUB_ERR_OUT_OF_MEMORY, "out of memory");
++
++ signature[entries].data = grub_malloc (data_size * sizeof (grub_uint8_t));
++ if (signature[entries].data == NULL)
++ {
++ /*
++ * allocated memory will be freed by
++ * grub_release_platform_keystore
++ */
++ *pks_sd = signature;
++ *pks_sd_entries = entries + 1;
++ return grub_error (GRUB_ERR_OUT_OF_MEMORY, "out of memory");
++ }
++
++ grub_memcpy (signature[entries].data, esd->signaturedata, data_size);
++ signature[entries].data_size = data_size;
++ signature[entries].guid = *guid;
++ entries++;
++ esl_size -= signature_size;
++ offset += signature_size;
++ }
++
++ *pks_sd = signature;
++ *pks_sd_entries = entries;
++
++ return GRUB_ERR_NONE;
++}
++
++/*
++ * extracts the esd after removing the esl header from esl.
++ */
++static grub_err_t
++grub_esl_to_esd (const grub_uint8_t *esl_data, grub_size_t *next_esl,
++ grub_pks_sd_t **pks_sd, grub_size_t *pks_sd_entries)
++{
++ grub_uuid_t guid = { 0 };
++ grub_esl_t *esl = NULL;
++ grub_size_t offset = 0, esl_size = 0,
++ signature_size = 0, signature_header_size = 0;
++
++ esl = grub_convert_to_esl (esl_data, *next_esl);
++ if (esl == NULL)
++ return grub_error (GRUB_ERR_BUG, "invalid ESL");
++
++ esl_size = grub_le_to_cpu32 (esl->signaturelistsize);
++ signature_header_size = grub_le_to_cpu32 (esl->signatureheadersize);
++ signature_size = grub_le_to_cpu32 (esl->signaturesize);
++ guid = esl->signaturetype;
++
++ if (esl_size < sizeof (grub_esl_t) || esl_size > *next_esl)
++ return grub_error (GRUB_ERR_BUG, "invalid ESL size (%u)\n", esl_size);
++
++ *next_esl = esl_size;
++ offset = sizeof (grub_esl_t) + signature_header_size;
++ esl_size = esl_size - offset;
++
++ return grub_esd_from_esl (esl_data + offset, esl_size, signature_size, &guid,
++ pks_sd, pks_sd_entries);
++}
++
++/*
++ * imports the EFI signature data and the number of esd from the esl
++ * into the pks sd buffer and pks sd entries.
++ */
++static grub_err_t
++grub_pks_sd_from_esl (const grub_uint8_t *esl_data, grub_size_t esl_size,
++ grub_pks_sd_t **pks_sd, grub_size_t *pks_sd_entries)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_size_t next_esl = esl_size;
++
++ do
++ {
++ rc = grub_esl_to_esd (esl_data, &next_esl, pks_sd, pks_sd_entries);
++ if (rc != GRUB_ERR_NONE)
++ break;
++
++ esl_data += next_esl;
++ esl_size -= next_esl;
++ next_esl = esl_size;
++ }
++ while (esl_size > 0);
++
++ return rc;
++}
++
++/*
++ * unpacking the signed secure boot variable
++ * return error if size too small or version mismatch
++ * discards timestamp, only needed in verifying updates
++ */
++static grub_err_t
++grub_unpack_signed_variable (grub_uint8_t *indata, grub_size_t insize,
++ grub_uint8_t **data, grub_size_t *size)
++{
++ struct pks_signed_var *psv = NULL;
++
++ /* do not permit negative or size 0 data */
++ if (insize <= sizeof (struct pks_signed_var))
++ return PKS_UNPACK_ERROR;
++
++ psv = (struct pks_signed_var *) indata;
++ if (psv->version != 0)
++ return PKS_UNPACK_VERSION_ERROR;
++
++ *data = indata + sizeof (struct pks_signed_var);
++ *size = insize - sizeof (struct pks_signed_var);
++
++ return GRUB_ERR_NONE;
++}
++
++/*
++ * reads the secure boot version from PKS as an object.
++ * caller must free result
++ */
++static grub_err_t
++grub_sbversion_from_pks (grub_uint8_t **out, grub_size_t *outlen, grub_size_t *policy)
++{
++ *out = grub_malloc (pks_max_object_size);
++ if (*out == NULL)
++ return grub_error (GRUB_ERR_OUT_OF_MEMORY, "out of memory");
++
++ return grub_ieee1275_pks_read_object (PKS_CONSUMER_FW, SB_VERSION_KEY_NAME,
++ SB_VERSION_KEY_LEN, *out, pks_max_object_size,
++ outlen, policy);
++}
++
++/*
++ * reads the secure boot variable from PKS.
++ * caller must free result
++ */
++static grub_err_t
++grub_sbvar_from_pks (const grub_uint8_t sbvarflags, const grub_uint8_t sbvartype,
++ grub_uint8_t **out, grub_size_t *outlen)
++{
++ *out = grub_malloc (pks_max_object_size);
++ if (*out == NULL)
++ return grub_error (GRUB_ERR_OUT_OF_MEMORY, "out of memory");
++
++ return grub_ieee1275_pks_read_sbvar (sbvarflags, sbvartype, *out,
++ pks_max_object_size, outlen);
++}
++
++/* Test the availability of PKS support. */
++static grub_err_t
++grub_is_support_pks (void)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_ieee1275_cell_t missing = 0;
++
++ rc = grub_ieee1275_test ("pks-max-object-size", &missing);
++ if (rc != GRUB_ERR_NONE || (int) missing == -1)
++ grub_printf ("Warning: doesn't have PKS support!\n");
++ else
++ {
++ rc = grub_ieee1275_pks_max_object_size (&pks_max_object_size);
++ if (rc != GRUB_ERR_NONE)
++ grub_printf ("Warning: PKS support is there but it has zero objects!\n");
++ }
++
++ return rc;
++}
++
++/*
++ * retrieves the secure boot variable from PKS, unpacks it, reads the esd
++ * from ESL, and stores the information in the pks sd buffer.
++ */
++static grub_err_t
++grub_secure_boot_variables (const grub_uint8_t sbvarflags, const grub_uint8_t sbvartype,
++ grub_pks_sd_t **pks_sd, grub_size_t *pks_sd_entries)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_uint8_t *data = NULL, *esl_data = NULL;
++ grub_size_t data_len = 0, esl_data_size = 0;
++
++ rc = grub_sbvar_from_pks (sbvarflags, sbvartype, &data, &data_len);
++ /*
++ * at this point we have SB_VERSION, so any error is worth
++ * at least some user-visible info
++ */
++ if (rc != GRUB_ERR_NONE)
++ rc = grub_error (rc, "secure boot variable %s reading (%d)",
++ (sbvartype == DB ? "db" : "dbx"), rc);
++ else
++ {
++ rc = grub_unpack_signed_variable (data, data_len, &esl_data, &esl_data_size);
++ if (rc != GRUB_ERR_NONE)
++ rc = grub_error (rc, "unpacking of signed variable %s structure (%d)",
++ (sbvartype == DB ? "db" : "dbx"), rc);
++ else
++ rc = grub_pks_sd_from_esl ((const grub_uint8_t *) esl_data, esl_data_size,
++ pks_sd, pks_sd_entries);
++ }
++
++ grub_free (data);
++
++ return rc;
++}
++
++/* reads secure boot version (SB_VERSION) */
++static grub_err_t
++grub_secure_boot_version (void)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_uint8_t *data = NULL;
++ grub_size_t len = 0, policy = 0;
++
++ rc = grub_sbversion_from_pks (&data, &len, &policy);
++ if (rc != GRUB_ERR_NONE)
++ grub_printf ("Warning: SB version read failed! (%d)\n", rc);
++ else if (len != 1 || (*data != 1 && *data != 0))
++ {
++ grub_printf ("Warning: found unexpected SB version! (%d)\n", *data);
++ rc = GRUB_ERR_INVALID_COMMAND;
++ }
++
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_printf ("Warning: switch to static key!\n");
++ if (grub_is_lockdown () == GRUB_LOCKDOWN_ENABLED)
++ grub_fatal ("Secure Boot locked down");
++ }
++ else
++ grub_use_platform_keystore = *data;
++
++ grub_free (data);
++
++ return rc;
++}
++
++/* releasing allocated memory */
++void
++grub_release_platform_keystore (void)
++{
++ grub_size_t i = 0;
++
++ for (i = 0; i < grub_platform_keystore.db_entries; i++)
++ grub_free (grub_platform_keystore.db[i].data);
++
++ for (i = 0; i < grub_platform_keystore.dbx_entries; i++)
++ grub_free (grub_platform_keystore.dbx[i].data);
++
++ grub_free (grub_platform_keystore.db);
++ grub_free (grub_platform_keystore.dbx);
++ grub_memset (&grub_platform_keystore, 0x00, sizeof (grub_pks_t));
++}
++
++/* initialization of the Platform Keystore */
++grub_err_t
++grub_platform_keystore_init (void)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++
++ grub_printf ("trying to load Platform Keystore\n");
++
++ rc = grub_is_support_pks ();
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_printf ("Warning: switch to static key!\n");
++ return rc;
++ }
++
++ /* SB_VERSION */
++ rc = grub_secure_boot_version ();
++ if (rc != GRUB_ERR_NONE)
++ return rc;
++
++ if (grub_use_platform_keystore)
++ {
++ grub_memset (&grub_platform_keystore, 0x00, sizeof (grub_pks_t));
++ /* DB */
++ rc = grub_secure_boot_variables (0, DB, &grub_platform_keystore.db,
++ &grub_platform_keystore.db_entries);
++ if ((int)rc == PKS_OBJECT_NOT_FOUND)
++ {
++ rc = GRUB_ERR_NONE;
++ /* DB variable won't be available by default in PKS, So, it will loads the Default Keys from ELF Note */
++ grub_platform_keystore.use_static_keys = 1;
++ }
++
++ if (rc == GRUB_ERR_NONE)
++ {
++ /* DBX */
++ rc = grub_secure_boot_variables (0, DBX, &grub_platform_keystore.dbx,
++ &grub_platform_keystore.dbx_entries);
++ if ((int)rc == PKS_OBJECT_NOT_FOUND)
++ {
++ grub_printf ("Warning: dbx is not found!\n");
++ rc = GRUB_ERR_NONE;
++ }
++ }
++
++ }
++
++ if (rc != GRUB_ERR_NONE)
++ grub_release_platform_keystore ();
++
++ return rc;
++}
+diff --git a/include/grub/platform_keystore.h b/include/grub/platform_keystore.h
+new file mode 100644
+index 000000000..8cc4266c9
+--- /dev/null
++++ b/include/grub/platform_keystore.h
+@@ -0,0 +1,190 @@
++#ifndef __PLATFORM_KEYSTORE_H__
++#define __PLATFORM_KEYSTORE_H__
++
++#include
++#include
++#include
++
++#if __GNUC__ >= 9
++#pragma GCC diagnostic ignored "-Waddress-of-packed-member"
++#endif
++
++#define GRUB_UUID_SIZE 16
++#define GRUB_MAX_HASH_SIZE 64
++
++typedef struct grub_uuid grub_uuid_t;
++typedef struct grub_esd grub_esd_t;
++typedef struct grub_esl grub_esl_t;
++
++/* The structure of a UUID.*/
++struct grub_uuid
++{
++ grub_uint8_t b[GRUB_UUID_SIZE];
++};
++
++/* The structure of an EFI signature database (ESD).*/
++struct grub_esd
++{
++ /*
++ * An identifier which identifies the agent which added
++ * the signature to the list.
++ */
++ grub_uuid_t signatureowner;
++ /* The format of the signature is defined by the SignatureType.*/
++ grub_uint8_t signaturedata[];
++} GRUB_PACKED;
++
++/* The structure of an EFI signature list (ESL).*/
++struct grub_esl
++{
++ /* Type of the signature. GUID signature types are defined in below.*/
++ grub_uuid_t signaturetype;
++ /* Total size of the signature list, including this header.*/
++ grub_uint32_t signaturelistsize;
++ /*
++ * Size of the signature header which precedes
++ * the array of signatures.
++ */
++ grub_uint32_t signatureheadersize;
++ /* Size of each signature.*/
++ grub_uint32_t signaturesize;
++} GRUB_PACKED;
++
++/*
++ * The GRUB_PKS_CERT_* is derived from the following files referred from edk2-staging[1] repo
++ * of tianocore
++ *
++ * MdePkg/Include/Guid/ImageAuthentication.h
++ *
++ * [1] https://github.com/tianocore/edk2-staging
++ */
++
++#define GRUB_PKS_CERT_X509_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0xa1, 0x59, 0xc0, 0xa5, 0xe4, 0x94, \
++ 0xa7, 0x4a, 0x87, 0xb5, 0xab, 0x15, \
++ 0x5c, 0x2b, 0xf0, 0x72 \
++ } \
++ }
++
++#define GRUB_PKS_CERT_SHA1_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0x12, 0xa5, 0x6c, 0x82, 0x10, 0xcf, \
++ 0xc9, 0x4a, 0xb1, 0x87, 0xbe, 0x1, \
++ 0x49, 0x66, 0x31, 0xbd \
++ } \
++ }
++
++#define GRUB_PKS_CERT_SHA224_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0x33, 0x52, 0x6e, 0xb, 0x5c, 0xa6, \
++ 0xc9, 0x44, 0x94, 0x7, 0xd9, 0xab, \
++ 0x83, 0xbf, 0xc8, 0xbd \
++ } \
++ }
++
++#define GRUB_PKS_CERT_SHA256_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0x26, 0x16, 0xc4, 0xc1, 0x4c, 0x50, \
++ 0x92, 0x40, 0xac, 0xa9, 0x41, 0xf9, \
++ 0x36, 0x93, 0x43, 0x28 \
++ } \
++ }
++
++#define GRUB_PKS_CERT_SHA384_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0x07, 0x53, 0x3e, 0xff, 0xd0, 0x9f, \
++ 0xc9, 0x48, 0x85, 0xf1, 0x8a, 0xd5, \
++ 0x6c, 0x70, 0x1e, 0x1 \
++ } \
++ }
++
++#define GRUB_PKS_CERT_SHA512_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0xae, 0x0f, 0x3e, 0x09, 0xc4, 0xa6, \
++ 0x50, 0x4f, 0x9f, 0x1b, 0xd4, 0x1e, \
++ 0x2b, 0x89, 0xc1, 0x9a \
++ } \
++ }
++
++#define GRUB_PKS_CERT_X509_SHA256_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0x92, 0xa4, 0xd2, 0x3b, 0xc0, 0x96, \
++ 0x79, 0x40, 0xb4, 0x20, 0xfc, 0xf9, \
++ 0x8e, 0xf1, 0x03, 0xed \
++ } \
++ }
++
++#define GRUB_PKS_CERT_X509_SHA384_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0x6e, 0x87, 0x76, 0x70, 0xc2, 0x80, \
++ 0xe6, 0x4e, 0xaa, 0xd2, 0x28, 0xb3, \
++ 0x49, 0xa6, 0x86, 0x5b \
++ } \
++ }
++
++#define GRUB_PKS_CERT_X509_SHA512_GUID \
++ (grub_uuid_t) \
++ { \
++ { \
++ 0x63, 0xbf, 0x6d, 0x44, 0x02, 0x25, \
++ 0xda, 0x4c, 0xbc, 0xfa, 0x24, 0x65, \
++ 0xd2, 0xb0, 0xfe, 0x9d \
++ } \
++ }
++
++typedef struct grub_pks_sd grub_pks_sd_t;
++typedef struct grub_pks grub_pks_t;
++
++/* The structure of a PKS signature data.*/
++struct grub_pks_sd
++{
++ grub_uuid_t guid; /* signature type */
++ grub_uint8_t *data; /* signature data */
++ grub_size_t data_size; /* size of signature data */
++} GRUB_PACKED;
++
++/* The structure of a PKS.*/
++struct grub_pks
++{
++ grub_uint8_t use_static_keys;
++ grub_pks_sd_t *db; /* signature database */
++ grub_pks_sd_t *dbx; /* forbidden signature database */
++ grub_size_t db_entries; /* size of signature database */
++ grub_size_t dbx_entries; /* size of forbidden signature database */
++} GRUB_PACKED;
++
++#ifdef __powerpc__
++
++/* initialization of the Platform Keystore */
++grub_err_t grub_platform_keystore_init (void);
++/* releasing allocated memory */
++void EXPORT_FUNC(grub_release_platform_keystore) (void);
++extern grub_uint8_t EXPORT_VAR(grub_use_platform_keystore);
++extern grub_pks_t EXPORT_VAR(grub_platform_keystore);
++
++#else
++
++#define grub_use_platform_keystore 0
++grub_pks_t grub_platform_keystore = {0, NULL, NULL, 0, 0};
++void grub_release_platform_keystore (void);
++
++#endif
++
++#endif
+--
+2.47.0
+
diff --git a/packages/g/grub2/0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch b/packages/g/grub2/0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
new file mode 100644
index 00000000000..bee70f67dc9
--- /dev/null
+++ b/packages/g/grub2/0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
@@ -0,0 +1,831 @@
+From 350e8d823db1febc2c81635115ef3c4c0f41f3e7 Mon Sep 17 00:00:00 2001
+From: Sudhakar Kuppusamy
+Date: Tue, 17 Jan 2023 22:38:05 +0530
+Subject: [PATCH 3/8] appendedsig: The creation of trusted and distrusted lists
+
+The trusted certificates and binary hashes, distrusted certificates and
+binary/certificate hashes will be extracted from the platform keystore buffer
+if Secure Boot is enabled with PKS.
+In order to verify the integerity of the kernel, the extracted data
+would be stored in the buffer db and dbx.
+
+The trusted certificates will be extracted from the grub ELFNOTE if Secure Boot is
+enabled with static key. In order to verify the integerity of the kernel,
+the extracted data would be stored in the buffer db.
+
+Note:-
+
+if the trusted certificate nor binary hash exists in the distrusted list (DBX),
+rejected it while extracting it from the platform keystore buffer.
+
+Signed-off-by: Sudhakar Kuppusamy
+Reviewed-by: Stefan Berger
+Tested-by: Nageswara Sastry
+---
+ grub-core/commands/appendedsig/appendedsig.c | 701 +++++++++++++++++--
+ 1 file changed, 635 insertions(+), 66 deletions(-)
+
+diff --git a/grub-core/commands/appendedsig/appendedsig.c b/grub-core/commands/appendedsig/appendedsig.c
+index e63ad1ac6..5bb09e349 100644
+--- a/grub-core/commands/appendedsig/appendedsig.c
++++ b/grub-core/commands/appendedsig/appendedsig.c
+@@ -33,7 +33,7 @@
+ #include
+ #include
+ #include
+-
++#include
+ #include "appendedsig.h"
+
+ GRUB_MOD_LICENSE ("GPLv3+");
+@@ -66,8 +66,23 @@ struct grub_appended_signature
+ struct pkcs7_signedData pkcs7; /* Parsed PKCS#7 data */
+ };
+
+-/* Trusted certificates for verifying appended signatures */
+-struct x509_certificate *grub_trusted_key;
++/* This represents a trusted/distrusted list*/
++struct grub_database
++{
++ struct x509_certificate *keys; /* Certificates */
++ grub_size_t key_entries; /* Number of certificates */
++ grub_uint8_t **signatures; /* Certificate/binary hashes */
++ grub_size_t *signature_size; /* Size of certificate/binary hashes */
++ grub_size_t signature_entries; /* Number of certificate/binary hashes */
++};
++
++/* Trusted list */
++struct grub_database grub_db = {.keys = NULL, .key_entries = 0, .signatures = NULL,
++ .signature_size = NULL, .signature_entries = 0};
++
++/* Distrusted list */
++struct grub_database grub_dbx = {.signatures = NULL, .signature_size = NULL,
++ .signature_entries = 0};
+
+ /*
+ * Force gcry_rsa to be a module dependency.
+@@ -90,12 +105,263 @@ struct x509_certificate *grub_trusted_key;
+ */
+ extern gcry_pk_spec_t _gcry_pubkey_spec_rsa;
+
++extern gcry_md_spec_t _gcry_digest_spec_sha224;
++extern gcry_md_spec_t _gcry_digest_spec_sha384;
++
++/* releasing trusted list memory */
++static void grub_release_trusted_list (void);
++/* releasing distrusted list memory */
++static void grub_release_distrusted_list (void);
++
+ static enum
+ { check_sigs_no = 0,
+ check_sigs_enforce = 1,
+ check_sigs_forced = 2
+ } check_sigs = check_sigs_no;
+
++/*
++ * GUID can be used to determine the hashing function and
++ * generate the hash using determined hashing function.
++ */
++static grub_err_t
++grub_get_hash (const grub_uuid_t *guid, const grub_uint8_t *data, const grub_size_t data_size,
++ grub_uint8_t *hash, grub_size_t *hash_size)
++{
++ gcry_md_spec_t *hash_func = NULL;
++
++ if (guid == NULL)
++ return grub_error (GRUB_ERR_OUT_OF_RANGE, "signature data type is null");
++
++ if (grub_memcmp (guid, &GRUB_PKS_CERT_SHA256_GUID, GRUB_UUID_SIZE) == 0 ||
++ grub_memcmp (guid, &GRUB_PKS_CERT_X509_SHA256_GUID, GRUB_UUID_SIZE) == 0)
++ hash_func = &_gcry_digest_spec_sha256;
++ else if (grub_memcmp (guid, &GRUB_PKS_CERT_SHA384_GUID, GRUB_UUID_SIZE) == 0 ||
++ grub_memcmp (guid, &GRUB_PKS_CERT_X509_SHA384_GUID, GRUB_UUID_SIZE) == 0)
++ hash_func = &_gcry_digest_spec_sha384;
++ else if (grub_memcmp (guid, &GRUB_PKS_CERT_SHA512_GUID, GRUB_UUID_SIZE) == 0 ||
++ grub_memcmp (guid, &GRUB_PKS_CERT_X509_SHA512_GUID, GRUB_UUID_SIZE) == 0)
++ hash_func = &_gcry_digest_spec_sha512;
++ else
++ return GRUB_ERR_UNKNOWN_COMMAND;
++
++ grub_memset (hash, 0x00, GRUB_MAX_HASH_SIZE);
++ grub_crypto_hash (hash_func, hash, data, data_size);
++ *hash_size = hash_func->mdlen;
++
++ return GRUB_ERR_NONE;
++}
++
++/* adding the certificate/binary hash into the trusted/distrusted list */
++static grub_err_t
++grub_add_hash (const grub_uint8_t **data, const grub_size_t data_size,
++ grub_uint8_t ***signature_list, grub_size_t **signature_size_list,
++ grub_size_t *signature_list_entries)
++{
++ grub_uint8_t **signatures = *signature_list;
++ grub_size_t *signature_size = *signature_size_list;
++ grub_size_t signature_entries = *signature_list_entries;
++
++ if (*data == NULL || data_size == 0)
++ return grub_error (GRUB_ERR_OUT_OF_RANGE, "certificate/binary hash data/size is null");
++
++ if (signatures == NULL && signature_size == NULL)
++ {
++ signatures = grub_zalloc (sizeof (grub_uint8_t *));
++ signature_size = grub_zalloc (sizeof (grub_size_t));
++ }
++ else
++ {
++ signatures = grub_realloc (signatures, sizeof (grub_uint8_t *) * (signature_entries + 1));
++ signature_size = grub_realloc (signature_size,
++ sizeof (grub_size_t) * (signature_entries + 1));
++ }
++
++ if (signatures == NULL || signature_size == NULL)
++ {
++ /*
++ * allocated memory will be freed by
++ * grub_release_trusted_list/grub_release_distrusted_list
++ */
++ if (signatures != NULL)
++ {
++ *signature_list = signatures;
++ *signature_list_entries = signature_entries + 1;
++ }
++
++ if (signature_size != NULL)
++ *signature_size_list = signature_size;
++
++ return grub_error (GRUB_ERR_OUT_OF_MEMORY, "out of memory");
++ }
++
++ signatures[signature_entries] = (grub_uint8_t *) *data;
++ signature_size[signature_entries] = data_size;
++ signature_entries++;
++ *data = NULL;
++
++ *signature_list = signatures;
++ *signature_size_list = signature_size;
++ *signature_list_entries = signature_entries;
++
++ return GRUB_ERR_NONE;
++}
++
++static grub_err_t
++grub_is_x509 (const grub_uuid_t *guid)
++{
++ if (grub_memcmp (guid, &GRUB_PKS_CERT_X509_GUID, GRUB_UUID_SIZE) == 0)
++ return GRUB_ERR_NONE;
++
++ return GRUB_ERR_UNKNOWN_COMMAND;
++}
++
++static grub_err_t
++grub_is_cert_match (const struct x509_certificate *distrusted_cert,
++ const struct x509_certificate *db_cert)
++{
++
++ if (grub_memcmp (distrusted_cert->subject, db_cert->subject, db_cert->subject_len) == 0
++ && grub_memcmp (distrusted_cert->serial, db_cert->serial, db_cert->serial_len) == 0
++ && grub_memcmp (distrusted_cert->mpis[0], db_cert->mpis[0], sizeof (db_cert->mpis[0])) == 0
++ && grub_memcmp (distrusted_cert->mpis[1], db_cert->mpis[1], sizeof (db_cert->mpis[1])) == 0)
++ return GRUB_ERR_NONE;
++
++ return GRUB_ERR_UNKNOWN_COMMAND;
++}
++
++/*
++ * verify the certificate against the certificate from platform keystore buffer's
++ * distrusted list, if it is present, return a bad signature.
++ * else, no errors.
++ */
++static grub_err_t
++grub_is_distrusted_cert (const struct x509_certificate *db_cert)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_size_t i = 0;
++ struct x509_certificate *distrusted_cert = NULL;
++
++ for (i = 0; i < grub_platform_keystore.dbx_entries; i++)
++ {
++ if (grub_platform_keystore.dbx[i].data == NULL &&
++ grub_platform_keystore.dbx[i].data_size == 0)
++ continue;
++
++ if (grub_is_x509 (&grub_platform_keystore.dbx[i].guid) == GRUB_ERR_NONE)
++ {
++ distrusted_cert = grub_zalloc (sizeof (struct x509_certificate));
++ if (distrusted_cert == NULL)
++ return grub_error (GRUB_ERR_OUT_OF_MEMORY, "out of memory");
++
++ rc = parse_x509_certificate (grub_platform_keystore.dbx[i].data,
++ grub_platform_keystore.dbx[i].data_size, distrusted_cert);
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_free (distrusted_cert);
++ continue;
++ }
++
++ if (grub_is_cert_match (distrusted_cert, db_cert) == GRUB_ERR_NONE)
++ {
++ grub_printf ("Warning: a trusted certificate CN='%s' is ignored "
++ "because it is on the distrusted list (dbx).\n", db_cert->subject);
++ grub_free (grub_platform_keystore.dbx[i].data);
++ grub_memset (&grub_platform_keystore.dbx[i], 0x00,
++ sizeof (grub_platform_keystore.dbx[i]));
++ certificate_release (distrusted_cert);
++ grub_free (distrusted_cert);
++ return GRUB_ERR_BAD_SIGNATURE;
++ }
++
++ certificate_release (distrusted_cert);
++ grub_free (distrusted_cert);
++ }
++ }
++
++ return GRUB_ERR_NONE;
++}
++
++/* adding the certificate into the trusted/distrusted list */
++static grub_err_t
++grub_add_certificate (const grub_uint8_t *data, const grub_size_t data_size,
++ struct grub_database *database, const grub_uint8_t is_db)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_size_t key_entries = database->key_entries;
++ struct x509_certificate *cert = NULL;
++
++ if (data == NULL || data_size == 0)
++ return grub_error (GRUB_ERR_OUT_OF_RANGE, "certificate data/size is null");
++
++ cert = grub_zalloc (sizeof (struct x509_certificate));
++ if (cert == NULL)
++ return grub_error (GRUB_ERR_OUT_OF_MEMORY, "out of memory");
++
++ rc = parse_x509_certificate (data, data_size, cert);
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_printf ("Warning: skipping %s certificate (%d)\n",
++ (is_db ? "trusted":"distrused"), rc);
++ grub_free (cert);
++ return rc;
++ }
++
++ if (is_db)
++ {
++ rc = grub_is_distrusted_cert (cert);
++ if (rc != GRUB_ERR_NONE)
++ {
++ certificate_release (cert);
++ grub_free (cert);
++ return rc;
++ }
++ }
++
++ grub_dprintf ("appendedsig", "add a %s certificate CN='%s'\n",
++ (is_db ? "trusted":"distrused"), cert->subject);
++
++ key_entries++;
++ cert->next = database->keys;
++ database->keys = cert;
++ database->key_entries = key_entries;
++
++ return rc;
++}
++
++static grub_err_t
++grub_read_file (const grub_file_t file, grub_uint8_t **data, grub_ssize_t *data_size)
++{
++ grub_uint8_t *buffer = NULL;
++ grub_ssize_t read_size = 0;
++ grub_off_t total_read_size = 0;
++ grub_off_t file_size = grub_file_size (file);
++
++ if (file_size == GRUB_FILE_SIZE_UNKNOWN)
++ return grub_error (GRUB_ERR_BAD_ARGUMENT,
++ N_("could not parse the unknown size of the file."));
++
++ buffer = grub_zalloc (file_size);
++ if (buffer == NULL)
++ return grub_error (GRUB_ERR_OUT_OF_MEMORY, N_("out of memory"));
++
++ while (total_read_size < file_size)
++ {
++ read_size = grub_file_read (file, &buffer[total_read_size], file_size - total_read_size);
++ if (read_size < 0)
++ {
++ grub_free (buffer);
++ return grub_error (GRUB_ERR_READ_ERROR, N_("unable to read the file"));
++ }
++
++ total_read_size += read_size;
++ }
++
++ *data = buffer;
++ *data_size = total_read_size;
++
++ return GRUB_ERR_NONE;
++}
++
+ static const char *
+ grub_env_read_sec (struct grub_env_var *var __attribute__((unused)),
+ const char *val __attribute__((unused)))
+@@ -153,10 +419,7 @@ file_read_all (grub_file_t file, grub_uint8_t **buf, grub_size_t *len)
+
+ while (total_read_size < file_size)
+ {
+- read_size =
+- grub_file_read (file, *buf + total_read_size,
+- file_size - total_read_size);
+-
++ read_size = grub_file_read (file, *buf + total_read_size, file_size - total_read_size);
+ if (read_size < 0)
+ {
+ grub_free (*buf);
+@@ -267,9 +530,8 @@ grub_verify_appended_signature (const grub_uint8_t *buf, grub_size_t bufsize)
+ struct pkcs7_signerInfo *si;
+ int i;
+
+- if (!grub_trusted_key)
+- return grub_error (GRUB_ERR_BAD_SIGNATURE,
+- N_("No trusted keys to verify against"));
++ if (!grub_db.key_entries)
++ return grub_error (GRUB_ERR_BAD_SIGNATURE, N_("No trusted keys to verify against"));
+
+ err = extract_appended_signature (buf, bufsize, &sig);
+ if (err != GRUB_ERR_NONE)
+@@ -299,17 +561,16 @@ grub_verify_appended_signature (const grub_uint8_t *buf, grub_size_t bufsize)
+ datasize, i, hash[0], hash[1], hash[2], hash[3]);
+
+ err = GRUB_ERR_BAD_SIGNATURE;
+- for (pk = grub_trusted_key; pk; pk = pk->next)
+- {
+- rc = grub_crypto_rsa_pad (&hashmpi, hash, si->hash, pk->mpis[0]);
+- if (rc)
+- {
+- err = grub_error (GRUB_ERR_BAD_SIGNATURE,
+- N_("Error padding hash for RSA verification: %d"),
+- rc);
+- grub_free (context);
+- goto cleanup;
+- }
++ for (pk = grub_db.keys; pk; pk = pk->next)
++ {
++ rc = grub_crypto_rsa_pad (&hashmpi, hash, si->hash, pk->mpis[0]);
++ if (rc)
++ {
++ err = grub_error (GRUB_ERR_BAD_SIGNATURE,
++ N_("Error padding hash for RSA verification: %d"), rc);
++ grub_free (context);
++ goto cleanup;
++ }
+
+ rc = _gcry_pubkey_spec_rsa.verify (0, hashmpi, &si->sig_mpi,
+ pk->mpis, NULL, NULL);
+@@ -402,16 +663,16 @@ grub_cmd_distrust (grub_command_t cmd __attribute__((unused)),
+
+ if (cert_num == 1)
+ {
+- cert = grub_trusted_key;
+- grub_trusted_key = cert->next;
++ cert = grub_db.keys;
++ grub_db.keys = cert->next;
+
+ certificate_release (cert);
+ grub_free (cert);
+ return GRUB_ERR_NONE;
+ }
+ i = 2;
+- prev = grub_trusted_key;
+- cert = grub_trusted_key->next;
++ prev = grub_db.keys;
++ cert = grub_db.keys->next;
+ while (cert)
+ {
+ if (i == cert_num)
+@@ -464,8 +725,8 @@ grub_cmd_trust (grub_command_t cmd __attribute__((unused)),
+ grub_dprintf ("appendedsig", "Loaded certificate with CN: %s\n",
+ cert->subject);
+
+- cert->next = grub_trusted_key;
+- grub_trusted_key = cert;
++ cert->next = grub_db.keys;
++ grub_db.keys = cert;
+
+ return GRUB_ERR_NONE;
+ }
+@@ -479,7 +740,7 @@ grub_cmd_list (grub_command_t cmd __attribute__((unused)),
+ int cert_num = 1;
+ grub_size_t i;
+
+- for (cert = grub_trusted_key; cert; cert = cert->next)
++ for (cert = grub_db.keys; cert; cert = cert->next)
+ {
+ grub_printf (N_("Certificate %d:\n"), cert_num);
+
+@@ -577,6 +838,305 @@ static struct grub_fs pseudo_fs = {
+ .fs_read = pseudo_read
+ };
+
++/*
++ * verify the trusted certificate against the certificate hashes from platform keystore buffer's
++ * distrusted list, if it is present, return a bad signature.
++ * else, no errors.
++ */
++static grub_err_t
++grub_is_distrusted_cert_hash (const grub_uint8_t *data, const grub_size_t data_size)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_size_t i = 0, cert_hash_size = 0;
++ grub_uint8_t cert_hash[GRUB_MAX_HASH_SIZE] = { 0 };
++
++ if (data == NULL || data_size == 0)
++ return grub_error (GRUB_ERR_OUT_OF_RANGE, "trusted certificate data/size is null");
++
++ for (i = 0; i < grub_platform_keystore.dbx_entries; i++)
++ {
++ if (grub_platform_keystore.dbx[i].data == NULL &&
++ grub_platform_keystore.dbx[i].data_size == 0)
++ continue;
++
++ rc = grub_get_hash (&grub_platform_keystore.dbx[i].guid, data, data_size,
++ cert_hash, &cert_hash_size);
++ if (rc != GRUB_ERR_NONE)
++ continue;
++
++ if (cert_hash_size == grub_platform_keystore.dbx[i].data_size &&
++ grub_memcmp (grub_platform_keystore.dbx[i].data, cert_hash, cert_hash_size) == 0)
++ {
++ grub_printf ("Warning: a trusted certificate (%02x%02x%02x%02x) is ignored "
++ "because this certificate hash is on the distrusted list (dbx).\n",
++ cert_hash[0], cert_hash[1], cert_hash[2], cert_hash[3]);
++ grub_free (grub_platform_keystore.dbx[i].data);
++ grub_memset (&grub_platform_keystore.dbx[i], 0x00,
++ sizeof (grub_platform_keystore.dbx[i]));
++ return GRUB_ERR_BAD_SIGNATURE;
++ }
++ }
++
++ return GRUB_ERR_NONE;
++}
++
++/*
++ * verify the trusted binary hash against the platform keystore buffer's
++ * distrusted list, if it is present, return a bad signature.
++ * else, no errors.
++ */
++static grub_err_t
++grub_is_distrusted_binary_hash (const grub_uint8_t *binary_hash,
++ const grub_size_t binary_hash_size)
++{
++ grub_size_t i = 0;
++
++ for (i = 0; i < grub_platform_keystore.dbx_entries; i++)
++ {
++ if (grub_platform_keystore.dbx[i].data == NULL &&
++ grub_platform_keystore.dbx[i].data_size == 0)
++ continue;
++
++ if (binary_hash_size == grub_platform_keystore.dbx[i].data_size &&
++ grub_memcmp (grub_platform_keystore.dbx[i].data, binary_hash, binary_hash_size) == 0)
++ {
++ grub_printf ("Warning: a trusted binary hash (%02x%02x%02x%02x) is ignored"
++ " because it is on the distrusted list (dbx).\n",
++ binary_hash[0], binary_hash[1], binary_hash[2], binary_hash[3]);
++ grub_free (grub_platform_keystore.dbx[i].data);
++ grub_memset (&grub_platform_keystore.dbx[i], 0x00,
++ sizeof (grub_platform_keystore.dbx[i]));
++ return GRUB_ERR_BAD_SIGNATURE;
++ }
++ }
++
++ return GRUB_ERR_NONE;
++}
++
++/*
++ * extracts the binary hashes from the platform keystore buffer,
++ * and adds it to the trusted list if not exists in distrusted list.
++ */
++static grub_err_t
++grub_add_trusted_binary_hash (const grub_uint8_t **data, const grub_size_t data_size)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++
++ if (*data == NULL || data_size == 0)
++ return grub_error (GRUB_ERR_OUT_OF_RANGE, "trusted binary hash data/size is null");
++
++ rc = grub_is_distrusted_binary_hash (*data, data_size);
++ if (rc != GRUB_ERR_NONE)
++ return rc;
++
++ rc = grub_add_hash (data, data_size, &grub_db.signatures, &grub_db.signature_size,
++ &grub_db.signature_entries);
++ return rc;
++}
++
++static grub_err_t
++grub_is_hash (const grub_uuid_t *guid)
++{
++ /* GUID type of the binary hash */
++ if (grub_memcmp (guid, &GRUB_PKS_CERT_SHA256_GUID, GRUB_UUID_SIZE) == 0 ||
++ grub_memcmp (guid, &GRUB_PKS_CERT_SHA384_GUID, GRUB_UUID_SIZE) == 0 ||
++ grub_memcmp (guid, &GRUB_PKS_CERT_SHA512_GUID, GRUB_UUID_SIZE) == 0)
++ return GRUB_ERR_NONE;
++
++ /* GUID type of the certificate hash */
++ if (grub_memcmp (guid, &GRUB_PKS_CERT_X509_SHA256_GUID, GRUB_UUID_SIZE) == 0 ||
++ grub_memcmp (guid, &GRUB_PKS_CERT_X509_SHA384_GUID, GRUB_UUID_SIZE) == 0 ||
++ grub_memcmp (guid, &GRUB_PKS_CERT_X509_SHA512_GUID, GRUB_UUID_SIZE) == 0)
++ return GRUB_ERR_NONE;
++
++ return GRUB_ERR_UNKNOWN_COMMAND;
++}
++
++/*
++ * extracts the x509 certificates/binary hashes from the platform keystore buffer,
++ * parses it, and adds it to the trusted list.
++ */
++static grub_err_t
++grub_create_trusted_list (void)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_size_t i = 0;
++
++ for (i = 0; i < grub_platform_keystore.db_entries; i++)
++ {
++ if (grub_is_hash (&grub_platform_keystore.db[i].guid) == GRUB_ERR_NONE)
++ {
++ rc = grub_add_trusted_binary_hash ((const grub_uint8_t **)
++ &grub_platform_keystore.db[i].data,
++ grub_platform_keystore.db[i].data_size);
++ if (rc == GRUB_ERR_OUT_OF_MEMORY)
++ return rc;
++
++ continue;
++ }
++ else if (grub_is_x509 (&grub_platform_keystore.db[i].guid) == GRUB_ERR_NONE)
++ {
++
++ rc = grub_is_distrusted_cert_hash (grub_platform_keystore.db[i].data,
++ grub_platform_keystore.db[i].data_size);
++ if (rc != GRUB_ERR_NONE)
++ continue;
++
++ rc = grub_add_certificate (grub_platform_keystore.db[i].data,
++ grub_platform_keystore.db[i].data_size, &grub_db, 1);
++ if (rc == GRUB_ERR_OUT_OF_MEMORY)
++ return rc;
++ else if (rc != GRUB_ERR_NONE)
++ continue;
++ }
++ else
++ grub_printf ("Warning: unsupported signature data type and "
++ "skipping trusted data (%" PRIuGRUB_SIZE ")\n", i + 1);
++ }
++
++ return GRUB_ERR_NONE;
++}
++
++/*
++ * extracts the certificates, certificate/binary hashes out of the platform keystore buffer,
++ * and adds it to the distrusted list.
++ */
++static grub_err_t
++grub_create_distrusted_list (void)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_size_t i = 0;
++
++ for (i = 0; i < grub_platform_keystore.dbx_entries; i++)
++ {
++ if (grub_platform_keystore.dbx[i].data != NULL &&
++ grub_platform_keystore.dbx[i].data_size > 0)
++ {
++ if (grub_is_x509 (&grub_platform_keystore.dbx[i].guid))
++ {
++ rc = grub_add_certificate (grub_platform_keystore.dbx[i].data,
++ grub_platform_keystore.dbx[i].data_size, &grub_dbx, 0);
++ if (rc == GRUB_ERR_OUT_OF_MEMORY)
++ return rc;
++ }
++ else if (grub_is_hash (&grub_platform_keystore.dbx[i].guid) == GRUB_ERR_NONE)
++ {
++ rc = grub_add_hash ((const grub_uint8_t **) &grub_platform_keystore.dbx[i].data,
++ grub_platform_keystore.dbx[i].data_size,
++ &grub_dbx.signatures, &grub_dbx.signature_size,
++ &grub_dbx.signature_entries);
++ if (rc != GRUB_ERR_NONE)
++ return rc;
++ }
++ else
++ grub_printf ("Warning: unsupported signature data type and "
++ "skipping distrusted data (%" PRIuGRUB_SIZE ")\n", i + 1);
++ }
++ }
++
++ return rc;
++}
++
++/*
++ * extracts the x509 certificates from the ELF note header,
++ * parses it, and adds it to the trusted list.
++ */
++static grub_err_t
++grub_build_static_trusted_list (const struct grub_module_header *header, bool mode)
++{
++ grub_err_t err = GRUB_ERR_NONE;
++ struct grub_file pseudo_file;
++ grub_uint8_t *cert_data = NULL;
++ grub_ssize_t cert_data_size = 0;
++
++ grub_memset (&pseudo_file, 0, sizeof (pseudo_file));
++ pseudo_file.fs = &pseudo_fs;
++ pseudo_file.size = header->size - sizeof (struct grub_module_header);
++ pseudo_file.data = (char *) header + sizeof (struct grub_module_header);
++
++ grub_dprintf ("appendedsig", "found an x509 key, size=%" PRIuGRUB_UINT64_T "\n",
++ pseudo_file.size);
++
++ err = grub_read_file (&pseudo_file, &cert_data, &cert_data_size);
++ if (err != GRUB_ERR_NONE)
++ return err;
++
++ if (mode)
++ {
++ err = grub_is_distrusted_cert_hash (cert_data, cert_data_size);
++ if (err != GRUB_ERR_NONE)
++ return err;
++ }
++
++ err = grub_add_certificate (cert_data, cert_data_size, &grub_db, mode);
++ if (cert_data != NULL)
++ grub_free (cert_data);
++
++ return err;
++}
++
++/* releasing memory */
++static void
++grub_release_trusted_list (void)
++{
++ struct x509_certificate *cert;
++ grub_size_t i = 0;
++
++ while (grub_db.keys != NULL)
++ {
++ cert = grub_db.keys;
++ grub_db.keys = grub_db.keys->next;
++ certificate_release (cert);
++ grub_free (cert);
++ }
++
++ for (i = 0; i < grub_db.signature_entries; i++)
++ grub_free (grub_db.signatures[i]);
++
++ grub_free (grub_db.signatures);
++ grub_free (grub_db.signature_size);
++ grub_memset (&grub_db, 0x00, sizeof (grub_db));
++}
++
++/* releasing memory */
++static void
++grub_release_distrusted_list (void)
++{
++ struct x509_certificate *cert;
++ grub_size_t i = 0;
++
++ while (grub_dbx.keys != NULL)
++ {
++ cert = grub_dbx.keys;
++ grub_dbx.keys = grub_dbx.keys->next;
++ certificate_release (cert);
++ grub_free (cert);
++ }
++
++ for (i = 0; i < grub_dbx.signature_entries; i++)
++ grub_free (grub_dbx.signatures[i]);
++
++ grub_free (grub_dbx.signatures);
++ grub_free (grub_dbx.signature_size);
++ grub_memset (&grub_dbx, 0x00, sizeof (grub_dbx));
++}
++
++static grub_err_t
++grub_load_static_keys (struct grub_module_header *header, bool mode)
++{
++ int rc = GRUB_ERR_NONE;
++
++ FOR_MODULES (header)
++ {
++ /* Not an ELF module, skip. */
++ if (header->type != OBJ_TYPE_X509_PUBKEY)
++ continue;
++ rc = grub_build_static_trusted_list (header, mode);
++ }
++
++ return rc;
++}
++
+ static grub_command_t cmd_verify, cmd_list, cmd_distrust, cmd_trust;
+
+ GRUB_MOD_INIT (appendedsig)
+@@ -588,10 +1148,7 @@ GRUB_MOD_INIT (appendedsig)
+ if (grub_is_lockdown () == GRUB_LOCKDOWN_ENABLED)
+ check_sigs = check_sigs_forced;
+
+- grub_trusted_key = NULL;
+-
+- grub_register_variable_hook ("check_appended_signatures",
+- grub_env_read_sec, grub_env_write_sec);
++ grub_register_variable_hook ("check_appended_signatures", grub_env_read_sec, grub_env_write_sec);
+ grub_env_export ("check_appended_signatures");
+
+ rc = asn1_init ();
+@@ -599,40 +1156,52 @@ GRUB_MOD_INIT (appendedsig)
+ grub_fatal ("Error initing ASN.1 data structures: %d: %s\n", rc,
+ asn1_strerror (rc));
+
+- FOR_MODULES (header)
+- {
+- struct grub_file pseudo_file;
+- struct x509_certificate *pk = NULL;
+- grub_err_t err;
+-
+- /* Not an ELF module, skip. */
+- if (header->type != OBJ_TYPE_X509_PUBKEY)
+- continue;
+-
+- grub_memset (&pseudo_file, 0, sizeof (pseudo_file));
+- pseudo_file.fs = &pseudo_fs;
+- pseudo_file.size = header->size - sizeof (struct grub_module_header);
+- pseudo_file.data = (char *) header + sizeof (struct grub_module_header);
+-
+- grub_dprintf ("appendedsig",
+- "Found an x509 key, size=%" PRIuGRUB_UINT64_T "\n",
+- pseudo_file.size);
+-
+- pk = grub_zalloc (sizeof (struct x509_certificate));
+- if (!pk)
+- {
+- grub_fatal ("Out of memory loading initial certificates");
+- }
+-
+- err = read_cert_from_file (&pseudo_file, pk);
+- if (err != GRUB_ERR_NONE)
+- grub_fatal ("Error loading initial key: %s", grub_errmsg);
+-
+- grub_dprintf ("appendedsig", "loaded certificate CN='%s'\n", pk->subject);
+-
+- pk->next = grub_trusted_key;
+- grub_trusted_key = pk;
+- }
++ if (!grub_use_platform_keystore && check_sigs == check_sigs_forced)
++ {
++ rc = grub_load_static_keys (header, 0);
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_release_trusted_list ();
++ grub_error (rc, "static trusted list creation failed");
++ }
++ else
++ grub_printf ("appendedsig: the trusted list now has %" PRIuGRUB_SIZE " static keys\n",
++ grub_db.key_entries);
++ }
++ else if (grub_use_platform_keystore && check_sigs == check_sigs_forced)
++ {
++ if (grub_platform_keystore.use_static_keys == 1)
++ {
++ grub_printf ("Warning: db variable not available and using a static key"
++ "as a default key in trusted list");
++ rc = grub_load_static_keys (header, 1);
++ }
++ else
++ rc = grub_create_trusted_list ();
++
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_release_trusted_list ();
++ grub_error (rc, "trusted list creation failed");
++ }
++ else
++ {
++ rc = grub_create_distrusted_list ();
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_release_trusted_list ();
++ grub_release_distrusted_list ();
++ grub_error (rc, "distrusted list creation failed");
++ }
++ else
++ grub_printf ("appendedsig: the trusted list now has %" PRIuGRUB_SIZE " keys.\n"
++ "appendedsig: the distrusted list now has %" PRIuGRUB_SIZE " keys.\n",
++ grub_db.signature_entries + grub_db.key_entries,
++ grub_dbx.signature_entries);
++ }
++
++ grub_release_platform_keystore ();
++ }
+
+ cmd_trust =
+ grub_register_command ("trust_certificate", grub_cmd_trust,
+--
+2.47.0
+
diff --git a/packages/g/grub2/0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch b/packages/g/grub2/0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
new file mode 100644
index 00000000000..05181f2ffe5
--- /dev/null
+++ b/packages/g/grub2/0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
@@ -0,0 +1,253 @@
+From 5bff27911bb6575b80b5decf5364b7e6bde801d3 Mon Sep 17 00:00:00 2001
+From: Sudhakar Kuppusamy
+Date: Wed, 18 Jan 2023 23:04:38 +0530
+Subject: [PATCH 4/8] appendedsig: While verifying the kernel, use trusted and
+ distrusted lists
+
+To verify the kernel's, the trusted key will be used from
+the trusted key list. If it fails, verify it against the list of hashes
+that are distrusted and trusted.
+
+Signed-off-by: Sudhakar Kuppusamy
+Reviewed-by: Stefan Berger
+Tested-by: Nageswara Sastry
+---
+ grub-core/commands/appendedsig/appendedsig.c | 187 +++++++++++++------
+ 1 file changed, 131 insertions(+), 56 deletions(-)
+
+diff --git a/grub-core/commands/appendedsig/appendedsig.c b/grub-core/commands/appendedsig/appendedsig.c
+index 5bb09e349..f9638220e 100644
+--- a/grub-core/commands/appendedsig/appendedsig.c
++++ b/grub-core/commands/appendedsig/appendedsig.c
+@@ -36,6 +36,10 @@
+ #include
+ #include "appendedsig.h"
+
++#define SHA256_LEN 32
++#define SHA384_LEN 48
++#define SHA512_LEN 64
++
+ GRUB_MOD_LICENSE ("GPLv3+");
+
+ const char magic[] = "~Module signature appended~\n";
+@@ -516,6 +520,80 @@ extract_appended_signature (const grub_uint8_t *buf, grub_size_t bufsize,
+ return GRUB_ERR_NONE;
+ }
+
++static grub_err_t
++grub_get_binary_hash (const grub_size_t binary_hash_size, const grub_uint8_t *data,
++ const grub_size_t data_size, grub_uint8_t *hash, grub_size_t *hash_size)
++{
++ grub_uuid_t guid = { 0 };
++
++ /* support SHA256, SHA384 and SHA512 for binary hash */
++ if (binary_hash_size == SHA256_LEN)
++ grub_memcpy (&guid, &GRUB_PKS_CERT_SHA256_GUID, GRUB_UUID_SIZE);
++ else if (binary_hash_size == SHA384_LEN)
++ grub_memcpy (&guid, &GRUB_PKS_CERT_SHA384_GUID, GRUB_UUID_SIZE);
++ else if (binary_hash_size == SHA512_LEN)
++ grub_memcpy (&guid, &GRUB_PKS_CERT_SHA512_GUID, GRUB_UUID_SIZE);
++ else
++ {
++ grub_dprintf ("appendedsig", "unsupported hash type (%" PRIuGRUB_SIZE ") and skipping binary hash\n",
++ binary_hash_size);
++ return GRUB_ERR_UNKNOWN_COMMAND;
++ }
++
++ return grub_get_hash (&guid, data, data_size, hash, hash_size);
++}
++
++/*
++ * verify binary hash against the list of binary hashes that are distrusted
++ * and trusted.
++ */
++static grub_err_t
++grub_verify_binary_hash (const grub_uint8_t *data, const grub_size_t data_size)
++{
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_size_t i = 0, hash_size = 0;
++ grub_uint8_t hash[GRUB_MAX_HASH_SIZE] = { 0 };
++
++ for (i = 0; i < grub_dbx.signature_entries; i++)
++ {
++ rc = grub_get_binary_hash (grub_dbx.signature_size[i], data, data_size,
++ hash, &hash_size);
++ if (rc != GRUB_ERR_NONE)
++ continue;
++
++ if (hash_size == grub_dbx.signature_size[i] &&
++ grub_memcmp (grub_dbx.signatures[i], hash, hash_size) == 0)
++ {
++ grub_dprintf ("appendedsig", "the binary hash (%02x%02x%02x%02x) was listed "
++ "as distrusted\n", hash[0], hash[1], hash[2], hash[3]);
++ return GRUB_ERR_BAD_SIGNATURE;
++ }
++ }
++
++ for (i = 0; i < grub_db.signature_entries; i++)
++ {
++ rc = grub_get_binary_hash (grub_db.signature_size[i], data, data_size,
++ hash, &hash_size);
++ if (rc != GRUB_ERR_NONE)
++ continue;
++
++ if (hash_size == grub_db.signature_size[i] &&
++ grub_memcmp (grub_db.signatures[i], hash, hash_size) == 0)
++ {
++ grub_dprintf ("appendedsig", "verified with a trusted binary hash "
++ "(%02x%02x%02x%02x)\n", hash[0], hash[1], hash[2], hash[3]);
++ return GRUB_ERR_NONE;
++ }
++ }
++
++ return GRUB_ERR_EOF;
++}
++
++/*
++ * verify the kernel's integrity, the trusted key will be used from
++ * the trusted key list. If it fails, verify it against the list of binary hashes
++ * that are distrusted and trusted.
++ */
+ static grub_err_t
+ grub_verify_appended_signature (const grub_uint8_t *buf, grub_size_t bufsize)
+ {
+@@ -525,12 +603,12 @@ grub_verify_appended_signature (const grub_uint8_t *buf, grub_size_t bufsize)
+ unsigned char *hash;
+ gcry_mpi_t hashmpi;
+ gcry_err_code_t rc;
+- struct x509_certificate *pk;
++ struct x509_certificate *cert;
+ struct grub_appended_signature sig;
+ struct pkcs7_signerInfo *si;
+ int i;
+
+- if (!grub_db.key_entries)
++ if (!grub_db.key_entries && !grub_db.signature_entries)
+ return grub_error (GRUB_ERR_BAD_SIGNATURE, N_("No trusted keys to verify against"));
+
+ err = extract_appended_signature (buf, bufsize, &sig);
+@@ -538,70 +616,67 @@ grub_verify_appended_signature (const grub_uint8_t *buf, grub_size_t bufsize)
+ return err;
+
+ datasize = bufsize - sig.signature_len;
+-
+- for (i = 0; i < sig.pkcs7.signerInfo_count; i++)
++ /* checking kernel binary hash is presents in trusted list (db)/distrusted list (dbx) */
++ err = grub_verify_binary_hash (buf, datasize);
++ if (err == GRUB_ERR_EOF)
+ {
+- /* This could be optimised in a couple of ways:
+- - we could only compute hashes once per hash type
+- - we could track signer information and only verify where IDs match
+- For now we do the naive O(trusted keys * pkcs7 signers) approach.
+- */
+- si = &sig.pkcs7.signerInfos[i];
+- context = grub_zalloc (si->hash->contextsize);
+- if (!context)
+- return grub_errno;
+-
+- si->hash->init (context);
+- si->hash->write (context, buf, datasize);
+- si->hash->final (context);
+- hash = si->hash->read (context);
+-
+- grub_dprintf ("appendedsig",
+- "data size %" PRIxGRUB_SIZE ", signer %d hash %02x%02x%02x%02x...\n",
+- datasize, i, hash[0], hash[1], hash[2], hash[3]);
+-
+- err = GRUB_ERR_BAD_SIGNATURE;
+- for (pk = grub_db.keys; pk; pk = pk->next)
++ /* verifying kernel binary signature using trusted keys from trusted list (db) */
++ for (i = 0; i < sig.pkcs7.signerInfo_count; i++)
+ {
+- rc = grub_crypto_rsa_pad (&hashmpi, hash, si->hash, pk->mpis[0]);
+- if (rc)
++ si = &sig.pkcs7.signerInfos[i];
++ context = grub_zalloc (si->hash->contextsize);
++ if (!context)
++ return grub_errno;
++
++ si->hash->init (context);
++ si->hash->write (context, buf, datasize);
++ si->hash->final (context);
++ hash = si->hash->read (context);
++
++ grub_dprintf ("appendedsig",
++ "data size %" PRIxGRUB_SIZE ", signer %d hash %02x%02x%02x%02x...\n",
++ datasize, i, hash[0], hash[1], hash[2], hash[3]);
++
++ err = GRUB_ERR_BAD_SIGNATURE;
++ for (cert = grub_db.keys; cert; cert = cert->next)
+ {
+- err = grub_error (GRUB_ERR_BAD_SIGNATURE,
+- N_("Error padding hash for RSA verification: %d"), rc);
+- grub_free (context);
+- goto cleanup;
++ rc = grub_crypto_rsa_pad (&hashmpi, hash, si->hash, cert->mpis[0]);
++ if (rc)
++ {
++ err = grub_error (GRUB_ERR_BAD_SIGNATURE,
++ N_("Error padding hash for RSA verification: %d"), rc);
++ grub_free (context);
++ pkcs7_signedData_release (&sig.pkcs7);
++ return err;
++ }
++
++ rc = _gcry_pubkey_spec_rsa.verify (0, hashmpi, &si->sig_mpi, cert->mpis, NULL, NULL);
++ gcry_mpi_release (hashmpi);
++
++ if (rc == 0)
++ {
++ grub_dprintf ("appendedsig", "verify signer %d with key '%s' succeeded\n",
++ i, cert->subject);
++ err = GRUB_ERR_NONE;
++ break;
++ }
++
++ grub_dprintf ("appendedsig", "verify signer %d with key '%s' failed with %d\n",
++ i, cert->subject, rc);
+ }
+
+- rc = _gcry_pubkey_spec_rsa.verify (0, hashmpi, &si->sig_mpi,
+- pk->mpis, NULL, NULL);
+- gcry_mpi_release (hashmpi);
+-
+- if (rc == 0)
+- {
+- grub_dprintf ("appendedsig",
+- "verify signer %d with key '%s' succeeded\n", i,
+- pk->subject);
+- err = GRUB_ERR_NONE;
+- break;
+- }
+-
+- grub_dprintf ("appendedsig",
+- "verify signer %d with key '%s' failed with %d\n", i,
+- pk->subject, rc);
+- }
+-
+- grub_free (context);
++ grub_free (context);
+
+- if (err == GRUB_ERR_NONE)
+- break;
++ if (err == GRUB_ERR_NONE)
++ break;
++ }
+ }
+
+- /* If we didn't verify, provide a neat message */
+ if (err != GRUB_ERR_NONE)
+- err = grub_error (GRUB_ERR_BAD_SIGNATURE,
+- N_("Failed to verify signature against a trusted key"));
++ grub_printf ("appendedsig: failed to verify signature with any trusted key\n");
++ else
++ grub_printf ("appendedsig: successfully verified the signature with a trusted key\n");
+
+-cleanup:
+ pkcs7_signedData_release (&sig.pkcs7);
+
+ return err;
+--
+2.47.0
+
diff --git a/packages/g/grub2/0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch b/packages/g/grub2/0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
new file mode 100644
index 00000000000..d0199733e3b
--- /dev/null
+++ b/packages/g/grub2/0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
@@ -0,0 +1,684 @@
+From f05acf089fb80fc44112a7feec3529af494a41f7 Mon Sep 17 00:00:00 2001
+From: Sudhakar Kuppusamy
+Date: Wed, 1 Feb 2023 21:42:36 +0530
+Subject: [PATCH 5/8] appendedsig: The grub command's trusted and distrusted
+ support
+
+To support the following trusted and distrusted commands
+
+ 1. trusted_list:
+ It will show the list of trusted certificates and binary hashes
+ 2. distrusted_list:
+ It will show the list of distrusted certificates and binary/certificate hashes
+ 3. trusted_certificate:
+ It will add the trusted certificate to the trusted list
+ 4. trusted_signature:
+ It will add the certificate/binary hash to the trusted list
+ 5. distrusted_certificate:
+ It will remove the trusted certificate from trsuted list
+ 6. distrusted_signature:
+ It will add the certificate/binary hash to the distrsuted list
+
+Note:-
+ The addition/deletion of trusted certificates and binary hashes
+are not allowed in grub command prompt while secure boot is enabled.
+
+Signed-off-by: Sudhakar Kuppusamy
+Reviewed-by: Stefan Berger
+Tested-by: Nageswara Sastry
+---
+ grub-core/commands/appendedsig/appendedsig.c | 547 ++++++++++++-------
+ 1 file changed, 361 insertions(+), 186 deletions(-)
+
+diff --git a/grub-core/commands/appendedsig/appendedsig.c b/grub-core/commands/appendedsig/appendedsig.c
+index f9638220e..7d2bba079 100644
+--- a/grub-core/commands/appendedsig/appendedsig.c
++++ b/grub-core/commands/appendedsig/appendedsig.c
+@@ -123,6 +123,38 @@ static enum
+ check_sigs_forced = 2
+ } check_sigs = check_sigs_no;
+
++enum
++{
++ OPTION_BINARY_HASH = 0,
++ OPTION_CERT_HASH = 1
++};
++
++static const struct grub_arg_option options[] =
++{
++ {"binary-hash", 'b', 0, N_("hash file of the binary."), 0, ARG_TYPE_NONE},
++ {"cert-hash", 'c', 1, N_("hash file of the certificate."), 0, ARG_TYPE_NONE},
++ {0, 0, 0, 0, 0, 0}
++};
++
++static void
++grub_printhex (const grub_uint8_t *data, const grub_size_t length)
++{
++ grub_size_t i, count = 0;
++
++ for (i = 0; i < length-1; i++)
++ {
++ grub_printf ("%02x:", data[i]);
++ count++;
++ if (count == 16)
++ {
++ grub_printf ("\n\t ");
++ count = 0;
++ }
++ }
++
++ grub_printf ("%02x\n", data[i]);
++}
++
+ /*
+ * GUID can be used to determine the hashing function and
+ * generate the hash using determined hashing function.
+@@ -396,75 +428,6 @@ grub_env_write_sec (struct grub_env_var *var __attribute__((unused)),
+ return grub_strdup (grub_env_read_sec (NULL, NULL));
+ }
+
+-static grub_err_t
+-file_read_all (grub_file_t file, grub_uint8_t **buf, grub_size_t *len)
+-{
+- grub_off_t full_file_size;
+- grub_size_t file_size, total_read_size = 0;
+- grub_ssize_t read_size;
+-
+- full_file_size = grub_file_size (file);
+- if (full_file_size == GRUB_FILE_SIZE_UNKNOWN)
+- return grub_error (GRUB_ERR_BAD_ARGUMENT,
+- N_("Cannot read a file of unknown size into a buffer"));
+-
+- if (full_file_size > GRUB_SIZE_MAX)
+- return grub_error (GRUB_ERR_OUT_OF_RANGE,
+- N_("File is too large to read: %" PRIuGRUB_UINT64_T
+- " bytes"), full_file_size);
+-
+- file_size = (grub_size_t) full_file_size;
+-
+- *buf = grub_malloc (file_size);
+- if (!*buf)
+- return grub_error (GRUB_ERR_OUT_OF_MEMORY,
+- N_("Could not allocate file data buffer size %"
+- PRIuGRUB_SIZE), file_size);
+-
+- while (total_read_size < file_size)
+- {
+- read_size = grub_file_read (file, *buf + total_read_size, file_size - total_read_size);
+- if (read_size < 0)
+- {
+- grub_free (*buf);
+- return grub_errno;
+- }
+- else if (read_size == 0)
+- {
+- grub_free (*buf);
+- return grub_error (GRUB_ERR_IO,
+- N_("Could not read full file size (%"
+- PRIuGRUB_SIZE "), only %" PRIuGRUB_SIZE
+- " bytes read"), file_size, total_read_size);
+- }
+-
+- total_read_size += read_size;
+- }
+- *len = file_size;
+- return GRUB_ERR_NONE;
+-}
+-
+-static grub_err_t
+-read_cert_from_file (grub_file_t f, struct x509_certificate *certificate)
+-{
+- grub_err_t err;
+- grub_uint8_t *buf;
+- grub_size_t file_size;
+-
+- err = file_read_all (f, &buf, &file_size);
+- if (err != GRUB_ERR_NONE)
+- return err;
+-
+- err = parse_x509_certificate (buf, file_size, certificate);
+- if (err != GRUB_ERR_NONE)
+- {
+- grub_free (buf);
+- return err;
+- }
+-
+- return GRUB_ERR_NONE;
+-}
+-
+ static grub_err_t
+ extract_appended_signature (const grub_uint8_t *buf, grub_size_t bufsize,
+ struct grub_appended_signature *sig)
+@@ -686,159 +649,357 @@ static grub_err_t
+ grub_cmd_verify_signature (grub_command_t cmd __attribute__((unused)),
+ int argc, char **args)
+ {
+- grub_file_t f;
+ grub_err_t err = GRUB_ERR_NONE;
+- grub_uint8_t *data;
+- grub_size_t file_size;
++ grub_file_t signed_file = NULL;
++ grub_uint8_t *signed_data = NULL;
++ grub_ssize_t signed_data_size = 0;
++
++ if (argc != 1)
++ {
++ grub_printf (N_("a signed file is expected\n"
++ "Example:\n\tverify_appended \n"));
++ return GRUB_ERR_BAD_ARGUMENT;
++ }
+
+- if (argc < 1)
+- return grub_error (GRUB_ERR_BAD_ARGUMENT, N_("one argument expected"));
++ if (grub_strlen (args[0]) == 0)
++ return grub_error (GRUB_ERR_BAD_FILENAME, N_("missing signed file"));
+
+ grub_dprintf ("appendedsig", "verifying %s\n", args[0]);
+
+- f = grub_file_open (args[0], GRUB_FILE_TYPE_VERIFY_SIGNATURE);
+- if (!f)
++ signed_file = grub_file_open (args[0], GRUB_FILE_TYPE_VERIFY_SIGNATURE);
++ if (signed_file == NULL)
++ return grub_error (GRUB_ERR_FILE_NOT_FOUND, N_("unable to open a signed file"));
++
++ err = grub_read_file (signed_file, &signed_data, &signed_data_size);
++ if (err != GRUB_ERR_NONE)
++ {
++ grub_file_close (signed_file);
++ return err;
++ }
++
++ grub_file_close (signed_file);
++ err = grub_verify_appended_signature (signed_data, signed_data_size);
++ grub_free (signed_data);
++
++ return err;
++}
++
++static grub_err_t
++grub_cmd_trusted_list (grub_command_t cmd __attribute__((unused)),
++ int argc __attribute__((unused)), char **args __attribute__((unused)))
++{
++ struct x509_certificate *cert = NULL;
++ grub_size_t i = 0, cert_num = 1;
++
++ for (cert = grub_db.keys; cert; cert = cert->next)
++ {
++ grub_printf (N_("trusted certificate %" PRIuGRUB_SIZE ":\n"), cert_num);
++ grub_printf (N_("\tserial: "));
++
++ for (i = 0; i < cert->serial_len - 1; i++)
++ grub_printf ("%02x:", cert->serial[i]);
++
++ grub_printf ("%02x\n", cert->serial[cert->serial_len - 1]);
++ grub_printf ("\tCN: %s\n\n", cert->subject);
++ cert_num++;
++
++ }
++
++ for (i = 0; i < grub_db.signature_entries; i++)
+ {
+- err = grub_errno;
+- goto cleanup;
++ grub_printf (N_("trusted binary hash %" PRIuGRUB_SIZE ":\n"), i+1);
++ grub_printf (N_("\thash: "));
++ grub_printhex (grub_db.signatures[i], grub_db.signature_size[i]);
+ }
+
+- err = file_read_all (f, &data, &file_size);
++ return GRUB_ERR_NONE;
++}
++
++static grub_err_t
++grub_cmd_distrusted_list (grub_command_t cmd __attribute__((unused)),
++ int argc __attribute__((unused)),
++ char **args __attribute__((unused)))
++{
++ struct x509_certificate *cert = NULL;
++ grub_size_t i = 0, cert_num = 1;
++
++ for (cert = grub_dbx.keys; cert; cert = cert->next)
++ {
++ grub_printf (N_("distrusted certificate %" PRIuGRUB_SIZE ":\n"), cert_num);
++ grub_printf (N_("\tserial: "));
++
++ for (i = 0; i < cert->serial_len - 1; i++)
++ grub_printf ("%02x:", cert->serial[i]);
++
++ grub_printf ("%02x\n", cert->serial[cert->serial_len - 1]);
++ grub_printf ("\tCN: %s\n\n", cert->subject);
++ cert_num++;
++ }
++
++ for (i = 0; i < grub_dbx.signature_entries; i++)
++ {
++ grub_printf (N_("distrusted certificate/binary hash %" PRIuGRUB_SIZE ":\n"), i+1);
++ grub_printf (N_("\thash: "));
++ grub_printhex (grub_dbx.signatures[i], grub_dbx.signature_size[i]);
++ }
++
++ return GRUB_ERR_NONE;
++}
++
++static grub_err_t
++grub_cmd_trusted_cert (grub_command_t cmd __attribute__((unused)),
++ int argc, char **args)
++{
++ grub_err_t err = GRUB_ERR_NONE;
++ grub_file_t cert_file = NULL;
++ grub_uint8_t *cert_data = NULL;
++ grub_ssize_t cert_data_size = 0;
++
++ if (argc != 1)
++ {
++ grub_printf (N_("a trusted X.509 certificate file is expected\n"
++ "Example:\n\ttrusted_certificate \n"));
++ return GRUB_ERR_BAD_ARGUMENT;
++ }
++
++ if (check_sigs == check_sigs_forced)
++ {
++ grub_printf ("Warning: since secure boot is enabled, "
++ "adding of trusted X.509 certificate is not permitted!\n");
++ return grub_errno;
++ }
++
++ if (grub_strlen (args[0]) == 0)
++ return grub_error (GRUB_ERR_BAD_FILENAME,
++ N_("missing trusted X.509 certificate file"));
++
++ cert_file = grub_file_open (args[0], GRUB_FILE_TYPE_CERTIFICATE_TRUST |
++ GRUB_FILE_TYPE_NO_DECOMPRESS);
++ if (cert_file == NULL)
++ return grub_error (GRUB_ERR_FILE_NOT_FOUND,
++ N_("unable to open the trusted X.509 certificate file"));
++
++ err = grub_read_file (cert_file, &cert_data, &cert_data_size);
+ if (err != GRUB_ERR_NONE)
+- goto cleanup;
++ {
++ grub_file_close (cert_file);
++ return err;
++ }
+
+- err = grub_verify_appended_signature (data, file_size);
++ grub_file_close (cert_file);
++ err = grub_add_certificate (cert_data, cert_data_size, &grub_db, 1);
++ if (err != GRUB_ERR_NONE)
++ {
++ grub_release_trusted_list ();
++ grub_release_distrusted_list ();
++ grub_error (err, "adding of trusted certificate failed");
++ }
+
+- grub_free (data);
++ grub_free (cert_data);
+
+-cleanup:
+- if (f)
+- grub_file_close (f);
+ return err;
+ }
+
+ static grub_err_t
+-grub_cmd_distrust (grub_command_t cmd __attribute__((unused)),
+- int argc, char **args)
++grub_cmd_trusted_hash (grub_command_t cmd __attribute__((unused)), int argc, char**args)
+ {
+- unsigned long cert_num, i;
+- struct x509_certificate *cert, *prev;
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_file_t hash_file = NULL;
++ grub_uint8_t *hash_data = NULL;
++ grub_ssize_t hash_data_size = 0;
+
+ if (argc != 1)
+- return grub_error (GRUB_ERR_BAD_ARGUMENT, N_("One argument expected"));
++ {
++ grub_printf (N_("a trusted binary hash file is expected\n"
++ "Example:\n\ttrusted_signature \n"));
++ return GRUB_ERR_BAD_ARGUMENT;
++ }
+
+- grub_errno = GRUB_ERR_NONE;
+- cert_num = grub_strtoul (args[0], NULL, 10);
+- if (grub_errno != GRUB_ERR_NONE)
+- return grub_errno;
++ if (check_sigs == check_sigs_forced)
++ {
++ grub_printf ("Warning: since secure boot is enabled, "
++ "adding of trusted binary hash is not permitted!\n");
++ return grub_errno;
++ }
+
+- if (cert_num < 1)
+- return grub_error (GRUB_ERR_BAD_ARGUMENT,
+- N_("Certificate number too small - numbers start at 1"));
++ if (grub_strlen (args[0]) == 0)
++ return grub_error (GRUB_ERR_BAD_FILENAME, N_("missing trusted binary hash file"));
+
+- if (cert_num == 1)
+- {
+- cert = grub_db.keys;
+- grub_db.keys = cert->next;
++ hash_file = grub_file_open (args[0], GRUB_FILE_TYPE_TO_HASH | GRUB_FILE_TYPE_NO_DECOMPRESS);
++ if (hash_file == NULL)
++ return grub_error (GRUB_ERR_FILE_NOT_FOUND,
++ N_("unable to open the trusted binary hash file"));
+
+- certificate_release (cert);
+- grub_free (cert);
+- return GRUB_ERR_NONE;
++ rc = grub_read_file (hash_file, &hash_data, &hash_data_size);
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_file_close (hash_file);
++ return rc;
+ }
+- i = 2;
+- prev = grub_db.keys;
+- cert = grub_db.keys->next;
+- while (cert)
++
++ grub_file_close (hash_file);
++
++ grub_dprintf ("appendedsig", "adding a trusted binary hash %s\n with size of %" PRIdGRUB_SSIZE "\n",
++ hash_data, hash_data_size);
++
++ /* only accept SHA256, SHA384 and SHA512 binary hash */
++ if (hash_data_size != SHA256_LEN && hash_data_size != SHA384_LEN &&
++ hash_data_size != SHA512_LEN)
++ return grub_error (GRUB_ERR_BAD_SIGNATURE, N_("unacceptable trusted binary hash type"));
++
++ rc = grub_add_hash ((const grub_uint8_t **) &hash_data, hash_data_size, &grub_db.signatures,
++ &grub_db.signature_size, &grub_db.signature_entries);
++ if (rc != GRUB_ERR_NONE)
+ {
+- if (i == cert_num)
+- {
+- prev->next = cert->next;
+- certificate_release (cert);
+- grub_free (cert);
+- return GRUB_ERR_NONE;
+- }
+- i++;
+- prev = cert;
+- cert = cert->next;
++ grub_release_trusted_list ();
++ grub_release_distrusted_list ();
++ grub_error (rc, "adding of trusted binary hash failed");
+ }
+
+- return grub_error (GRUB_ERR_BAD_ARGUMENT,
+- N_("No certificate number %lu found - only %lu certificates in the store"),
+- cert_num, i - 1);
++ grub_free (hash_data);
++
++ return rc;
+ }
+
+ static grub_err_t
+-grub_cmd_trust (grub_command_t cmd __attribute__((unused)),
+- int argc, char **args)
++grub_cmd_distrusted_cert (grub_command_t cmd __attribute__((unused)), int argc, char **args)
+ {
+- grub_file_t certf;
+- struct x509_certificate *cert = NULL;
+- grub_err_t err;
++ grub_size_t cert_num = 0, i = 1;
++ struct x509_certificate *current_cert = grub_db.keys;
++ struct x509_certificate *previous_cert = grub_db.keys;
+
+ if (argc != 1)
+- return grub_error (GRUB_ERR_BAD_ARGUMENT, N_("one argument expected"));
++ {
++ grub_printf (N_("trusted certificate number is expected\n"
++ "Example:\n\tdistrusted_certificate \n"));
++ return GRUB_ERR_BAD_ARGUMENT;
++ }
+
+- certf = grub_file_open (args[0],
+- GRUB_FILE_TYPE_CERTIFICATE_TRUST
+- | GRUB_FILE_TYPE_NO_DECOMPRESS);
+- if (!certf)
+- return grub_errno;
++ if (check_sigs == check_sigs_forced)
++ {
++ grub_printf ("Warning: since secure boot is enabled, "
++ "removing of trusted certificate is not permitted!\n");
++ return grub_errno;
++ }
+
++ cert_num = grub_strtoul (args[0], NULL, 10);
++ if (cert_num < 1)
++ return grub_error (GRUB_ERR_BAD_ARGUMENT,
++ N_("trusted certificate number should to begin with 1"));
+
+- cert = grub_zalloc (sizeof (struct x509_certificate));
+- if (!cert)
+- return grub_error (GRUB_ERR_OUT_OF_MEMORY,
+- N_("Could not allocate memory for certificate"));
++ if (cert_num > grub_db.key_entries)
++ return grub_error (GRUB_ERR_BAD_ARGUMENT,
++ N_("trusted certificate number should not exceed %" PRIuGRUB_SIZE),
++ grub_db.key_entries);
++ else if (cert_num < grub_db.key_entries)
++ return grub_error (GRUB_ERR_BAD_ARGUMENT,
++ N_("there is no certificate on the trusted list. so, not permitted"));
+
+- err = read_cert_from_file (certf, cert);
+- grub_file_close (certf);
+- if (err != GRUB_ERR_NONE)
++ for (i = 1; i < grub_db.key_entries; i++)
+ {
+- grub_free (cert);
+- return err;
++ if (cert_num == 1)
++ {
++ previous_cert = current_cert->next;
++ break;
++ }
++ else if (cert_num == i)
++ {
++ previous_cert->next = current_cert->next;
++ break;
++ }
++
++ previous_cert = current_cert;
++ current_cert = current_cert->next;
+ }
+- grub_dprintf ("appendedsig", "Loaded certificate with CN: %s\n",
+- cert->subject);
+
+- cert->next = grub_db.keys;
+- grub_db.keys = cert;
++ certificate_release (current_cert);
++ grub_free (current_cert);
+
+ return GRUB_ERR_NONE;
+ }
+
+ static grub_err_t
+-grub_cmd_list (grub_command_t cmd __attribute__((unused)),
+- int argc __attribute__((unused)),
+- char **args __attribute__((unused)))
++grub_cmd_distrusted_hash (grub_extcmd_context_t ctxt, int argc, char **args)
+ {
+- struct x509_certificate *cert;
+- int cert_num = 1;
+- grub_size_t i;
++ grub_err_t rc = GRUB_ERR_NONE;
++ grub_file_t hash_file = NULL;
++ grub_uint8_t *hash_data = NULL;
++ grub_ssize_t hash_data_size = 0;
+
+- for (cert = grub_db.keys; cert; cert = cert->next)
++ if (argc != 2)
+ {
+- grub_printf (N_("Certificate %d:\n"), cert_num);
++ grub_printf (N_("a distrusted certificate/binary hash file is expected\n"
++ "Example:\n\tdistrusted_signature [option] \n"
++ "option:\n[-b|--binary-hash] FILE [BINARY HASH FILE]\n"
++ "[-c|--cert-hash] FILE [CERTFICATE HASH FILE]\n"));
++ return GRUB_ERR_BAD_ARGUMENT;
++ }
+
+- grub_printf (N_("\tSerial: "));
+- for (i = 0; i < cert->serial_len - 1; i++)
+- {
+- grub_printf ("%02x:", cert->serial[i]);
+- }
+- grub_printf ("%02x\n", cert->serial[cert->serial_len - 1]);
++ if (check_sigs == check_sigs_forced)
++ {
++ grub_printf ("Warning: since secure boot is enabled, "
++ "adding of distrusted certificate/binary hash is not permitted!\n");
++ return grub_errno;
++ }
+
+- grub_printf ("\tCN: %s\n\n", cert->subject);
+- cert_num++;
++ if (!ctxt->state[OPTION_BINARY_HASH].set && !ctxt->state[OPTION_CERT_HASH].set)
++ return grub_error (GRUB_ERR_BAD_ARGUMENT, N_("missing options and use --help to konw"));
++
++ if (grub_strlen (args[1]) == 0)
++ return grub_error (GRUB_ERR_BAD_FILENAME,
++ N_("missing distrusted certificate/binary hash file"));
++
++ hash_file = grub_file_open (args[1], GRUB_FILE_TYPE_TO_HASH | GRUB_FILE_TYPE_NO_DECOMPRESS);
++ if (hash_file == NULL)
++ return grub_error (GRUB_ERR_FILE_NOT_FOUND,
++ N_("unable to open the distrusted certificate/binary hash file"));
+
++ rc = grub_read_file (hash_file, &hash_data, &hash_data_size);
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_file_close (hash_file);
++ return rc;
+ }
+
+- return GRUB_ERR_NONE;
++ grub_file_close (hash_file);
++
++ grub_dprintf ("appendedsig", "adding a distrusted certificate/binary hash %s\n"
++ " with size of %" PRIdGRUB_SSIZE "\n", hash_data, hash_data_size);
++
++ if (ctxt->state[OPTION_BINARY_HASH].set)
++ {
++ /* only accept SHA256, SHA384 and SHA512 binary hash */
++ if (hash_data_size != SHA256_LEN && hash_data_size != SHA384_LEN &&
++ hash_data_size != SHA512_LEN)
++ return grub_error (GRUB_ERR_BAD_SIGNATURE,
++ N_("unacceptable distrusted binary hash type"));
++ }
++ else if (ctxt->state[OPTION_CERT_HASH].set)
++ {
++ /* only accept SHA256, SHA384 and SHA512 certificate hash */
++ if (hash_data_size != SHA256_LEN && hash_data_size != SHA384_LEN &&
++ hash_data_size != SHA512_LEN)
++ return grub_error (GRUB_ERR_BAD_SIGNATURE,
++ N_("unacceptable distrusted certificate hash type"));
++ }
++
++ rc = grub_add_hash ((const grub_uint8_t **) &hash_data, hash_data_size, &grub_dbx.signatures,
++ &grub_dbx.signature_size, &grub_dbx.signature_entries);
++ if (rc != GRUB_ERR_NONE)
++ {
++ grub_release_trusted_list ();
++ grub_release_distrusted_list ();
++ grub_error (rc, "adding of distrusted binary/certificate hash failed");
++ }
++
++ grub_free (hash_data);
++
++ return rc;
+ }
+
+ static grub_err_t
+-appendedsig_init (grub_file_t io __attribute__((unused)),
+- enum grub_file_type type,
+- void **context __attribute__((unused)),
+- enum grub_verify_flags *flags)
++appendedsig_init (grub_file_t io __attribute__ ((unused)), enum grub_file_type type,
++ void **context __attribute__ ((unused)), enum grub_verify_flags *flags)
+ {
+ if (check_sigs == check_sigs_no)
+ {
+@@ -1212,7 +1373,9 @@ grub_load_static_keys (struct grub_module_header *header, bool mode)
+ return rc;
+ }
+
+-static grub_command_t cmd_verify, cmd_list, cmd_distrust, cmd_trust;
++static grub_extcmd_t cmd_distrusted_hash;
++static grub_command_t cmd_verify, cmd_trusted_list, cmd_trusted_cert, cmd_trusted_hash,
++ cmd_distrusted_list, cmd_distrusted_cert;
+
+ GRUB_MOD_INIT (appendedsig)
+ {
+@@ -1278,21 +1441,31 @@ GRUB_MOD_INIT (appendedsig)
+ grub_release_platform_keystore ();
+ }
+
+- cmd_trust =
+- grub_register_command ("trust_certificate", grub_cmd_trust,
+- N_("X509_CERTIFICATE"),
+- N_("Add X509_CERTIFICATE to trusted certificates."));
+- cmd_list =
+- grub_register_command ("list_certificates", grub_cmd_list, 0,
+- N_("Show the list of trusted x509 certificates."));
+- cmd_verify =
+- grub_register_command ("verify_appended", grub_cmd_verify_signature,
+- N_("FILE"),
+- N_("Verify FILE against the trusted x509 certificates."));
+- cmd_distrust =
+- grub_register_command ("distrust_certificate", grub_cmd_distrust,
+- N_("CERT_NUMBER"),
+- N_("Remove CERT_NUMBER (as listed by list_certificates) from trusted certificates."));
++ cmd_trusted_cert = grub_register_command ("trusted_certificate", grub_cmd_trusted_cert,
++ N_("X509_CERTIFICATE"),
++ N_("Add X509_CERTIFICATE to trusted list."));
++ cmd_trusted_hash = grub_register_command ("trusted_signature", grub_cmd_trusted_hash,
++ N_("BINARY HASH FILE"),
++ N_("Add trusted BINARY HASH to trusted list."));
++ cmd_distrusted_cert = grub_register_command ("distrusted_certificate", grub_cmd_distrusted_cert,
++ N_("CERT_NUMBER"),
++ N_("Remove CERT_NUMBER (as listed by list_trusted)"
++ " from trusted list."));
++ cmd_distrusted_hash = grub_register_extcmd ("distrusted_signature", grub_cmd_distrusted_hash, 0,
++ N_("[-b|--binary-hash] FILE [BINARY HASH FILE]\n"
++ "[-c|--cert-hash] FILE [CERTFICATE HASH FILE]"),
++ N_("Add distrusted CERTFICATE/BINARY HASH "
++ "to distrusted list."),
++ options);
++ cmd_trusted_list = grub_register_command ("trusted_list", grub_cmd_trusted_list, 0,
++ N_("Show the list of trusted x509 certificates and"
++ " trusted binary hashes."));
++ cmd_distrusted_list = grub_register_command ("distrusted_list", grub_cmd_distrusted_list, 0,
++ N_("Show the list of distrusted certificates and"
++ " certificate/binary hashes"));
++ cmd_verify = grub_register_command ("verify_appended", grub_cmd_verify_signature, N_("FILE"),
++ N_("Verify FILE against the trusted x509 certificates/"
++ "trusted binary hashes."));
+
+ grub_verifier_register (&grub_appendedsig_verifier);
+ grub_dl_set_persistent (mod);
+@@ -1304,10 +1477,12 @@ GRUB_MOD_FINI (appendedsig)
+ * grub_dl_set_persistent should prevent this from actually running, but
+ * it does still run under emu.
+ */
+-
+ grub_verifier_unregister (&grub_appendedsig_verifier);
+ grub_unregister_command (cmd_verify);
+- grub_unregister_command (cmd_list);
+- grub_unregister_command (cmd_trust);
+- grub_unregister_command (cmd_distrust);
++ grub_unregister_command (cmd_trusted_list);
++ grub_unregister_command (cmd_distrusted_list);
++ grub_unregister_command (cmd_trusted_cert);
++ grub_unregister_command (cmd_distrusted_cert);
++ grub_unregister_command (cmd_trusted_hash);
++ grub_unregister_extcmd (cmd_distrusted_hash);
+ }
+--
+2.47.0
+
diff --git a/packages/g/grub2/0006-appendedsig-documentation.patch b/packages/g/grub2/0006-appendedsig-documentation.patch
new file mode 100644
index 00000000000..3bfb83059f5
--- /dev/null
+++ b/packages/g/grub2/0006-appendedsig-documentation.patch
@@ -0,0 +1,223 @@
+From 87831c6ce3536e5e2eeb3e2cd8a6184b9509ee04 Mon Sep 17 00:00:00 2001
+From: Sudhakar Kuppusamy
+Date: Wed, 17 Apr 2024 23:04:43 +0530
+Subject: [PATCH 6/8] appendedsig: documentation
+
+This explains appended signatures static key and dynamic key,
+and documents the commands and variables introduced.
+
+Signed-off-by: Sudhakar Kuppusamy
+Reviewed-by: Stefan Berger
+---
+ docs/grub.texi | 115 ++++++++++++++++++++++++++++++++++---------------
+ 1 file changed, 80 insertions(+), 35 deletions(-)
+
+diff --git a/docs/grub.texi b/docs/grub.texi
+index 00c5fdc44..68d7cbb90 100644
+--- a/docs/grub.texi
++++ b/docs/grub.texi
+@@ -4373,7 +4373,9 @@ you forget a command, you can run the command @command{help}
+ * date:: Display or set current date and time
+ * devicetree:: Load a device tree blob
+ * distrust:: Remove a pubkey from trusted keys
+-* distrust_certificate:: Remove a certificate from the list of trusted certificates
++* distrusted_certificate:: Remove a certificate from the trusted list
++* distrusted_list:: List distrusted certificates and binary/certificate hashes
++* distrusted_signature:: Add a binary hash to the distrusted list
+ * drivemap:: Map a drive to another
+ * echo:: Display a line of text
+ * efitextmode:: Set/Get text output mode resolution
+@@ -4390,7 +4392,6 @@ you forget a command, you can run the command @command{help}
+ * hexdump:: Show raw contents of a file or memory
+ * insmod:: Insert a module
+ * keystatus:: Check key modifier status
+-* list_certificates:: List trusted certificates
+ * list_env:: List variables in environment block
+ * list_trusted:: List trusted public keys
+ * load_env:: Load variables from environment block
+@@ -4429,7 +4430,9 @@ you forget a command, you can run the command @command{help}
+ * test:: Check file types and compare values
+ * true:: Do nothing, successfully
+ * trust:: Add public key to list of trusted keys
+-* trust_certificate:: Add an x509 certificate to the list of trusted certificates
++* trusted_certificate:: Add an x509 certificate to the trusted list
++* trusted_list:: List trusted certificates and binary hashes
++* trusted_signature:: Add a binary hash to the trusted list.
+ * unset:: Unset an environment variable
+ @comment * vbeinfo:: List available video modes
+ * verify_appended:: Verify appended digital signature
+@@ -4776,15 +4779,15 @@ GPG-style digital signatures}, for more information.
+ @end deffn
+
+
+-@node distrust_certificate
+-@subsection distrust_certificate
++@node distrusted_certificate
++@subsection distrusted_certificate
+
+-@deffn Command distrust_certificate cert_number
++@deffn Command distrusted_certificate cert_number
+ Remove the x509 certificate numbered @var{cert_number} from GRUB's keyring of
+ trusted x509 certificates for verifying appended signatures.
+
+ @var{cert_number} is the certificate number as listed by
+-@command{list_certificates} (@pxref{list_certificates}).
++@command{trusted_list} (@pxref{trusted_list}).
+
+ These certificates are used to validate appended signatures when environment
+ variable @code{check_appended_signatures} is set to @code{enforce}
+@@ -4793,6 +4796,27 @@ variable @code{check_appended_signatures} is set to @code{enforce}
+ information.
+ @end deffn
+
++@node distrusted_list
++@subsection distrusted_list
++
++@deffn Command distrusted_list
++List all the distrusted x509 certificates and binary/certificate hashes.
++The output is a numbered list of certificates and binary/certificate hashes,
++showing the certificate's serial number and Common Name.
++@end deffn
++
++@node distrusted_signature
++@subsection distrusted_signature
++
++@deffn Command distrusted_signature
++Read a binary hash from the file @var{binary hash file}
++and add it to GRUB's internal distrusted list. These hash are used to
++restrict validation of linux image integrity using trusted list if appended
++signatures validation failed when the environment variable
++@code{check_appended_signatures} is set to @code{enforce}.
++
++See @xref{Using appended signatures} for more information.
++@end deffn
+
+ @node drivemap
+ @subsection drivemap
+@@ -5069,22 +5093,6 @@ without any options, the @command{keystatus} command returns true if and
+ only if checking key modifier status is supported.
+ @end deffn
+
+-
+-@node list_certificates
+-@subsection list_certificates
+-
+-@deffn Command list_certificates
+-List all x509 certificates trusted by GRUB for validating appended signatures.
+-The output is a numbered list of certificates, showing the certificate's serial
+-number and Common Name.
+-
+-The certificate number can be used as an argument to
+-@command{distrust_certificate} (@pxref{distrust_certificate}).
+-
+-See @xref{Using appended signatures} for more information.
+-@end deffn
+-
+-
+ @node list_env
+ @subsection list_env
+
+@@ -5935,9 +5943,8 @@ and manual booting. @xref{Using GPG-style digital signatures}, for more
+ information.
+ @end deffn
+
+-
+-@node trust_certificate
+-@subsection trust_certificate
++@node trusted_certificate
++@subsection trusted_certificate
+
+ @deffn Command trust_certificate x509_certificate
+ Read a DER-formatted x509 certificate from the file @var{x509_certificate}
+@@ -5946,7 +5953,7 @@ certificates are used to validate appended signatures when the environment
+ variable @code{check_appended_signatures} is set to @code{enforce}.
+
+ Note that if @code{check_appended_signatures} is set to @code{enforce}
+-when @command{trust_certificate} is executed, then @var{x509_certificate}
++when @command{trusted_certificate} is executed, then @var{x509_certificate}
+ must itself bear an appended signature. (It is not sufficient that
+ @var{x509_certificate} be signed by a trusted certificate according to the
+ x509 rules: grub does not include support for validating signatures within x509
+@@ -5955,6 +5962,32 @@ certificates themselves.)
+ See @xref{Using appended signatures} for more information.
+ @end deffn
+
++@node trusted_list
++@subsection trusted_list
++
++@deffn Command trusted_list
++List all x509 certificates and binary hases trusted by GRUB for validating
++appended signatures. The output is a numbered list of certificates and binary
++hashes, showing the certificate's serial number and Common Name.
++
++The certificate number can be used as an argument to
++@command{distrusted_certificate} (@pxref{distrusted_certificate}).
++
++See @xref{Using appended signatures} for more information.
++@end deffn
++
++@node trusted_signature
++@subsection trusted_signature
++
++@deffn Command trust_signature
++Read a binary hash from the file @var{binary hash file}
++and add it to GRUB's internal trusted list. These binary hash are used to
++validate linux image integrity if appended signatures validation failed
++when the environment variable @code{check_appended_signatures} is set
++to @code{enforce}.
++
++See @xref{Using appended signatures} for more information.
++@end deffn
+
+ @node unset
+ @subsection unset
+@@ -5979,8 +6012,8 @@ only on PC BIOS platforms.
+
+ @deffn Command verify_appended file
+ Verifies an appended signature on @var{file} against the trusted certificates
+-known to GRUB (See @pxref{list_certificates}, @pxref{trust_certificate}, and
+-@pxref{distrust_certificate}).
++known to GRUB (See @pxref{trusted_list}, @pxref{trusted_certificate}, and
++@pxref{distrusted_certificate}).
+
+ Exit code @code{$?} is set to 0 if the signature validates
+ successfully. If validation fails, it is set to a non-zero value.
+@@ -6664,17 +6697,29 @@ with an appended signature ends with the magic string:
+ where @code{\n} represents the carriage-return character, @code{0x0a}.
+
+ To enable appended signature verification, load the appendedsig module and an
+-x509 certificate for verification. Building the appendedsig module into the
++trusted keys for verification. Building the appendedsig module into the
+ core grub image is recommended.
+
+-Certificates can be managed at boot time using the @pxref{trust_certificate},
+-@pxref{distrust_certificate} and @pxref{list_certificates} commands.
+-Certificates can also be built in to the core image using the @code{--x509}
+-parameter to @command{grub-install} or @command{grub-mkimage}.
++For static key, Certificates will be built in to the core image using
++the @code{--x509} parameter to @command{grub-install} or @command{grub-mkimage}.
++it can allow to list the trusted certificates and binary hashes at boot time using
++@pxref{trusted_list} and list distrusted certificates and binary/certificate hashes
++at boot time using @pxref{distrusted_list} commands.
++
++For dynamic key, loads the signature database (DB) and forbidden
++signature database (DBX) from platform keystore (PKS) and it can allow to list
++the trusted certificates and binary hashes at boot time using @pxref{trusted_list}
++and list distrusted certificates and binary/certificate hashes at boot time using
++@pxref{distrusted_list} commands.
++
++Also, it will not allow to manage add/delete of certificates/signature at boot time using
++@pxref{trusted_certificate} and @pxref{trusted_signature}, @pxref{distrusted_certificate}
++and @pxref{distrusted_signature} commands when the environment variable
++@code{check_appended_signatures} is set to @code{enforce}.
+
+ A file can be explictly verified using the @pxref{verify_appended} command.
+
+-Only signatures made with the SHA-256 or SHA-512 hash algorithm are supported,
++Only signatures made with the SHA-256, SH-384 and SHA-512 hash algorithm are supported,
+ and only RSA signatures are supported.
+
+ A file can be signed with the @command{sign-file} utility supplied with the
+--
+2.47.0
+
diff --git a/packages/g/grub2/0007-mkimage-create-new-ELF-Note-for-SBAT.patch b/packages/g/grub2/0007-mkimage-create-new-ELF-Note-for-SBAT.patch
new file mode 100644
index 00000000000..eb31cbee351
--- /dev/null
+++ b/packages/g/grub2/0007-mkimage-create-new-ELF-Note-for-SBAT.patch
@@ -0,0 +1,189 @@
+From 77316f09f133e9c7c5e1026b2b4f5749daac644a Mon Sep 17 00:00:00 2001
+From: Sudhakar Kuppusamy
+Date: Wed, 17 Apr 2024 23:48:51 +0530
+Subject: [PATCH 7/8] mkimage: create new ELF Note for SBAT
+
+we add a new ELF note for SBAT which store the SBAT data.
+The name field of shall be the string "Secure-Boot-Advanced-Targeting", zero-padded
+to 4 byte alignment. The type field shall be 0x41536967 (the ASCII values
+for the string "sbat").
+
+Signed-off-by: Sudhakar Kuppusamy
+Co-authored-by: Daniel Axtens
+---
+ include/grub/util/mkimage.h | 4 +-
+ util/grub-mkimagexx.c | 92 +++++++++++++++++++++++++++----------
+ 2 files changed, 71 insertions(+), 25 deletions(-)
+
+diff --git a/include/grub/util/mkimage.h b/include/grub/util/mkimage.h
+index 6f1da89b9..881e3031f 100644
+--- a/include/grub/util/mkimage.h
++++ b/include/grub/util/mkimage.h
+@@ -51,12 +51,12 @@ grub_mkimage_load_image64 (const char *kernel_path,
+ const struct grub_install_image_target_desc *image_target);
+ void
+ grub_mkimage_generate_elf32 (const struct grub_install_image_target_desc *image_target,
+- int note, size_t appsig_size, char **core_img, size_t *core_size,
++ int note, size_t appsig_size, char *sbat, char **core_img, size_t *core_size,
+ Elf32_Addr target_addr,
+ struct grub_mkimage_layout *layout);
+ void
+ grub_mkimage_generate_elf64 (const struct grub_install_image_target_desc *image_target,
+- int note, size_t appsig_size, char **core_img, size_t *core_size,
++ int note, size_t appsig_size, char *sbat, char **core_img, size_t *core_size,
+ Elf64_Addr target_addr,
+ struct grub_mkimage_layout *layout);
+
+diff --git a/util/grub-mkimagexx.c b/util/grub-mkimagexx.c
+index 9488f0525..0041b2d0b 100644
+--- a/util/grub-mkimagexx.c
++++ b/util/grub-mkimagexx.c
+@@ -85,6 +85,14 @@ struct grub_ieee1275_note
+ struct grub_ieee1275_note_desc descriptor;
+ };
+
++#define GRUB_SBAT_NOTE_NAME "Secure-Boot-Advanced-Targeting"
++#define GRUB_SBAT_NOTE_TYPE 0x73626174 /* "sbat" */
++
++struct grub_sbat_note {
++ Elf32_Nhdr header;
++ char name[ALIGN_UP(sizeof(GRUB_SBAT_NOTE_NAME), 4)];
++};
++
+ #define GRUB_APPENDED_SIGNATURE_NOTE_NAME "Appended-Signature"
+ #define GRUB_APPENDED_SIGNATURE_NOTE_TYPE 0x41536967 /* "ASig" */
+
+@@ -217,7 +225,7 @@ grub_arm_reloc_jump24 (grub_uint32_t *target, Elf32_Addr sym_addr)
+
+ void
+ SUFFIX (grub_mkimage_generate_elf) (const struct grub_install_image_target_desc *image_target,
+- int note, size_t appsig_size, char **core_img, size_t *core_size,
++ int note, size_t appsig_size, char *sbat, char **core_img, size_t *core_size,
+ Elf_Addr target_addr,
+ struct grub_mkimage_layout *layout)
+ {
+@@ -226,10 +234,17 @@ SUFFIX (grub_mkimage_generate_elf) (const struct grub_install_image_target_desc
+ Elf_Ehdr *ehdr;
+ Elf_Phdr *phdr;
+ Elf_Shdr *shdr;
+- int header_size, footer_size = 0;
++ int header_size, footer_size = 0, footer_offset = 0;
+ int phnum = 1;
+ int shnum = 4;
+ int string_size = sizeof (".text") + sizeof ("mods") + 1;
++ char *footer;
++
++ if (sbat)
++ {
++ phnum++;
++ footer_size += ALIGN_UP (sizeof (struct grub_sbat_note) + layout->sbat_size, 4);
++ }
+
+ if (appsig_size)
+ {
+@@ -263,6 +278,7 @@ SUFFIX (grub_mkimage_generate_elf) (const struct grub_install_image_target_desc
+ ehdr = (void *) elf_img;
+ phdr = (void *) (elf_img + sizeof (*ehdr));
+ shdr = (void *) (elf_img + sizeof (*ehdr) + phnum * sizeof (*phdr));
++ footer = elf_img + program_size + header_size;
+ memcpy (ehdr->e_ident, ELFMAG, SELFMAG);
+ ehdr->e_ident[EI_CLASS] = ELFCLASSXX;
+ if (!image_target->bigendian)
+@@ -435,6 +451,8 @@ SUFFIX (grub_mkimage_generate_elf) (const struct grub_install_image_target_desc
+ phdr->p_filesz = grub_host_to_target32 (XEN_NOTE_SIZE);
+ phdr->p_memsz = 0;
+ phdr->p_offset = grub_host_to_target32 (header_size + program_size);
++ footer = ptr;
++ footer_offset = XEN_NOTE_SIZE;
+ }
+
+ if (image_target->id == IMAGE_XEN_PVH)
+@@ -468,6 +486,8 @@ SUFFIX (grub_mkimage_generate_elf) (const struct grub_install_image_target_desc
+ phdr->p_filesz = grub_host_to_target32 (XEN_PVH_NOTE_SIZE);
+ phdr->p_memsz = 0;
+ phdr->p_offset = grub_host_to_target32 (header_size + program_size);
++ footer = ptr;
++ footer_offset = XEN_PVH_NOTE_SIZE;
+ }
+
+ if (note)
+@@ -498,29 +518,55 @@ SUFFIX (grub_mkimage_generate_elf) (const struct grub_install_image_target_desc
+ phdr->p_filesz = grub_host_to_target32 (note_size);
+ phdr->p_memsz = 0;
+ phdr->p_offset = grub_host_to_target32 (header_size + program_size);
++ footer = (elf_img + program_size + header_size + note_size);
++ footer_offset += note_size;
+ }
+
+- if (appsig_size) {
+- int note_size = ALIGN_UP(sizeof (struct grub_appended_signature_note) + appsig_size, 4);
+- struct grub_appended_signature_note *note_ptr = (struct grub_appended_signature_note *)
+- (elf_img + program_size + header_size + (note ? sizeof (struct grub_ieee1275_note) : 0));
+-
+- note_ptr->header.n_namesz = grub_host_to_target32 (sizeof (GRUB_APPENDED_SIGNATURE_NOTE_NAME));
+- /* needs to sit at the end, so we round this up and sign some zero padding */
+- note_ptr->header.n_descsz = grub_host_to_target32 (ALIGN_UP(appsig_size, 4));
+- note_ptr->header.n_type = grub_host_to_target32 (GRUB_APPENDED_SIGNATURE_NOTE_TYPE);
+- strcpy (note_ptr->name, GRUB_APPENDED_SIGNATURE_NOTE_NAME);
+-
+- phdr++;
+- phdr->p_type = grub_host_to_target32 (PT_NOTE);
+- phdr->p_flags = grub_host_to_target32 (PF_R);
+- phdr->p_align = grub_host_to_target32 (image_target->voidp_sizeof);
+- phdr->p_vaddr = 0;
+- phdr->p_paddr = 0;
+- phdr->p_filesz = grub_host_to_target32 (note_size);
+- phdr->p_memsz = 0;
+- phdr->p_offset = grub_host_to_target32 (header_size + program_size + (note ? sizeof (struct grub_ieee1275_note) : 0));
+- }
++ if (sbat)
++ {
++ int note_size = ALIGN_UP(sizeof (struct grub_sbat_note) + layout->sbat_size, 4);
++ struct grub_sbat_note *note_ptr = (struct grub_sbat_note *)footer;
++
++ note_ptr->header.n_namesz = grub_host_to_target32 (sizeof (GRUB_SBAT_NOTE_NAME));
++ note_ptr->header.n_descsz = grub_host_to_target32 (ALIGN_UP(layout->sbat_size, 4));
++ note_ptr->header.n_type = grub_host_to_target32 (GRUB_SBAT_NOTE_TYPE);
++ memcpy (note_ptr->name, GRUB_SBAT_NOTE_NAME, sizeof (GRUB_SBAT_NOTE_NAME));
++ memcpy ((char *)(note_ptr + 1), sbat, layout->sbat_size);
++
++ phdr++;
++ phdr->p_type = grub_host_to_target32 (PT_NOTE);
++ phdr->p_flags = grub_host_to_target32 (PF_R);
++ phdr->p_align = grub_host_to_target32 (image_target->voidp_sizeof);
++ phdr->p_vaddr = 0;
++ phdr->p_paddr = 0;
++ phdr->p_filesz = grub_host_to_target32 (note_size);
++ phdr->p_memsz = 0;
++ phdr->p_offset = grub_host_to_target32 (header_size + program_size + footer_offset);
++
++ footer += note_size;
++ footer_offset += note_size;
++ }
++
++ if (appsig_size)
++ {
++ int note_size = ALIGN_UP (sizeof (struct grub_appended_signature_note) + appsig_size, 4);
++ struct grub_appended_signature_note *note_ptr = (struct grub_appended_signature_note *)footer;
++ note_ptr->header.n_namesz = grub_host_to_target32 (sizeof (GRUB_APPENDED_SIGNATURE_NOTE_NAME));
++ /* needs to sit at the end, so we round this up and sign some zero padding */
++ note_ptr->header.n_descsz = grub_host_to_target32 (ALIGN_UP (appsig_size, 4));
++ note_ptr->header.n_type = grub_host_to_target32 (GRUB_APPENDED_SIGNATURE_NOTE_TYPE);
++ strcpy (note_ptr->name, GRUB_APPENDED_SIGNATURE_NOTE_NAME);
++
++ phdr++;
++ phdr->p_type = grub_host_to_target32 (PT_NOTE);
++ phdr->p_flags = grub_host_to_target32 (PF_R);
++ phdr->p_align = grub_host_to_target32 (image_target->voidp_sizeof);
++ phdr->p_vaddr = 0;
++ phdr->p_paddr = 0;
++ phdr->p_filesz = grub_host_to_target32 (note_size);
++ phdr->p_memsz = 0;
++ phdr->p_offset = grub_host_to_target32 (header_size + program_size + footer_offset);
++ }
+
+ {
+ char *str_start = (elf_img + sizeof (*ehdr) + phnum * sizeof (*phdr)
+--
+2.47.0
+
diff --git a/packages/g/grub2/0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch b/packages/g/grub2/0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch
new file mode 100644
index 00000000000..6c46db96ffd
--- /dev/null
+++ b/packages/g/grub2/0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch
@@ -0,0 +1,66 @@
+From 32d4823762e5a0e7f8bfc5a878d39e1a019392fe Mon Sep 17 00:00:00 2001
+From: Sudhakar Kuppusamy
+Date: Thu, 18 Apr 2024 00:00:55 +0530
+Subject: [PATCH 8/8] mkimage: adding sbat data into sbat ELF Note on powerpc
+
+it reads the SBAT data from sbat.csv and create the ELF Note for it then
+store the SBAT data on it while generate image with -s option
+
+Signed-off-by: Sudhakar Kuppusamy
+Co-authored-by: Daniel Axtens
+---
+ util/mkimage.c | 23 +++++++++++++++++------
+ 1 file changed, 17 insertions(+), 6 deletions(-)
+
+diff --git a/util/mkimage.c b/util/mkimage.c
+index 0737935fd..136e4a90c 100644
+--- a/util/mkimage.c
++++ b/util/mkimage.c
+@@ -958,8 +958,9 @@ grub_install_generate_image (const char *dir, const char *prefix,
+ total_module_size += dtb_size + sizeof (struct grub_module_header);
+ }
+
+- if (sbat_path != NULL && image_target->id != IMAGE_EFI)
+- grub_util_error (_(".sbat section can be embedded into EFI images only"));
++ if (sbat_path != NULL && (image_target->id != IMAGE_EFI && image_target->id != IMAGE_PPC))
++ grub_util_error (_(".sbat section can be embedded into EFI images/"
++ "sbat ELF Note cab be added into powerpc-ieee1275 images only"));
+
+ if (disable_shim_lock)
+ total_module_size += sizeof (struct grub_module_header);
+@@ -1835,6 +1836,16 @@ grub_install_generate_image (const char *dir, const char *prefix,
+ case IMAGE_I386_IEEE1275:
+ {
+ grub_uint64_t target_addr;
++ char *sbat = NULL;
++
++ if (sbat_path != NULL)
++ {
++ sbat_size = grub_util_get_image_size (sbat_path);
++ sbat = xmalloc (sbat_size);
++ grub_util_load_image (sbat_path, sbat);
++ layout.sbat_size = sbat_size;
++ }
++
+ if (image_target->id == IMAGE_LOONGSON_ELF)
+ {
+ if (comp == GRUB_COMPRESSION_NONE)
+@@ -1846,11 +1857,11 @@ grub_install_generate_image (const char *dir, const char *prefix,
+ else
+ target_addr = image_target->link_addr;
+ if (image_target->voidp_sizeof == 4)
+- grub_mkimage_generate_elf32 (image_target, note, appsig_size, &core_img,
+- &core_size, target_addr, &layout);
++ grub_mkimage_generate_elf32 (image_target, note, appsig_size, sbat, &core_img, &core_size,
++ target_addr, &layout);
+ else
+- grub_mkimage_generate_elf64 (image_target, note, appsig_size, &core_img,
+- &core_size, target_addr, &layout);
++ grub_mkimage_generate_elf64 (image_target, note, appsig_size, sbat, &core_img, &core_size,
++ target_addr, &layout);
+ }
+ break;
+ }
+--
+2.47.0
+
diff --git a/packages/g/grub2/grub2-install-fix-not-a-directory-error.patch b/packages/g/grub2/grub2-install-fix-not-a-directory-error.patch
index fe75686e4cd..5ab589702fc 100644
--- a/packages/g/grub2/grub2-install-fix-not-a-directory-error.patch
+++ b/packages/g/grub2/grub2-install-fix-not-a-directory-error.patch
@@ -22,17 +22,23 @@ minix.
[1] https://savannah.gnu.org/bugs/index.php?57652
[2] https://bugzilla.opensuse.org/attachment.cgi?id=828118
+v2:
+We are still encountering the error. Instead of ensuring ext[234] is tried
+before minix, make sure everything is tried before minix unless its detection
+issue can be properly addressed.
+
--- a/Makefile.am
+++ b/Makefile.am
-@@ -51,8 +51,11 @@
+@@ -51,8 +51,12 @@
-D'GRUB_MOD_INIT(x)=@MARKER@x@' $^ > $@ || (rm -f $@; exit 1)
CLEANFILES += libgrub.pp
-+# the grep/sed ensures that ext2 gets initialized before minix*
++# the grep/sed ensures that every other file system gets tested before minix*"
+# see https://savannah.gnu.org/bugs/?57652
++# see https://bugzilla.suse.com/show_bug.cgi?id=1231604
libgrub_a_init.lst: libgrub.pp
cat $< | grep '^@MARKER@' | sed 's/@MARKER@\(.*\)@/\1/g' | sort -u > $@ || (rm -f $@; exit 1)
-+ if grep ^ext2 $@ >/dev/null; then sed '/ext2/d;/newc/iext2' < $@ > $@.tmp && mv $@.tmp $@; fi
++ if grep ^minix $@ >/dev/null; then sed -n '/^minix/p;/^minix/!H;$${x;s/^\n//;p}' < $@ > $@.tmp && mv $@.tmp $@; fi
CLEANFILES += libgrub_a_init.lst
libgrub_a_init.c: libgrub_a_init.lst $(top_srcdir)/geninit.sh
diff --git a/packages/g/grub2/grub2.changes b/packages/g/grub2/grub2.changes
index aad7f4b66a6..16b7ecfd5ac 100644
--- a/packages/g/grub2/grub2.changes
+++ b/packages/g/grub2/grub2.changes
@@ -1,3 +1,39 @@
+-------------------------------------------------------------------
+Wed Oct 23 06:17:54 UTC 2024 - Michael Chang
+
+- Fix error: /boot/grub2/x86_64-efi/bli.mod not found (bsc#1231591)
+
+-------------------------------------------------------------------
+Tue Oct 22 07:34:04 UTC 2024 - Michael Chang
+
+- Keep grub packaging and dependencies in the SLE-12 and SLE-15 builds
+
+-------------------------------------------------------------------
+Fri Oct 18 07:42:27 UTC 2024 - Michael Chang
+
+- Power guest secure boot with key management (jsc#PED-3520) (jsc#PED-9892)
+ * 0001-ieee1275-Platform-Keystore-PKS-Support.patch
+ * 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
+ * 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
+ * 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
+ * 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
+ * 0006-appendedsig-documentation.patch
+ * 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
+ * 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch
+ * grub2.spec : Building signed grub.elf with SBAT metadata
+- Support for NVMe multipath splitter (jsc#PED-10538)
+ * 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
+- Deleted path (jsc#PED-10538)
+ * 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch
+ * 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch
+
+-------------------------------------------------------------------
+Wed Oct 16 13:50:00 UTC 2024 - Michael Chang
+
+- Fix not a directory error from the minix filesystem, as leftover data on disk
+ may contain its magic header so it gets misdetected (bsc#1231604)
+ * grub2-install-fix-not-a-directory-error.patch
+
-------------------------------------------------------------------
Fri Oct 4 06:58:06 UTC 2024 - Michael Chang
diff --git a/packages/g/grub2/grub2.spec b/packages/g/grub2/grub2.spec
index 5635df2788a..4aa4cc0e008 100644
--- a/packages/g/grub2/grub2.spec
+++ b/packages/g/grub2/grub2.spec
@@ -356,8 +356,6 @@ Patch164: 0003-ieee1275-change-the-logic-of-ieee1275_get_devargs.patch
Patch165: 0004-ofpath-controller-name-update.patch
Patch166: 0002-Mark-environmet-blocks-as-used-for-image-embedding.patch
Patch167: grub2-increase-crypttab-path-buffer.patch
-Patch168: 0001-grub2-Set-multiple-device-path-for-a-nvmf-boot-devic.patch
-Patch169: 0001-grub2-Can-t-setup-a-default-boot-device-correctly-on.patch
Patch170: 0001-tpm2-Support-authorized-policy.patch
Patch171: 0001-tpm2-Add-extra-RSA-SRK-types.patch
Patch174: 0001-clean-up-crypttab-and-linux-modules-dependency.patch
@@ -411,9 +409,24 @@ Patch220: 0001-Streamline-BLS-and-improve-PCR-stability.patch
Patch221: 0001-fix-grub-screen-filled-with-post-screen-artifects.patch
Patch222: 0001-efinet-Skip-virtual-VLAN-devices-during-card-enumera.patch
Patch223: 0001-tpm-Skip-loopback-image-measurement.patch
-
+Patch224: 0001-ieee1275-Platform-Keystore-PKS-Support.patch
+Patch225: 0002-ieee1275-Read-the-DB-and-DBX-secure-boot-variables.patch
+Patch226: 0003-appendedsig-The-creation-of-trusted-and-distrusted-l.patch
+Patch227: 0004-appendedsig-While-verifying-the-kernel-use-trusted-a.patch
+Patch228: 0005-appendedsig-The-grub-command-s-trusted-and-distruste.patch
+Patch229: 0006-appendedsig-documentation.patch
+Patch230: 0007-mkimage-create-new-ELF-Note-for-SBAT.patch
+Patch231: 0008-mkimage-adding-sbat-data-into-sbat-ELF-Note-on-power.patch
+Patch232: 0001-ieee1275-support-added-for-multiple-nvme-bootpaths.patch
+
+%if 0%{?suse_version} > 1600
# Always requires a default cpu-platform package
Requires: grub2-%{grubarch} = %{version}-%{release}
+%else
+%if ! 0%{?only_efi:1}
+Requires: grub2-%{grubarch} = %{version}-%{release}
+%endif
+%endif
%if 0%{?only_x86_64:1}
ExclusiveArch: x86_64
@@ -427,9 +440,11 @@ highly configurable and customizable bootloader with modular
architecture. It support rich scale of kernel formats, file systems,
computer architectures and hardware devices.
+%if 0%{?suse_version} > 1600
%package common
Summary: Utilies to manage grub
Group: System/Boot
+%endif
Requires: gettext-runtime
%if 0%{?suse_version} >= 1140
%ifnarch s390x
@@ -456,15 +471,21 @@ Requires: powerpc-utils
Recommends: memtest86+
%endif
+%if 0%{?suse_version} > 1600
%description common
This package includes user space utlities to manage GRUB on your system.
+%endif
%package branding-upstream
Summary: Upstream branding for GRUB2's graphical console
Group: System/Fhs
BuildArch: noarch
+%if 0%{?suse_version} > 1600
Requires: %{name}-common = %{version}
+%else
+Requires: %{name} = %{version}
+%endif
%description branding-upstream
Upstream branding for GRUB2's graphical console
@@ -477,8 +498,13 @@ Group: System/Boot
%if "%{platform}" != "emu"
BuildArch: noarch
%endif
+%if 0%{?suse_version} > 1600
Requires: %{name}-common = %{version}
Requires(post): %{name}-common = %{version}
+%else
+Requires: %{name} = %{version}
+Requires(post): %{name} = %{version}
+%endif
%{?update_bootloader_requires}
%description %{grubarch}
@@ -526,8 +552,13 @@ BuildArch: noarch
# Without it grub-install is broken so break the package as well if unavailable
Requires: efibootmgr
Requires(post): efibootmgr
+%if 0%{?suse_version} > 1600
Requires: %{name}-common = %{version}
Requires(post): %{name}-common = %{version}
+%else
+Requires: %{name} = %{version}
+Requires(post): %{name} = %{version}
+%endif
%{?update_bootloader_requires}
%{?fde_tpm_update_requires}
Provides: %{name}-efi = %{version}-%{release}
@@ -539,6 +570,7 @@ bootloader with modular architecture. It supports rich variety of kernel format
file systems, computer architectures and hardware devices. This subpackage
provides support for EFI systems.
+%if 0%{?suse_version} > 1600
%package %{grubefiarch}-bls
Summary: Image for Boot Loader Specification (BLS) support on %{grubefiarch}
Group: System/Boot
@@ -546,6 +578,7 @@ BuildArch: noarch
%description %{grubefiarch}-bls
Custom EFI build tailored for Boot Loader Specification (BLS) support.
+%endif
%package %{grubefiarch}-extras
@@ -611,8 +644,13 @@ Unsupported modules for %{name}-%{grubxenarch}
Summary: Grub2's snapper plugin
Group: System/Fhs
Requires: libxml2-tools
+%if 0%{?suse_version} > 1600
Requires: (grub2 or grub2-common)
Supplements: ((grub2 or grub2-common) and snapper)
+%else
+Requires: %{name} = %{version}
+Supplements: packageand(snapper:grub2)
+%endif
BuildArch: noarch
%description snapper-plugin
@@ -624,8 +662,13 @@ Grub2's snapper plugin for advanced btrfs snapshot boot menu management
Summary: Grub2's systemd-sleep plugin
Group: System/Fhs
Requires: util-linux
+%if 0%{?suse_version} > 1600
Requires: (grub2 or grub2-common)
Supplements: ((grub2 or grub2-common) and systemd)
+%else
+Requires: grub2
+Supplements: packageand(systemd:grub2)
+%endif
BuildArch: noarch
%description systemd-sleep-plugin
@@ -774,6 +817,7 @@ mksquashfs ./fonts memdisk.sqsh -keep-as-directory -comp xz -quiet -no-progress
./grub-mkimage -O %{grubefiarch} -o grub.efi --memdisk=./memdisk.sqsh --prefix= %{?sbat_generation:--sbat sbat.csv} \
-d grub-core ${GRUB_MODULES}
+%if 0%{?suse_version} > 1600
rm memdisk.sqsh
# Building grubbls.efi
@@ -824,6 +868,7 @@ mksquashfs ./boot memdisk.sqsh -keep-as-directory -comp xz -quiet -no-progress
-d grub-core \
all_video boot font gfxmenu gfxterm gzio halt jpeg minicmd normal part_gpt png reboot video \
fat tpm tpm2 memdisk tar squash4 xzio blscfg linux bli regexp loadenv test echo true sleep
+%endif
%ifarch x86_64 aarch64
if test -e %{_sourcedir}/_projectcert.crt ; then
@@ -855,6 +900,14 @@ cd ..
%if ! 0%{?only_efi:1}
cd build
+%ifarch ppc ppc64 ppc64le
+%if 0%{?sbat_generation}
+echo "sbat,1,SBAT Version,sbat,1,https://github.com/rhboot/shim/blob/main/SBAT.md" > sbat.csv
+echo "grub,%{sbat_generation_grub},Free Software Foundation,grub,%{version},https://www.gnu.org/software/grub/" >> sbat.csv
+echo "grub.%{sbat_distro},%{sbat_generation},%{sbat_distro_summary},%{name},%{version},%{sbat_distro_url}" >> sbat.csv
+%endif
+%endif
+
%if "%{platform}" != "emu"
%define arch_specific --enable-device-mapper
TLFLAGS="-static"
@@ -984,7 +1037,7 @@ fi
EOF
%{__tar} cvf memdisk.tar ./grub.cfg
./grub-mkimage -O %{grubarch} -o grub.elf -d grub-core -x grub.der -m memdisk.tar \
- -c %{platform}-config --appended-signature-size %brp_pesign_reservation ${GRUB_MODULES}
+ -c %{platform}-config -s sbat.csv --appended-signature-size %brp_pesign_reservation ${GRUB_MODULES}
ls -l "grub.elf"
truncate -s -%brp_pesign_reservation "grub.elf"
fi
@@ -1016,7 +1069,9 @@ install -m 644 grub.efi %{buildroot}/%{_datadir}/%{name}/%{grubefiarch}/.
%ifarch x86_64
ln -srf %{buildroot}/%{_datadir}/%{name}/%{grubefiarch}/grub.efi %{buildroot}/%{_datadir}/%{name}/%{grubefiarch}/grub-tpm.efi
%endif
+%if 0%{?suse_version} > 1600
install -m 644 grubbls.efi %{buildroot}/%{_datadir}/%{name}/%{grubefiarch}/.
+%endif
# Create grub.efi link to system efi directory
# This is for tools like kiwi not fiddling with the path
@@ -1038,7 +1093,11 @@ EoM
%endif
%ifarch x86_64 aarch64
+%if 0%{?suse_version} > 1600
export BRP_PESIGN_FILES="%{_datadir}/%{name}/%{grubefiarch}/grub.efi %{_datadir}/%{name}/%{grubefiarch}/grubbls.efi"
+%else
+export BRP_PESIGN_FILES="%{_datadir}/%{name}/%{grubefiarch}/grub.efi"
+%endif
install -m 444 grub.der %{buildroot}/%{sysefidir}/
%endif
@@ -1171,10 +1230,20 @@ grep -E ${EXTRA_PATTERN} %{grubarch}-mod-all.lst > %{grubarch}-mod-extras.lst
%fdupes %buildroot%{_libdir}
%fdupes %buildroot%{_datadir}
+%if 0%{?suse_version} > 1600
%pre common
+%else
+
+%pre
+%endif
%service_add_pre grub2-once.service
+%if 0%{?suse_version} > 1600
%post common
+%else
+
+%post
+%endif
%service_add_post grub2-once.service
%if ! 0%{?only_efi:1}
@@ -1202,13 +1271,28 @@ grep -E ${EXTRA_PATTERN} %{grubarch}-mod-all.lst > %{grubarch}-mod-extras.lst
%endif
+%if 0%{?suse_version} > 1600
%preun common
+%else
+
+%preun
+%endif
%service_del_preun grub2-once.service
+%if 0%{?suse_version} > 1600
%postun common
+%else
+
+%postun
+%endif
%service_del_postun grub2-once.service
+%if 0%{?suse_version} > 1600
%files
+%else
+
+%files -f %{name}.lang
+%endif
%defattr(-,root,root,-)
%doc AUTHORS
%doc NEWS README
@@ -1218,13 +1302,15 @@ grep -E ${EXTRA_PATTERN} %{grubarch}-mod-all.lst > %{grubarch}-mod-extras.lst
%doc README.ibm3215
%endif
+%if 0%{?suse_version} > 1600
%files common -f %{name}.lang
+%defattr(-,root,root,-)
+%endif
%if 0%{?suse_version} < 1500
%doc COPYING
%else
%license COPYING
%endif
-%defattr(-,root,root,-)
%dir /boot/%{name}
%ghost %attr(600, root, root) /boot/%{name}/grub.cfg
%{_datadir}/bash-completion/completions/grub*
@@ -1235,7 +1321,14 @@ grep -E ${EXTRA_PATTERN} %{grubarch}-mod-all.lst > %{grubarch}-mod-extras.lst
%config(noreplace) %{_sysconfdir}/grub.d/05_crypttab
%config(noreplace) %{_sysconfdir}/grub.d/10_linux
%config(noreplace) %{_sysconfdir}/grub.d/20_linux_xen
-%config(noreplace) %{_sysconfdir}/grub.d/25_bli
+# The bli.mod is enabled in grubbls.efi, which will mostly adhere to systemd
+# standards. But it is not the case for grub.efi, as it serves no purpose
+# there, among other considerations. Therefore, the 25_bli script that loads
+# bli.mod as an external module should be disabled (by stripping off its
+# executable bit) to prevent showing 'file not found' error. This is because
+# grub.efi may intentionally lack access to external modules, as it is designed
+# to be a drop-in file, requires no external dependency (boo#1231591)
+%attr(0644, root, root) %config(noreplace) %{_sysconfdir}/grub.d/25_bli
%config(noreplace) %{_sysconfdir}/grub.d/30_uefi-firmware
%config(noreplace) %{_sysconfdir}/grub.d/40_custom
%config(noreplace) %{_sysconfdir}/grub.d/41_custom
@@ -1406,9 +1499,11 @@ grep -E ${EXTRA_PATTERN} %{grubarch}-mod-all.lst > %{grubarch}-mod-extras.lst
%{sysefidir}/grub.der
%endif
+%if 0%{?suse_version} > 1600
%files %{grubefiarch}-bls
%defattr(-,root,root,-)
%{_datadir}/%{name}/%{grubefiarch}/grubbls.efi
+%endif
%files %{grubefiarch}-extras -f %{grubefiarch}-mod-extras.lst
%defattr(-,root,root,-)
diff --git a/packages/h/himmelblau/.files b/packages/h/himmelblau/.files
index b2d7bf83f48..45ca3e9a8b7 100644
Binary files a/packages/h/himmelblau/.files and b/packages/h/himmelblau/.files differ
diff --git a/packages/h/himmelblau/.rev b/packages/h/himmelblau/.rev
index cf7f507be3a..1b81d03dd5c 100644
--- a/packages/h/himmelblau/.rev
+++ b/packages/h/himmelblau/.rev
@@ -152,4 +152,12 @@ for the pam approval.
1205551
+
+ fd782226028e59d08aac9f90564e1cd3
+ 0.6.14+git.0.bbda0b6
+
+ anag+factory
+
+ 1217101
+
diff --git a/packages/h/himmelblau/_servicedata b/packages/h/himmelblau/_servicedata
index 892752e4ae6..140c3918a1d 100644
--- a/packages/h/himmelblau/_servicedata
+++ b/packages/h/himmelblau/_servicedata
@@ -3,4 +3,4 @@
https://github.com/openSUSE/himmelblau.git
6d2f6450ff3c0c945a884d4b35307e03a035a581
https://github.com/himmelblau-idm/himmelblau.git
- b8dae18285e1aa03b45ccfe18d7c5a048620e70e
\ No newline at end of file
+ bbda0b636e884701747931a3ae3997f63658ae16
\ No newline at end of file
diff --git a/packages/h/himmelblau/himmelblau-0.6.0+git.0.b8dae18.tar.bz2 b/packages/h/himmelblau/himmelblau-0.6.0+git.0.b8dae18.tar.bz2
deleted file mode 120000
index 5f79331de25..00000000000
--- a/packages/h/himmelblau/himmelblau-0.6.0+git.0.b8dae18.tar.bz2
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeig5nsy3asvyh75gw5syoi3epcfuf4vgn3hfjfjzjpnpc5zavgv2o4
\ No newline at end of file
diff --git a/packages/h/himmelblau/himmelblau-0.6.14+git.0.bbda0b6.tar.bz2 b/packages/h/himmelblau/himmelblau-0.6.14+git.0.bbda0b6.tar.bz2
new file mode 120000
index 00000000000..0e99ac730ff
--- /dev/null
+++ b/packages/h/himmelblau/himmelblau-0.6.14+git.0.bbda0b6.tar.bz2
@@ -0,0 +1 @@
+/ipfs/bafybeic7wtnx7cfyushktdzzvjtnwhapawqfikibhetnkytp263cl4dtvy
\ No newline at end of file
diff --git a/packages/h/himmelblau/himmelblau.changes b/packages/h/himmelblau/himmelblau.changes
index 0da32a69b16..4ecbe836247 100644
--- a/packages/h/himmelblau/himmelblau.changes
+++ b/packages/h/himmelblau/himmelblau.changes
@@ -1,3 +1,46 @@
+-------------------------------------------------------------------
+Tue Oct 22 16:22:21 UTC 2024 - david.mulder@suse.com
+
+- Update to version 0.6.14+git.0.bbda0b6:
+ * Version 0.6.14
+ * postinst should not fail on patch or apparmor update
+ * Version 0.6.13
+ * Don't use sudo in postinst/postrm scripts for deb
+ * Version 0.6.12
+ * PAM should be placed first in the stack
+ * Match the object ID of the fake user and group
+ * Version 0.6.11
+ * Move sshd config into it's own debian package
+ * Version 0.6.10
+ * Allow the graph to start w/out network
+ * Add hello_pin_min_length conf option
+ * Version 0.6.9
+ * Don't attempt SFA fallback if AADSTSError
+ * Have libhimmelblau handle the DAG fallback
+ * Add a warning to user that SSH needs restarted
+ * Version 0.6.8
+ * Ensure local users are ignored when CN mapping
+ * Ensure DAG is rejected if lifetime expires
+ * Version 0.6.7
+ * Rework the poll logic to resolve timeout issues
+ * Version 0.6.6
+ * Add a sshd soft depends for the deb package
+ * CN name mapping in PAM and NSS
+ * Version 0.6.5
+ * Make CN an optional home directory attribute
+ * Version 0.6.4
+ * Add Ubuntu pam-config for pam_himmelblau
+ * Configuration patches for himmelblau on Debian
+ * Version 0.6.3
+ * Bug in pam which needs defended against
+ * Version 0.6.2
+ * Never return the Pam result from get_user()
+ * Correct installation directory of the deb pam module
+ * Makefile typo fixes
+ * Add libdbus-1-dev dep
+ * Version 0.6.1
+ * Debian build requires libdbus-1-dev
+
-------------------------------------------------------------------
Wed Oct 02 20:29:43 UTC 2024 - david.mulder@suse.com
diff --git a/packages/h/himmelblau/himmelblau.spec b/packages/h/himmelblau/himmelblau.spec
index 366e91e3b72..6474b58c90a 100644
--- a/packages/h/himmelblau/himmelblau.spec
+++ b/packages/h/himmelblau/himmelblau.spec
@@ -17,11 +17,12 @@
Name: himmelblau
-Version: 0.6.0+git.0.b8dae18
+Version: 0.6.14+git.0.bbda0b6
Release: 0
Summary: Interoperability suite for Microsoft Azure AD and Intune
License: GPL-3.0-or-later
URL: https://github.com/openSUSE/himmelblau
+Group: Productivity/Networking/Security
Source: %{name}-%{version}.tar.bz2
Source1: vendor.tar.zst
Source2: cargo_config
@@ -43,7 +44,7 @@ BuildRequires: pcre2-devel
BuildRequires: sqlite3-devel
BuildRequires: tpm2-0-tss-devel
ExclusiveArch: %{rust_tier1_arches}
-Recommends: nss-himmelblau
+Recommends: libnss_himmelblau2
Recommends: pam-himmelblau
Provides: aad-cli
Provides: aad-common
@@ -65,21 +66,22 @@ Intune, which allows users to sign into a Linux machine using Azure
Active Directory credentials. It relies on the Microsoft
Authentication Library to communicate with the Microsoft service.
-%package -n nss-himmelblau
+%package -n libnss_himmelblau2
Summary: Azure AD authentication NSS module
Requires(post): /sbin/ldconfig
Requires(postun): /sbin/ldconfig
-Requires: %{name} = %{version}
+Requires: %{name}
Provides: libnss-aad
+Provides: nss-himmelblau
-%description -n nss-himmelblau
+%description -n libnss_himmelblau2
Himmelblau is an interoperability suite for Microsoft Azure AD and
Intune, which allows users to sign into a Linux machine using Azure
Active Directory credentials. It relies on the Microsoft
Authentication Library to communicate with the Microsoft service.
-%post -n nss-himmelblau -p /sbin/ldconfig
-%postun -n nss-himmelblau -p /sbin/ldconfig
+%post -n libnss_himmelblau2 -p /sbin/ldconfig
+%postun -n libnss_himmelblau2 -p /sbin/ldconfig
%prep
%autosetup -a1
@@ -97,8 +99,8 @@ install -D -d -m 0755 %{buildroot}/%{_sysconfdir}/himmelblau
cp src/config/himmelblau.conf.example %{buildroot}/%{_sysconfdir}/himmelblau/himmelblau.conf
cp target/release/libnss_%{name}.so target/release/libnss_%{name}.so.2
install -D -d -m 0755 %{buildroot}/%{_libdir}
-patchelf --set-soname libnss_himmelblau.so.2 target/release/libnss_himmelblau.so.2
strip --strip-unneeded target/release/libnss_himmelblau.so.2
+patchelf --set-soname libnss_himmelblau.so.2 target/release/libnss_himmelblau.so.2
install -m 0755 target/release/libnss_%{name}.so.2 %{buildroot}/%{_libdir}
install -D -d -m 0755 %{buildroot}/%{_pam_moduledir}
strip --strip-unneeded target/release/libpam_himmelblau.so
@@ -108,6 +110,10 @@ strip --strip-unneeded target/release/himmelblaud
strip --strip-unneeded target/release/himmelblaud_tasks
install -m 0755 target/release/himmelblaud %{buildroot}/%{_sbindir}
install -m 0755 target/release/himmelblaud_tasks %{buildroot}/%{_sbindir}
+pushd %{buildroot}%{_sbindir}
+ln -s himmelblaud rchimmelblaud
+ln -s himmelblaud_tasks rchimmelblaud_tasks
+popd
install -D -d -m 0755 %{buildroot}%{_bindir}
strip --strip-unneeded target/release/aad-tool
install -m 0755 target/release/aad-tool %{buildroot}/%{_bindir}
@@ -131,12 +137,14 @@ install -m 0644 %{_builddir}/%{name}-%{version}/platform/opensuse/himmelblaud-ta
%dir %{_sysconfdir}/himmelblau
%config %{_sysconfdir}/himmelblau/himmelblau.conf
%{_sbindir}/himmelblaud
+%{_sbindir}/rchimmelblaud
%{_sbindir}/himmelblaud_tasks
+%{_sbindir}/rchimmelblaud_tasks
%{_bindir}/aad-tool
%{_unitdir}/himmelblaud.service
%{_unitdir}/himmelblaud-tasks.service
-%files -n nss-himmelblau
+%files -n libnss_himmelblau2
%{_libdir}/libnss_%{name}.so.*
%files -n pam-himmelblau
diff --git a/packages/h/himmelblau/vendor.tar.zst b/packages/h/himmelblau/vendor.tar.zst
index 2f12a991b62..fd2c82b91f5 120000
--- a/packages/h/himmelblau/vendor.tar.zst
+++ b/packages/h/himmelblau/vendor.tar.zst
@@ -1 +1 @@
-/ipfs/bafybeibrkqkc76r7fol5h427e44yt67vdkn4p4cat4myq3qpjsv7icr4pu
\ No newline at end of file
+/ipfs/bafybeicmm6wutfgmsvqubnmp76tde3vze4vrvxgazqzdf2x2ecz5qkmrx4
\ No newline at end of file
diff --git a/packages/h/hyper-v/.files b/packages/h/hyper-v/.files
index f728d4d5971..ede7c202fbf 100644
Binary files a/packages/h/hyper-v/.files and b/packages/h/hyper-v/.files differ
diff --git a/packages/h/hyper-v/.rev b/packages/h/hyper-v/.rev
index b7b9ebad5f8..3aea6ffe5de 100644
--- a/packages/h/hyper-v/.rev
+++ b/packages/h/hyper-v/.rev
@@ -476,4 +476,29 @@
Automatic submission by obs-autosubmit
1170959
+
+ 920028c3cd1dd098469a5e5be0869e26
+ 9
+
+ anag+factory
+ - Add memory allocation check in hv_fcopy_start (94e86b17)
+- suppress the invalid warning for packed member alignment (207e03b0)
+- Add new fcopy application based on uio driver (82b0945c)
+- Add vmbus_bufring (45bab4d7)
+- kvp: Handle IPv4 and Ipv6 combination for keyfile format (f971f6dd)
+- kvp: Some small fixes for handling NM keyfiles (c3803203)
+- kvp: Support for keyfile based connection profile (42999c90)
+- kvp: remove unnecessary (void*) conversions (22589542)
+- Remove an extraneous "the" (f15f39fa)
+- change http to https in hv_kvp_daemon.c (fa52a4b2)
+- replace the copy of include/linux/hyperv.h with include/uapi/linux/hyperv.h (6de74d10)
+- merge individual udev rules files into a single rules file
+- package only files, not directories already owned by filesystem.rpm
+- remove braces from rpm spec macros
+- remove obsolete Group tag
+- replace RPM_BUILD_ROOT with buildroot
+- use a meaningful name for the UAPI include file
+- use a meaningful variable name for ifcfg in hv_set_ifconfig.sh
+ 1217113
+
diff --git a/packages/h/hyper-v/hyper-v.changes b/packages/h/hyper-v/hyper-v.changes
index 7b3f521265d..555f0d1e453 100644
--- a/packages/h/hyper-v/hyper-v.changes
+++ b/packages/h/hyper-v/hyper-v.changes
@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Tue Oct 22 22:22:22 UTC 2024 - ohering@suse.de
+
+- Add memory allocation check in hv_fcopy_start (94e86b17)
+- suppress the invalid warning for packed member alignment (207e03b0)
+- Add new fcopy application based on uio driver (82b0945c)
+- Add vmbus_bufring (45bab4d7)
+- kvp: Handle IPv4 and Ipv6 combination for keyfile format (f971f6dd)
+- kvp: Some small fixes for handling NM keyfiles (c3803203)
+- kvp: Support for keyfile based connection profile (42999c90)
+- kvp: remove unnecessary (void*) conversions (22589542)
+- Remove an extraneous "the" (f15f39fa)
+- change http to https in hv_kvp_daemon.c (fa52a4b2)
+- replace the copy of include/linux/hyperv.h with include/uapi/linux/hyperv.h (6de74d10)
+- merge individual udev rules files into a single rules file
+- package only files, not directories already owned by filesystem.rpm
+- remove braces from rpm spec macros
+- remove obsolete Group tag
+- replace RPM_BUILD_ROOT with buildroot
+- use a meaningful name for the UAPI include file
+- use a meaningful variable name for ifcfg in hv_set_ifconfig.sh
+
-------------------------------------------------------------------
Tue Apr 23 10:01:10 UTC 2024 - pgajdos@suse.com
diff --git a/packages/h/hyper-v/hyper-v.include.linux.hyperv.h b/packages/h/hyper-v/hyper-v.include.linux.hyperv.h
index d592d3bf4b8..aaa502a7bff 100644
--- a/packages/h/hyper-v/hyper-v.include.linux.hyperv.h
+++ b/packages/h/hyper-v/hyper-v.include.linux.hyperv.h
@@ -1,3 +1,4 @@
+/* SPDX-License-Identifier: GPL-2.0 WITH Linux-syscall-note */
/*
*
* Copyright (c) 2011, Microsoft Corporation.
@@ -22,14 +23,21 @@
*
*/
-#ifndef _HYPERV_H
-#define _HYPERV_H
+#ifndef _UAPI_HYPERV_H
+#define _UAPI_HYPERV_H
#include
-/* from linux/uuid.h */
-typedef struct {
- __u8 b[16];
-} uuid_le;
+
+/*
+ * Framework version for util services.
+ */
+#define UTIL_FW_MINOR 0
+
+#define UTIL_WS2K8_FW_MAJOR 1
+#define UTIL_WS2K8_FW_VERSION (UTIL_WS2K8_FW_MAJOR << 16 | UTIL_FW_MINOR)
+
+#define UTIL_FW_MAJOR 3
+#define UTIL_FW_VERSION (UTIL_FW_MAJOR << 16 | UTIL_FW_MINOR)
/*
@@ -82,6 +90,17 @@ struct hv_vss_check_dm_info {
__u32 flags;
} __attribute__((packed));
+/*
+ * struct hv_vss_msg encodes the fields that the Linux VSS
+ * driver accesses. However, FREEZE messages from Hyper-V contain
+ * additional LUN information that Linux doesn't use and are not
+ * represented in struct hv_vss_msg. A received FREEZE message may
+ * be as large as 6,260 bytes, so the driver must allocate at least
+ * that much space, not sizeof(struct hv_vss_msg). Other messages
+ * such as AUTO_RECOVER may be as large as 12,500 bytes. However,
+ * because the Linux VSS driver responds that it doesn't support
+ * auto-recovery, it should not receive such messages.
+ */
struct hv_vss_msg {
union {
struct hv_vss_hdr vss_hdr;
@@ -93,7 +112,6 @@ struct hv_vss_msg {
};
} __attribute__((packed));
-
/*
* Implementation of a host to guest copy facility.
*/
@@ -112,8 +130,8 @@ enum hv_fcopy_op {
struct hv_fcopy_hdr {
__u32 operation;
- uuid_le service_id0; /* currently unused */
- uuid_le service_id1; /* currently unused */
+ __u8 service_id0[16]; /* currently unused */
+ __u8 service_id1[16]; /* currently unused */
} __attribute__((packed));
#define OVER_WRITE 0x1
@@ -140,7 +158,6 @@ struct hv_do_fcopy {
__u8 data[DATA_FRAGMENT];
} __attribute__((packed));
-
/*
* An implementation of HyperV key value pair (KVP) functionality for Linux.
*
@@ -213,7 +230,7 @@ struct hv_do_fcopy {
* kernel and user-level daemon communicate using a connector channel.
*
* The user mode component first registers with the
- * the kernel component. Subsequently, the kernel component requests, data
+ * kernel component. Subsequently, the kernel component requests, data
* for the specified keys. In response to this message the user mode component
* fills in the value corresponding to the specified key. We overload the
* sequence field in the cn_msg header to define our KVP message types.
@@ -391,880 +408,4 @@ struct hv_kvp_ip_msg {
struct hv_kvp_ipaddr_value kvp_ip_val;
} __attribute__((packed));
-#ifdef __KERNEL__
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-
-
-#define MAX_PAGE_BUFFER_COUNT 19
-#define MAX_MULTIPAGE_BUFFER_COUNT 32 /* 128K */
-
-#pragma pack(push, 1)
-
-/* Single-page buffer */
-struct hv_page_buffer {
- u32 len;
- u32 offset;
- u64 pfn;
-};
-
-/* Multiple-page buffer */
-struct hv_multipage_buffer {
- /* Length and Offset determines the # of pfns in the array */
- u32 len;
- u32 offset;
- u64 pfn_array[MAX_MULTIPAGE_BUFFER_COUNT];
-};
-
-/* 0x18 includes the proprietary packet header */
-#define MAX_PAGE_BUFFER_PACKET (0x18 + \
- (sizeof(struct hv_page_buffer) * \
- MAX_PAGE_BUFFER_COUNT))
-#define MAX_MULTIPAGE_BUFFER_PACKET (0x18 + \
- sizeof(struct hv_multipage_buffer))
-
-
-#pragma pack(pop)
-
-struct hv_ring_buffer {
- /* Offset in bytes from the start of ring data below */
- u32 write_index;
-
- /* Offset in bytes from the start of ring data below */
- u32 read_index;
-
- u32 interrupt_mask;
-
- /* Pad it to PAGE_SIZE so that data starts on page boundary */
- u8 reserved[4084];
-
- /* NOTE:
- * The interrupt_mask field is used only for channels but since our
- * vmbus connection also uses this data structure and its data starts
- * here, we commented out this field.
- */
-
- /*
- * Ring data starts here + RingDataStartOffset
- * !!! DO NOT place any fields below this !!!
- */
- u8 buffer[0];
-} __packed;
-
-struct hv_ring_buffer_info {
- struct hv_ring_buffer *ring_buffer;
- u32 ring_size; /* Include the shared header */
- spinlock_t ring_lock;
-
- u32 ring_datasize; /* < ring_size */
- u32 ring_data_startoffset;
-};
-
-struct hv_ring_buffer_debug_info {
- u32 current_interrupt_mask;
- u32 current_read_index;
- u32 current_write_index;
- u32 bytes_avail_toread;
- u32 bytes_avail_towrite;
-};
-
-
-/*
- *
- * hv_get_ringbuffer_availbytes()
- *
- * Get number of bytes available to read and to write to
- * for the specified ring buffer
- */
-static inline void
-hv_get_ringbuffer_availbytes(struct hv_ring_buffer_info *rbi,
- u32 *read, u32 *write)
-{
- u32 read_loc, write_loc, dsize;
-
- smp_read_barrier_depends();
-
- /* Capture the read/write indices before they changed */
- read_loc = rbi->ring_buffer->read_index;
- write_loc = rbi->ring_buffer->write_index;
- dsize = rbi->ring_datasize;
-
- *write = write_loc >= read_loc ? dsize - (write_loc - read_loc) :
- read_loc - write_loc;
- *read = dsize - *write;
-}
-
-
-/*
- * We use the same version numbering for all Hyper-V modules.
- *
- * Definition of versioning is as follows;
- *
- * Major Number Changes for these scenarios;
- * 1. When a new version of Windows Hyper-V
- * is released.
- * 2. A Major change has occurred in the
- * Linux IC's.
- * (For example the merge for the first time
- * into the kernel) Every time the Major Number
- * changes, the Revision number is reset to 0.
- * Minor Number Changes when new functionality is added
- * to the Linux IC's that is not a bug fix.
- *
- * 3.1 - Added completed hv_utils driver. Shutdown/Heartbeat/Timesync
- */
-#define HV_DRV_VERSION "3.1"
-
-
-/*
- * A revision number of vmbus that is used for ensuring both ends on a
- * partition are using compatible versions.
- */
-#define VMBUS_REVISION_NUMBER 13
-
-/* Make maximum size of pipe payload of 16K */
-#define MAX_PIPE_DATA_PAYLOAD (sizeof(u8) * 16384)
-
-/* Define PipeMode values. */
-#define VMBUS_PIPE_TYPE_BYTE 0x00000000
-#define VMBUS_PIPE_TYPE_MESSAGE 0x00000004
-
-/* The size of the user defined data buffer for non-pipe offers. */
-#define MAX_USER_DEFINED_BYTES 120
-
-/* The size of the user defined data buffer for pipe offers. */
-#define MAX_PIPE_USER_DEFINED_BYTES 116
-
-/*
- * At the center of the Channel Management library is the Channel Offer. This
- * struct contains the fundamental information about an offer.
- */
-struct vmbus_channel_offer {
- uuid_le if_type;
- uuid_le if_instance;
- u64 int_latency; /* in 100ns units */
- u32 if_revision;
- u32 server_ctx_size; /* in bytes */
- u16 chn_flags;
- u16 mmio_megabytes; /* in bytes * 1024 * 1024 */
-
- union {
- /* Non-pipes: The user has MAX_USER_DEFINED_BYTES bytes. */
- struct {
- unsigned char user_def[MAX_USER_DEFINED_BYTES];
- } std;
-
- /*
- * Pipes:
- * The following sructure is an integrated pipe protocol, which
- * is implemented on top of standard user-defined data. Pipe
- * clients have MAX_PIPE_USER_DEFINED_BYTES left for their own
- * use.
- */
- struct {
- u32 pipe_mode;
- unsigned char user_def[MAX_PIPE_USER_DEFINED_BYTES];
- } pipe;
- } u;
- u32 padding;
-} __packed;
-
-/* Server Flags */
-#define VMBUS_CHANNEL_ENUMERATE_DEVICE_INTERFACE 1
-#define VMBUS_CHANNEL_SERVER_SUPPORTS_TRANSFER_PAGES 2
-#define VMBUS_CHANNEL_SERVER_SUPPORTS_GPADLS 4
-#define VMBUS_CHANNEL_NAMED_PIPE_MODE 0x10
-#define VMBUS_CHANNEL_LOOPBACK_OFFER 0x100
-#define VMBUS_CHANNEL_PARENT_OFFER 0x200
-#define VMBUS_CHANNEL_REQUEST_MONITORED_NOTIFICATION 0x400
-
-struct vmpacket_descriptor {
- u16 type;
- u16 offset8;
- u16 len8;
- u16 flags;
- u64 trans_id;
-} __packed;
-
-struct vmpacket_header {
- u32 prev_pkt_start_offset;
- struct vmpacket_descriptor descriptor;
-} __packed;
-
-struct vmtransfer_page_range {
- u32 byte_count;
- u32 byte_offset;
-} __packed;
-
-struct vmtransfer_page_packet_header {
- struct vmpacket_descriptor d;
- u16 xfer_pageset_id;
- u8 sender_owns_set;
- u8 reserved;
- u32 range_cnt;
- struct vmtransfer_page_range ranges[1];
-} __packed;
-
-struct vmgpadl_packet_header {
- struct vmpacket_descriptor d;
- u32 gpadl;
- u32 reserved;
-} __packed;
-
-struct vmadd_remove_transfer_page_set {
- struct vmpacket_descriptor d;
- u32 gpadl;
- u16 xfer_pageset_id;
- u16 reserved;
-} __packed;
-
-/*
- * This structure defines a range in guest physical space that can be made to
- * look virtually contiguous.
- */
-struct gpa_range {
- u32 byte_count;
- u32 byte_offset;
- u64 pfn_array[0];
-};
-
-/*
- * This is the format for an Establish Gpadl packet, which contains a handle by
- * which this GPADL will be known and a set of GPA ranges associated with it.
- * This can be converted to a MDL by the guest OS. If there are multiple GPA
- * ranges, then the resulting MDL will be "chained," representing multiple VA
- * ranges.
- */
-struct vmestablish_gpadl {
- struct vmpacket_descriptor d;
- u32 gpadl;
- u32 range_cnt;
- struct gpa_range range[1];
-} __packed;
-
-/*
- * This is the format for a Teardown Gpadl packet, which indicates that the
- * GPADL handle in the Establish Gpadl packet will never be referenced again.
- */
-struct vmteardown_gpadl {
- struct vmpacket_descriptor d;
- u32 gpadl;
- u32 reserved; /* for alignment to a 8-byte boundary */
-} __packed;
-
-/*
- * This is the format for a GPA-Direct packet, which contains a set of GPA
- * ranges, in addition to commands and/or data.
- */
-struct vmdata_gpa_direct {
- struct vmpacket_descriptor d;
- u32 reserved;
- u32 range_cnt;
- struct gpa_range range[1];
-} __packed;
-
-/* This is the format for a Additional Data Packet. */
-struct vmadditional_data {
- struct vmpacket_descriptor d;
- u64 total_bytes;
- u32 offset;
- u32 byte_cnt;
- unsigned char data[1];
-} __packed;
-
-union vmpacket_largest_possible_header {
- struct vmpacket_descriptor simple_hdr;
- struct vmtransfer_page_packet_header xfer_page_hdr;
- struct vmgpadl_packet_header gpadl_hdr;
- struct vmadd_remove_transfer_page_set add_rm_xfer_page_hdr;
- struct vmestablish_gpadl establish_gpadl_hdr;
- struct vmteardown_gpadl teardown_gpadl_hdr;
- struct vmdata_gpa_direct data_gpa_direct_hdr;
-};
-
-#define VMPACKET_DATA_START_ADDRESS(__packet) \
- (void *)(((unsigned char *)__packet) + \
- ((struct vmpacket_descriptor)__packet)->offset8 * 8)
-
-#define VMPACKET_DATA_LENGTH(__packet) \
- ((((struct vmpacket_descriptor)__packet)->len8 - \
- ((struct vmpacket_descriptor)__packet)->offset8) * 8)
-
-#define VMPACKET_TRANSFER_MODE(__packet) \
- (((struct IMPACT)__packet)->type)
-
-enum vmbus_packet_type {
- VM_PKT_INVALID = 0x0,
- VM_PKT_SYNCH = 0x1,
- VM_PKT_ADD_XFER_PAGESET = 0x2,
- VM_PKT_RM_XFER_PAGESET = 0x3,
- VM_PKT_ESTABLISH_GPADL = 0x4,
- VM_PKT_TEARDOWN_GPADL = 0x5,
- VM_PKT_DATA_INBAND = 0x6,
- VM_PKT_DATA_USING_XFER_PAGES = 0x7,
- VM_PKT_DATA_USING_GPADL = 0x8,
- VM_PKT_DATA_USING_GPA_DIRECT = 0x9,
- VM_PKT_CANCEL_REQUEST = 0xa,
- VM_PKT_COMP = 0xb,
- VM_PKT_DATA_USING_ADDITIONAL_PKT = 0xc,
- VM_PKT_ADDITIONAL_DATA = 0xd
-};
-
-#define VMBUS_DATA_PACKET_FLAG_COMPLETION_REQUESTED 1
-
-
-/* Version 1 messages */
-enum vmbus_channel_message_type {
- CHANNELMSG_INVALID = 0,
- CHANNELMSG_OFFERCHANNEL = 1,
- CHANNELMSG_RESCIND_CHANNELOFFER = 2,
- CHANNELMSG_REQUESTOFFERS = 3,
- CHANNELMSG_ALLOFFERS_DELIVERED = 4,
- CHANNELMSG_OPENCHANNEL = 5,
- CHANNELMSG_OPENCHANNEL_RESULT = 6,
- CHANNELMSG_CLOSECHANNEL = 7,
- CHANNELMSG_GPADL_HEADER = 8,
- CHANNELMSG_GPADL_BODY = 9,
- CHANNELMSG_GPADL_CREATED = 10,
- CHANNELMSG_GPADL_TEARDOWN = 11,
- CHANNELMSG_GPADL_TORNDOWN = 12,
- CHANNELMSG_RELID_RELEASED = 13,
- CHANNELMSG_INITIATE_CONTACT = 14,
- CHANNELMSG_VERSION_RESPONSE = 15,
- CHANNELMSG_UNLOAD = 16,
-#ifdef VMBUS_FEATURE_PARENT_OR_PEER_MEMORY_MAPPED_INTO_A_CHILD
- CHANNELMSG_VIEWRANGE_ADD = 17,
- CHANNELMSG_VIEWRANGE_REMOVE = 18,
-#endif
- CHANNELMSG_COUNT
-};
-
-struct vmbus_channel_message_header {
- enum vmbus_channel_message_type msgtype;
- u32 padding;
-} __packed;
-
-/* Query VMBus Version parameters */
-struct vmbus_channel_query_vmbus_version {
- struct vmbus_channel_message_header header;
- u32 version;
-} __packed;
-
-/* VMBus Version Supported parameters */
-struct vmbus_channel_version_supported {
- struct vmbus_channel_message_header header;
- u8 version_supported;
-} __packed;
-
-/* Offer Channel parameters */
-struct vmbus_channel_offer_channel {
- struct vmbus_channel_message_header header;
- struct vmbus_channel_offer offer;
- u32 child_relid;
- u8 monitorid;
- u8 monitor_allocated;
-} __packed;
-
-/* Rescind Offer parameters */
-struct vmbus_channel_rescind_offer {
- struct vmbus_channel_message_header header;
- u32 child_relid;
-} __packed;
-
-/*
- * Request Offer -- no parameters, SynIC message contains the partition ID
- * Set Snoop -- no parameters, SynIC message contains the partition ID
- * Clear Snoop -- no parameters, SynIC message contains the partition ID
- * All Offers Delivered -- no parameters, SynIC message contains the partition
- * ID
- * Flush Client -- no parameters, SynIC message contains the partition ID
- */
-
-/* Open Channel parameters */
-struct vmbus_channel_open_channel {
- struct vmbus_channel_message_header header;
-
- /* Identifies the specific VMBus channel that is being opened. */
- u32 child_relid;
-
- /* ID making a particular open request at a channel offer unique. */
- u32 openid;
-
- /* GPADL for the channel's ring buffer. */
- u32 ringbuffer_gpadlhandle;
-
- /* GPADL for the channel's server context save area. */
- u32 server_contextarea_gpadlhandle;
-
- /*
- * The upstream ring buffer begins at offset zero in the memory
- * described by RingBufferGpadlHandle. The downstream ring buffer
- * follows it at this offset (in pages).
- */
- u32 downstream_ringbuffer_pageoffset;
-
- /* User-specific data to be passed along to the server endpoint. */
- unsigned char userdata[MAX_USER_DEFINED_BYTES];
-} __packed;
-
-/* Open Channel Result parameters */
-struct vmbus_channel_open_result {
- struct vmbus_channel_message_header header;
- u32 child_relid;
- u32 openid;
- u32 status;
-} __packed;
-
-/* Close channel parameters; */
-struct vmbus_channel_close_channel {
- struct vmbus_channel_message_header header;
- u32 child_relid;
-} __packed;
-
-/* Channel Message GPADL */
-#define GPADL_TYPE_RING_BUFFER 1
-#define GPADL_TYPE_SERVER_SAVE_AREA 2
-#define GPADL_TYPE_TRANSACTION 8
-
-/*
- * The number of PFNs in a GPADL message is defined by the number of
- * pages that would be spanned by ByteCount and ByteOffset. If the
- * implied number of PFNs won't fit in this packet, there will be a
- * follow-up packet that contains more.
- */
-struct vmbus_channel_gpadl_header {
- struct vmbus_channel_message_header header;
- u32 child_relid;
- u32 gpadl;
- u16 range_buflen;
- u16 rangecount;
- struct gpa_range range[0];
-} __packed;
-
-/* This is the followup packet that contains more PFNs. */
-struct vmbus_channel_gpadl_body {
- struct vmbus_channel_message_header header;
- u32 msgnumber;
- u32 gpadl;
- u64 pfn[0];
-} __packed;
-
-struct vmbus_channel_gpadl_created {
- struct vmbus_channel_message_header header;
- u32 child_relid;
- u32 gpadl;
- u32 creation_status;
-} __packed;
-
-struct vmbus_channel_gpadl_teardown {
- struct vmbus_channel_message_header header;
- u32 child_relid;
- u32 gpadl;
-} __packed;
-
-struct vmbus_channel_gpadl_torndown {
- struct vmbus_channel_message_header header;
- u32 gpadl;
-} __packed;
-
-#ifdef VMBUS_FEATURE_PARENT_OR_PEER_MEMORY_MAPPED_INTO_A_CHILD
-struct vmbus_channel_view_range_add {
- struct vmbus_channel_message_header header;
- PHYSICAL_ADDRESS viewrange_base;
- u64 viewrange_length;
- u32 child_relid;
-} __packed;
-
-struct vmbus_channel_view_range_remove {
- struct vmbus_channel_message_header header;
- PHYSICAL_ADDRESS viewrange_base;
- u32 child_relid;
-} __packed;
-#endif
-
-struct vmbus_channel_relid_released {
- struct vmbus_channel_message_header header;
- u32 child_relid;
-} __packed;
-
-struct vmbus_channel_initiate_contact {
- struct vmbus_channel_message_header header;
- u32 vmbus_version_requested;
- u32 padding2;
- u64 interrupt_page;
- u64 monitor_page1;
- u64 monitor_page2;
-} __packed;
-
-struct vmbus_channel_version_response {
- struct vmbus_channel_message_header header;
- u8 version_supported;
-} __packed;
-
-enum vmbus_channel_state {
- CHANNEL_OFFER_STATE,
- CHANNEL_OPENING_STATE,
- CHANNEL_OPEN_STATE,
-};
-
-struct vmbus_channel_debug_info {
- u32 relid;
- enum vmbus_channel_state state;
- uuid_le interfacetype;
- uuid_le interface_instance;
- u32 monitorid;
- u32 servermonitor_pending;
- u32 servermonitor_latency;
- u32 servermonitor_connectionid;
- u32 clientmonitor_pending;
- u32 clientmonitor_latency;
- u32 clientmonitor_connectionid;
-
- struct hv_ring_buffer_debug_info inbound;
- struct hv_ring_buffer_debug_info outbound;
-};
-
-/*
- * Represents each channel msg on the vmbus connection This is a
- * variable-size data structure depending on the msg type itself
- */
-struct vmbus_channel_msginfo {
- /* Bookkeeping stuff */
- struct list_head msglistentry;
-
- /* So far, this is only used to handle gpadl body message */
- struct list_head submsglist;
-
- /* Synchronize the request/response if needed */
- struct completion waitevent;
- union {
- struct vmbus_channel_version_supported version_supported;
- struct vmbus_channel_open_result open_result;
- struct vmbus_channel_gpadl_torndown gpadl_torndown;
- struct vmbus_channel_gpadl_created gpadl_created;
- struct vmbus_channel_version_response version_response;
- } response;
-
- u32 msgsize;
- /*
- * The channel message that goes out on the "wire".
- * It will contain at minimum the VMBUS_CHANNEL_MESSAGE_HEADER header
- */
- unsigned char msg[0];
-};
-
-struct vmbus_close_msg {
- struct vmbus_channel_msginfo info;
- struct vmbus_channel_close_channel msg;
-};
-
-struct vmbus_channel {
- struct list_head listentry;
-
- struct hv_device *device_obj;
-
- struct work_struct work;
-
- enum vmbus_channel_state state;
-
- struct vmbus_channel_offer_channel offermsg;
- /*
- * These are based on the OfferMsg.MonitorId.
- * Save it here for easy access.
- */
- u8 monitor_grp;
- u8 monitor_bit;
-
- u32 ringbuffer_gpadlhandle;
-
- /* Allocated memory for ring buffer */
- void *ringbuffer_pages;
- u32 ringbuffer_pagecount;
- struct hv_ring_buffer_info outbound; /* send to parent */
- struct hv_ring_buffer_info inbound; /* receive from parent */
- spinlock_t inbound_lock;
- struct workqueue_struct *controlwq;
-
- struct vmbus_close_msg close_msg;
-
- /* Channel callback are invoked in this workqueue context */
- /* HANDLE dataWorkQueue; */
-
- void (*onchannel_callback)(void *context);
- void *channel_callback_context;
-};
-
-void vmbus_onmessage(void *context);
-
-int vmbus_request_offers(void);
-
-/* The format must be the same as struct vmdata_gpa_direct */
-struct vmbus_channel_packet_page_buffer {
- u16 type;
- u16 dataoffset8;
- u16 length8;
- u16 flags;
- u64 transactionid;
- u32 reserved;
- u32 rangecount;
- struct hv_page_buffer range[MAX_PAGE_BUFFER_COUNT];
-} __packed;
-
-/* The format must be the same as struct vmdata_gpa_direct */
-struct vmbus_channel_packet_multipage_buffer {
- u16 type;
- u16 dataoffset8;
- u16 length8;
- u16 flags;
- u64 transactionid;
- u32 reserved;
- u32 rangecount; /* Always 1 in this case */
- struct hv_multipage_buffer range;
-} __packed;
-
-
-extern int vmbus_open(struct vmbus_channel *channel,
- u32 send_ringbuffersize,
- u32 recv_ringbuffersize,
- void *userdata,
- u32 userdatalen,
- void(*onchannel_callback)(void *context),
- void *context);
-
-extern void vmbus_close(struct vmbus_channel *channel);
-
-extern int vmbus_sendpacket(struct vmbus_channel *channel,
- const void *buffer,
- u32 bufferLen,
- u64 requestid,
- enum vmbus_packet_type type,
- u32 flags);
-
-extern int vmbus_sendpacket_pagebuffer(struct vmbus_channel *channel,
- struct hv_page_buffer pagebuffers[],
- u32 pagecount,
- void *buffer,
- u32 bufferlen,
- u64 requestid);
-
-extern int vmbus_sendpacket_multipagebuffer(struct vmbus_channel *channel,
- struct hv_multipage_buffer *mpb,
- void *buffer,
- u32 bufferlen,
- u64 requestid);
-
-extern int vmbus_establish_gpadl(struct vmbus_channel *channel,
- void *kbuffer,
- u32 size,
- u32 *gpadl_handle);
-
-extern int vmbus_teardown_gpadl(struct vmbus_channel *channel,
- u32 gpadl_handle);
-
-extern int vmbus_recvpacket(struct vmbus_channel *channel,
- void *buffer,
- u32 bufferlen,
- u32 *buffer_actual_len,
- u64 *requestid);
-
-extern int vmbus_recvpacket_raw(struct vmbus_channel *channel,
- void *buffer,
- u32 bufferlen,
- u32 *buffer_actual_len,
- u64 *requestid);
-
-
-extern void vmbus_get_debug_info(struct vmbus_channel *channel,
- struct vmbus_channel_debug_info *debug);
-
-extern void vmbus_ontimer(unsigned long data);
-
-struct hv_dev_port_info {
- u32 int_mask;
- u32 read_idx;
- u32 write_idx;
- u32 bytes_avail_toread;
- u32 bytes_avail_towrite;
-};
-
-/* Base driver object */
-struct hv_driver {
- const char *name;
-
- /* the device type supported by this driver */
- uuid_le dev_type;
- const struct hv_vmbus_device_id *id_table;
-
- struct device_driver driver;
-
- int (*probe)(struct hv_device *, const struct hv_vmbus_device_id *);
- int (*remove)(struct hv_device *);
- void (*shutdown)(struct hv_device *);
-
-};
-
-/* Base device object */
-struct hv_device {
- /* the device type id of this device */
- uuid_le dev_type;
-
- /* the device instance id of this device */
- uuid_le dev_instance;
-
- struct device device;
-
- struct vmbus_channel *channel;
-};
-
-
-static inline struct hv_device *device_to_hv_device(struct device *d)
-{
- return container_of(d, struct hv_device, device);
-}
-
-static inline struct hv_driver *drv_to_hv_drv(struct device_driver *d)
-{
- return container_of(d, struct hv_driver, driver);
-}
-
-static inline void hv_set_drvdata(struct hv_device *dev, void *data)
-{
- dev_set_drvdata(&dev->device, data);
-}
-
-static inline void *hv_get_drvdata(struct hv_device *dev)
-{
- return dev_get_drvdata(&dev->device);
-}
-
-/* Vmbus interface */
-#define vmbus_driver_register(driver) \
- __vmbus_driver_register(driver, THIS_MODULE, KBUILD_MODNAME)
-int __must_check __vmbus_driver_register(struct hv_driver *hv_driver,
- struct module *owner,
- const char *mod_name);
-void vmbus_driver_unregister(struct hv_driver *hv_driver);
-
-/**
- * VMBUS_DEVICE - macro used to describe a specific hyperv vmbus device
- *
- * This macro is used to create a struct hv_vmbus_device_id that matches a
- * specific device.
- */
-#define VMBUS_DEVICE(g0, g1, g2, g3, g4, g5, g6, g7, \
- g8, g9, ga, gb, gc, gd, ge, gf) \
- .guid = { g0, g1, g2, g3, g4, g5, g6, g7, \
- g8, g9, ga, gb, gc, gd, ge, gf },
-
-/*
- * Common header for Hyper-V ICs
- */
-
-#define ICMSGTYPE_NEGOTIATE 0
-#define ICMSGTYPE_HEARTBEAT 1
-#define ICMSGTYPE_KVPEXCHANGE 2
-#define ICMSGTYPE_SHUTDOWN 3
-#define ICMSGTYPE_TIMESYNC 4
-#define ICMSGTYPE_VSS 5
-
-#define ICMSGHDRFLAG_TRANSACTION 1
-#define ICMSGHDRFLAG_REQUEST 2
-#define ICMSGHDRFLAG_RESPONSE 4
-
-
-/*
- * While we want to handle util services as regular devices,
- * there is only one instance of each of these services; so
- * we statically allocate the service specific state.
- */
-
-struct hv_util_service {
- u8 *recv_buffer;
- void (*util_cb)(void *);
- int (*util_init)(struct hv_util_service *);
- void (*util_deinit)(void);
-};
-
-struct vmbuspipe_hdr {
- u32 flags;
- u32 msgsize;
-} __packed;
-
-struct ic_version {
- u16 major;
- u16 minor;
-} __packed;
-
-struct icmsg_hdr {
- struct ic_version icverframe;
- u16 icmsgtype;
- struct ic_version icvermsg;
- u16 icmsgsize;
- u32 status;
- u8 ictransaction_id;
- u8 icflags;
- u8 reserved[2];
-} __packed;
-
-struct icmsg_negotiate {
- u16 icframe_vercnt;
- u16 icmsg_vercnt;
- u32 reserved;
- struct ic_version icversion_data[1]; /* any size array */
-} __packed;
-
-struct shutdown_msg_data {
- u32 reason_code;
- u32 timeout_seconds;
- u32 flags;
- u8 display_message[2048];
-} __packed;
-
-struct heartbeat_msg_data {
- u64 seq_num;
- u32 reserved[8];
-} __packed;
-
-/* Time Sync IC defs */
-#define ICTIMESYNCFLAG_PROBE 0
-#define ICTIMESYNCFLAG_SYNC 1
-#define ICTIMESYNCFLAG_SAMPLE 2
-
-#ifdef __x86_64__
-#define WLTIMEDELTA 116444736000000000L /* in 100ns unit */
-#else
-#define WLTIMEDELTA 116444736000000000LL
-#endif
-
-struct ictimesync_data {
- u64 parenttime;
- u64 childtime;
- u64 roundtriptime;
- u8 flags;
-} __packed;
-
-struct hyperv_service_callback {
- u8 msg_type;
- char *log_msg;
- uuid_le data;
- struct vmbus_channel *channel;
- void (*callback) (void *context);
-};
-
-#define MAX_SRV_VER 0x7ffffff
-extern void vmbus_prep_negotiate_resp(struct icmsg_hdr *,
- struct icmsg_negotiate *, u8 *, int,
- int);
-
-int hv_kvp_init(struct hv_util_service *);
-void hv_kvp_deinit(void);
-void hv_kvp_onchannelcallback(void *);
-
-#endif /* __KERNEL__ */
-#endif /* _HYPERV_H */
+#endif /* _UAPI_HYPERV_H */
diff --git a/packages/h/hyper-v/hyper-v.spec b/packages/h/hyper-v/hyper-v.spec
index 05042aac216..a85db20f6a6 100644
--- a/packages/h/hyper-v/hyper-v.spec
+++ b/packages/h/hyper-v/hyper-v.spec
@@ -19,7 +19,13 @@
%define hv_kvp_daemon hv_kvp_daemon
%define hv_vss_daemon hv_vss_daemon
%define hv_fcopy_daemon hv_fcopy_daemon
-%define helper_dir /usr/lib/%{name}
+%define vmbus_bufring vmbus_bufring
+%define hv_fcopy_uio_daemon hv_fcopy_uio_daemon
+%define include_uapi_linux_hyperv include_uapi_linux_hyperv
+%define chardev_kvp vmbus/hv_kvp
+%define chardev_vss vmbus/hv_vss
+%define chardev_fcopy vmbus/hv_fcopy
+%define helper_dir /usr/lib/%name
Name: hyper-v
ExclusiveArch: %ix86 x86_64 aarch64
@@ -30,19 +36,21 @@ BuildRequires: pkgconfig(systemd)
Conflicts: kernel < 4.2
Summary: Microsoft Hyper-V tools
License: GPL-2.0-only
-Group: System/Kernel
Supplements: modalias(dmi:*svnMicrosoftCorporation*pnVirtualMachine*rnVirtualMachine*)
Supplements: modalias(pci:v00001414d00005353sv*sd*bc*sc*i*)
URL: http://www.kernel.org
# Arbitrary version number
-Version: 8
+Version: 9
Release: 0
Source0: hyper-v.lsvmbus.py
Source5: hyper-v.kvptest.ps1.txt
Source7: hyper-v.compare-with-upstream.sh
+Source8: hyper-v.tools.hv.vmbus_bufring.h
Source9: hyper-v.include.linux.hyperv.h
Source10: hyper-v.tools.hv.hv_kvp_daemon.c
+Source11: hyper-v.tools.hv.vmbus_bufring.c
Source12: hyper-v.tools.hv.hv_vss_daemon.c
+Source13: hyper-v.tools.hv.hv_fcopy_uio_daemon.c
Source14: hyper-v.tools.hv.hv_fcopy_daemon.c
Source20: hyper-v.tools.hv.hv_get_dhcp_info.sh
Source21: hyper-v.tools.hv.hv_get_dns_info.sh
@@ -56,107 +64,147 @@ This package contains the Microsoft Hyper-V tools.
%prep
%setup -Tc
cp -avL %{S:5} kvptest.ps1.txt
-cp -vL %{S:9} %{hv_kvp_daemon}.h
+cp -vL %{S:8} %vmbus_bufring.h
+cp -vL %{S:9} %include_uapi_linux_hyperv.h
cp -vL %{S:10} .
-cp -vL %{S:12} %{hv_vss_daemon}.c
-cp -vL %{S:14} %{hv_fcopy_daemon}.c
+cp -vL %{S:11} %vmbus_bufring.c
+cp -vL %{S:12} %hv_vss_daemon.c
+cp -vL %{S:13} %hv_fcopy_uio_daemon.c
+cp -vL %{S:14} %hv_fcopy_daemon.c
%patch -P 0 -p1
-mv `basename %{S:10}` %{hv_kvp_daemon}.c
+mv `basename %{S:10}` %hv_kvp_daemon.c
%build
-sed -i~ '/#include /d' %{hv_kvp_daemon}.c
-sed -i~ '/#include /d' %{hv_vss_daemon}.c
-sed -i~ '/#include /d' %{hv_fcopy_daemon}.c
+sed -i~ '/#include /d' %hv_kvp_daemon.c
+sed -i~ '/#include /d' %hv_vss_daemon.c
+sed -i~ '/#include /d' %hv_fcopy_uio_daemon.c
+sed -i~ '/#include /d' %hv_fcopy_daemon.c
gcc \
$RPM_OPT_FLAGS \
-Wno-unused-variable \
-Wno-pointer-sign \
-D_GNU_SOURCE \
-g \
- %{hv_kvp_daemon}.c \
- -include %{hv_kvp_daemon}.h \
+ %hv_kvp_daemon.c \
+ -include %include_uapi_linux_hyperv.h \
-DCN_KVP_IDX=0x9 \
-DCN_KVP_VAL=0x1 \
-DKVP_SCRIPTS_PATH= \
-pthread \
- -o %{hv_kvp_daemon}
+ -o %hv_kvp_daemon
gcc \
$RPM_OPT_FLAGS \
-Wno-unused-variable \
-Wno-pointer-sign \
-D_GNU_SOURCE \
-g \
- %{hv_vss_daemon}.c \
- -include %{hv_kvp_daemon}.h \
+ %hv_vss_daemon.c \
+ -include %include_uapi_linux_hyperv.h \
-DCN_VSS_IDX=0xa \
-DCN_VSS_VAL=0x1 \
- -o %{hv_vss_daemon}
+ -o %hv_vss_daemon
gcc \
$RPM_OPT_FLAGS \
-Wno-unused-variable \
-Wno-pointer-sign \
-D_GNU_SOURCE \
-g \
- %{hv_fcopy_daemon}.c \
- -include %{hv_kvp_daemon}.h \
- -o %{hv_fcopy_daemon}
+ %hv_fcopy_daemon.c \
+ -include %include_uapi_linux_hyperv.h \
+ -o %hv_fcopy_daemon
+
+%ifarch %ix86 x86_64
+gcc \
+ $RPM_OPT_FLAGS \
+ -Wno-unused-variable \
+ -Wno-pointer-sign \
+ -Wno-address-of-packed-member \
+ -D_GNU_SOURCE \
+ -g \
+ %vmbus_bufring.c \
+ %hv_fcopy_uio_daemon.c \
+ -include %include_uapi_linux_hyperv.h \
+ -o %hv_fcopy_uio_daemon
+%endif
%install
# It is not a callable app anyway, so move it out of the way
-bindir=%{helper_dir}/bin
-mkdir -p $RPM_BUILD_ROOT${bindir}
-mkdir -p $RPM_BUILD_ROOT%{_sbindir}
-mkdir -p $RPM_BUILD_ROOT%{helper_dir}/bin
-install -m755 %{hv_kvp_daemon} $RPM_BUILD_ROOT${bindir}
-install -m755 %{hv_vss_daemon} $RPM_BUILD_ROOT${bindir}
-install -m755 %{hv_fcopy_daemon} $RPM_BUILD_ROOT${bindir}
-cp -avL %{S:0} $RPM_BUILD_ROOT%{_sbindir}/lsvmbus
-chmod 0755 $RPM_BUILD_ROOT%{_sbindir}/lsvmbus
-cp -avL %{S:20} $RPM_BUILD_ROOT%{helper_dir}/bin/hv_get_dhcp_info
-cp -avL %{S:21} $RPM_BUILD_ROOT%{helper_dir}/bin/hv_get_dns_info
-cp -avL %{S:22} $RPM_BUILD_ROOT%{helper_dir}/bin/hv_set_ifconfig
-chmod 755 $RPM_BUILD_ROOT%{helper_dir}/bin/*
-d=$RPM_BUILD_ROOT%{_unitdir}
+bindir=%helper_dir/bin
+mkdir -p %buildroot${bindir}
+mkdir -p %buildroot%_sbindir
+install -m755 %hv_kvp_daemon %buildroot${bindir}
+install -m755 %hv_vss_daemon %buildroot${bindir}
+install -m755 %hv_fcopy_daemon %buildroot${bindir}
+%ifarch %ix86 x86_64
+install -m755 %hv_fcopy_uio_daemon %buildroot${bindir}
+%endif
+cp -avL %{S:0} %buildroot%_sbindir/lsvmbus
+chmod 0755 %buildroot%_sbindir/lsvmbus
+cp -avL %{S:20} %buildroot${bindir}/hv_get_dhcp_info
+cp -avL %{S:21} %buildroot${bindir}/hv_get_dns_info
+cp -avL %{S:22} %buildroot${bindir}/hv_set_ifconfig
+chmod 755 %buildroot${bindir}/*
+d=%buildroot%_unitdir
mkdir -vp ${d}
#
-tee ${d}/%{hv_kvp_daemon}.service < /sys/bus/vmbus/drivers/uio_hv_generic/new_id'
+ExecStart=${bindir}/%hv_fcopy_uio_daemon --no-daemon
Restart=on-failure
[Install]
@@ -165,53 +213,61 @@ EOF
#
#
#
-d=$RPM_BUILD_ROOT%{_udevrulesdir}
+d=%buildroot%_udevrulesdir
mkdir -vp ${d}
-tee ${d}/%{hv_kvp_daemon}.rules < /sys/bus/vmbus/drivers/uio_hv_generic/new_id
+ helpers+=(%hv_fcopy_uio_daemon)
+ fi
+fi
if test -d /sys/bus/vmbus/devices
then
- export PATH=${bindir}:\$PATH
+ export PATH=${bindir}:$PATH
echo -n "Starting hyper-v helpers:"
- for i in \
- %{hv_kvp_daemon} \
- %{hv_vss_daemon} \
- %{hv_fcopy_daemon}
+ for i in "${helpers[@]}"
do
- if mkdir /run/\$i
+ if mkdir /run/$i
then
- echo -n " \$i"
- \$i < /dev/null &
+ echo -n " $i"
+ $i < /dev/null &
fi
done
echo " ... done"
fi
-EOF
-chmod 755 $RPM_BUILD_ROOT${bindir}/${helper}
+_EOF_
+chmod 755 %buildroot${bindir}/${helper}
#
-%python3_fix_shebang
+%?python3_fix_shebang
%files
%doc kvptest.ps1.txt
-%{_unitdir}
-%dir /usr/lib/udev
-%{_udevrulesdir}
-%{_sbindir}/*
-%{helper_dir}
+%_unitdir/*
+%_udevrulesdir/*
+%_sbindir/*
+%helper_dir
%pre
# hv_kvp_daemon in SLES11 SP2 stored temporary state files in /var/opt
diff --git a/packages/h/hyper-v/hyper-v.tools.hv.hv_fcopy_uio_daemon.c b/packages/h/hyper-v/hyper-v.tools.hv.hv_fcopy_uio_daemon.c
new file mode 100644
index 00000000000..7a00f3066a9
--- /dev/null
+++ b/packages/h/hyper-v/hyper-v.tools.hv.hv_fcopy_uio_daemon.c
@@ -0,0 +1,497 @@
+// SPDX-License-Identifier: GPL-2.0-only
+/*
+ * An implementation of host to guest copy functionality for Linux.
+ *
+ * Copyright (C) 2023, Microsoft, Inc.
+ *
+ * Author : K. Y. Srinivasan
+ * Author : Saurabh Sengar
+ *
+ */
+
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include "vmbus_bufring.h"
+
+#define ICMSGTYPE_NEGOTIATE 0
+#define ICMSGTYPE_FCOPY 7
+
+#define WIN8_SRV_MAJOR 1
+#define WIN8_SRV_MINOR 1
+#define WIN8_SRV_VERSION (WIN8_SRV_MAJOR << 16 | WIN8_SRV_MINOR)
+
+#define MAX_FOLDER_NAME 15
+#define MAX_PATH_LEN 15
+#define FCOPY_UIO "/sys/bus/vmbus/devices/eb765408-105f-49b6-b4aa-c123b64d17d4/uio"
+
+#define FCOPY_VER_COUNT 1
+static const int fcopy_versions[] = {
+ WIN8_SRV_VERSION
+};
+
+#define FW_VER_COUNT 1
+static const int fw_versions[] = {
+ UTIL_FW_VERSION
+};
+
+#define HV_RING_SIZE 0x4000 /* 16KB ring buffer size */
+
+unsigned char desc[HV_RING_SIZE];
+
+static int target_fd;
+static char target_fname[PATH_MAX];
+static unsigned long long filesize;
+
+static int hv_fcopy_create_file(char *file_name, char *path_name, __u32 flags)
+{
+ int error = HV_E_FAIL;
+ char *q, *p;
+
+ filesize = 0;
+ p = path_name;
+ snprintf(target_fname, sizeof(target_fname), "%s/%s",
+ path_name, file_name);
+
+ /*
+ * Check to see if the path is already in place; if not,
+ * create if required.
+ */
+ while ((q = strchr(p, '/')) != NULL) {
+ if (q == p) {
+ p++;
+ continue;
+ }
+ *q = '\0';
+ if (access(path_name, F_OK)) {
+ if (flags & CREATE_PATH) {
+ if (mkdir(path_name, 0755)) {
+ syslog(LOG_ERR, "Failed to create %s",
+ path_name);
+ goto done;
+ }
+ } else {
+ syslog(LOG_ERR, "Invalid path: %s", path_name);
+ goto done;
+ }
+ }
+ p = q + 1;
+ *q = '/';
+ }
+
+ if (!access(target_fname, F_OK)) {
+ syslog(LOG_INFO, "File: %s exists", target_fname);
+ if (!(flags & OVER_WRITE)) {
+ error = HV_ERROR_ALREADY_EXISTS;
+ goto done;
+ }
+ }
+
+ target_fd = open(target_fname,
+ O_RDWR | O_CREAT | O_TRUNC | O_CLOEXEC, 0744);
+ if (target_fd == -1) {
+ syslog(LOG_INFO, "Open Failed: %s", strerror(errno));
+ goto done;
+ }
+
+ error = 0;
+done:
+ if (error)
+ target_fname[0] = '\0';
+ return error;
+}
+
+/* copy the data into the file */
+static int hv_copy_data(struct hv_do_fcopy *cpmsg)
+{
+ ssize_t len;
+ int ret = 0;
+
+ len = pwrite(target_fd, cpmsg->data, cpmsg->size, cpmsg->offset);
+
+ filesize += cpmsg->size;
+ if (len != cpmsg->size) {
+ switch (errno) {
+ case ENOSPC:
+ ret = HV_ERROR_DISK_FULL;
+ break;
+ default:
+ ret = HV_E_FAIL;
+ break;
+ }
+ syslog(LOG_ERR, "pwrite failed to write %llu bytes: %ld (%s)",
+ filesize, (long)len, strerror(errno));
+ }
+
+ return ret;
+}
+
+static int hv_copy_finished(void)
+{
+ close(target_fd);
+ target_fname[0] = '\0';
+
+ return 0;
+}
+
+static void print_usage(char *argv[])
+{
+ fprintf(stderr, "Usage: %s [options]\n"
+ "Options are:\n"
+ " -n, --no-daemon stay in foreground, don't daemonize\n"
+ " -h, --help print this help\n", argv[0]);
+}
+
+static bool vmbus_prep_negotiate_resp(struct icmsg_hdr *icmsghdrp, unsigned char *buf,
+ unsigned int buflen, const int *fw_version, int fw_vercnt,
+ const int *srv_version, int srv_vercnt,
+ int *nego_fw_version, int *nego_srv_version)
+{
+ int icframe_major, icframe_minor;
+ int icmsg_major, icmsg_minor;
+ int fw_major, fw_minor;
+ int srv_major, srv_minor;
+ int i, j;
+ bool found_match = false;
+ struct icmsg_negotiate *negop;
+
+ /* Check that there's enough space for icframe_vercnt, icmsg_vercnt */
+ if (buflen < ICMSG_HDR + offsetof(struct icmsg_negotiate, reserved)) {
+ syslog(LOG_ERR, "Invalid icmsg negotiate");
+ return false;
+ }
+
+ icmsghdrp->icmsgsize = 0x10;
+ negop = (struct icmsg_negotiate *)&buf[ICMSG_HDR];
+
+ icframe_major = negop->icframe_vercnt;
+ icframe_minor = 0;
+
+ icmsg_major = negop->icmsg_vercnt;
+ icmsg_minor = 0;
+
+ /* Validate negop packet */
+ if (icframe_major > IC_VERSION_NEGOTIATION_MAX_VER_COUNT ||
+ icmsg_major > IC_VERSION_NEGOTIATION_MAX_VER_COUNT ||
+ ICMSG_NEGOTIATE_PKT_SIZE(icframe_major, icmsg_major) > buflen) {
+ syslog(LOG_ERR, "Invalid icmsg negotiate - icframe_major: %u, icmsg_major: %u\n",
+ icframe_major, icmsg_major);
+ goto fw_error;
+ }
+
+ /*
+ * Select the framework version number we will
+ * support.
+ */
+
+ for (i = 0; i < fw_vercnt; i++) {
+ fw_major = (fw_version[i] >> 16);
+ fw_minor = (fw_version[i] & 0xFFFF);
+
+ for (j = 0; j < negop->icframe_vercnt; j++) {
+ if (negop->icversion_data[j].major == fw_major &&
+ negop->icversion_data[j].minor == fw_minor) {
+ icframe_major = negop->icversion_data[j].major;
+ icframe_minor = negop->icversion_data[j].minor;
+ found_match = true;
+ break;
+ }
+ }
+
+ if (found_match)
+ break;
+ }
+
+ if (!found_match)
+ goto fw_error;
+
+ found_match = false;
+
+ for (i = 0; i < srv_vercnt; i++) {
+ srv_major = (srv_version[i] >> 16);
+ srv_minor = (srv_version[i] & 0xFFFF);
+
+ for (j = negop->icframe_vercnt;
+ (j < negop->icframe_vercnt + negop->icmsg_vercnt);
+ j++) {
+ if (negop->icversion_data[j].major == srv_major &&
+ negop->icversion_data[j].minor == srv_minor) {
+ icmsg_major = negop->icversion_data[j].major;
+ icmsg_minor = negop->icversion_data[j].minor;
+ found_match = true;
+ break;
+ }
+ }
+
+ if (found_match)
+ break;
+ }
+
+ /*
+ * Respond with the framework and service
+ * version numbers we can support.
+ */
+fw_error:
+ if (!found_match) {
+ negop->icframe_vercnt = 0;
+ negop->icmsg_vercnt = 0;
+ } else {
+ negop->icframe_vercnt = 1;
+ negop->icmsg_vercnt = 1;
+ }
+
+ if (nego_fw_version)
+ *nego_fw_version = (icframe_major << 16) | icframe_minor;
+
+ if (nego_srv_version)
+ *nego_srv_version = (icmsg_major << 16) | icmsg_minor;
+
+ negop->icversion_data[0].major = icframe_major;
+ negop->icversion_data[0].minor = icframe_minor;
+ negop->icversion_data[1].major = icmsg_major;
+ negop->icversion_data[1].minor = icmsg_minor;
+
+ return found_match;
+}
+
+static void wcstoutf8(char *dest, const __u16 *src, size_t dest_size)
+{
+ size_t len = 0;
+
+ while (len < dest_size) {
+ if (src[len] < 0x80)
+ dest[len++] = (char)(*src++);
+ else
+ dest[len++] = 'X';
+ }
+
+ dest[len] = '\0';
+}
+
+static int hv_fcopy_start(struct hv_start_fcopy *smsg_in)
+{
+ setlocale(LC_ALL, "en_US.utf8");
+ size_t file_size, path_size;
+ char *file_name, *path_name;
+ char *in_file_name = (char *)smsg_in->file_name;
+ char *in_path_name = (char *)smsg_in->path_name;
+
+ file_size = wcstombs(NULL, (const wchar_t *restrict)in_file_name, 0) + 1;
+ path_size = wcstombs(NULL, (const wchar_t *restrict)in_path_name, 0) + 1;
+
+ file_name = (char *)malloc(file_size * sizeof(char));
+ path_name = (char *)malloc(path_size * sizeof(char));
+
+ if (!file_name || !path_name) {
+ free(file_name);
+ free(path_name);
+ syslog(LOG_ERR, "Can't allocate memory for file name and/or path name");
+ return HV_E_FAIL;
+ }
+
+ wcstoutf8(file_name, (__u16 *)in_file_name, file_size);
+ wcstoutf8(path_name, (__u16 *)in_path_name, path_size);
+
+ return hv_fcopy_create_file(file_name, path_name, smsg_in->copy_flags);
+}
+
+static int hv_fcopy_send_data(struct hv_fcopy_hdr *fcopy_msg, int recvlen)
+{
+ int operation = fcopy_msg->operation;
+
+ /*
+ * The strings sent from the host are encoded in
+ * utf16; convert it to utf8 strings.
+ * The host assures us that the utf16 strings will not exceed
+ * the max lengths specified. We will however, reserve room
+ * for the string terminating character - in the utf16s_utf8s()
+ * function we limit the size of the buffer where the converted
+ * string is placed to W_MAX_PATH -1 to guarantee
+ * that the strings can be properly terminated!
+ */
+
+ switch (operation) {
+ case START_FILE_COPY:
+ return hv_fcopy_start((struct hv_start_fcopy *)fcopy_msg);
+ case WRITE_TO_FILE:
+ return hv_copy_data((struct hv_do_fcopy *)fcopy_msg);
+ case COMPLETE_FCOPY:
+ return hv_copy_finished();
+ }
+
+ return HV_E_FAIL;
+}
+
+/* process the packet recv from host */
+static int fcopy_pkt_process(struct vmbus_br *txbr)
+{
+ int ret, offset, pktlen;
+ int fcopy_srv_version;
+ const struct vmbus_chanpkt_hdr *pkt;
+ struct hv_fcopy_hdr *fcopy_msg;
+ struct icmsg_hdr *icmsghdr;
+
+ pkt = (const struct vmbus_chanpkt_hdr *)desc;
+ offset = pkt->hlen << 3;
+ pktlen = (pkt->tlen << 3) - offset;
+ icmsghdr = (struct icmsg_hdr *)&desc[offset + sizeof(struct vmbuspipe_hdr)];
+ icmsghdr->status = HV_E_FAIL;
+
+ if (icmsghdr->icmsgtype == ICMSGTYPE_NEGOTIATE) {
+ if (vmbus_prep_negotiate_resp(icmsghdr, desc + offset, pktlen, fw_versions,
+ FW_VER_COUNT, fcopy_versions, FCOPY_VER_COUNT,
+ NULL, &fcopy_srv_version)) {
+ syslog(LOG_INFO, "FCopy IC version %d.%d",
+ fcopy_srv_version >> 16, fcopy_srv_version & 0xFFFF);
+ icmsghdr->status = 0;
+ }
+ } else if (icmsghdr->icmsgtype == ICMSGTYPE_FCOPY) {
+ /* Ensure recvlen is big enough to contain hv_fcopy_hdr */
+ if (pktlen < ICMSG_HDR + sizeof(struct hv_fcopy_hdr)) {
+ syslog(LOG_ERR, "Invalid Fcopy hdr. Packet length too small: %u",
+ pktlen);
+ return -ENOBUFS;
+ }
+
+ fcopy_msg = (struct hv_fcopy_hdr *)&desc[offset + ICMSG_HDR];
+ icmsghdr->status = hv_fcopy_send_data(fcopy_msg, pktlen);
+ }
+
+ icmsghdr->icflags = ICMSGHDRFLAG_TRANSACTION | ICMSGHDRFLAG_RESPONSE;
+ ret = rte_vmbus_chan_send(txbr, 0x6, desc + offset, pktlen, 0);
+ if (ret) {
+ syslog(LOG_ERR, "Write to ringbuffer failed err: %d", ret);
+ return ret;
+ }
+
+ return 0;
+}
+
+static void fcopy_get_first_folder(char *path, char *chan_no)
+{
+ DIR *dir = opendir(path);
+ struct dirent *entry;
+
+ if (!dir) {
+ syslog(LOG_ERR, "Failed to open directory (errno=%s).\n", strerror(errno));
+ return;
+ }
+
+ while ((entry = readdir(dir)) != NULL) {
+ if (entry->d_type == DT_DIR && strcmp(entry->d_name, ".") != 0 &&
+ strcmp(entry->d_name, "..") != 0) {
+ strcpy(chan_no, entry->d_name);
+ break;
+ }
+ }
+
+ closedir(dir);
+}
+
+int main(int argc, char *argv[])
+{
+ int fcopy_fd = -1, tmp = 1;
+ int daemonize = 1, long_index = 0, opt, ret = -EINVAL;
+ struct vmbus_br txbr, rxbr;
+ void *ring;
+ uint32_t len = HV_RING_SIZE;
+ char uio_name[MAX_FOLDER_NAME] = {0};
+ char uio_dev_path[MAX_PATH_LEN] = {0};
+
+ static struct option long_options[] = {
+ {"help", no_argument, 0, 'h' },
+ {"no-daemon", no_argument, 0, 'n' },
+ {0, 0, 0, 0 }
+ };
+
+ while ((opt = getopt_long(argc, argv, "hn", long_options,
+ &long_index)) != -1) {
+ switch (opt) {
+ case 'n':
+ daemonize = 0;
+ break;
+ case 'h':
+ default:
+ print_usage(argv);
+ goto exit;
+ }
+ }
+
+ if (daemonize && daemon(1, 0)) {
+ syslog(LOG_ERR, "daemon() failed; error: %s", strerror(errno));
+ goto exit;
+ }
+
+ openlog("HV_UIO_FCOPY", 0, LOG_USER);
+ syslog(LOG_INFO, "starting; pid is:%d", getpid());
+
+ fcopy_get_first_folder(FCOPY_UIO, uio_name);
+ snprintf(uio_dev_path, sizeof(uio_dev_path), "/dev/%s", uio_name);
+ fcopy_fd = open(uio_dev_path, O_RDWR);
+
+ if (fcopy_fd < 0) {
+ syslog(LOG_ERR, "open %s failed; error: %d %s",
+ uio_dev_path, errno, strerror(errno));
+ ret = fcopy_fd;
+ goto exit;
+ }
+
+ ring = vmbus_uio_map(&fcopy_fd, HV_RING_SIZE);
+ if (!ring) {
+ ret = errno;
+ syslog(LOG_ERR, "mmap ringbuffer failed; error: %d %s", ret, strerror(ret));
+ goto close;
+ }
+ vmbus_br_setup(&txbr, ring, HV_RING_SIZE);
+ vmbus_br_setup(&rxbr, (char *)ring + HV_RING_SIZE, HV_RING_SIZE);
+
+ rxbr.vbr->imask = 0;
+
+ while (1) {
+ /*
+ * In this loop we process fcopy messages after the
+ * handshake is complete.
+ */
+ ret = pread(fcopy_fd, &tmp, sizeof(int), 0);
+ if (ret < 0) {
+ syslog(LOG_ERR, "pread failed: %s", strerror(errno));
+ continue;
+ }
+
+ len = HV_RING_SIZE;
+ ret = rte_vmbus_chan_recv_raw(&rxbr, desc, &len);
+ if (unlikely(ret <= 0)) {
+ /* This indicates a failure to communicate (or worse) */
+ syslog(LOG_ERR, "VMBus channel recv error: %d", ret);
+ } else {
+ ret = fcopy_pkt_process(&txbr);
+ if (ret < 0)
+ goto close;
+
+ /* Signal host */
+ if ((write(fcopy_fd, &tmp, sizeof(int))) != sizeof(int)) {
+ ret = errno;
+ syslog(LOG_ERR, "Signal to host failed: %s\n", strerror(ret));
+ goto close;
+ }
+ }
+ }
+close:
+ close(fcopy_fd);
+exit:
+ return ret;
+}
diff --git a/packages/h/hyper-v/hyper-v.tools.hv.hv_kvp_daemon.c b/packages/h/hyper-v/hyper-v.tools.hv.hv_kvp_daemon.c
index 8069a5ad959..c5b09bc4ced 100644
--- a/packages/h/hyper-v/hyper-v.tools.hv.hv_kvp_daemon.c
+++ b/packages/h/hyper-v/hyper-v.tools.hv.hv_kvp_daemon.c
@@ -44,7 +44,7 @@
/*
* KVP protocol: The user mode component first registers with the
- * the kernel component. Subsequently, the kernel component requests, data
+ * kernel component. Subsequently, the kernel component requests, data
* for the specified keys. In response to this message the user mode component
* fills in the value corresponding to the specified key. We overload the
* sequence field in the cn_msg header to define our KVP message types.
@@ -76,6 +76,12 @@ enum {
DNS
};
+enum {
+ IPV4 = 1,
+ IPV6,
+ IP_TYPE_MAX
+};
+
static int in_hand_shake;
static char *os_name = "";
@@ -102,6 +108,11 @@ static struct utsname uts_buf;
#define MAX_FILE_NAME 100
#define ENTRIES_PER_BLOCK 50
+/*
+ * Change this entry if the number of addresses increases in future
+ */
+#define MAX_IP_ENTRIES 64
+#define OUTSTR_BUF_SIZE ((INET6_ADDRSTRLEN + 1) * MAX_IP_ENTRIES)
struct kvp_record {
char key[HV_KVP_EXCHANGE_MAX_KEY_SIZE];
@@ -437,7 +448,7 @@ void kvp_get_os_info(void)
/*
* Parse the /etc/os-release file if present:
- * http://www.freedesktop.org/software/systemd/man/os-release.html
+ * https://www.freedesktop.org/software/systemd/man/os-release.html
*/
file = fopen("/etc/os-release", "r");
if (file != NULL) {
@@ -772,11 +783,11 @@ static int kvp_process_ip_address(void *addrp,
const char *str;
if (family == AF_INET) {
- addr = (struct sockaddr_in *)addrp;
+ addr = addrp;
str = inet_ntop(family, &addr->sin_addr, tmp, 50);
addr_length = INET_ADDRSTRLEN;
} else {
- addr6 = (struct sockaddr_in6 *)addrp;
+ addr6 = addrp;
str = inet_ntop(family, &addr6->sin6_addr.s6_addr, tmp, 50);
addr_length = INET6_ADDRSTRLEN;
}
@@ -1171,11 +1182,156 @@ static int process_ip_string(FILE *f, char *ip_string, int type)
return 0;
}
+int ip_version_check(const char *input_addr)
+{
+ struct in6_addr addr;
+
+ if (inet_pton(AF_INET, input_addr, &addr))
+ return IPV4;
+ else if (inet_pton(AF_INET6, input_addr, &addr))
+ return IPV6;
+
+ return -EINVAL;
+}
+
+/*
+ * Only IPv4 subnet strings needs to be converted to plen
+ * For IPv6 the subnet is already privided in plen format
+ */
+static int kvp_subnet_to_plen(char *subnet_addr_str)
+{
+ int plen = 0;
+ struct in_addr subnet_addr4;
+
+ /*
+ * Convert subnet address to binary representation
+ */
+ if (inet_pton(AF_INET, subnet_addr_str, &subnet_addr4) == 1) {
+ uint32_t subnet_mask = ntohl(subnet_addr4.s_addr);
+
+ while (subnet_mask & 0x80000000) {
+ plen++;
+ subnet_mask <<= 1;
+ }
+ } else {
+ return -1;
+ }
+
+ return plen;
+}
+
+static int process_dns_gateway_nm(FILE *f, char *ip_string, int type,
+ int ip_sec)
+{
+ char addr[INET6_ADDRSTRLEN], *output_str;
+ int ip_offset = 0, error = 0, ip_ver;
+ char *param_name;
+
+ if (type == DNS)
+ param_name = "dns";
+ else if (type == GATEWAY)
+ param_name = "gateway";
+ else
+ return -EINVAL;
+
+ output_str = (char *)calloc(OUTSTR_BUF_SIZE, sizeof(char));
+ if (!output_str)
+ return -ENOMEM;
+
+ while (1) {
+ memset(addr, 0, sizeof(addr));
+
+ if (!parse_ip_val_buffer(ip_string, &ip_offset, addr,
+ (MAX_IP_ADDR_SIZE * 2)))
+ break;
+
+ ip_ver = ip_version_check(addr);
+ if (ip_ver < 0)
+ continue;
+
+ if ((ip_ver == IPV4 && ip_sec == IPV4) ||
+ (ip_ver == IPV6 && ip_sec == IPV6)) {
+ /*
+ * do a bound check to avoid out-of bound writes
+ */
+ if ((OUTSTR_BUF_SIZE - strlen(output_str)) >
+ (strlen(addr) + 1)) {
+ strncat(output_str, addr,
+ OUTSTR_BUF_SIZE -
+ strlen(output_str) - 1);
+ strncat(output_str, ",",
+ OUTSTR_BUF_SIZE -
+ strlen(output_str) - 1);
+ }
+ } else {
+ continue;
+ }
+ }
+
+ if (strlen(output_str)) {
+ /*
+ * This is to get rid of that extra comma character
+ * in the end of the string
+ */
+ output_str[strlen(output_str) - 1] = '\0';
+ error = fprintf(f, "%s=%s\n", param_name, output_str);
+ }
+
+ free(output_str);
+ return error;
+}
+
+static int process_ip_string_nm(FILE *f, char *ip_string, char *subnet,
+ int ip_sec)
+{
+ char addr[INET6_ADDRSTRLEN];
+ char subnet_addr[INET6_ADDRSTRLEN];
+ int error = 0, i = 0;
+ int ip_offset = 0, subnet_offset = 0;
+ int plen, ip_ver;
+
+ memset(addr, 0, sizeof(addr));
+ memset(subnet_addr, 0, sizeof(subnet_addr));
+
+ while (parse_ip_val_buffer(ip_string, &ip_offset, addr,
+ (MAX_IP_ADDR_SIZE * 2)) &&
+ parse_ip_val_buffer(subnet,
+ &subnet_offset,
+ subnet_addr,
+ (MAX_IP_ADDR_SIZE *
+ 2))) {
+ ip_ver = ip_version_check(addr);
+ if (ip_ver < 0)
+ continue;
+
+ if (ip_ver == IPV4 && ip_sec == IPV4)
+ plen = kvp_subnet_to_plen((char *)subnet_addr);
+ else if (ip_ver == IPV6 && ip_sec == IPV6)
+ plen = atoi(subnet_addr);
+ else
+ continue;
+
+ if (plen < 0)
+ return plen;
+
+ error = fprintf(f, "address%d=%s/%d\n", ++i, (char *)addr,
+ plen);
+ if (error < 0)
+ return error;
+
+ memset(addr, 0, sizeof(addr));
+ memset(subnet_addr, 0, sizeof(subnet_addr));
+ }
+
+ return error;
+}
+
static int kvp_set_ip_info(char *if_name, struct hv_kvp_ipaddr_value *new_val)
{
- int error = 0;
- char if_file[PATH_MAX];
- FILE *file;
+ int error = 0, ip_ver;
+ char if_filename[PATH_MAX];
+ char nm_filename[PATH_MAX];
+ FILE *ifcfg_file, *nmfile;
char cmd[PATH_MAX];
char *mac_addr;
int str_len;
@@ -1197,7 +1353,7 @@ static int kvp_set_ip_info(char *if_name, struct hv_kvp_ipaddr_value *new_val)
* in a given distro to configure the interface and so are free
* ignore information that may not be relevant.
*
- * Here is the format of the ip configuration file:
+ * Here is the ifcfg format of the ip configuration file:
*
* HWADDR=macaddr
* DEVICE=interface name
@@ -1220,6 +1376,32 @@ static int kvp_set_ip_info(char *if_name, struct hv_kvp_ipaddr_value *new_val)
* tagged as IPV6_DEFAULTGW and IPV6 NETMASK will be tagged as
* IPV6NETMASK.
*
+ * Here is the keyfile format of the ip configuration file:
+ *
+ * [ethernet]
+ * mac-address=macaddr
+ * [connection]
+ * interface-name=interface name
+ *
+ * [ipv4]
+ * method= (where is "auto" if DHCP is configured
+ * or "manual" if no boot-time protocol should be used)
+ *
+ * address1=ipaddr1/plen
+ * address2=ipaddr2/plen
+ *
+ * gateway=gateway1;gateway2
+ *
+ * dns=dns1;dns2
+ *
+ * [ipv6]
+ * address1=ipaddr1/plen
+ * address2=ipaddr2/plen
+ *
+ * gateway=gateway1;gateway2
+ *
+ * dns=dns1;dns2
+ *
* The host can specify multiple ipv4 and ipv6 addresses to be
* configured for the interface. Furthermore, the configuration
* needs to be persistent. A subsequent GET call on the interface
@@ -1227,14 +1409,29 @@ static int kvp_set_ip_info(char *if_name, struct hv_kvp_ipaddr_value *new_val)
* call.
*/
- snprintf(if_file, sizeof(if_file), "%s%s%s", KVP_CONFIG_LOC,
- "/ifcfg-", if_name);
+ /*
+ * We are populating both ifcfg and nmconnection files
+ */
+ snprintf(if_filename, sizeof(if_filename), "%s%s%s", KVP_CONFIG_LOC,
+ "/ifcfg-", if_name);
- file = fopen(if_file, "w");
+ ifcfg_file = fopen(if_filename, "w");
- if (file == NULL) {
+ if (!ifcfg_file) {
syslog(LOG_ERR, "Failed to open config file; error: %d %s",
- errno, strerror(errno));
+ errno, strerror(errno));
+ return HV_E_FAIL;
+ }
+
+ snprintf(nm_filename, sizeof(nm_filename), "%s%s%s%s", KVP_CONFIG_LOC,
+ "/", if_name, ".nmconnection");
+
+ nmfile = fopen(nm_filename, "w");
+
+ if (!nmfile) {
+ syslog(LOG_ERR, "Failed to open config file; error: %d %s",
+ errno, strerror(errno));
+ fclose(ifcfg_file);
return HV_E_FAIL;
}
@@ -1248,14 +1445,31 @@ static int kvp_set_ip_info(char *if_name, struct hv_kvp_ipaddr_value *new_val)
goto setval_error;
}
- error = kvp_write_file(file, "HWADDR", "", mac_addr);
- free(mac_addr);
+ error = kvp_write_file(ifcfg_file, "HWADDR", "", mac_addr);
+ if (error < 0)
+ goto setmac_error;
+
+ error = kvp_write_file(ifcfg_file, "DEVICE", "", if_name);
+ if (error < 0)
+ goto setmac_error;
+
+ error = fprintf(nmfile, "\n[connection]\n");
+ if (error < 0)
+ goto setmac_error;
+
+ error = kvp_write_file(nmfile, "interface-name", "", if_name);
if (error)
- goto setval_error;
+ goto setmac_error;
+
+ error = fprintf(nmfile, "\n[ethernet]\n");
+ if (error < 0)
+ goto setmac_error;
- error = kvp_write_file(file, "DEVICE", "", if_name);
+ error = kvp_write_file(nmfile, "mac-address", "", mac_addr);
if (error)
- goto setval_error;
+ goto setmac_error;
+
+ free(mac_addr);
/*
* The dhcp_enabled flag is only for IPv4. In the case the host only
@@ -1263,47 +1477,137 @@ static int kvp_set_ip_info(char *if_name, struct hv_kvp_ipaddr_value *new_val)
* proceed to parse and pass the IPv6 information to the
* disto-specific script hv_set_ifconfig.
*/
+
+ /*
+ * First populate the ifcfg file format
+ */
if (new_val->dhcp_enabled) {
- error = kvp_write_file(file, "BOOTPROTO", "", "dhcp");
+ error = kvp_write_file(ifcfg_file, "BOOTPROTO", "", "dhcp");
if (error)
goto setval_error;
-
} else {
- error = kvp_write_file(file, "BOOTPROTO", "", "none");
+ error = kvp_write_file(ifcfg_file, "BOOTPROTO", "", "none");
if (error)
goto setval_error;
}
- /*
- * Write the configuration for ipaddress, netmask, gateway and
- * name servers.
- */
-
- error = process_ip_string(file, (char *)new_val->ip_addr, IPADDR);
+ error = process_ip_string(ifcfg_file, (char *)new_val->ip_addr,
+ IPADDR);
if (error)
goto setval_error;
- error = process_ip_string(file, (char *)new_val->sub_net, NETMASK);
+ error = process_ip_string(ifcfg_file, (char *)new_val->sub_net,
+ NETMASK);
if (error)
goto setval_error;
- error = process_ip_string(file, (char *)new_val->gate_way, GATEWAY);
+ error = process_ip_string(ifcfg_file, (char *)new_val->gate_way,
+ GATEWAY);
if (error)
goto setval_error;
- error = process_ip_string(file, (char *)new_val->dns_addr, DNS);
+ error = process_ip_string(ifcfg_file, (char *)new_val->dns_addr, DNS);
if (error)
goto setval_error;
- fclose(file);
+ /*
+ * Now we populate the keyfile format
+ *
+ * The keyfile format expects the IPv6 and IPv4 configuration in
+ * different sections. Therefore we iterate through the list twice,
+ * once to populate the IPv4 section and the next time for IPv6
+ */
+ ip_ver = IPV4;
+ do {
+ if (ip_ver == IPV4) {
+ error = fprintf(nmfile, "\n[ipv4]\n");
+ if (error < 0)
+ goto setval_error;
+ } else {
+ error = fprintf(nmfile, "\n[ipv6]\n");
+ if (error < 0)
+ goto setval_error;
+ }
+
+ /*
+ * Write the configuration for ipaddress, netmask, gateway and
+ * name services
+ */
+ error = process_ip_string_nm(nmfile, (char *)new_val->ip_addr,
+ (char *)new_val->sub_net,
+ ip_ver);
+ if (error < 0)
+ goto setval_error;
+
+ /*
+ * As dhcp_enabled is only valid for ipv4, we do not set dhcp
+ * methods for ipv6 based on dhcp_enabled flag.
+ *
+ * For ipv4, set method to manual only when dhcp_enabled is
+ * false and specific ipv4 addresses are configured. If neither
+ * dhcp_enabled is true and no ipv4 addresses are configured,
+ * set method to 'disabled'.
+ *
+ * For ipv6, set method to manual when we configure ipv6
+ * addresses. Otherwise set method to 'auto' so that SLAAC from
+ * RA may be used.
+ */
+ if (ip_ver == IPV4) {
+ if (new_val->dhcp_enabled) {
+ error = kvp_write_file(nmfile, "method", "",
+ "auto");
+ if (error < 0)
+ goto setval_error;
+ } else if (error) {
+ error = kvp_write_file(nmfile, "method", "",
+ "manual");
+ if (error < 0)
+ goto setval_error;
+ } else {
+ error = kvp_write_file(nmfile, "method", "",
+ "disabled");
+ if (error < 0)
+ goto setval_error;
+ }
+ } else if (ip_ver == IPV6) {
+ if (error) {
+ error = kvp_write_file(nmfile, "method", "",
+ "manual");
+ if (error < 0)
+ goto setval_error;
+ } else {
+ error = kvp_write_file(nmfile, "method", "",
+ "auto");
+ if (error < 0)
+ goto setval_error;
+ }
+ }
+
+ error = process_dns_gateway_nm(nmfile,
+ (char *)new_val->gate_way,
+ GATEWAY, ip_ver);
+ if (error < 0)
+ goto setval_error;
+
+ error = process_dns_gateway_nm(nmfile,
+ (char *)new_val->dns_addr, DNS,
+ ip_ver);
+ if (error < 0)
+ goto setval_error;
+
+ ip_ver++;
+ } while (ip_ver < IP_TYPE_MAX);
+
+ fclose(nmfile);
+ fclose(ifcfg_file);
/*
* Now that we have populated the configuration file,
* invoke the external script to do its magic.
*/
- str_len = snprintf(cmd, sizeof(cmd), KVP_SCRIPTS_PATH "%s %s",
- "hv_set_ifconfig", if_file);
+ str_len = snprintf(cmd, sizeof(cmd), KVP_SCRIPTS_PATH "%s %s %s",
+ "hv_set_ifconfig", if_filename, nm_filename);
/*
* This is a little overcautious, but it's necessary to suppress some
* false warnings from gcc 8.0.1.
@@ -1321,10 +1625,13 @@ static int kvp_set_ip_info(char *if_name, struct hv_kvp_ipaddr_value *new_val)
}
return 0;
+setmac_error:
+ free(mac_addr);
setval_error:
syslog(LOG_ERR, "Failed to write config file. error: %d %s",
errno, strerror(errno));
- fclose(file);
+ fclose(ifcfg_file);
+ fclose(nmfile);
return error;
}
diff --git a/packages/h/hyper-v/hyper-v.tools.hv.hv_set_ifconfig.sh b/packages/h/hyper-v/hyper-v.tools.hv.hv_set_ifconfig.sh
index 96da75bfc74..989463ebe06 100644
--- a/packages/h/hyper-v/hyper-v.tools.hv.hv_set_ifconfig.sh
+++ b/packages/h/hyper-v/hyper-v.tools.hv.hv_set_ifconfig.sh
@@ -7,12 +7,12 @@
# The only argument to this script is the configuration file that is to
# be used to configure the interface.
#
-# Here is the format of the ip configuration file:
+# Here is the ifcfg format of the ip configuration file:
#
# HWADDR=macaddr
# DEVICE=interface name
# BOOTPROTO= (where is "dhcp" if DHCP is configured
-# or "none" if no boot-time protocol should be used)
+# or "none" if no boot-time protocol should be used)
#
# IPADDR0=ipaddr1
# IPADDR1=ipaddr2
@@ -30,14 +30,41 @@
# tagged as IPV6_DEFAULTGW and IPV6 NETMASK will be tagged as
# IPV6NETMASK.
#
+# Here is the keyfile format of the ip configuration file:
+#
+# [ethernet]
+# mac-address=macaddr
+# [connection]
+# interface-name=interface name
+#
+# [ipv4]
+# method= (where is "auto" if DHCP is configured
+# or "manual" if no boot-time protocol should be used)
+#
+# address1=ipaddr1/plen
+# address2=ipaddr2/plen
+#
+# gateway=gateway1;gateway2
+#
+# dns=dns1;
+#
+# [ipv6]
+# address1=ipaddr1/plen
+# address2=ipaddr2/plen
+#
+# gateway=gateway1;gateway2
+#
+# dns=dns1;dns2
+#
# The host can specify multiple ipv4 and ipv6 addresses to be
# configured for the interface. Furthermore, the configuration
# needs to be persistent. A subsequent GET call on the interface
# is expected to return the configuration that is set via the SET
# call.
#
-cfg=$1
-if ! test -f "${cfg}"
+if_cfg=$1
+nm_cfg=$2
+if ! test -f "${if_cfg}"
then
: expect configuration datafile as first argument
exit 1
@@ -86,11 +113,11 @@ unset ${!IPV6ADDR*}
unset ${!IPV6NETMASK*}
unset ${!IPV6_DEFAULTGW*}
unset ${!DNS*}
-. "$1"
+. "${if_cfg}"
#
if test -z "${DEVICE}"
then
- echo "Missing DEVICE= in ${cfg}"
+ echo "Missing DEVICE= in ${if_cfg}"
exit 1
fi
#
@@ -200,6 +227,7 @@ do
done
#
echo "$0: working on network interface ifcfg-${DEVICE}"
+mkdir -vp "/etc/sysconfig/network"
cp -fb ${t_ifcfg} "/etc/sysconfig/network/ifcfg-${DEVICE}"
cp -fb ${t_ifroute} "/etc/sysconfig/network/ifroute-${DEVICE}"
if test -w /etc/sysconfig/network/config
@@ -207,6 +235,13 @@ then
sed -i "s@^NETCONFIG_DNS_STATIC_SERVERS=.*@NETCONFIG_DNS_STATIC_SERVERS='$_DNS_'@" /etc/sysconfig/network/config
netconfig update -m dns
fi
+
+echo "$0: working on network interface ifcfg-${DEVICE}"
+nm_filename="${nm_cfg##*/}"
+mkdir -vp "/etc/NetworkManager/system-connections"
+umask 0177
+sed '/\[connection\]/a autoconnect=true' "${nm_cfg}" > "/etc/NetworkManager/system-connections/${nm_filename}"
+
ifdown "${DEVICE}"
ifup "${DEVICE}"
) 2>&1 | logger -t "${0##*/}[$PPID / $$]"
diff --git a/packages/h/hyper-v/hyper-v.tools.hv.vmbus_bufring.c b/packages/h/hyper-v/hyper-v.tools.hv.vmbus_bufring.c
new file mode 100644
index 00000000000..bac32c1109d
--- /dev/null
+++ b/packages/h/hyper-v/hyper-v.tools.hv.vmbus_bufring.c
@@ -0,0 +1,318 @@
+// SPDX-License-Identifier: BSD-3-Clause
+/*
+ * Copyright (c) 2009-2012,2016,2023 Microsoft Corp.
+ * Copyright (c) 2012 NetApp Inc.
+ * Copyright (c) 2012 Citrix Inc.
+ * All rights reserved.
+ */
+
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include "vmbus_bufring.h"
+
+/**
+ * Compiler barrier.
+ *
+ * Guarantees that operation reordering does not occur at compile time
+ * for operations directly before and after the barrier.
+ */
+#define rte_compiler_barrier() ({ asm volatile ("" : : : "memory"); })
+
+#define VMBUS_RQST_ERROR 0xFFFFFFFFFFFFFFFF
+#define ALIGN(val, align) ((typeof(val))((val) & (~((typeof(val))((align) - 1)))))
+
+void *vmbus_uio_map(int *fd, int size)
+{
+ void *map;
+
+ map = mmap(NULL, 2 * size, PROT_READ | PROT_WRITE, MAP_SHARED, *fd, 0);
+ if (map == MAP_FAILED)
+ return NULL;
+
+ return map;
+}
+
+/* Increase bufring index by inc with wraparound */
+static inline uint32_t vmbus_br_idxinc(uint32_t idx, uint32_t inc, uint32_t sz)
+{
+ idx += inc;
+ if (idx >= sz)
+ idx -= sz;
+
+ return idx;
+}
+
+void vmbus_br_setup(struct vmbus_br *br, void *buf, unsigned int blen)
+{
+ br->vbr = buf;
+ br->windex = br->vbr->windex;
+ br->dsize = blen - sizeof(struct vmbus_bufring);
+}
+
+static inline __always_inline void
+rte_smp_mb(void)
+{
+ asm volatile("lock addl $0, -128(%%rsp); " ::: "memory");
+}
+
+static inline int
+rte_atomic32_cmpset(volatile uint32_t *dst, uint32_t exp, uint32_t src)
+{
+ uint8_t res;
+
+ asm volatile("lock ; "
+ "cmpxchgl %[src], %[dst];"
+ "sete %[res];"
+ : [res] "=a" (res), /* output */
+ [dst] "=m" (*dst)
+ : [src] "r" (src), /* input */
+ "a" (exp),
+ "m" (*dst)
+ : "memory"); /* no-clobber list */
+ return res;
+}
+
+static inline uint32_t
+vmbus_txbr_copyto(const struct vmbus_br *tbr, uint32_t windex,
+ const void *src0, uint32_t cplen)
+{
+ uint8_t *br_data = tbr->vbr->data;
+ uint32_t br_dsize = tbr->dsize;
+ const uint8_t *src = src0;
+
+ /* XXX use double mapping like Linux kernel? */
+ if (cplen > br_dsize - windex) {
+ uint32_t fraglen = br_dsize - windex;
+
+ /* Wrap-around detected */
+ memcpy(br_data + windex, src, fraglen);
+ memcpy(br_data, src + fraglen, cplen - fraglen);
+ } else {
+ memcpy(br_data + windex, src, cplen);
+ }
+
+ return vmbus_br_idxinc(windex, cplen, br_dsize);
+}
+
+/*
+ * Write scattered channel packet to TX bufring.
+ *
+ * The offset of this channel packet is written as a 64bits value
+ * immediately after this channel packet.
+ *
+ * The write goes through three stages:
+ * 1. Reserve space in ring buffer for the new data.
+ * Writer atomically moves priv_write_index.
+ * 2. Copy the new data into the ring.
+ * 3. Update the tail of the ring (visible to host) that indicates
+ * next read location. Writer updates write_index
+ */
+static int
+vmbus_txbr_write(struct vmbus_br *tbr, const struct iovec iov[], int iovlen)
+{
+ struct vmbus_bufring *vbr = tbr->vbr;
+ uint32_t ring_size = tbr->dsize;
+ uint32_t old_windex, next_windex, windex, total;
+ uint64_t save_windex;
+ int i;
+
+ total = 0;
+ for (i = 0; i < iovlen; i++)
+ total += iov[i].iov_len;
+ total += sizeof(save_windex);
+
+ /* Reserve space in ring */
+ do {
+ uint32_t avail;
+
+ /* Get current free location */
+ old_windex = tbr->windex;
+
+ /* Prevent compiler reordering this with calculation */
+ rte_compiler_barrier();
+
+ avail = vmbus_br_availwrite(tbr, old_windex);
+
+ /* If not enough space in ring, then tell caller. */
+ if (avail <= total)
+ return -EAGAIN;
+
+ next_windex = vmbus_br_idxinc(old_windex, total, ring_size);
+
+ /* Atomic update of next write_index for other threads */
+ } while (!rte_atomic32_cmpset(&tbr->windex, old_windex, next_windex));
+
+ /* Space from old..new is now reserved */
+ windex = old_windex;
+ for (i = 0; i < iovlen; i++)
+ windex = vmbus_txbr_copyto(tbr, windex, iov[i].iov_base, iov[i].iov_len);
+
+ /* Set the offset of the current channel packet. */
+ save_windex = ((uint64_t)old_windex) << 32;
+ windex = vmbus_txbr_copyto(tbr, windex, &save_windex,
+ sizeof(save_windex));
+
+ /* The region reserved should match region used */
+ if (windex != next_windex)
+ return -EINVAL;
+
+ /* Ensure that data is available before updating host index */
+ rte_compiler_barrier();
+
+ /* Checkin for our reservation. wait for our turn to update host */
+ while (!rte_atomic32_cmpset(&vbr->windex, old_windex, next_windex))
+ _mm_pause();
+
+ return 0;
+}
+
+int rte_vmbus_chan_send(struct vmbus_br *txbr, uint16_t type, void *data,
+ uint32_t dlen, uint32_t flags)
+{
+ struct vmbus_chanpkt pkt;
+ unsigned int pktlen, pad_pktlen;
+ const uint32_t hlen = sizeof(pkt);
+ uint64_t pad = 0;
+ struct iovec iov[3];
+ int error;
+
+ pktlen = hlen + dlen;
+ pad_pktlen = ALIGN(pktlen, sizeof(uint64_t));
+
+ pkt.hdr.type = type;
+ pkt.hdr.flags = flags;
+ pkt.hdr.hlen = hlen >> VMBUS_CHANPKT_SIZE_SHIFT;
+ pkt.hdr.tlen = pad_pktlen >> VMBUS_CHANPKT_SIZE_SHIFT;
+ pkt.hdr.xactid = VMBUS_RQST_ERROR;
+
+ iov[0].iov_base = &pkt;
+ iov[0].iov_len = hlen;
+ iov[1].iov_base = data;
+ iov[1].iov_len = dlen;
+ iov[2].iov_base = &pad;
+ iov[2].iov_len = pad_pktlen - pktlen;
+
+ error = vmbus_txbr_write(txbr, iov, 3);
+
+ return error;
+}
+
+static inline uint32_t
+vmbus_rxbr_copyfrom(const struct vmbus_br *rbr, uint32_t rindex,
+ void *dst0, size_t cplen)
+{
+ const uint8_t *br_data = rbr->vbr->data;
+ uint32_t br_dsize = rbr->dsize;
+ uint8_t *dst = dst0;
+
+ if (cplen > br_dsize - rindex) {
+ uint32_t fraglen = br_dsize - rindex;
+
+ /* Wrap-around detected. */
+ memcpy(dst, br_data + rindex, fraglen);
+ memcpy(dst + fraglen, br_data, cplen - fraglen);
+ } else {
+ memcpy(dst, br_data + rindex, cplen);
+ }
+
+ return vmbus_br_idxinc(rindex, cplen, br_dsize);
+}
+
+/* Copy data from receive ring but don't change index */
+static int
+vmbus_rxbr_peek(const struct vmbus_br *rbr, void *data, size_t dlen)
+{
+ uint32_t avail;
+
+ /*
+ * The requested data and the 64bits channel packet
+ * offset should be there at least.
+ */
+ avail = vmbus_br_availread(rbr);
+ if (avail < dlen + sizeof(uint64_t))
+ return -EAGAIN;
+
+ vmbus_rxbr_copyfrom(rbr, rbr->vbr->rindex, data, dlen);
+ return 0;
+}
+
+/*
+ * Copy data from receive ring and change index
+ * NOTE:
+ * We assume (dlen + skip) == sizeof(channel packet).
+ */
+static int
+vmbus_rxbr_read(struct vmbus_br *rbr, void *data, size_t dlen, size_t skip)
+{
+ struct vmbus_bufring *vbr = rbr->vbr;
+ uint32_t br_dsize = rbr->dsize;
+ uint32_t rindex;
+
+ if (vmbus_br_availread(rbr) < dlen + skip + sizeof(uint64_t))
+ return -EAGAIN;
+
+ /* Record where host was when we started read (for debug) */
+ rbr->windex = rbr->vbr->windex;
+
+ /*
+ * Copy channel packet from RX bufring.
+ */
+ rindex = vmbus_br_idxinc(rbr->vbr->rindex, skip, br_dsize);
+ rindex = vmbus_rxbr_copyfrom(rbr, rindex, data, dlen);
+
+ /*
+ * Discard this channel packet's 64bits offset, which is useless to us.
+ */
+ rindex = vmbus_br_idxinc(rindex, sizeof(uint64_t), br_dsize);
+
+ /* Update the read index _after_ the channel packet is fetched. */
+ rte_compiler_barrier();
+
+ vbr->rindex = rindex;
+
+ return 0;
+}
+
+int rte_vmbus_chan_recv_raw(struct vmbus_br *rxbr,
+ void *data, uint32_t *len)
+{
+ struct vmbus_chanpkt_hdr pkt;
+ uint32_t dlen, bufferlen = *len;
+ int error;
+
+ error = vmbus_rxbr_peek(rxbr, &pkt, sizeof(pkt));
+ if (error)
+ return error;
+
+ if (unlikely(pkt.hlen < VMBUS_CHANPKT_HLEN_MIN))
+ /* XXX this channel is dead actually. */
+ return -EIO;
+
+ if (unlikely(pkt.hlen > pkt.tlen))
+ return -EIO;
+
+ /* Length are in quad words */
+ dlen = pkt.tlen << VMBUS_CHANPKT_SIZE_SHIFT;
+ *len = dlen;
+
+ /* If caller buffer is not large enough */
+ if (unlikely(dlen > bufferlen))
+ return -ENOBUFS;
+
+ /* Read data and skip packet header */
+ error = vmbus_rxbr_read(rxbr, data, dlen, 0);
+ if (error)
+ return error;
+
+ /* Return the number of bytes read */
+ return dlen + sizeof(uint64_t);
+}
diff --git a/packages/h/hyper-v/hyper-v.tools.hv.vmbus_bufring.h b/packages/h/hyper-v/hyper-v.tools.hv.vmbus_bufring.h
new file mode 100644
index 00000000000..6e7caacfff5
--- /dev/null
+++ b/packages/h/hyper-v/hyper-v.tools.hv.vmbus_bufring.h
@@ -0,0 +1,158 @@
+/* SPDX-License-Identifier: BSD-3-Clause */
+
+#ifndef _VMBUS_BUF_H_
+#define _VMBUS_BUF_H_
+
+#include
+#include
+
+#define __packed __attribute__((__packed__))
+#define unlikely(x) __builtin_expect(!!(x), 0)
+
+#define ICMSGHDRFLAG_TRANSACTION 1
+#define ICMSGHDRFLAG_REQUEST 2
+#define ICMSGHDRFLAG_RESPONSE 4
+
+#define IC_VERSION_NEGOTIATION_MAX_VER_COUNT 100
+#define ICMSG_HDR (sizeof(struct vmbuspipe_hdr) + sizeof(struct icmsg_hdr))
+#define ICMSG_NEGOTIATE_PKT_SIZE(icframe_vercnt, icmsg_vercnt) \
+ (ICMSG_HDR + sizeof(struct icmsg_negotiate) + \
+ (((icframe_vercnt) + (icmsg_vercnt)) * sizeof(struct ic_version)))
+
+/*
+ * Channel packets
+ */
+
+/* Channel packet flags */
+#define VMBUS_CHANPKT_TYPE_INBAND 0x0006
+#define VMBUS_CHANPKT_TYPE_RXBUF 0x0007
+#define VMBUS_CHANPKT_TYPE_GPA 0x0009
+#define VMBUS_CHANPKT_TYPE_COMP 0x000b
+
+#define VMBUS_CHANPKT_FLAG_NONE 0
+#define VMBUS_CHANPKT_FLAG_RC 0x0001 /* report completion */
+
+#define VMBUS_CHANPKT_SIZE_SHIFT 3
+#define VMBUS_CHANPKT_SIZE_ALIGN BIT(VMBUS_CHANPKT_SIZE_SHIFT)
+#define VMBUS_CHANPKT_HLEN_MIN \
+ (sizeof(struct vmbus_chanpkt_hdr) >> VMBUS_CHANPKT_SIZE_SHIFT)
+
+/*
+ * Buffer ring
+ */
+struct vmbus_bufring {
+ volatile uint32_t windex;
+ volatile uint32_t rindex;
+
+ /*
+ * Interrupt mask {0,1}
+ *
+ * For TX bufring, host set this to 1, when it is processing
+ * the TX bufring, so that we can safely skip the TX event
+ * notification to host.
+ *
+ * For RX bufring, once this is set to 1 by us, host will not
+ * further dispatch interrupts to us, even if there are data
+ * pending on the RX bufring. This effectively disables the
+ * interrupt of the channel to which this RX bufring is attached.
+ */
+ volatile uint32_t imask;
+
+ /*
+ * Win8 uses some of the reserved bits to implement
+ * interrupt driven flow management. On the send side
+ * we can request that the receiver interrupt the sender
+ * when the ring transitions from being full to being able
+ * to handle a message of size "pending_send_sz".
+ *
+ * Add necessary state for this enhancement.
+ */
+ volatile uint32_t pending_send;
+ uint32_t reserved1[12];
+
+ union {
+ struct {
+ uint32_t feat_pending_send_sz:1;
+ };
+ uint32_t value;
+ } feature_bits;
+
+ /* Pad it to rte_mem_page_size() so that data starts on page boundary */
+ uint8_t reserved2[4028];
+
+ /*
+ * Ring data starts here + RingDataStartOffset
+ * !!! DO NOT place any fields below this !!!
+ */
+ uint8_t data[];
+} __packed;
+
+struct vmbus_br {
+ struct vmbus_bufring *vbr;
+ uint32_t dsize;
+ uint32_t windex; /* next available location */
+};
+
+struct vmbus_chanpkt_hdr {
+ uint16_t type; /* VMBUS_CHANPKT_TYPE_ */
+ uint16_t hlen; /* header len, in 8 bytes */
+ uint16_t tlen; /* total len, in 8 bytes */
+ uint16_t flags; /* VMBUS_CHANPKT_FLAG_ */
+ uint64_t xactid;
+} __packed;
+
+struct vmbus_chanpkt {
+ struct vmbus_chanpkt_hdr hdr;
+} __packed;
+
+struct vmbuspipe_hdr {
+ unsigned int flags;
+ unsigned int msgsize;
+} __packed;
+
+struct ic_version {
+ unsigned short major;
+ unsigned short minor;
+} __packed;
+
+struct icmsg_negotiate {
+ unsigned short icframe_vercnt;
+ unsigned short icmsg_vercnt;
+ unsigned int reserved;
+ struct ic_version icversion_data[]; /* any size array */
+} __packed;
+
+struct icmsg_hdr {
+ struct ic_version icverframe;
+ unsigned short icmsgtype;
+ struct ic_version icvermsg;
+ unsigned short icmsgsize;
+ unsigned int status;
+ unsigned char ictransaction_id;
+ unsigned char icflags;
+ unsigned char reserved[2];
+} __packed;
+
+int rte_vmbus_chan_recv_raw(struct vmbus_br *rxbr, void *data, uint32_t *len);
+int rte_vmbus_chan_send(struct vmbus_br *txbr, uint16_t type, void *data,
+ uint32_t dlen, uint32_t flags);
+void vmbus_br_setup(struct vmbus_br *br, void *buf, unsigned int blen);
+void *vmbus_uio_map(int *fd, int size);
+
+/* Amount of space available for write */
+static inline uint32_t vmbus_br_availwrite(const struct vmbus_br *br, uint32_t windex)
+{
+ uint32_t rindex = br->vbr->rindex;
+
+ if (windex >= rindex)
+ return br->dsize - (windex - rindex);
+ else
+ return rindex - windex;
+}
+
+static inline uint32_t vmbus_br_availread(const struct vmbus_br *br)
+{
+ return br->dsize - vmbus_br_availwrite(br, br->vbr->windex);
+}
+
+#endif /* !_VMBUS_BUF_H_ */
diff --git a/packages/k/kernel-source-longterm/.files b/packages/k/kernel-source-longterm/.files
index 5529106fa0c..497f0bcdf7a 100644
Binary files a/packages/k/kernel-source-longterm/.files and b/packages/k/kernel-source-longterm/.files differ
diff --git a/packages/k/kernel-source-longterm/.rev b/packages/k/kernel-source-longterm/.rev
index 9a9cd512d4e..fb04a1fddeb 100644
--- a/packages/k/kernel-source-longterm/.rev
+++ b/packages/k/kernel-source-longterm/.rev
@@ -297,4 +297,12 @@ known issue: KMPs not yet propetly supported
6.6.56
1207058
+
+ 10c3b3a4af9af81fbcc23908c39bc987
+ 6.6.57
+
+ anag+factory
+ 6.6.57
+ 1216942
+
diff --git a/packages/k/kernel-source-longterm/config.tar.bz2 b/packages/k/kernel-source-longterm/config.tar.bz2
index f4650be63de..e13f0a30cd1 120000
--- a/packages/k/kernel-source-longterm/config.tar.bz2
+++ b/packages/k/kernel-source-longterm/config.tar.bz2
@@ -1 +1 @@
-/ipfs/bafkreihcplrrpdydiignfmh3audpi75ip76zsodjxcu3gdj3fbbr4iqwtm
\ No newline at end of file
+/ipfs/bafkreihap3fmz3wuhhn5ljvf5wct4h6ozrhmiuhnk7zccvmf2xa4w2mxni
\ No newline at end of file
diff --git a/packages/k/kernel-source-longterm/kernel-longterm.changes b/packages/k/kernel-source-longterm/kernel-longterm.changes
index ac5c91ab092..5aa3017f73c 100644
--- a/packages/k/kernel-source-longterm/kernel-longterm.changes
+++ b/packages/k/kernel-source-longterm/kernel-longterm.changes
@@ -1,3 +1,361 @@
+-------------------------------------------------------------------
+Mon Oct 21 14:35:30 CEST 2024 - rfrohl@suse.com
+
+- config: CONFIG_HID_MCP2200=m
+- commit a8ceeb3
+
+-------------------------------------------------------------------
+Mon Oct 21 14:08:14 CEST 2024 - rfrohl@suse.com
+
+- Linux 6.6.57 (bsc#1218260).
+- unicode: Don't special case ignorable code points (bsc#1218260).
+- net: fec: don't save PTP state if PTP is unsupported
+ (bsc#1218260).
+- Revert "PCI/MSI: Provide stubs for IMS functions" (bsc#1218260).
+- ASoC: cs35l56: Load tunings for the correct speaker models
+ (bsc#1218260).
+- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
+ (bsc#1218260).
+- phy: qualcomm: eusb2-repeater: Rework init to drop redundant
+ zero-out loop (bsc#1218260).
+- gfs2: Revert "introduce qd_bh_get_or_undo" (bsc#1218260).
+- gfs2: qd_check_sync cleanups (bsc#1218260).
+- gfs2: Revert "ignore negated quota changes" (bsc#1218260).
+- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro (bsc#1218260).
+- net: ethernet: cortina: Drop TSO support (bsc#1218260).
+- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel
+ HFP and HBP (again) (bsc#1218260).
+- tracing: Remove precision vsnprintf() check from print event
+ (bsc#1218260).
+- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks
+ table (bsc#1218260).
+- ALSA: hda/realtek: cs35l41: Fix device ID / model name
+ (bsc#1218260).
+- drm/crtc: fix uninitialized variable use even harder
+ (bsc#1218260).
+- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
+ (bsc#1218260).
+- bus: mhi: ep: Introduce async read/write callbacks
+ (bsc#1218260).
+- bus: mhi: ep: Add support for async DMA write operation
+ (bsc#1218260).
+- bus: mhi: ep: Add support for async DMA read operation
+ (bsc#1218260).
+- bus: mhi: ep: Do not allocate memory for MHI objects from DMA
+ zone (bsc#1218260).
+- Revert "powerpc/ps3_defconfig: Disable
+ PPC64_BIG_ENDIAN_ELF_ABI_V2" (bsc#1218260).
+- pds_core: no health-thread in VF path (bsc#1218260).
+- libceph: init the cursor when preparing sparse read in msgr2
+ (bsc#1218260).
+- tracing: Have saved_cmdlines arrays all in one allocation
+ (bsc#1218260).
+- riscv: cpufeature: Fix thead vector hwcap removal (bsc#1218260).
+- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
+ (bsc#1218260).
+- ata: ahci: Add mask_port_map module parameter (bsc#1218260).
+- ASoC: tas2781: mark dvc_tlv with __maybe_unused (bsc#1218260).
+- scsi: Remove scsi device no_start_on_resume flag (bsc#1218260).
+- scsi: sd: Do not repeat the starting disk message (bsc#1218260).
+- e1000e: move force SMBUS near the end of enable_ulp function
+ (bsc#1218260).
+- bootconfig: Fix the kerneldoc of _xbc_exit() (bsc#1218260).
+- perf sched: Move start_work_mutex and work_done_wait_mutex
+ initialization to perf_sched__replay() (bsc#1218260).
+- perf sched: Fix memory leak in perf_sched__map() (bsc#1218260).
+- perf sched: Move curr_thread initialization to perf_sched__map()
+ (bsc#1218260).
+- perf sched: Move curr_pid and cpu_last_switched initialization
+ to perf_sched__{lat|map|replay}() (bsc#1218260).
+- libsubcmd: Don't free the usage string (bsc#1218260).
+- selftests: net: Remove executable bits from library scripts
+ (bsc#1218260).
+- selftests: Introduce Makefile variable to list shared bash
+ scripts (bsc#1218260).
+- jbd2: fix kernel-doc for j_transaction_overhead_buffers
+ (bsc#1218260).
+- drm/amd/display: Remove a redundant check in authenticated_dp
+ (bsc#1218260).
+- drm/amd/display: Revert "Check HDCP returned status"
+ (bsc#1218260).
+- fs/ntfs3: Do not call file_modified if collapse range failed
+ (bsc#1218260).
+- fs/ntfs3: Fix sparse warning in ni_fiemap (bsc#1218260).
+- fs/ntfs3: Refactor enum_rstbl to suppress static checker
+ (bsc#1218260).
+- virtio_console: fix misc probe bugs (bsc#1218260).
+- ntfs3: Change to non-blocking allocation in ntfs_d_hash
+ (bsc#1218260).
+- zram: free secondary algorithms names (bsc#1218260).
+- zram: don't free statically defined names (bsc#1218260).
+- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
+ (bsc#1218260).
+- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
+ (bsc#1218260).
+- bpf: Check percpu map value size first (bsc#1218260).
+- s390/facility: Disable compile time optimization for
+ decompressor code (bsc#1218260).
+- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
+ (bsc#1218260).
+- bpf, x64: Fix a jit convergence issue (bsc#1218260).
+- ext4: don't set SB_RDONLY after filesystem errors (bsc#1218260).
+- ext4: nested locking for xattr inode (bsc#1218260).
+- s390/cpum_sf: Remove WARN_ON_ONCE statements (bsc#1218260).
+- bpf: Prevent tail call between progs attached to different hooks
+ (bsc#1218260).
+- ktest.pl: Avoid false positives with grub2 skip regex
+ (bsc#1218260).
+- RDMA/mad: Improve handling of timed out WRs of mad agent
+ (bsc#1218260).
+- soundwire: intel_bus_common: enable interrupts before exiting
+ reset (bsc#1218260).
+- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
+ (bsc#1218260).
+- RDMA/rtrs-srv: Avoid null pointer deref during path
+ establishment (bsc#1218260).
+- clk: bcm: bcm53573: fix OF node leak in init (bsc#1218260).
+- PCI: Add ACS quirk for Qualcomm SA8775P (bsc#1218260).
+- i2c: i801: Use a different adapter-name for IDF adapters
+ (bsc#1218260).
+- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
+ (bsc#1218260).
+- i3c: master: cdns: Fix use after free vulnerability in
+ cdns_i3c_master Driver Due to Race Condition (bsc#1218260).
+- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
+ (bsc#1218260).
+- io_uring: check if we need to reschedule during overflow flush
+ (bsc#1218260).
+- ntb: ntb_hw_switchtec: Fix use after free vulnerability in
+ switchtec_ntb_remove due to race condition (bsc#1218260).
+- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI
+ match less strict (bsc#1218260).
+- riscv: avoid Imbalance in RAS (bsc#1218260).
+- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
+ (bsc#1218260).
+- soundwire: cadence: re-check Peripheral status with delayed_work
+ (bsc#1218260).
+- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and
+ R_RISCV_SUB16 unknown (bsc#1218260).
+- media: videobuf2-core: clear memory related fields in
+ __vb2_plane_dmabuf_put() (bsc#1218260).
+- remoteproc: imx_rproc: Use imx specific hook for
+ find_loaded_rsc_table (bsc#1218260).
+- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
+ (bsc#1218260).
+- serial: protect uart_port_dtr_rts() in uart_shutdown() too
+ (bsc#1218260).
+- usb: typec: tipd: Free IRQ only if it was requested before
+ (bsc#1218260).
+- usb: chipidea: udc: enable suspend interrupt after usb reset
+ (bsc#1218260).
+- usb: dwc2: Adjust the timing of USB Driver Interrupt
+ Registration in the Crashkernel Scenario (bsc#1218260).
+- comedi: ni_routing: tools: Check when the file could not be
+ opened (bsc#1218260).
+- LoongArch: Fix memleak in pci_acpi_scan_root() (bsc#1218260).
+- netfilter: nf_nat: don't try nat source port reallocation for
+ reverse dir clash (bsc#1218260).
+- netfilter: nf_reject: Fix build warning when
+ CONFIG_BRIDGE_NETFILTER=n (bsc#1218260).
+- virtio_pmem: Check device status before requesting flush
+ (bsc#1218260).
+- tools/iio: Add memory allocation failure check for trigger_name
+ (bsc#1218260).
+- staging: vme_user: added bound check to geoid (bsc#1218260).
+- driver core: bus: Fix double free in driver API bus_register()
+ (bsc#1218260).
+- driver core: bus: Return -EIO instead of 0 when show/store
+ invalid bus attribute (bsc#1218260).
+- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
+ lpfc_els_flush_cmd() (bsc#1218260).
+- scsi: lpfc: Ensure DA_ID handling completion before deleting
+ an NPIV instance (bsc#1218260).
+- drm/amd/display: Check null pointer before dereferencing se
+ (bsc#1218260).
+- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
+ (bsc#1218260).
+- smb: client: fix UAF in async decryption (bsc#1218260).
+- fbdev: sisfb: Fix strbuf array overflow (bsc#1218260).
+- x86/amd_nb: Add new PCI IDs for AMD family 0x1a (bsc#1218260).
+- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
+ (bsc#1218260).
+- NFSD: Mark filecache "down" if init fails (bsc#1218260).
+- ice: set correct dst VSI in only LAN filters (bsc#1218260).
+- ice: fix VLAN replay after reset (bsc#1218260).
+- SUNRPC: Fix integer overflow in decode_rc_list() (bsc#1218260).
+- NFSv4: Prevent NULL-pointer dereference in
+ nfs42_complete_copies() (bsc#1218260).
+- net: phy: dp83869: fix memory corruption when enabling fiber
+ (bsc#1218260).
+- tcp: fix to allow timestamp undo if no retransmits were sent
+ (bsc#1218260).
+- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's
+ safe (bsc#1218260).
+- tcp: new TCP_INFO stats for RTO events (bsc#1218260).
+- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits
+ out (bsc#1218260).
+- rxrpc: Fix uninitialised variable in rxrpc_send_data()
+ (bsc#1218260).
+- netfilter: br_netfilter: fix panic with metadata_dst skb
+ (bsc#1218260).
+- selftests: net: no_forwarding: fix VID for $swp2 in
+ one_bridge_two_pvids() test (bsc#1218260).
+- Bluetooth: RFCOMM: FIX possible deadlock in
+ rfcomm_sk_state_change (bsc#1218260).
+- net: phy: bcm84881: Fix some error handling paths (bsc#1218260).
+- thermal: int340x: processor_thermal: Set feature mask before
+ proc_thermal_add (bsc#1218260).
+- thermal: intel: int340x: processor: Fix warning during module
+ unload (bsc#1218260).
+- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is
+ enabled" (bsc#1218260).
+- net: ethernet: adi: adin1110: Fix some error handling path in
+ adin1110_read_fifo() (bsc#1218260).
+- net: dsa: b53: fix jumbo frame mtu check (bsc#1218260).
+- net: dsa: b53: fix max MTU for 1g switches (bsc#1218260).
+- net: dsa: b53: fix max MTU for BCM5325/BCM5365 (bsc#1218260).
+- net: dsa: b53: allow lower MTUs on BCM5325/5365 (bsc#1218260).
+- net: dsa: b53: fix jumbo frames on 10/100 ports (bsc#1218260).
+- drm/nouveau: pass cli to nouveau_channel_new() instead of
+ drm+device (bsc#1218260).
+- nouveau/dmem: Fix privileged error in copy engine channel
+ (bsc#1218260).
+- gpio: aspeed: Add the flush write to ensure the write complete
+ (bsc#1218260).
+- gpio: aspeed: Use devm_clk api to manage clock source
+ (bsc#1218260).
+- platform/x86/intel/tpmi: Add defines to get version information
+ (bsc#1218260).
+- powercap: intel_rapl_tpmi: Ignore minor version change
+ (bsc#1218260).
+- ice: Fix netif_is_ice() in Safe Mode (bsc#1218260).
+- ice: rename switchdev to eswitch (bsc#1218260).
+- ice: Flush FDB entries before reset (bsc#1218260).
+- i40e: Fix macvlan leak by synchronizing access to
+ mac_filter_hash (bsc#1218260).
+- igb: Do not bring the device up after non-fatal error
+ (bsc#1218260).
+- e1000e: change I219 (19) devices to ADP (bsc#1218260).
+- net/sched: accept TCA_STAB only for root qdisc (bsc#1218260).
+- net: ibm: emac: mal: fix wrong goto (bsc#1218260).
+- btrfs: zoned: fix missing RCU locking in error message when
+ loading zone info (bsc#1218260).
+- sctp: ensure sk_state is set to CLOSED if hashing fails in
+ sctp_listen_start (bsc#1218260).
+- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
+ (bsc#1218260).
+- netfilter: fib: check correct rtable in vrf setups
+ (bsc#1218260).
+- net: do not delay dst_entries_add() in dst_release()
+ (bsc#1218260).
+- rtnetlink: Add bulk registration helpers for rtnetlink message
+ handlers (bsc#1218260).
+- vxlan: Handle error of rtnl_register_module() (bsc#1218260).
+- bridge: Handle error of rtnl_register_module() (bsc#1218260).
+- mctp: Handle error of rtnl_register_module() (bsc#1218260).
+- rtnetlink: change nlk->cb_mutex role (bsc#1218260).
+- rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag (bsc#1218260).
+- mpls: no longer hold RTNL in mpls_netconf_dump_devconf()
+ (bsc#1218260).
+- mpls: Handle error of rtnl_register_module() (bsc#1218260).
+- phonet: no longer hold RTNL in route_dumpit() (bsc#1218260).
+- phonet: Handle error of rtnl_register_module() (bsc#1218260).
+- ppp: fix ppp_async_encode() illegal access (bsc#1218260).
+- slip: make slhc_remember() more robust against malicious packets
+ (bsc#1218260).
+- rcu/nocb: Make IRQs disablement symmetric (bsc#1218260).
+- rcu/nocb: Fix rcuog wake-up from offline softirq (bsc#1218260).
+- HID: mcp2200: added driver for GPIOs of MCP2200 (bsc#1218260).
+- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
+ (bsc#1218260).
+- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines (bsc#1218260).
+- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on
+ system suspend (bsc#1218260).
+- HID: asus: add ROG Ally N-Key ID and keycodes (bsc#1218260).
+- HID: asus: add ROG Z13 lightbar (bsc#1218260).
+- hid-asus: add ROG Ally X prod ID to quirk list (bsc#1218260).
+- wifi: mac80211: Avoid address calculations via out of bounds
+ array indexing (bsc#1218260).
+- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die
+ Temperature (bsc#1218260).
+- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
+ (bsc#1218260).
+- HID: multitouch: Add support for lenovo Y9000P Touchpad
+ (bsc#1218260).
+- HID: plantronics: Workaround for an unexcepted opposite volume
+ key (bsc#1218260).
+- Revert "usb: yurex: Replace snprintf() with the safer
+ scnprintf() variant" (bsc#1218260).
+- usb: dwc3: core: Stop processing of pending events if controller
+ is halted (bsc#1218260).
+- usb: xhci: Fix problem with xhci resume from suspend
+ (bsc#1218260).
+- usb: storage: ignore bogus device raised by JieLi BR21 USB
+ sound chip (bsc#1218260).
+- usb: gadget: core: force synchronous registration (bsc#1218260).
+- hid: intel-ish-hid: Fix uninitialized variable 'rv' in
+ ish_fw_xfer_direct_dma (bsc#1218260).
+- drm/v3d: Stop the active perfmon before being destroyed
+ (bsc#1218260).
+- drm/vc4: Stop the active perfmon before being destroyed
+ (bsc#1218260).
+- drm/i915/hdcp: fix connector refcounting (bsc#1218260).
+- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
+ (bsc#1218260).
+- scsi: wd33c93: Don't use stale scsi_pointer value (bsc#1218260).
+- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
+ (bsc#1218260).
+- mptcp: fallback when MPTCP opts are dropped after 1st data
+ (bsc#1218260).
+- ata: libata: avoid superfluous disk spin down + spin up during
+ hibernation (bsc#1218260).
+- net: explicitly clear the sk pointer, when pf->create fails
+ (bsc#1218260).
+- net: Fix an unsafe loop on the list (bsc#1218260).
+- net: dsa: lan9303: ensure chip reset and wait for READY status
+ (bsc#1218260).
+- net: phy: Remove LED entry from LEDs list on unregister
+ (bsc#1218260).
+- mptcp: handle consistently DSS corruption (bsc#1218260).
+- mptcp: pm: do not remove closing subflows (bsc#1218260).
+- device-dax: correct pgoff align in dax_set_mapping()
+ (bsc#1218260).
+- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy
+ error (bsc#1218260).
+- powercap: intel_rapl_tpmi: Fix bogus register reading
+ (bsc#1218260).
+- selftests/mm: fix incorrect buffer->mirror size in hmm2
+ double_map test (bsc#1218260).
+- selftests/rseq: Fix mm_cid test failure (bsc#1218260).
+- btrfs: split remaining space to discard in chunks (bsc#1218260).
+- kthread: unpark only parked kthread (bsc#1218260).
+- fs/proc/kcore.c: allow translation of physical memory addresses
+ (bsc#1218260).
+- secretmem: disable memfd_secret() if arch cannot set direct map
+ (bsc#1218260).
+- net: ethernet: cortina: Restore TSO support (bsc#1218260).
+- e1000e: fix force smbus during suspend flow (bsc#1218260).
+- scsi: Revert "scsi: sd: Do not repeat the starting disk message"
+ (bsc#1218260).
+- blacklist.conf:
+- Rename to
+ patches.kernel.org/6.6.57-032-i40e-Fix-ST-code-value-for-Clause-45.patch.
+- Rename to
+ patches.kernel.org/6.6.57-033-i40e-Include-types.h-to-some-headers.patch.
+- Rename to
+ patches.kernel.org/6.6.57-043-Bluetooth-Fix-usage-of-__hci_cmd_sync_status.patch.
+- Rename to
+ patches.kernel.org/6.6.57-045-lib-build_OID_registry-avoid-non-destructive-s.patch.
+- commit 806e73d
+
-------------------------------------------------------------------
Thu Oct 10 17:20:52 CEST 2024 - rfrohl@suse.com
diff --git a/packages/k/kernel-source-longterm/kernel-longterm.spec b/packages/k/kernel-source-longterm/kernel-longterm.spec
index 429390bca88..9ea7e66a430 100644
--- a/packages/k/kernel-source-longterm/kernel-longterm.spec
+++ b/packages/k/kernel-source-longterm/kernel-longterm.spec
@@ -18,8 +18,8 @@
%define srcversion 6.6
-%define patchversion 6.6.56
-%define git_commit 67435e5eed34256afc005faf5dc2d64a26e20839
+%define patchversion 6.6.57
+%define git_commit a8ceeb3b3d936f6df83efc36ab1d2297436e5899
%define variant -longterm%{nil}
%define compress_modules zstd
%define compress_vmlinux xz
@@ -113,9 +113,9 @@ Name: kernel-longterm
Summary: The Linux Kernel
License: GPL-2.0-only
Group: System/Kernel
-Version: 6.6.56
+Version: 6.6.57
%if 0%{?is_kotd}
-Release: .g67435e5
+Release: .ga8ceeb3
%else
Release: 0
%endif
diff --git a/packages/k/kernel-source-longterm/kernel-source-longterm.changes b/packages/k/kernel-source-longterm/kernel-source-longterm.changes
index ac5c91ab092..5aa3017f73c 100644
--- a/packages/k/kernel-source-longterm/kernel-source-longterm.changes
+++ b/packages/k/kernel-source-longterm/kernel-source-longterm.changes
@@ -1,3 +1,361 @@
+-------------------------------------------------------------------
+Mon Oct 21 14:35:30 CEST 2024 - rfrohl@suse.com
+
+- config: CONFIG_HID_MCP2200=m
+- commit a8ceeb3
+
+-------------------------------------------------------------------
+Mon Oct 21 14:08:14 CEST 2024 - rfrohl@suse.com
+
+- Linux 6.6.57 (bsc#1218260).
+- unicode: Don't special case ignorable code points (bsc#1218260).
+- net: fec: don't save PTP state if PTP is unsupported
+ (bsc#1218260).
+- Revert "PCI/MSI: Provide stubs for IMS functions" (bsc#1218260).
+- ASoC: cs35l56: Load tunings for the correct speaker models
+ (bsc#1218260).
+- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
+ (bsc#1218260).
+- phy: qualcomm: eusb2-repeater: Rework init to drop redundant
+ zero-out loop (bsc#1218260).
+- gfs2: Revert "introduce qd_bh_get_or_undo" (bsc#1218260).
+- gfs2: qd_check_sync cleanups (bsc#1218260).
+- gfs2: Revert "ignore negated quota changes" (bsc#1218260).
+- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro (bsc#1218260).
+- net: ethernet: cortina: Drop TSO support (bsc#1218260).
+- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel
+ HFP and HBP (again) (bsc#1218260).
+- tracing: Remove precision vsnprintf() check from print event
+ (bsc#1218260).
+- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks
+ table (bsc#1218260).
+- ALSA: hda/realtek: cs35l41: Fix device ID / model name
+ (bsc#1218260).
+- drm/crtc: fix uninitialized variable use even harder
+ (bsc#1218260).
+- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
+ (bsc#1218260).
+- bus: mhi: ep: Introduce async read/write callbacks
+ (bsc#1218260).
+- bus: mhi: ep: Add support for async DMA write operation
+ (bsc#1218260).
+- bus: mhi: ep: Add support for async DMA read operation
+ (bsc#1218260).
+- bus: mhi: ep: Do not allocate memory for MHI objects from DMA
+ zone (bsc#1218260).
+- Revert "powerpc/ps3_defconfig: Disable
+ PPC64_BIG_ENDIAN_ELF_ABI_V2" (bsc#1218260).
+- pds_core: no health-thread in VF path (bsc#1218260).
+- libceph: init the cursor when preparing sparse read in msgr2
+ (bsc#1218260).
+- tracing: Have saved_cmdlines arrays all in one allocation
+ (bsc#1218260).
+- riscv: cpufeature: Fix thead vector hwcap removal (bsc#1218260).
+- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
+ (bsc#1218260).
+- ata: ahci: Add mask_port_map module parameter (bsc#1218260).
+- ASoC: tas2781: mark dvc_tlv with __maybe_unused (bsc#1218260).
+- scsi: Remove scsi device no_start_on_resume flag (bsc#1218260).
+- scsi: sd: Do not repeat the starting disk message (bsc#1218260).
+- e1000e: move force SMBUS near the end of enable_ulp function
+ (bsc#1218260).
+- bootconfig: Fix the kerneldoc of _xbc_exit() (bsc#1218260).
+- perf sched: Move start_work_mutex and work_done_wait_mutex
+ initialization to perf_sched__replay() (bsc#1218260).
+- perf sched: Fix memory leak in perf_sched__map() (bsc#1218260).
+- perf sched: Move curr_thread initialization to perf_sched__map()
+ (bsc#1218260).
+- perf sched: Move curr_pid and cpu_last_switched initialization
+ to perf_sched__{lat|map|replay}() (bsc#1218260).
+- libsubcmd: Don't free the usage string (bsc#1218260).
+- selftests: net: Remove executable bits from library scripts
+ (bsc#1218260).
+- selftests: Introduce Makefile variable to list shared bash
+ scripts (bsc#1218260).
+- jbd2: fix kernel-doc for j_transaction_overhead_buffers
+ (bsc#1218260).
+- drm/amd/display: Remove a redundant check in authenticated_dp
+ (bsc#1218260).
+- drm/amd/display: Revert "Check HDCP returned status"
+ (bsc#1218260).
+- fs/ntfs3: Do not call file_modified if collapse range failed
+ (bsc#1218260).
+- fs/ntfs3: Fix sparse warning in ni_fiemap (bsc#1218260).
+- fs/ntfs3: Refactor enum_rstbl to suppress static checker
+ (bsc#1218260).
+- virtio_console: fix misc probe bugs (bsc#1218260).
+- ntfs3: Change to non-blocking allocation in ntfs_d_hash
+ (bsc#1218260).
+- zram: free secondary algorithms names (bsc#1218260).
+- zram: don't free statically defined names (bsc#1218260).
+- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
+ (bsc#1218260).
+- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
+ (bsc#1218260).
+- bpf: Check percpu map value size first (bsc#1218260).
+- s390/facility: Disable compile time optimization for
+ decompressor code (bsc#1218260).
+- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
+ (bsc#1218260).
+- bpf, x64: Fix a jit convergence issue (bsc#1218260).
+- ext4: don't set SB_RDONLY after filesystem errors (bsc#1218260).
+- ext4: nested locking for xattr inode (bsc#1218260).
+- s390/cpum_sf: Remove WARN_ON_ONCE statements (bsc#1218260).
+- bpf: Prevent tail call between progs attached to different hooks
+ (bsc#1218260).
+- ktest.pl: Avoid false positives with grub2 skip regex
+ (bsc#1218260).
+- RDMA/mad: Improve handling of timed out WRs of mad agent
+ (bsc#1218260).
+- soundwire: intel_bus_common: enable interrupts before exiting
+ reset (bsc#1218260).
+- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
+ (bsc#1218260).
+- RDMA/rtrs-srv: Avoid null pointer deref during path
+ establishment (bsc#1218260).
+- clk: bcm: bcm53573: fix OF node leak in init (bsc#1218260).
+- PCI: Add ACS quirk for Qualcomm SA8775P (bsc#1218260).
+- i2c: i801: Use a different adapter-name for IDF adapters
+ (bsc#1218260).
+- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
+ (bsc#1218260).
+- i3c: master: cdns: Fix use after free vulnerability in
+ cdns_i3c_master Driver Due to Race Condition (bsc#1218260).
+- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
+ (bsc#1218260).
+- io_uring: check if we need to reschedule during overflow flush
+ (bsc#1218260).
+- ntb: ntb_hw_switchtec: Fix use after free vulnerability in
+ switchtec_ntb_remove due to race condition (bsc#1218260).
+- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI
+ match less strict (bsc#1218260).
+- riscv: avoid Imbalance in RAS (bsc#1218260).
+- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
+ (bsc#1218260).
+- soundwire: cadence: re-check Peripheral status with delayed_work
+ (bsc#1218260).
+- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and
+ R_RISCV_SUB16 unknown (bsc#1218260).
+- media: videobuf2-core: clear memory related fields in
+ __vb2_plane_dmabuf_put() (bsc#1218260).
+- remoteproc: imx_rproc: Use imx specific hook for
+ find_loaded_rsc_table (bsc#1218260).
+- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
+ (bsc#1218260).
+- serial: protect uart_port_dtr_rts() in uart_shutdown() too
+ (bsc#1218260).
+- usb: typec: tipd: Free IRQ only if it was requested before
+ (bsc#1218260).
+- usb: chipidea: udc: enable suspend interrupt after usb reset
+ (bsc#1218260).
+- usb: dwc2: Adjust the timing of USB Driver Interrupt
+ Registration in the Crashkernel Scenario (bsc#1218260).
+- comedi: ni_routing: tools: Check when the file could not be
+ opened (bsc#1218260).
+- LoongArch: Fix memleak in pci_acpi_scan_root() (bsc#1218260).
+- netfilter: nf_nat: don't try nat source port reallocation for
+ reverse dir clash (bsc#1218260).
+- netfilter: nf_reject: Fix build warning when
+ CONFIG_BRIDGE_NETFILTER=n (bsc#1218260).
+- virtio_pmem: Check device status before requesting flush
+ (bsc#1218260).
+- tools/iio: Add memory allocation failure check for trigger_name
+ (bsc#1218260).
+- staging: vme_user: added bound check to geoid (bsc#1218260).
+- driver core: bus: Fix double free in driver API bus_register()
+ (bsc#1218260).
+- driver core: bus: Return -EIO instead of 0 when show/store
+ invalid bus attribute (bsc#1218260).
+- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
+ lpfc_els_flush_cmd() (bsc#1218260).
+- scsi: lpfc: Ensure DA_ID handling completion before deleting
+ an NPIV instance (bsc#1218260).
+- drm/amd/display: Check null pointer before dereferencing se
+ (bsc#1218260).
+- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
+ (bsc#1218260).
+- smb: client: fix UAF in async decryption (bsc#1218260).
+- fbdev: sisfb: Fix strbuf array overflow (bsc#1218260).
+- x86/amd_nb: Add new PCI IDs for AMD family 0x1a (bsc#1218260).
+- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
+ (bsc#1218260).
+- NFSD: Mark filecache "down" if init fails (bsc#1218260).
+- ice: set correct dst VSI in only LAN filters (bsc#1218260).
+- ice: fix VLAN replay after reset (bsc#1218260).
+- SUNRPC: Fix integer overflow in decode_rc_list() (bsc#1218260).
+- NFSv4: Prevent NULL-pointer dereference in
+ nfs42_complete_copies() (bsc#1218260).
+- net: phy: dp83869: fix memory corruption when enabling fiber
+ (bsc#1218260).
+- tcp: fix to allow timestamp undo if no retransmits were sent
+ (bsc#1218260).
+- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's
+ safe (bsc#1218260).
+- tcp: new TCP_INFO stats for RTO events (bsc#1218260).
+- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits
+ out (bsc#1218260).
+- rxrpc: Fix uninitialised variable in rxrpc_send_data()
+ (bsc#1218260).
+- netfilter: br_netfilter: fix panic with metadata_dst skb
+ (bsc#1218260).
+- selftests: net: no_forwarding: fix VID for $swp2 in
+ one_bridge_two_pvids() test (bsc#1218260).
+- Bluetooth: RFCOMM: FIX possible deadlock in
+ rfcomm_sk_state_change (bsc#1218260).
+- net: phy: bcm84881: Fix some error handling paths (bsc#1218260).
+- thermal: int340x: processor_thermal: Set feature mask before
+ proc_thermal_add (bsc#1218260).
+- thermal: intel: int340x: processor: Fix warning during module
+ unload (bsc#1218260).
+- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is
+ enabled" (bsc#1218260).
+- net: ethernet: adi: adin1110: Fix some error handling path in
+ adin1110_read_fifo() (bsc#1218260).
+- net: dsa: b53: fix jumbo frame mtu check (bsc#1218260).
+- net: dsa: b53: fix max MTU for 1g switches (bsc#1218260).
+- net: dsa: b53: fix max MTU for BCM5325/BCM5365 (bsc#1218260).
+- net: dsa: b53: allow lower MTUs on BCM5325/5365 (bsc#1218260).
+- net: dsa: b53: fix jumbo frames on 10/100 ports (bsc#1218260).
+- drm/nouveau: pass cli to nouveau_channel_new() instead of
+ drm+device (bsc#1218260).
+- nouveau/dmem: Fix privileged error in copy engine channel
+ (bsc#1218260).
+- gpio: aspeed: Add the flush write to ensure the write complete
+ (bsc#1218260).
+- gpio: aspeed: Use devm_clk api to manage clock source
+ (bsc#1218260).
+- platform/x86/intel/tpmi: Add defines to get version information
+ (bsc#1218260).
+- powercap: intel_rapl_tpmi: Ignore minor version change
+ (bsc#1218260).
+- ice: Fix netif_is_ice() in Safe Mode (bsc#1218260).
+- ice: rename switchdev to eswitch (bsc#1218260).
+- ice: Flush FDB entries before reset (bsc#1218260).
+- i40e: Fix macvlan leak by synchronizing access to
+ mac_filter_hash (bsc#1218260).
+- igb: Do not bring the device up after non-fatal error
+ (bsc#1218260).
+- e1000e: change I219 (19) devices to ADP (bsc#1218260).
+- net/sched: accept TCA_STAB only for root qdisc (bsc#1218260).
+- net: ibm: emac: mal: fix wrong goto (bsc#1218260).
+- btrfs: zoned: fix missing RCU locking in error message when
+ loading zone info (bsc#1218260).
+- sctp: ensure sk_state is set to CLOSED if hashing fails in
+ sctp_listen_start (bsc#1218260).
+- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
+ (bsc#1218260).
+- netfilter: fib: check correct rtable in vrf setups
+ (bsc#1218260).
+- net: do not delay dst_entries_add() in dst_release()
+ (bsc#1218260).
+- rtnetlink: Add bulk registration helpers for rtnetlink message
+ handlers (bsc#1218260).
+- vxlan: Handle error of rtnl_register_module() (bsc#1218260).
+- bridge: Handle error of rtnl_register_module() (bsc#1218260).
+- mctp: Handle error of rtnl_register_module() (bsc#1218260).
+- rtnetlink: change nlk->cb_mutex role (bsc#1218260).
+- rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag (bsc#1218260).
+- mpls: no longer hold RTNL in mpls_netconf_dump_devconf()
+ (bsc#1218260).
+- mpls: Handle error of rtnl_register_module() (bsc#1218260).
+- phonet: no longer hold RTNL in route_dumpit() (bsc#1218260).
+- phonet: Handle error of rtnl_register_module() (bsc#1218260).
+- ppp: fix ppp_async_encode() illegal access (bsc#1218260).
+- slip: make slhc_remember() more robust against malicious packets
+ (bsc#1218260).
+- rcu/nocb: Make IRQs disablement symmetric (bsc#1218260).
+- rcu/nocb: Fix rcuog wake-up from offline softirq (bsc#1218260).
+- HID: mcp2200: added driver for GPIOs of MCP2200 (bsc#1218260).
+- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
+ (bsc#1218260).
+- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines (bsc#1218260).
+- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on
+ system suspend (bsc#1218260).
+- HID: asus: add ROG Ally N-Key ID and keycodes (bsc#1218260).
+- HID: asus: add ROG Z13 lightbar (bsc#1218260).
+- hid-asus: add ROG Ally X prod ID to quirk list (bsc#1218260).
+- wifi: mac80211: Avoid address calculations via out of bounds
+ array indexing (bsc#1218260).
+- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die
+ Temperature (bsc#1218260).
+- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
+ (bsc#1218260).
+- HID: multitouch: Add support for lenovo Y9000P Touchpad
+ (bsc#1218260).
+- HID: plantronics: Workaround for an unexcepted opposite volume
+ key (bsc#1218260).
+- Revert "usb: yurex: Replace snprintf() with the safer
+ scnprintf() variant" (bsc#1218260).
+- usb: dwc3: core: Stop processing of pending events if controller
+ is halted (bsc#1218260).
+- usb: xhci: Fix problem with xhci resume from suspend
+ (bsc#1218260).
+- usb: storage: ignore bogus device raised by JieLi BR21 USB
+ sound chip (bsc#1218260).
+- usb: gadget: core: force synchronous registration (bsc#1218260).
+- hid: intel-ish-hid: Fix uninitialized variable 'rv' in
+ ish_fw_xfer_direct_dma (bsc#1218260).
+- drm/v3d: Stop the active perfmon before being destroyed
+ (bsc#1218260).
+- drm/vc4: Stop the active perfmon before being destroyed
+ (bsc#1218260).
+- drm/i915/hdcp: fix connector refcounting (bsc#1218260).
+- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
+ (bsc#1218260).
+- scsi: wd33c93: Don't use stale scsi_pointer value (bsc#1218260).
+- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
+ (bsc#1218260).
+- mptcp: fallback when MPTCP opts are dropped after 1st data
+ (bsc#1218260).
+- ata: libata: avoid superfluous disk spin down + spin up during
+ hibernation (bsc#1218260).
+- net: explicitly clear the sk pointer, when pf->create fails
+ (bsc#1218260).
+- net: Fix an unsafe loop on the list (bsc#1218260).
+- net: dsa: lan9303: ensure chip reset and wait for READY status
+ (bsc#1218260).
+- net: phy: Remove LED entry from LEDs list on unregister
+ (bsc#1218260).
+- mptcp: handle consistently DSS corruption (bsc#1218260).
+- mptcp: pm: do not remove closing subflows (bsc#1218260).
+- device-dax: correct pgoff align in dax_set_mapping()
+ (bsc#1218260).
+- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy
+ error (bsc#1218260).
+- powercap: intel_rapl_tpmi: Fix bogus register reading
+ (bsc#1218260).
+- selftests/mm: fix incorrect buffer->mirror size in hmm2
+ double_map test (bsc#1218260).
+- selftests/rseq: Fix mm_cid test failure (bsc#1218260).
+- btrfs: split remaining space to discard in chunks (bsc#1218260).
+- kthread: unpark only parked kthread (bsc#1218260).
+- fs/proc/kcore.c: allow translation of physical memory addresses
+ (bsc#1218260).
+- secretmem: disable memfd_secret() if arch cannot set direct map
+ (bsc#1218260).
+- net: ethernet: cortina: Restore TSO support (bsc#1218260).
+- e1000e: fix force smbus during suspend flow (bsc#1218260).
+- scsi: Revert "scsi: sd: Do not repeat the starting disk message"
+ (bsc#1218260).
+- blacklist.conf:
+- Rename to
+ patches.kernel.org/6.6.57-032-i40e-Fix-ST-code-value-for-Clause-45.patch.
+- Rename to
+ patches.kernel.org/6.6.57-033-i40e-Include-types.h-to-some-headers.patch.
+- Rename to
+ patches.kernel.org/6.6.57-043-Bluetooth-Fix-usage-of-__hci_cmd_sync_status.patch.
+- Rename to
+ patches.kernel.org/6.6.57-045-lib-build_OID_registry-avoid-non-destructive-s.patch.
+- commit 806e73d
+
-------------------------------------------------------------------
Thu Oct 10 17:20:52 CEST 2024 - rfrohl@suse.com
diff --git a/packages/k/kernel-source-longterm/kernel-source-longterm.spec b/packages/k/kernel-source-longterm/kernel-source-longterm.spec
index 91cc1fca46f..8b3e3d81893 100644
--- a/packages/k/kernel-source-longterm/kernel-source-longterm.spec
+++ b/packages/k/kernel-source-longterm/kernel-source-longterm.spec
@@ -17,8 +17,8 @@
%define srcversion 6.6
-%define patchversion 6.6.56
-%define git_commit 67435e5eed34256afc005faf5dc2d64a26e20839
+%define patchversion 6.6.57
+%define git_commit a8ceeb3b3d936f6df83efc36ab1d2297436e5899
%define variant -longterm%{nil}
%include %_sourcedir/kernel-spec-macros
@@ -31,9 +31,9 @@
%endif
Name: kernel-source-longterm
-Version: 6.6.56
+Version: 6.6.57
%if 0%{?is_kotd}
-Release: .g67435e5
+Release: .ga8ceeb3
%else
Release: 0
%endif
diff --git a/packages/k/kernel-source-longterm/kernel-syms-longterm.changes b/packages/k/kernel-source-longterm/kernel-syms-longterm.changes
index ac5c91ab092..5aa3017f73c 100644
--- a/packages/k/kernel-source-longterm/kernel-syms-longterm.changes
+++ b/packages/k/kernel-source-longterm/kernel-syms-longterm.changes
@@ -1,3 +1,361 @@
+-------------------------------------------------------------------
+Mon Oct 21 14:35:30 CEST 2024 - rfrohl@suse.com
+
+- config: CONFIG_HID_MCP2200=m
+- commit a8ceeb3
+
+-------------------------------------------------------------------
+Mon Oct 21 14:08:14 CEST 2024 - rfrohl@suse.com
+
+- Linux 6.6.57 (bsc#1218260).
+- unicode: Don't special case ignorable code points (bsc#1218260).
+- net: fec: don't save PTP state if PTP is unsupported
+ (bsc#1218260).
+- Revert "PCI/MSI: Provide stubs for IMS functions" (bsc#1218260).
+- ASoC: cs35l56: Load tunings for the correct speaker models
+ (bsc#1218260).
+- phy: qualcomm: phy-qcom-eusb2-repeater: Add tuning overrides
+ (bsc#1218260).
+- phy: qualcomm: eusb2-repeater: Rework init to drop redundant
+ zero-out loop (bsc#1218260).
+- gfs2: Revert "introduce qd_bh_get_or_undo" (bsc#1218260).
+- gfs2: qd_check_sync cleanups (bsc#1218260).
+- gfs2: Revert "ignore negated quota changes" (bsc#1218260).
+- riscv: Remove SHADOW_OVERFLOW_STACK_SIZE macro (bsc#1218260).
+- net: ethernet: cortina: Drop TSO support (bsc#1218260).
+- drm/panel: boe-tv101wum-nl6: Fine tune Himax83102-j02 panel
+ HFP and HBP (again) (bsc#1218260).
+- tracing: Remove precision vsnprintf() check from print event
+ (bsc#1218260).
+- ALSA: hda/realtek: cs35l41: Fix order and duplicates in quirks
+ table (bsc#1218260).
+- ALSA: hda/realtek: cs35l41: Fix device ID / model name
+ (bsc#1218260).
+- drm/crtc: fix uninitialized variable use even harder
+ (bsc#1218260).
+- bus: mhi: ep: Rename read_from_host() and write_to_host() APIs
+ (bsc#1218260).
+- bus: mhi: ep: Introduce async read/write callbacks
+ (bsc#1218260).
+- bus: mhi: ep: Add support for async DMA write operation
+ (bsc#1218260).
+- bus: mhi: ep: Add support for async DMA read operation
+ (bsc#1218260).
+- bus: mhi: ep: Do not allocate memory for MHI objects from DMA
+ zone (bsc#1218260).
+- Revert "powerpc/ps3_defconfig: Disable
+ PPC64_BIG_ENDIAN_ELF_ABI_V2" (bsc#1218260).
+- pds_core: no health-thread in VF path (bsc#1218260).
+- libceph: init the cursor when preparing sparse read in msgr2
+ (bsc#1218260).
+- tracing: Have saved_cmdlines arrays all in one allocation
+ (bsc#1218260).
+- riscv: cpufeature: Fix thead vector hwcap removal (bsc#1218260).
+- spi: spi-fsl-lpspi: remove redundant spi_controller_put call
+ (bsc#1218260).
+- ata: ahci: Add mask_port_map module parameter (bsc#1218260).
+- ASoC: tas2781: mark dvc_tlv with __maybe_unused (bsc#1218260).
+- scsi: Remove scsi device no_start_on_resume flag (bsc#1218260).
+- scsi: sd: Do not repeat the starting disk message (bsc#1218260).
+- e1000e: move force SMBUS near the end of enable_ulp function
+ (bsc#1218260).
+- bootconfig: Fix the kerneldoc of _xbc_exit() (bsc#1218260).
+- perf sched: Move start_work_mutex and work_done_wait_mutex
+ initialization to perf_sched__replay() (bsc#1218260).
+- perf sched: Fix memory leak in perf_sched__map() (bsc#1218260).
+- perf sched: Move curr_thread initialization to perf_sched__map()
+ (bsc#1218260).
+- perf sched: Move curr_pid and cpu_last_switched initialization
+ to perf_sched__{lat|map|replay}() (bsc#1218260).
+- libsubcmd: Don't free the usage string (bsc#1218260).
+- selftests: net: Remove executable bits from library scripts
+ (bsc#1218260).
+- selftests: Introduce Makefile variable to list shared bash
+ scripts (bsc#1218260).
+- jbd2: fix kernel-doc for j_transaction_overhead_buffers
+ (bsc#1218260).
+- drm/amd/display: Remove a redundant check in authenticated_dp
+ (bsc#1218260).
+- drm/amd/display: Revert "Check HDCP returned status"
+ (bsc#1218260).
+- fs/ntfs3: Do not call file_modified if collapse range failed
+ (bsc#1218260).
+- fs/ntfs3: Fix sparse warning in ni_fiemap (bsc#1218260).
+- fs/ntfs3: Refactor enum_rstbl to suppress static checker
+ (bsc#1218260).
+- virtio_console: fix misc probe bugs (bsc#1218260).
+- ntfs3: Change to non-blocking allocation in ntfs_d_hash
+ (bsc#1218260).
+- zram: free secondary algorithms names (bsc#1218260).
+- zram: don't free statically defined names (bsc#1218260).
+- Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal
+ (bsc#1218260).
+- selftests/bpf: Fix ARG_PTR_TO_LONG {half-,}uninitialized test
+ (bsc#1218260).
+- bpf: Check percpu map value size first (bsc#1218260).
+- s390/facility: Disable compile time optimization for
+ decompressor code (bsc#1218260).
+- s390/mm: Add cond_resched() to cmm_alloc/free_pages()
+ (bsc#1218260).
+- bpf, x64: Fix a jit convergence issue (bsc#1218260).
+- ext4: don't set SB_RDONLY after filesystem errors (bsc#1218260).
+- ext4: nested locking for xattr inode (bsc#1218260).
+- s390/cpum_sf: Remove WARN_ON_ONCE statements (bsc#1218260).
+- bpf: Prevent tail call between progs attached to different hooks
+ (bsc#1218260).
+- ktest.pl: Avoid false positives with grub2 skip regex
+ (bsc#1218260).
+- RDMA/mad: Improve handling of timed out WRs of mad agent
+ (bsc#1218260).
+- soundwire: intel_bus_common: enable interrupts before exiting
+ reset (bsc#1218260).
+- PCI: Add function 0 DMA alias quirk for Glenfly Arise chip
+ (bsc#1218260).
+- RDMA/rtrs-srv: Avoid null pointer deref during path
+ establishment (bsc#1218260).
+- clk: bcm: bcm53573: fix OF node leak in init (bsc#1218260).
+- PCI: Add ACS quirk for Qualcomm SA8775P (bsc#1218260).
+- i2c: i801: Use a different adapter-name for IDF adapters
+ (bsc#1218260).
+- PCI: Mark Creative Labs EMU20k2 INTx masking as broken
+ (bsc#1218260).
+- i3c: master: cdns: Fix use after free vulnerability in
+ cdns_i3c_master Driver Due to Race Condition (bsc#1218260).
+- RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t
+ (bsc#1218260).
+- io_uring: check if we need to reschedule during overflow flush
+ (bsc#1218260).
+- ntb: ntb_hw_switchtec: Fix use after free vulnerability in
+ switchtec_ntb_remove due to race condition (bsc#1218260).
+- mfd: intel_soc_pmic_chtwc: Make Lenovo Yoga Tab 3 X90F DMI
+ match less strict (bsc#1218260).
+- riscv: avoid Imbalance in RAS (bsc#1218260).
+- RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults
+ (bsc#1218260).
+- soundwire: cadence: re-check Peripheral status with delayed_work
+ (bsc#1218260).
+- riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and
+ R_RISCV_SUB16 unknown (bsc#1218260).
+- media: videobuf2-core: clear memory related fields in
+ __vb2_plane_dmabuf_put() (bsc#1218260).
+- remoteproc: imx_rproc: Use imx specific hook for
+ find_loaded_rsc_table (bsc#1218260).
+- clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D
+ (bsc#1218260).
+- serial: protect uart_port_dtr_rts() in uart_shutdown() too
+ (bsc#1218260).
+- usb: typec: tipd: Free IRQ only if it was requested before
+ (bsc#1218260).
+- usb: chipidea: udc: enable suspend interrupt after usb reset
+ (bsc#1218260).
+- usb: dwc2: Adjust the timing of USB Driver Interrupt
+ Registration in the Crashkernel Scenario (bsc#1218260).
+- comedi: ni_routing: tools: Check when the file could not be
+ opened (bsc#1218260).
+- LoongArch: Fix memleak in pci_acpi_scan_root() (bsc#1218260).
+- netfilter: nf_nat: don't try nat source port reallocation for
+ reverse dir clash (bsc#1218260).
+- netfilter: nf_reject: Fix build warning when
+ CONFIG_BRIDGE_NETFILTER=n (bsc#1218260).
+- virtio_pmem: Check device status before requesting flush
+ (bsc#1218260).
+- tools/iio: Add memory allocation failure check for trigger_name
+ (bsc#1218260).
+- staging: vme_user: added bound check to geoid (bsc#1218260).
+- driver core: bus: Fix double free in driver API bus_register()
+ (bsc#1218260).
+- driver core: bus: Return -EIO instead of 0 when show/store
+ invalid bus attribute (bsc#1218260).
+- scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in
+ lpfc_els_flush_cmd() (bsc#1218260).
+- scsi: lpfc: Ensure DA_ID handling completion before deleting
+ an NPIV instance (bsc#1218260).
+- drm/amd/display: Check null pointer before dereferencing se
+ (bsc#1218260).
+- fbcon: Fix a NULL pointer dereference issue in fbcon_putcs
+ (bsc#1218260).
+- smb: client: fix UAF in async decryption (bsc#1218260).
+- fbdev: sisfb: Fix strbuf array overflow (bsc#1218260).
+- x86/amd_nb: Add new PCI IDs for AMD family 0x1a (bsc#1218260).
+- x86/amd_nb: Add new PCI IDs for AMD family 1Ah model 60h
+ (bsc#1218260).
+- NFSD: Mark filecache "down" if init fails (bsc#1218260).
+- ice: set correct dst VSI in only LAN filters (bsc#1218260).
+- ice: fix VLAN replay after reset (bsc#1218260).
+- SUNRPC: Fix integer overflow in decode_rc_list() (bsc#1218260).
+- NFSv4: Prevent NULL-pointer dereference in
+ nfs42_complete_copies() (bsc#1218260).
+- net: phy: dp83869: fix memory corruption when enabling fiber
+ (bsc#1218260).
+- tcp: fix to allow timestamp undo if no retransmits were sent
+ (bsc#1218260).
+- tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's
+ safe (bsc#1218260).
+- tcp: new TCP_INFO stats for RTO events (bsc#1218260).
+- tcp: fix TFO SYN_RECV to not zero retrans_stamp with retransmits
+ out (bsc#1218260).
+- rxrpc: Fix uninitialised variable in rxrpc_send_data()
+ (bsc#1218260).
+- netfilter: br_netfilter: fix panic with metadata_dst skb
+ (bsc#1218260).
+- selftests: net: no_forwarding: fix VID for $swp2 in
+ one_bridge_two_pvids() test (bsc#1218260).
+- Bluetooth: RFCOMM: FIX possible deadlock in
+ rfcomm_sk_state_change (bsc#1218260).
+- net: phy: bcm84881: Fix some error handling paths (bsc#1218260).
+- thermal: int340x: processor_thermal: Set feature mask before
+ proc_thermal_add (bsc#1218260).
+- thermal: intel: int340x: processor: Fix warning during module
+ unload (bsc#1218260).
+- Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is
+ enabled" (bsc#1218260).
+- net: ethernet: adi: adin1110: Fix some error handling path in
+ adin1110_read_fifo() (bsc#1218260).
+- net: dsa: b53: fix jumbo frame mtu check (bsc#1218260).
+- net: dsa: b53: fix max MTU for 1g switches (bsc#1218260).
+- net: dsa: b53: fix max MTU for BCM5325/BCM5365 (bsc#1218260).
+- net: dsa: b53: allow lower MTUs on BCM5325/5365 (bsc#1218260).
+- net: dsa: b53: fix jumbo frames on 10/100 ports (bsc#1218260).
+- drm/nouveau: pass cli to nouveau_channel_new() instead of
+ drm+device (bsc#1218260).
+- nouveau/dmem: Fix privileged error in copy engine channel
+ (bsc#1218260).
+- gpio: aspeed: Add the flush write to ensure the write complete
+ (bsc#1218260).
+- gpio: aspeed: Use devm_clk api to manage clock source
+ (bsc#1218260).
+- platform/x86/intel/tpmi: Add defines to get version information
+ (bsc#1218260).
+- powercap: intel_rapl_tpmi: Ignore minor version change
+ (bsc#1218260).
+- ice: Fix netif_is_ice() in Safe Mode (bsc#1218260).
+- ice: rename switchdev to eswitch (bsc#1218260).
+- ice: Flush FDB entries before reset (bsc#1218260).
+- i40e: Fix macvlan leak by synchronizing access to
+ mac_filter_hash (bsc#1218260).
+- igb: Do not bring the device up after non-fatal error
+ (bsc#1218260).
+- e1000e: change I219 (19) devices to ADP (bsc#1218260).
+- net/sched: accept TCA_STAB only for root qdisc (bsc#1218260).
+- net: ibm: emac: mal: fix wrong goto (bsc#1218260).
+- btrfs: zoned: fix missing RCU locking in error message when
+ loading zone info (bsc#1218260).
+- sctp: ensure sk_state is set to CLOSED if hashing fails in
+ sctp_listen_start (bsc#1218260).
+- netfilter: xtables: avoid NFPROTO_UNSPEC where needed
+ (bsc#1218260).
+- netfilter: fib: check correct rtable in vrf setups
+ (bsc#1218260).
+- net: do not delay dst_entries_add() in dst_release()
+ (bsc#1218260).
+- rtnetlink: Add bulk registration helpers for rtnetlink message
+ handlers (bsc#1218260).
+- vxlan: Handle error of rtnl_register_module() (bsc#1218260).
+- bridge: Handle error of rtnl_register_module() (bsc#1218260).
+- mctp: Handle error of rtnl_register_module() (bsc#1218260).
+- rtnetlink: change nlk->cb_mutex role (bsc#1218260).
+- rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag (bsc#1218260).
+- mpls: no longer hold RTNL in mpls_netconf_dump_devconf()
+ (bsc#1218260).
+- mpls: Handle error of rtnl_register_module() (bsc#1218260).
+- phonet: no longer hold RTNL in route_dumpit() (bsc#1218260).
+- phonet: Handle error of rtnl_register_module() (bsc#1218260).
+- ppp: fix ppp_async_encode() illegal access (bsc#1218260).
+- slip: make slhc_remember() more robust against malicious packets
+ (bsc#1218260).
+- rcu/nocb: Make IRQs disablement symmetric (bsc#1218260).
+- rcu/nocb: Fix rcuog wake-up from offline softirq (bsc#1218260).
+- HID: mcp2200: added driver for GPIOs of MCP2200 (bsc#1218260).
+- HID: i2c-hid: Remove I2C_HID_QUIRK_SET_PWR_WAKEUP_DEV quirk
+ (bsc#1218260).
+- HID: i2c-hid: Renumber I2C_HID_QUIRK_ defines (bsc#1218260).
+- HID: i2c-hid: Skip SET_POWER SLEEP for Cirque touchpad on
+ system suspend (bsc#1218260).
+- HID: asus: add ROG Ally N-Key ID and keycodes (bsc#1218260).
+- HID: asus: add ROG Z13 lightbar (bsc#1218260).
+- hid-asus: add ROG Ally X prod ID to quirk list (bsc#1218260).
+- wifi: mac80211: Avoid address calculations via out of bounds
+ array indexing (bsc#1218260).
+- hwmon: intel-m10-bmc-hwmon: relabel Columbiaville to CVL Die
+ Temperature (bsc#1218260).
+- hwmon: (tmp513) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (mc34vr500) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (adm9240) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- hwmon: (adt7470) Add missing dependency on REGMAP_I2C
+ (bsc#1218260).
+- HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()
+ (bsc#1218260).
+- HID: multitouch: Add support for lenovo Y9000P Touchpad
+ (bsc#1218260).
+- HID: plantronics: Workaround for an unexcepted opposite volume
+ key (bsc#1218260).
+- Revert "usb: yurex: Replace snprintf() with the safer
+ scnprintf() variant" (bsc#1218260).
+- usb: dwc3: core: Stop processing of pending events if controller
+ is halted (bsc#1218260).
+- usb: xhci: Fix problem with xhci resume from suspend
+ (bsc#1218260).
+- usb: storage: ignore bogus device raised by JieLi BR21 USB
+ sound chip (bsc#1218260).
+- usb: gadget: core: force synchronous registration (bsc#1218260).
+- hid: intel-ish-hid: Fix uninitialized variable 'rv' in
+ ish_fw_xfer_direct_dma (bsc#1218260).
+- drm/v3d: Stop the active perfmon before being destroyed
+ (bsc#1218260).
+- drm/vc4: Stop the active perfmon before being destroyed
+ (bsc#1218260).
+- drm/i915/hdcp: fix connector refcounting (bsc#1218260).
+- Bluetooth: hci_conn: Fix UAF in hci_enhanced_setup_sync
+ (bsc#1218260).
+- scsi: wd33c93: Don't use stale scsi_pointer value (bsc#1218260).
+- scsi: ufs: Use pre-calculated offsets in ufshcd_init_lrb()
+ (bsc#1218260).
+- mptcp: fallback when MPTCP opts are dropped after 1st data
+ (bsc#1218260).
+- ata: libata: avoid superfluous disk spin down + spin up during
+ hibernation (bsc#1218260).
+- net: explicitly clear the sk pointer, when pf->create fails
+ (bsc#1218260).
+- net: Fix an unsafe loop on the list (bsc#1218260).
+- net: dsa: lan9303: ensure chip reset and wait for READY status
+ (bsc#1218260).
+- net: phy: Remove LED entry from LEDs list on unregister
+ (bsc#1218260).
+- mptcp: handle consistently DSS corruption (bsc#1218260).
+- mptcp: pm: do not remove closing subflows (bsc#1218260).
+- device-dax: correct pgoff align in dax_set_mapping()
+ (bsc#1218260).
+- nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy
+ error (bsc#1218260).
+- powercap: intel_rapl_tpmi: Fix bogus register reading
+ (bsc#1218260).
+- selftests/mm: fix incorrect buffer->mirror size in hmm2
+ double_map test (bsc#1218260).
+- selftests/rseq: Fix mm_cid test failure (bsc#1218260).
+- btrfs: split remaining space to discard in chunks (bsc#1218260).
+- kthread: unpark only parked kthread (bsc#1218260).
+- fs/proc/kcore.c: allow translation of physical memory addresses
+ (bsc#1218260).
+- secretmem: disable memfd_secret() if arch cannot set direct map
+ (bsc#1218260).
+- net: ethernet: cortina: Restore TSO support (bsc#1218260).
+- e1000e: fix force smbus during suspend flow (bsc#1218260).
+- scsi: Revert "scsi: sd: Do not repeat the starting disk message"
+ (bsc#1218260).
+- blacklist.conf:
+- Rename to
+ patches.kernel.org/6.6.57-032-i40e-Fix-ST-code-value-for-Clause-45.patch.
+- Rename to
+ patches.kernel.org/6.6.57-033-i40e-Include-types.h-to-some-headers.patch.
+- Rename to
+ patches.kernel.org/6.6.57-043-Bluetooth-Fix-usage-of-__hci_cmd_sync_status.patch.
+- Rename to
+ patches.kernel.org/6.6.57-045-lib-build_OID_registry-avoid-non-destructive-s.patch.
+- commit 806e73d
+
-------------------------------------------------------------------
Thu Oct 10 17:20:52 CEST 2024 - rfrohl@suse.com
diff --git a/packages/k/kernel-source-longterm/kernel-syms-longterm.spec b/packages/k/kernel-source-longterm/kernel-syms-longterm.spec
index 523d7beb4de..11913d73ab8 100644
--- a/packages/k/kernel-source-longterm/kernel-syms-longterm.spec
+++ b/packages/k/kernel-source-longterm/kernel-syms-longterm.spec
@@ -16,7 +16,7 @@
#
-%define git_commit 67435e5eed34256afc005faf5dc2d64a26e20839
+%define git_commit a8ceeb3b3d936f6df83efc36ab1d2297436e5899
%define variant -longterm%{nil}
%include %_sourcedir/kernel-spec-macros
@@ -25,10 +25,10 @@ Name: kernel-syms-longterm
Summary: Kernel Symbol Versions (modversions)
License: GPL-2.0-only
Group: Development/Sources
-Version: 6.6.56
+Version: 6.6.57
%if %using_buildservice
%if 0%{?is_kotd}
-Release: .g67435e5
+Release: .ga8ceeb3
%else
Release: 0
%endif
diff --git a/packages/k/kernel-source-longterm/patches.kernel.org.tar.bz2 b/packages/k/kernel-source-longterm/patches.kernel.org.tar.bz2
index b66a8fe783e..99bf5490131 120000
--- a/packages/k/kernel-source-longterm/patches.kernel.org.tar.bz2
+++ b/packages/k/kernel-source-longterm/patches.kernel.org.tar.bz2
@@ -1 +1 @@
-/ipfs/bafybeifrjtx6lqwbkfoguqpocme6mt62wocczwjy3ap4f6tbtf7vtbuzsu
\ No newline at end of file
+/ipfs/bafybeidzkd4upi2vapu2q7ld7bnlawyd5natrgeoi4e6itvootm7jjbyxy
\ No newline at end of file
diff --git a/packages/k/kernel-source-longterm/series.conf b/packages/k/kernel-source-longterm/series.conf
index ff86286b8ce..4ad19a49d0f 100644
--- a/packages/k/kernel-source-longterm/series.conf
+++ b/packages/k/kernel-source-longterm/series.conf
@@ -5831,8 +5831,6 @@
patches.kernel.org/6.6.26-254-KVM-x86-Add-BHI_NO.patch
patches.kernel.org/6.6.26-255-x86-set-SPECTRE_BHI_ON-as-default.patch
patches.kernel.org/6.6.26-256-Linux-6.6.26.patch
- patches.kernel.org/i40e-Fix-ST-code-value-for-Clause-45.patch
- patches.kernel.org/i40e-Include-types_h-to-some-headers.patch
patches.kernel.org/drm-amd-Stop-evicting-resources-on-APUs-in-suspend.patch
patches.kernel.org/6.6.27-001-amdkfd-use-calloc-instead-of-kzalloc-to-avoid-.patch
patches.kernel.org/6.6.27-002-wifi-ath9k-fix-LNA-selection-in-ath_ant_try_sc.patch
@@ -8725,7 +8723,6 @@
patches.kernel.org/6.6.42-128-cachefiles-fix-slab-use-after-free-in-fscache_.patch
patches.kernel.org/6.6.42-129-cachefiles-fix-slab-use-after-free-in-cachefil.patch
patches.kernel.org/6.6.42-130-Linux-6.6.42.patch
- patches.kernel.org/Bluetooth-Fix-usage-of-__hci_cmd_sync_status.patch
patches.kernel.org/6.6.43-001-drm-amdgpu-Fix-signedness-bug-in-sdma_v4_0_pro.patch
patches.kernel.org/6.6.43-002-ocfs2-add-bounds-checking-to-ocfs2_check_dir_e.patch
patches.kernel.org/6.6.43-003-jfs-don-t-walk-off-the-end-of-ealist.patch
@@ -9315,7 +9312,6 @@
patches.kernel.org/6.6.44-568-nvme-pci-add-missing-condition-check-for-exist.patch
patches.kernel.org/6.6.44-569-fs-don-t-allow-non-init-s_user_ns-for-filesyst.patch
patches.kernel.org/6.6.44-570-Linux-6.6.44.patch
- patches.kernel.org/build_OID_registry-avoid-non-destructive-substitution-for-Perl--5.13.2-compat.patch
patches.kernel.org/6.6.45-001-arm64-dts-qcom-sc7180-switch-USB-DP-QMP-PHY-to.patch
patches.kernel.org/6.6.45-002-arm64-dts-qcom-sc7180-Disable-SuperSpeed-insta.patch
patches.kernel.org/6.6.45-003-arm64-dts-qcom-sc7280-switch-USB-DP-QMP-PHY-to.patch
@@ -11601,6 +11597,218 @@
patches.kernel.org/6.6.55-385-Linux-6.6.55.patch
patches.kernel.org/6.6.56-001-Revert-perf-callchain-Fix-stitch-LBR-memory-le.patch
patches.kernel.org/6.6.56-002-Linux-6.6.56.patch
+ patches.kernel.org/6.6.57-001-unicode-Don-t-special-case-ignorable-code-poin.patch
+ patches.kernel.org/6.6.57-002-net-fec-don-t-save-PTP-state-if-PTP-is-unsuppo.patch
+ patches.kernel.org/6.6.57-003-Revert-PCI-MSI-Provide-stubs-for-IMS-functions.patch
+ patches.kernel.org/6.6.57-004-ASoC-cs35l56-Load-tunings-for-the-correct-spea.patch
+ patches.kernel.org/6.6.57-005-phy-qualcomm-phy-qcom-eusb2-repeater-Add-tunin.patch
+ patches.kernel.org/6.6.57-006-phy-qualcomm-eusb2-repeater-Rework-init-to-dro.patch
+ patches.kernel.org/6.6.57-007-gfs2-Revert-introduce-qd_bh_get_or_undo.patch
+ patches.kernel.org/6.6.57-008-gfs2-qd_check_sync-cleanups.patch
+ patches.kernel.org/6.6.57-009-gfs2-Revert-ignore-negated-quota-changes.patch
+ patches.kernel.org/6.6.57-010-riscv-Remove-SHADOW_OVERFLOW_STACK_SIZE-macro.patch
+ patches.kernel.org/6.6.57-011-net-ethernet-cortina-Drop-TSO-support.patch
+ patches.kernel.org/6.6.57-012-drm-panel-boe-tv101wum-nl6-Fine-tune-Himax8310.patch
+ patches.kernel.org/6.6.57-013-tracing-Remove-precision-vsnprintf-check-from-.patch
+ patches.kernel.org/6.6.57-014-ALSA-hda-realtek-cs35l41-Fix-order-and-duplica.patch
+ patches.kernel.org/6.6.57-015-ALSA-hda-realtek-cs35l41-Fix-device-ID-model-n.patch
+ patches.kernel.org/6.6.57-016-drm-crtc-fix-uninitialized-variable-use-even-h.patch
+ patches.kernel.org/6.6.57-017-bus-mhi-ep-Rename-read_from_host-and-write_to_.patch
+ patches.kernel.org/6.6.57-018-bus-mhi-ep-Introduce-async-read-write-callback.patch
+ patches.kernel.org/6.6.57-019-bus-mhi-ep-Add-support-for-async-DMA-write-ope.patch
+ patches.kernel.org/6.6.57-020-bus-mhi-ep-Add-support-for-async-DMA-read-oper.patch
+ patches.kernel.org/6.6.57-021-bus-mhi-ep-Do-not-allocate-memory-for-MHI-obje.patch
+ patches.kernel.org/6.6.57-022-Revert-powerpc-ps3_defconfig-Disable-PPC64_BIG.patch
+ patches.kernel.org/6.6.57-023-pds_core-no-health-thread-in-VF-path.patch
+ patches.kernel.org/6.6.57-024-libceph-init-the-cursor-when-preparing-sparse-.patch
+ patches.kernel.org/6.6.57-025-tracing-Have-saved_cmdlines-arrays-all-in-one-.patch
+ patches.kernel.org/6.6.57-026-riscv-cpufeature-Fix-thead-vector-hwcap-remova.patch
+ patches.kernel.org/6.6.57-027-spi-spi-fsl-lpspi-remove-redundant-spi_control.patch
+ patches.kernel.org/6.6.57-028-ata-ahci-Add-mask_port_map-module-parameter.patch
+ patches.kernel.org/6.6.57-029-ASoC-tas2781-mark-dvc_tlv-with-__maybe_unused.patch
+ patches.kernel.org/6.6.57-030-scsi-Remove-scsi-device-no_start_on_resume-fla.patch
+ patches.kernel.org/6.6.57-031-scsi-sd-Do-not-repeat-the-starting-disk-messag.patch
+ patches.kernel.org/6.6.57-032-i40e-Fix-ST-code-value-for-Clause-45.patch
+ patches.kernel.org/6.6.57-033-i40e-Include-types.h-to-some-headers.patch
+ patches.kernel.org/6.6.57-034-e1000e-move-force-SMBUS-near-the-end-of-enable.patch
+ patches.kernel.org/6.6.57-035-bootconfig-Fix-the-kerneldoc-of-_xbc_exit.patch
+ patches.kernel.org/6.6.57-036-perf-sched-Move-start_work_mutex-and-work_done.patch
+ patches.kernel.org/6.6.57-037-perf-sched-Fix-memory-leak-in-perf_sched__map.patch
+ patches.kernel.org/6.6.57-038-perf-sched-Move-curr_thread-initialization-to-.patch
+ patches.kernel.org/6.6.57-039-perf-sched-Move-curr_pid-and-cpu_last_switched.patch
+ patches.kernel.org/6.6.57-040-libsubcmd-Don-t-free-the-usage-string.patch
+ patches.kernel.org/6.6.57-041-selftests-net-Remove-executable-bits-from-libr.patch
+ patches.kernel.org/6.6.57-042-selftests-Introduce-Makefile-variable-to-list-.patch
+ patches.kernel.org/6.6.57-043-Bluetooth-Fix-usage-of-__hci_cmd_sync_status.patch
+ patches.kernel.org/6.6.57-044-jbd2-fix-kernel-doc-for-j_transaction_overhead.patch
+ patches.kernel.org/6.6.57-045-lib-build_OID_registry-avoid-non-destructive-s.patch
+ patches.kernel.org/6.6.57-046-drm-amd-display-Remove-a-redundant-check-in-au.patch
+ patches.kernel.org/6.6.57-047-drm-amd-display-Revert-Check-HDCP-returned-sta.patch
+ patches.kernel.org/6.6.57-048-fs-ntfs3-Do-not-call-file_modified-if-collapse.patch
+ patches.kernel.org/6.6.57-049-fs-ntfs3-Fix-sparse-warning-in-ni_fiemap.patch
+ patches.kernel.org/6.6.57-050-fs-ntfs3-Refactor-enum_rstbl-to-suppress-stati.patch
+ patches.kernel.org/6.6.57-051-virtio_console-fix-misc-probe-bugs.patch
+ patches.kernel.org/6.6.57-052-ntfs3-Change-to-non-blocking-allocation-in-ntf.patch
+ patches.kernel.org/6.6.57-053-zram-free-secondary-algorithms-names.patch
+ patches.kernel.org/6.6.57-054-zram-don-t-free-statically-defined-names.patch
+ patches.kernel.org/6.6.57-055-Input-synaptics-rmi4-fix-UAF-of-IRQ-domain-on-.patch
+ patches.kernel.org/6.6.57-056-selftests-bpf-Fix-ARG_PTR_TO_LONG-half-uniniti.patch
+ patches.kernel.org/6.6.57-057-bpf-Check-percpu-map-value-size-first.patch
+ patches.kernel.org/6.6.57-058-s390-facility-Disable-compile-time-optimizatio.patch
+ patches.kernel.org/6.6.57-059-s390-mm-Add-cond_resched-to-cmm_alloc-free_pag.patch
+ patches.kernel.org/6.6.57-060-bpf-x64-Fix-a-jit-convergence-issue.patch
+ patches.kernel.org/6.6.57-061-ext4-don-t-set-SB_RDONLY-after-filesystem-erro.patch
+ patches.kernel.org/6.6.57-062-ext4-nested-locking-for-xattr-inode.patch
+ patches.kernel.org/6.6.57-063-s390-cpum_sf-Remove-WARN_ON_ONCE-statements.patch
+ patches.kernel.org/6.6.57-064-bpf-Prevent-tail-call-between-progs-attached-t.patch
+ patches.kernel.org/6.6.57-065-ktest.pl-Avoid-false-positives-with-grub2-skip.patch
+ patches.kernel.org/6.6.57-066-RDMA-mad-Improve-handling-of-timed-out-WRs-of-.patch
+ patches.kernel.org/6.6.57-067-soundwire-intel_bus_common-enable-interrupts-b.patch
+ patches.kernel.org/6.6.57-068-PCI-Add-function-0-DMA-alias-quirk-for-Glenfly.patch
+ patches.kernel.org/6.6.57-069-RDMA-rtrs-srv-Avoid-null-pointer-deref-during-.patch
+ patches.kernel.org/6.6.57-070-clk-bcm-bcm53573-fix-OF-node-leak-in-init.patch
+ patches.kernel.org/6.6.57-071-PCI-Add-ACS-quirk-for-Qualcomm-SA8775P.patch
+ patches.kernel.org/6.6.57-072-i2c-i801-Use-a-different-adapter-name-for-IDF-.patch
+ patches.kernel.org/6.6.57-073-PCI-Mark-Creative-Labs-EMU20k2-INTx-masking-as.patch
+ patches.kernel.org/6.6.57-074-i3c-master-cdns-Fix-use-after-free-vulnerabili.patch
+ patches.kernel.org/6.6.57-075-RISC-V-Don-t-have-MAX_PHYSMEM_BITS-exceed-phys.patch
+ patches.kernel.org/6.6.57-076-io_uring-check-if-we-need-to-reschedule-during.patch
+ patches.kernel.org/6.6.57-077-ntb-ntb_hw_switchtec-Fix-use-after-free-vulner.patch
+ patches.kernel.org/6.6.57-078-mfd-intel_soc_pmic_chtwc-Make-Lenovo-Yoga-Tab-.patch
+ patches.kernel.org/6.6.57-079-riscv-avoid-Imbalance-in-RAS.patch
+ patches.kernel.org/6.6.57-080-RDMA-mlx5-Enforce-umem-boundaries-for-explicit.patch
+ patches.kernel.org/6.6.57-081-soundwire-cadence-re-check-Peripheral-status-w.patch
+ patches.kernel.org/6.6.57-082-riscv-kexec_file-Fix-relocation-type-R_RISCV_A.patch
+ patches.kernel.org/6.6.57-083-media-videobuf2-core-clear-memory-related-fiel.patch
+ patches.kernel.org/6.6.57-084-remoteproc-imx_rproc-Use-imx-specific-hook-for.patch
+ patches.kernel.org/6.6.57-085-clk-imx-Remove-CLK_SET_PARENT_GATE-for-DRAM-mu.patch
+ patches.kernel.org/6.6.57-086-serial-protect-uart_port_dtr_rts-in-uart_shutd.patch
+ patches.kernel.org/6.6.57-087-usb-typec-tipd-Free-IRQ-only-if-it-was-request.patch
+ patches.kernel.org/6.6.57-088-usb-chipidea-udc-enable-suspend-interrupt-afte.patch
+ patches.kernel.org/6.6.57-089-usb-dwc2-Adjust-the-timing-of-USB-Driver-Inter.patch
+ patches.kernel.org/6.6.57-090-comedi-ni_routing-tools-Check-when-the-file-co.patch
+ patches.kernel.org/6.6.57-091-LoongArch-Fix-memleak-in-pci_acpi_scan_root.patch
+ patches.kernel.org/6.6.57-092-netfilter-nf_nat-don-t-try-nat-source-port-rea.patch
+ patches.kernel.org/6.6.57-093-netfilter-nf_reject-Fix-build-warning-when-CON.patch
+ patches.kernel.org/6.6.57-094-virtio_pmem-Check-device-status-before-request.patch
+ patches.kernel.org/6.6.57-095-tools-iio-Add-memory-allocation-failure-check-.patch
+ patches.kernel.org/6.6.57-096-staging-vme_user-added-bound-check-to-geoid.patch
+ patches.kernel.org/6.6.57-097-driver-core-bus-Fix-double-free-in-driver-API-.patch
+ patches.kernel.org/6.6.57-098-driver-core-bus-Return-EIO-instead-of-0-when-s.patch
+ patches.kernel.org/6.6.57-099-scsi-lpfc-Add-ELS_RSP-cmd-to-the-list-of-WQEs-.patch
+ patches.kernel.org/6.6.57-100-scsi-lpfc-Ensure-DA_ID-handling-completion-bef.patch
+ patches.kernel.org/6.6.57-101-drm-amd-display-Check-null-pointer-before-dere.patch
+ patches.kernel.org/6.6.57-102-fbcon-Fix-a-NULL-pointer-dereference-issue-in-.patch
+ patches.kernel.org/6.6.57-103-smb-client-fix-UAF-in-async-decryption.patch
+ patches.kernel.org/6.6.57-104-fbdev-sisfb-Fix-strbuf-array-overflow.patch
+ patches.kernel.org/6.6.57-105-x86-amd_nb-Add-new-PCI-IDs-for-AMD-family-0x1a.patch
+ patches.kernel.org/6.6.57-106-x86-amd_nb-Add-new-PCI-IDs-for-AMD-family-1Ah-.patch
+ patches.kernel.org/6.6.57-107-NFSD-Mark-filecache-down-if-init-fails.patch
+ patches.kernel.org/6.6.57-108-ice-set-correct-dst-VSI-in-only-LAN-filters.patch
+ patches.kernel.org/6.6.57-109-ice-fix-VLAN-replay-after-reset.patch
+ patches.kernel.org/6.6.57-110-SUNRPC-Fix-integer-overflow-in-decode_rc_list.patch
+ patches.kernel.org/6.6.57-111-NFSv4-Prevent-NULL-pointer-dereference-in-nfs4.patch
+ patches.kernel.org/6.6.57-112-net-phy-dp83869-fix-memory-corruption-when-ena.patch
+ patches.kernel.org/6.6.57-113-tcp-fix-to-allow-timestamp-undo-if-no-retransm.patch
+ patches.kernel.org/6.6.57-114-tcp-fix-tcp_enter_recovery-to-zero-retrans_sta.patch
+ patches.kernel.org/6.6.57-115-tcp-new-TCP_INFO-stats-for-RTO-events.patch
+ patches.kernel.org/6.6.57-116-tcp-fix-TFO-SYN_RECV-to-not-zero-retrans_stamp.patch
+ patches.kernel.org/6.6.57-117-rxrpc-Fix-uninitialised-variable-in-rxrpc_send.patch
+ patches.kernel.org/6.6.57-118-netfilter-br_netfilter-fix-panic-with-metadata.patch
+ patches.kernel.org/6.6.57-119-selftests-net-no_forwarding-fix-VID-for-swp2-i.patch
+ patches.kernel.org/6.6.57-120-Bluetooth-RFCOMM-FIX-possible-deadlock-in-rfco.patch
+ patches.kernel.org/6.6.57-121-net-phy-bcm84881-Fix-some-error-handling-paths.patch
+ patches.kernel.org/6.6.57-122-thermal-int340x-processor_thermal-Set-feature-.patch
+ patches.kernel.org/6.6.57-123-thermal-intel-int340x-processor-Fix-warning-du.patch
+ patches.kernel.org/6.6.57-124-Revert-net-stmmac-set-PP_FLAG_DMA_SYNC_DEV-onl.patch
+ patches.kernel.org/6.6.57-125-net-ethernet-adi-adin1110-Fix-some-error-handl.patch
+ patches.kernel.org/6.6.57-126-net-dsa-b53-fix-jumbo-frame-mtu-check.patch
+ patches.kernel.org/6.6.57-127-net-dsa-b53-fix-max-MTU-for-1g-switches.patch
+ patches.kernel.org/6.6.57-128-net-dsa-b53-fix-max-MTU-for-BCM5325-BCM5365.patch
+ patches.kernel.org/6.6.57-129-net-dsa-b53-allow-lower-MTUs-on-BCM5325-5365.patch
+ patches.kernel.org/6.6.57-130-net-dsa-b53-fix-jumbo-frames-on-10-100-ports.patch
+ patches.kernel.org/6.6.57-131-drm-nouveau-pass-cli-to-nouveau_channel_new-in.patch
+ patches.kernel.org/6.6.57-132-nouveau-dmem-Fix-privileged-error-in-copy-engi.patch
+ patches.kernel.org/6.6.57-133-gpio-aspeed-Add-the-flush-write-to-ensure-the-.patch
+ patches.kernel.org/6.6.57-134-gpio-aspeed-Use-devm_clk-api-to-manage-clock-s.patch
+ patches.kernel.org/6.6.57-135-platform-x86-intel-tpmi-Add-defines-to-get-ver.patch
+ patches.kernel.org/6.6.57-136-powercap-intel_rapl_tpmi-Ignore-minor-version-.patch
+ patches.kernel.org/6.6.57-137-ice-Fix-netif_is_ice-in-Safe-Mode.patch
+ patches.kernel.org/6.6.57-138-ice-rename-switchdev-to-eswitch.patch
+ patches.kernel.org/6.6.57-139-ice-Flush-FDB-entries-before-reset.patch
+ patches.kernel.org/6.6.57-140-i40e-Fix-macvlan-leak-by-synchronizing-access-.patch
+ patches.kernel.org/6.6.57-141-igb-Do-not-bring-the-device-up-after-non-fatal.patch
+ patches.kernel.org/6.6.57-142-e1000e-change-I219-19-devices-to-ADP.patch
+ patches.kernel.org/6.6.57-143-net-sched-accept-TCA_STAB-only-for-root-qdisc.patch
+ patches.kernel.org/6.6.57-144-net-ibm-emac-mal-fix-wrong-goto.patch
+ patches.kernel.org/6.6.57-145-btrfs-zoned-fix-missing-RCU-locking-in-error-m.patch
+ patches.kernel.org/6.6.57-146-sctp-ensure-sk_state-is-set-to-CLOSED-if-hashi.patch
+ patches.kernel.org/6.6.57-147-netfilter-xtables-avoid-NFPROTO_UNSPEC-where-n.patch
+ patches.kernel.org/6.6.57-148-netfilter-fib-check-correct-rtable-in-vrf-setu.patch
+ patches.kernel.org/6.6.57-149-net-do-not-delay-dst_entries_add-in-dst_releas.patch
+ patches.kernel.org/6.6.57-150-rtnetlink-Add-bulk-registration-helpers-for-rt.patch
+ patches.kernel.org/6.6.57-151-vxlan-Handle-error-of-rtnl_register_module.patch
+ patches.kernel.org/6.6.57-152-bridge-Handle-error-of-rtnl_register_module.patch
+ patches.kernel.org/6.6.57-153-mctp-Handle-error-of-rtnl_register_module.patch
+ patches.kernel.org/6.6.57-154-rtnetlink-change-nlk-cb_mutex-role.patch
+ patches.kernel.org/6.6.57-155-rtnetlink-add-RTNL_FLAG_DUMP_UNLOCKED-flag.patch
+ patches.kernel.org/6.6.57-156-mpls-no-longer-hold-RTNL-in-mpls_netconf_dump_.patch
+ patches.kernel.org/6.6.57-157-mpls-Handle-error-of-rtnl_register_module.patch
+ patches.kernel.org/6.6.57-158-phonet-no-longer-hold-RTNL-in-route_dumpit.patch
+ patches.kernel.org/6.6.57-159-phonet-Handle-error-of-rtnl_register_module.patch
+ patches.kernel.org/6.6.57-160-ppp-fix-ppp_async_encode-illegal-access.patch
+ patches.kernel.org/6.6.57-161-slip-make-slhc_remember-more-robust-against-ma.patch
+ patches.kernel.org/6.6.57-162-rcu-nocb-Make-IRQs-disablement-symmetric.patch
+ patches.kernel.org/6.6.57-163-rcu-nocb-Fix-rcuog-wake-up-from-offline-softir.patch
+ patches.kernel.org/6.6.57-164-HID-mcp2200-added-driver-for-GPIOs-of-MCP2200.patch
+ patches.kernel.org/6.6.57-165-HID-i2c-hid-Remove-I2C_HID_QUIRK_SET_PWR_WAKEU.patch
+ patches.kernel.org/6.6.57-166-HID-i2c-hid-Renumber-I2C_HID_QUIRK_-defines.patch
+ patches.kernel.org/6.6.57-167-HID-i2c-hid-Skip-SET_POWER-SLEEP-for-Cirque-to.patch
+ patches.kernel.org/6.6.57-168-HID-asus-add-ROG-Ally-N-Key-ID-and-keycodes.patch
+ patches.kernel.org/6.6.57-169-HID-asus-add-ROG-Z13-lightbar.patch
+ patches.kernel.org/6.6.57-170-hid-asus-add-ROG-Ally-X-prod-ID-to-quirk-list.patch
+ patches.kernel.org/6.6.57-171-wifi-mac80211-Avoid-address-calculations-via-o.patch
+ patches.kernel.org/6.6.57-172-hwmon-intel-m10-bmc-hwmon-relabel-Columbiavill.patch
+ patches.kernel.org/6.6.57-173-hwmon-tmp513-Add-missing-dependency-on-REGMAP_.patch
+ patches.kernel.org/6.6.57-174-hwmon-mc34vr500-Add-missing-dependency-on-REGM.patch
+ patches.kernel.org/6.6.57-175-hwmon-adm9240-Add-missing-dependency-on-REGMAP.patch
+ patches.kernel.org/6.6.57-176-hwmon-adt7470-Add-missing-dependency-on-REGMAP.patch
+ patches.kernel.org/6.6.57-177-HID-amd_sfh-Switch-to-device-managed-dmam_allo.patch
+ patches.kernel.org/6.6.57-178-HID-multitouch-Add-support-for-lenovo-Y9000P-T.patch
+ patches.kernel.org/6.6.57-179-HID-plantronics-Workaround-for-an-unexcepted-o.patch
+ patches.kernel.org/6.6.57-180-Revert-usb-yurex-Replace-snprintf-with-the-saf.patch
+ patches.kernel.org/6.6.57-181-usb-dwc3-core-Stop-processing-of-pending-event.patch
+ patches.kernel.org/6.6.57-182-usb-xhci-Fix-problem-with-xhci-resume-from-sus.patch
+ patches.kernel.org/6.6.57-183-usb-storage-ignore-bogus-device-raised-by-JieL.patch
+ patches.kernel.org/6.6.57-184-usb-gadget-core-force-synchronous-registration.patch
+ patches.kernel.org/6.6.57-185-hid-intel-ish-hid-Fix-uninitialized-variable-r.patch
+ patches.kernel.org/6.6.57-186-drm-v3d-Stop-the-active-perfmon-before-being-d.patch
+ patches.kernel.org/6.6.57-187-drm-vc4-Stop-the-active-perfmon-before-being-d.patch
+ patches.kernel.org/6.6.57-188-drm-i915-hdcp-fix-connector-refcounting.patch
+ patches.kernel.org/6.6.57-189-Bluetooth-hci_conn-Fix-UAF-in-hci_enhanced_set.patch
+ patches.kernel.org/6.6.57-190-scsi-wd33c93-Don-t-use-stale-scsi_pointer-valu.patch
+ patches.kernel.org/6.6.57-191-scsi-ufs-Use-pre-calculated-offsets-in-ufshcd_.patch
+ patches.kernel.org/6.6.57-192-mptcp-fallback-when-MPTCP-opts-are-dropped-aft.patch
+ patches.kernel.org/6.6.57-193-ata-libata-avoid-superfluous-disk-spin-down-sp.patch
+ patches.kernel.org/6.6.57-194-net-explicitly-clear-the-sk-pointer-when-pf-cr.patch
+ patches.kernel.org/6.6.57-195-net-Fix-an-unsafe-loop-on-the-list.patch
+ patches.kernel.org/6.6.57-196-net-dsa-lan9303-ensure-chip-reset-and-wait-for.patch
+ patches.kernel.org/6.6.57-197-net-phy-Remove-LED-entry-from-LEDs-list-on-unr.patch
+ patches.kernel.org/6.6.57-198-mptcp-handle-consistently-DSS-corruption.patch
+ patches.kernel.org/6.6.57-199-mptcp-pm-do-not-remove-closing-subflows.patch
+ patches.kernel.org/6.6.57-200-device-dax-correct-pgoff-align-in-dax_set_mapp.patch
+ patches.kernel.org/6.6.57-201-nouveau-dmem-Fix-vulnerability-in-migrate_to_r.patch
+ patches.kernel.org/6.6.57-202-powercap-intel_rapl_tpmi-Fix-bogus-register-re.patch
+ patches.kernel.org/6.6.57-203-selftests-mm-fix-incorrect-buffer-mirror-size-.patch
+ patches.kernel.org/6.6.57-204-selftests-rseq-Fix-mm_cid-test-failure.patch
+ patches.kernel.org/6.6.57-205-btrfs-split-remaining-space-to-discard-in-chun.patch
+ patches.kernel.org/6.6.57-206-kthread-unpark-only-parked-kthread.patch
+ patches.kernel.org/6.6.57-207-fs-proc-kcore.c-allow-translation-of-physical-.patch
+ patches.kernel.org/6.6.57-208-secretmem-disable-memfd_secret-if-arch-cannot-.patch
+ patches.kernel.org/6.6.57-209-net-ethernet-cortina-Restore-TSO-support.patch
+ patches.kernel.org/6.6.57-210-e1000e-fix-force-smbus-during-suspend-flow.patch
+ patches.kernel.org/6.6.57-211-scsi-Revert-scsi-sd-Do-not-repeat-the-starting.patch
+ patches.kernel.org/6.6.57-212-Linux-6.6.57.patch
########################################################
# Build fixes that apply to the vanilla kernel too.
diff --git a/packages/k/kernel-source-longterm/source-timestamp b/packages/k/kernel-source-longterm/source-timestamp
index 233e16aa76b..f110859e02f 100644
--- a/packages/k/kernel-source-longterm/source-timestamp
+++ b/packages/k/kernel-source-longterm/source-timestamp
@@ -1,3 +1,3 @@
-2024-10-10 15:20:52 +0000
-GIT Revision: 67435e5eed34256afc005faf5dc2d64a26e20839
+2024-10-21 12:35:30 +0000
+GIT Revision: a8ceeb3b3d936f6df83efc36ab1d2297436e5899
GIT Branch: slowroll
diff --git a/packages/k/kumactl/.files b/packages/k/kumactl/.files
index ec3ade1f7ce..ad4a1d0f1c0 100644
Binary files a/packages/k/kumactl/.files and b/packages/k/kumactl/.files differ
diff --git a/packages/k/kumactl/.rev b/packages/k/kumactl/.rev
index 3da146da6ef..c9ee16fdad8 100644
--- a/packages/k/kumactl/.rev
+++ b/packages/k/kumactl/.rev
@@ -15,4 +15,12 @@
1207112
+
+ eb0e9025e1d8682dc08862fdb8d6e17f
+ 2.9.0
+
+ anag+factory
+
+ 1216951
+
diff --git a/packages/k/kumactl/_service b/packages/k/kumactl/_service
index 58d7f675a33..b0cef9bbe93 100644
--- a/packages/k/kumactl/_service
+++ b/packages/k/kumactl/_service
@@ -3,7 +3,7 @@
https://github.com/kumahq/kuma
git
.git
- 2.8.4
+ 2.9.0
@PARENT_TAG@
enable
kumactl
diff --git a/packages/k/kumactl/_servicedata b/packages/k/kumactl/_servicedata
index e59e8549d25..e82987c7aed 100644
--- a/packages/k/kumactl/_servicedata
+++ b/packages/k/kumactl/_servicedata
@@ -1,4 +1,4 @@
https://github.com/kumahq/kuma
- ad5e160a70a764440fdd7f4e8d067b5aaae9a20f
\ No newline at end of file
+ 948e6a4391632607148f4dcdf7e9adce422a8075
\ No newline at end of file
diff --git a/packages/k/kumactl/kumactl-2.8.4.obscpio b/packages/k/kumactl/kumactl-2.8.4.obscpio
deleted file mode 120000
index 04011f4e337..00000000000
--- a/packages/k/kumactl/kumactl-2.8.4.obscpio
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeif4creoc6ygouyk2fc6mhbo7xiim4mcv5effrsjgwgkku7culf644
\ No newline at end of file
diff --git a/packages/k/kumactl/kumactl-2.9.0.obscpio b/packages/k/kumactl/kumactl-2.9.0.obscpio
new file mode 120000
index 00000000000..bb88d4d50bd
--- /dev/null
+++ b/packages/k/kumactl/kumactl-2.9.0.obscpio
@@ -0,0 +1 @@
+/ipfs/bafybeibyv5hi7z3khpk3tg726a7p6ibjwmvioiazz3ifkjuqh354lp3vum
\ No newline at end of file
diff --git a/packages/k/kumactl/kumactl.changes b/packages/k/kumactl/kumactl.changes
index d4354328093..51c7e27b533 100644
--- a/packages/k/kumactl/kumactl.changes
+++ b/packages/k/kumactl/kumactl.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Tue Oct 22 07:44:17 UTC 2024 - opensuse_buildservice@ojkastl.de
+
+- Update to version 2.9.0:
+ CLI-related changes mentioned in changelog
+ * feat(kumactl): update embedded demo resources (#11745)
+ * fix(kumactl): declare meshes before secrets when exporting
+ (#11511)
+ * test(e2e/debug): add kumactl inspect result when universal e2e
+ test fail (#11223)
+ * feat(kumactl): export add no-dataplanes profile and skip
+ secrets (#10964)
+ * fix(kumactl): remove service in prometheus config (#10969)
+ * fix(kumactl): in apply support empty docs (#10951)
+ * feat(kumactl): add server info when doing export (#10914)
+
-------------------------------------------------------------------
Fri Oct 11 08:46:57 UTC 2024 - opensuse_buildservice@ojkastl.de
diff --git a/packages/k/kumactl/kumactl.obsinfo b/packages/k/kumactl/kumactl.obsinfo
index 83a9cec92e0..92dac1355fa 100644
--- a/packages/k/kumactl/kumactl.obsinfo
+++ b/packages/k/kumactl/kumactl.obsinfo
@@ -1,4 +1,4 @@
name: kumactl
-version: 2.8.4
-mtime: 1728296292
-commit: ad5e160a70a764440fdd7f4e8d067b5aaae9a20f
+version: 2.9.0
+mtime: 1729258243
+commit: 948e6a4391632607148f4dcdf7e9adce422a8075
diff --git a/packages/k/kumactl/kumactl.spec b/packages/k/kumactl/kumactl.spec
index f0fa5be86de..93e315676fa 100644
--- a/packages/k/kumactl/kumactl.spec
+++ b/packages/k/kumactl/kumactl.spec
@@ -16,19 +16,20 @@
#
-%define __arch_install_post export NO_BRP_STRIP_DEBUG=true
-
%define envoy_version 1.30.4-k.1
Name: kumactl
-Version: 2.8.4
+Version: 2.9.0
Release: 0
Summary: CLI for the Kuma service mesh
License: Apache-2.0
URL: https://github.com/kumahq/kuma
Source: %{name}-%{version}.tar.gz
Source1: vendor.tar.gz
+BuildRequires: bash-completion
+BuildRequires: fish
BuildRequires: go >= 1.22
+BuildRequires: zsh
%description
Kuma is a modern Envoy-based service mesh that can run on every cloud, in a
@@ -118,8 +119,8 @@ mkdir -p %{buildroot}%{_datarootdir}/fish/vendor_completions.d/
%{buildroot}/%{_bindir}/%{name} completion fish > %{buildroot}%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
# create the zsh completion file
-mkdir -p %{buildroot}%{_datarootdir}/zsh_completion.d/
-%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh_completion.d/_%{name}
+mkdir -p %{buildroot}%{_datarootdir}/zsh/site-functions/
+%{buildroot}/%{_bindir}/%{name} completion zsh > %{buildroot}%{_datarootdir}/zsh/site-functions/_%{name}
%check
bin/%{name} version | grep "Client: Kuma v%{version}"
@@ -130,17 +131,12 @@ bin/%{name} version | grep "Client: Kuma v%{version}"
%{_bindir}/%{name}
%files -n %{name}-bash-completion
-%dir %{_datarootdir}/bash-completion/completions/
%{_datarootdir}/bash-completion/completions/%{name}
%files -n %{name}-fish-completion
-%dir %{_datarootdir}/fish
-%dir %{_datarootdir}/fish/vendor_completions.d
%{_datarootdir}/fish/vendor_completions.d/%{name}.fish
%files -n %{name}-zsh-completion
-%defattr(-,root,root)
-%dir %{_datarootdir}/zsh_completion.d/
-%{_datarootdir}/zsh_completion.d/_%{name}
+%{_datarootdir}/zsh/site-functions/_%{name}
%changelog
diff --git a/packages/k/kumactl/vendor.tar.gz b/packages/k/kumactl/vendor.tar.gz
index 42cb9fdfc04..32a0ac861df 120000
--- a/packages/k/kumactl/vendor.tar.gz
+++ b/packages/k/kumactl/vendor.tar.gz
@@ -1 +1 @@
-/ipfs/bafybeighakfjx7qqa426gpcsrlmq4i2lfs3h3eh6f3us4ssnbkptivmz6q
\ No newline at end of file
+/ipfs/bafybeic6ybucxzipryxl2sdxj46ydjjjmcxiyjx7bgb2dkr4x7soxkhhyu
\ No newline at end of file
diff --git a/packages/libh/libheif/.files b/packages/libh/libheif/.files
index 91cd755acfd..57d7a8587f0 100644
Binary files a/packages/libh/libheif/.files and b/packages/libh/libheif/.files differ
diff --git a/packages/libh/libheif/.rev b/packages/libh/libheif/.rev
index d8395b7d423..95a51b65ceb 100644
--- a/packages/libh/libheif/.rev
+++ b/packages/libh/libheif/.rev
@@ -273,4 +273,12 @@
1195016
+
+ 8c92adcea26819fc088ec6f9e46870d7
+ 1.18.2
+
+ anag+factory
+
+ 1217016
+
diff --git a/packages/libh/libheif/_multibuild b/packages/libh/libheif/_multibuild
new file mode 100644
index 00000000000..83bd4e96a8e
--- /dev/null
+++ b/packages/libh/libheif/_multibuild
@@ -0,0 +1,3 @@
+
+ test
+
diff --git a/packages/libh/libheif/libheif.changes b/packages/libh/libheif/libheif.changes
index 39581358312..66984d34797 100644
--- a/packages/libh/libheif/libheif.changes
+++ b/packages/libh/libheif/libheif.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Oct 21 13:25:54 UTC 2024 - pgajdos@suse.com
+
+- build *-test subpackage with multibuild for running the test suite
+- added sources
+ + _multibuild
+
-------------------------------------------------------------------
Mon Aug 19 14:20:33 UTC 2024 - Manfred Hollstein
diff --git a/packages/libh/libheif/libheif.spec b/packages/libh/libheif/libheif.spec
index 2275cd976bf..fac7ee3ac4b 100644
--- a/packages/libh/libheif/libheif.spec
+++ b/packages/libh/libheif/libheif.spec
@@ -16,6 +16,15 @@
#
+%global flavor @BUILD_FLAVOR@%{nil}
+%if "%{flavor}" == "test"
+%define psuffix -test
+%bcond_without test
+%else
+%define psuffix %{nil}
+%bcond_with test
+%endif
+
%define gdk_pixbuf_binary_version 2.10.0
%bcond_with x265
%bcond_with kvazaar
@@ -59,6 +68,9 @@ BuildRequires: pkgconfig(SvtAv1Enc)
BuildRequires: pkgconfig(libde265)
BuildRequires: pkgconfig(x265)
%endif
+%if %{with test}
+BuildArch: noarch
+%endif
%description
libheif is an ISO/IEC 23008-12:2017 HEIF and AVIF (AV1 Image File Format) file
@@ -222,7 +234,12 @@ Allows to show thumbnail previews of HEIF and AVIF images using %{name}.
%autosetup -p1
%build
+# https://github.com/strukturag/libheif/issues/1281
+sed -i '/add_libheif_test(encode)/d' tests/CMakeLists.txt
%cmake \
+%if %{with test}
+ --preset=testing \
+%else
-DWITH_AOM_DECODER=ON \
-DWITH_AOM_DECODER_PLUGIN=ON \
-DWITH_AOM_ENCODER=ON \
@@ -275,9 +292,19 @@ Allows to show thumbnail previews of HEIF and AVIF images using %{name}.
-DCMAKE_CXX_FLAGS="-pthread" \
%endif
-DPLUGIN_DIRECTORY=%{_libexecdir}/libheif \
+%endif
%nil
%cmake_build
+%if %{with test}
+%check
+cd build
+export LD_LIBRARY_PATH=$(pwd)/libheif
+make test
+%endif
+
+%if !%{with test}
+
%install
%cmake_install
%if %{with x265}
@@ -377,4 +404,6 @@ rm -f %{buildroot}%{_datadir}/thumbnailers/heif.thumbnailer
%{_mandir}/man1/heif-thumbnailer.1%{?ext_man}
%endif
+%endif
+
%changelog
diff --git a/packages/libq/libqxmpp/.files b/packages/libq/libqxmpp/.files
index e19243c4164..60e5078c81a 100644
Binary files a/packages/libq/libqxmpp/.files and b/packages/libq/libqxmpp/.files differ
diff --git a/packages/libq/libqxmpp/.rev b/packages/libq/libqxmpp/.rev
index 240ce5a076a..770bf3bc894 100644
--- a/packages/libq/libqxmpp/.rev
+++ b/packages/libq/libqxmpp/.rev
@@ -280,4 +280,12 @@ Qt5 alternative.
* Fix clang build (forwarded request 1195635 from jubalh)
1195650
+
+ c447d653d4952b51d24f08da8b1d1af0
+ 1.8.2
+
+ anag+factory
+ Update to 1.8.2. Depends on SR#1216969
+ 1217017
+
diff --git a/packages/libq/libqxmpp/libqxmpp-1.8.1.tar.gz b/packages/libq/libqxmpp/libqxmpp-1.8.1.tar.gz
deleted file mode 120000
index e2dac7f7584..00000000000
--- a/packages/libq/libqxmpp/libqxmpp-1.8.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeicwyfubnwztikglqhpuj5rjue4n7rntamtyr4jvm6mcmcnd4dwy24
\ No newline at end of file
diff --git a/packages/libq/libqxmpp/libqxmpp-1.8.2.tar.gz b/packages/libq/libqxmpp/libqxmpp-1.8.2.tar.gz
new file mode 120000
index 00000000000..d29cce15225
--- /dev/null
+++ b/packages/libq/libqxmpp/libqxmpp-1.8.2.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeicgd4despjl36xuuukc3nzv7rv3un7ecrw72qp5h4hev2p63dgopq
\ No newline at end of file
diff --git a/packages/libq/libqxmpp/libqxmpp.changes b/packages/libq/libqxmpp/libqxmpp.changes
index 917668987b7..f4a6e85a80b 100644
--- a/packages/libq/libqxmpp/libqxmpp.changes
+++ b/packages/libq/libqxmpp/libqxmpp.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Tue Oct 22 12:14:08 UTC 2024 - Christophe Marin
+
+- Update to 1.8.2
+ * StreamError: Fix parsing of stream error conditions and
+ missing "invalid-id" condition
+ * Uri: Fix parsing login URI
+
-------------------------------------------------------------------
Fri Aug 23 05:48:27 UTC 2024 - Michael Vetter
diff --git a/packages/libq/libqxmpp/libqxmpp.spec b/packages/libq/libqxmpp/libqxmpp.spec
index 3597e49862e..159329cd0bb 100644
--- a/packages/libq/libqxmpp/libqxmpp.spec
+++ b/packages/libq/libqxmpp/libqxmpp.spec
@@ -32,7 +32,7 @@ ExclusiveArch: do_not_build
%endif
%define sover 5
Name: libqxmpp%{?pkg_suffix}
-Version: 1.8.1
+Version: 1.8.2
Release: 0
Summary: Qt XMPP Library
License: LGPL-2.1-or-later
diff --git a/packages/libv/libvirt/.files b/packages/libv/libvirt/.files
index e8b02a5c130..74b4d120901 100644
Binary files a/packages/libv/libvirt/.files and b/packages/libv/libvirt/.files differ
diff --git a/packages/libv/libvirt/.rev b/packages/libv/libvirt/.rev
index 257a8c0b519..888077d3408 100644
--- a/packages/libv/libvirt/.rev
+++ b/packages/libv/libvirt/.rev
@@ -4670,4 +4670,14 @@ bsc#1216656
https://libvirt.org/news.html#v10-8-0-2024-10-01
1205278
+
+ e563bdc410eeef4b6a67721b0f9fc0c5
+ 10.8.0
+
+ anag+factory
+ - spec: Use default_firewall_backend prjconf setting
+- spec: Loosen nwfilter dependency
+ boo#1231798
+ 1217084
+
diff --git a/packages/libv/libvirt/libvirt-10.8.0.tar.xz b/packages/libv/libvirt/libvirt-10.8.0.tar.xz
index 1c48ac96b0b..97b76d81938 120000
--- a/packages/libv/libvirt/libvirt-10.8.0.tar.xz
+++ b/packages/libv/libvirt/libvirt-10.8.0.tar.xz
@@ -1 +1 @@
-/ipfs/bafybeiddyjhc7v6q622ezvimtgcxa5kgdm6da5uynnio4ge42eafmheivy
\ No newline at end of file
+/ipfs/bafybeiaq33xi3m2maj5d6wzvut2csvvxy5f2mmjyrlhitrwqqzsygegs2m
\ No newline at end of file
diff --git a/packages/libv/libvirt/libvirt.changes b/packages/libv/libvirt/libvirt.changes
index 8db43fcac02..13683efdbdf 100644
--- a/packages/libv/libvirt/libvirt.changes
+++ b/packages/libv/libvirt/libvirt.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Oct 22 15:59:15 UTC 2024 - James Fehlig
+
+- spec: Use default_firewall_backend prjconf setting
+- spec: Loosen nwfilter dependency
+ boo#1231798
+
-------------------------------------------------------------------
Tue Oct 1 19:57:06 UTC 2024 - James Fehlig
diff --git a/packages/libv/libvirt/libvirt.spec b/packages/libv/libvirt/libvirt.spec
index a7a8155ef9f..751f98ae242 100644
--- a/packages/libv/libvirt/libvirt.spec
+++ b/packages/libv/libvirt/libvirt.spec
@@ -123,9 +123,8 @@
%define with_storage_gluster 0
%endif
-# Prefer nftables for Tumbleweed, but keep using iptables for distros based
-# on SLE15 codestream
-%if 0%{?suse_version} > 1500
+# Prefer nftables if available
+%if "%{?default_firewall_backend}" == "nftables"
%define prefer_nftables 1
%define firewall_backend_priority nftables,iptables
%else
@@ -690,7 +689,7 @@ Requires: %{name}-daemon-driver-interface = %{version}-%{release}
%endif
Requires: %{name}-daemon-driver-network = %{version}-%{release}
Requires: %{name}-daemon-driver-nodedev = %{version}-%{release}
-Requires: %{name}-daemon-driver-nwfilter = %{version}-%{release}
+Recommends: %{name}-daemon-driver-nwfilter = %{version}-%{release}
Requires: %{name}-daemon-driver-qemu = %{version}-%{release}
Requires: %{name}-daemon-driver-secret = %{version}-%{release}
Requires: %{name}-daemon-driver-storage = %{version}-%{release}
@@ -712,7 +711,7 @@ Requires: %{name}-daemon-driver-interface = %{version}-%{release}
Requires: %{name}-daemon-driver-lxc = %{version}-%{release}
Requires: %{name}-daemon-driver-network = %{version}-%{release}
Requires: %{name}-daemon-driver-nodedev = %{version}-%{release}
-Requires: %{name}-daemon-driver-nwfilter = %{version}-%{release}
+Recommends: %{name}-daemon-driver-nwfilter = %{version}-%{release}
Requires: %{name}-daemon-driver-secret = %{version}-%{release}
Requires: %{name}-daemon-driver-storage = %{version}-%{release}
@@ -734,7 +733,6 @@ Requires: %{name}-daemon-driver-interface = %{version}-%{release}
Requires: %{name}-daemon-driver-libxl = %{version}-%{release}
Requires: %{name}-daemon-driver-network = %{version}-%{release}
Requires: %{name}-daemon-driver-nodedev = %{version}-%{release}
-Requires: %{name}-daemon-driver-nwfilter = %{version}-%{release}
Requires: %{name}-daemon-driver-secret = %{version}-%{release}
Requires: %{name}-daemon-driver-storage = %{version}-%{release}
Requires: xen
@@ -753,7 +751,7 @@ Requires: %{name}-daemon-driver-interface = %{version}-%{release}
%endif
Requires: %{name}-daemon-driver-network = %{version}-%{release}
Requires: %{name}-daemon-driver-nodedev = %{version}-%{release}
-Requires: %{name}-daemon-driver-nwfilter = %{version}-%{release}
+Recommends: %{name}-daemon-driver-nwfilter = %{version}-%{release}
Requires: %{name}-daemon-driver-secret = %{version}-%{release}
Requires: %{name}-daemon-driver-storage = %{version}-%{release}
Requires: %{name}-daemon-driver-vbox = %{version}-%{release}
diff --git a/packages/libz/libzrtpcpp/.files b/packages/libz/libzrtpcpp/.files
index 3143bb2c02d..76991250890 100644
Binary files a/packages/libz/libzrtpcpp/.files and b/packages/libz/libzrtpcpp/.files differ
diff --git a/packages/libz/libzrtpcpp/.rev b/packages/libz/libzrtpcpp/.rev
index 3feba853a2c..3de2916df7e 100644
--- a/packages/libz/libzrtpcpp/.rev
+++ b/packages/libz/libzrtpcpp/.rev
@@ -311,4 +311,13 @@
- Update to release 4.7.0
832615
+
+ 3eecd65a1680eb0ee186173708515697
+ 4.7.0
+
+ anag+factory
+ - Adapt libzrtpcpp to build with OpenSSL 3 [bsc#1219884]
+ * Add libzrtpcpp-openssl3.patch
+ 1217039
+
diff --git a/packages/libz/libzrtpcpp/libzrtpcpp-openssl3.patch b/packages/libz/libzrtpcpp/libzrtpcpp-openssl3.patch
new file mode 100644
index 00000000000..20b7c4d31c5
--- /dev/null
+++ b/packages/libz/libzrtpcpp/libzrtpcpp-openssl3.patch
@@ -0,0 +1,210 @@
+From: Pedro Monreal Gonzalez
+Date: 2024-10-22 12:59:25+0000
+Subject: Adapt libzrtpcpp to build with OpenSSL 3
+References: https://bugzilla.opensuse.org/1219884
+
+---
+ zrtp/crypto/openssl/InitializeOpenSSL.cpp | 12 +++++++++
+ zrtp/crypto/openssl/hmac256.cpp | 18 +++++++++++++
+ zrtp/crypto/openssl/hmac384.cpp | 18 +++++++++++++
+ zrtp/crypto/openssl/zrtpDH.cpp | 39 ++++++++++++++++++++++++++++++
+ 4 files changed, 87 insertions(+)
+
+Index: ZRTPCPP-4.7.0/zrtp/crypto/openssl/InitializeOpenSSL.cpp
+===================================================================
+--- ZRTPCPP-4.7.0.orig/zrtp/crypto/openssl/InitializeOpenSSL.cpp
++++ ZRTPCPP-4.7.0/zrtp/crypto/openssl/InitializeOpenSSL.cpp
+@@ -18,6 +18,10 @@
+ #include
+ #include
+
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
++# define CRYPTO_get_lock_name(type) (NULL)
++#endif
++
+ #ifdef _MSWINDOWS_
+ #include
+ #endif
+@@ -134,7 +138,11 @@ static void threadLockCleanup(void) {
+ for (i = 0; i < CRYPTO_num_locks(); i++) {
+ /* rwlock_destroy(&(lock_cs[i])); */
+ mutex_destroy(&(lock_cs[i]));
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ fprintf(stderr,"%8ld:%s\n",lock_count[i],CRYPTO_get_lock_name(i));
++#else
++ fprintf(stderr,"%8ld\n",lock_count[i]);
++#endif
+ }
+ OPENSSL_free(lock_cs);
+ OPENSSL_free(lock_count);
+@@ -199,8 +207,12 @@ static void threadLockCleanup(void)
+ fprintf(stderr,"cleanup\n");
+ for (i = 0; i < CRYPTO_num_locks(); i++) {
+ pthread_mutex_destroy(&(lock_cs[i]));
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ fprintf(stderr,"%8ld:%s\n",lock_count[i],
+ CRYPTO_get_lock_name(i));
++#else
++ fprintf(stderr,"%8ld\n",lock_count[i]);
++#endif
+ }
+ OPENSSL_free(lock_cs);
+ OPENSSL_free(lock_count);
+Index: ZRTPCPP-4.7.0/zrtp/crypto/openssl/hmac256.cpp
+===================================================================
+--- ZRTPCPP-4.7.0.orig/zrtp/crypto/openssl/hmac256.cpp
++++ ZRTPCPP-4.7.0/zrtp/crypto/openssl/hmac256.cpp
+@@ -32,13 +32,31 @@ void hmacSha256(const uint8_t* key, uint
+ uint8_t* mac, uint32_t* mac_length)
+ {
+ unsigned int tmp;
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ HMAC_CTX ctx = {};
+ HMAC_CTX_init(&ctx);
+ HMAC_Init_ex( &ctx, key, static_cast(key_length), EVP_sha256(), nullptr );
++#else
++ HMAC_CTX * ctx;
++ ctx = HMAC_CTX_new();
++ HMAC_Init_ex(ctx, key, key_length, EVP_sha256(), NULL);
++#endif
+ for (size_t i = 0, size = data.size(); i < size; i++) {
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ HMAC_Update(&ctx, data[i], dataLength[i]);
++#else
++ HMAC_Update(ctx, data[i], dataLength[i]);
++#endif
+ }
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ HMAC_Final( &ctx, mac, &tmp);
++#else
++ HMAC_Final( ctx, mac, &tmp);
++#endif
+ *mac_length = tmp;
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ HMAC_CTX_cleanup( &ctx );
++#else
++ HMAC_CTX_free( ctx );
++#endif
+ }
+Index: ZRTPCPP-4.7.0/zrtp/crypto/openssl/hmac384.cpp
+===================================================================
+--- ZRTPCPP-4.7.0.orig/zrtp/crypto/openssl/hmac384.cpp
++++ ZRTPCPP-4.7.0/zrtp/crypto/openssl/hmac384.cpp
+@@ -32,14 +32,32 @@ void hmacSha384(const uint8_t* key, uint
+ uint8_t* mac, uint32_t* mac_length)
+ {
+ unsigned int tmp;
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ HMAC_CTX ctx = {};
+ HMAC_CTX_init( &ctx );
+ HMAC_Init_ex( &ctx, key, static_cast(key_length), EVP_sha384(), nullptr );
++#else
++ HMAC_CTX * ctx;
++ ctx = HMAC_CTX_new();
++ HMAC_Init_ex(ctx, key, key_length, EVP_sha384(), NULL);
++#endif
+
+ for (size_t i = 0, size = data.size(); i < size; i++) {
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ HMAC_Update(&ctx, data[i], dataLength[i]);
++#else
++ HMAC_Update(ctx, data[i], dataLength[i]);
++#endif
+ }
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ HMAC_Final( &ctx, mac, &tmp);
++#else
++ HMAC_Final(ctx, mac, &tmp);
++#endif
+ *mac_length = tmp;
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ HMAC_CTX_cleanup( &ctx );
++#else
++ HMAC_CTX_free(ctx);
++#endif
+ }
+Index: ZRTPCPP-4.7.0/zrtp/crypto/openssl/zrtpDH.cpp
+===================================================================
+--- ZRTPCPP-4.7.0.orig/zrtp/crypto/openssl/zrtpDH.cpp
++++ ZRTPCPP-4.7.0/zrtp/crypto/openssl/zrtpDH.cpp
+@@ -201,6 +201,7 @@ ZrtpDH::ZrtpDH(const char* type) {
+ case DH3K:
+ ctx = static_cast(DH_new());
+ tmpCtx = static_cast(ctx);
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ tmpCtx->g = BN_new();
+ BN_set_word(tmpCtx->g, DH_GENERATOR_2);
+
+@@ -216,6 +217,23 @@ ZrtpDH::ZrtpDH(const char* type) {
+ }
+ break;
+
++#else
++ {
++ BIGNUM* g = BN_new();
++ BN_set_word(g, DH_GENERATOR_2);
++ if (pkType == DH2K) {
++ DH_set0_pqg(tmpCtx, BN_dup(bnP2048), NULL, g);
++ RAND_bytes(random, 32);
++ DH_set0_key(tmpCtx, NULL, BN_bin2bn(random, 32, NULL));
++ }
++ else if (pkType == DH3K) {
++ DH_set0_pqg(tmpCtx, BN_dup(bnP3072), NULL, g);
++ RAND_bytes(random, 64);
++ DH_set0_key(tmpCtx, NULL, BN_bin2bn(random, 32, NULL));
++ }
++ }
++ break;
++#endif
+ case EC25:
+ ctx = static_cast(EC_KEY_new_by_curve_name(NID_X9_62_prime256v1));
+ break;
+@@ -252,11 +270,18 @@ int32_t ZrtpDH::computeSecretKey(uint8_t
+ if (pkType == DH2K || pkType == DH3K) {
+ auto* tmpCtx = static_cast(ctx);
+
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ if (tmpCtx->pub_key != nullptr) {
+ BN_free(tmpCtx->pub_key);
+ }
+ tmpCtx->pub_key = BN_bin2bn(pubKeyBytes, getDhSize(), nullptr);
+ return DH_compute_key(secret, tmpCtx->pub_key, tmpCtx);
++#else
++ DH_set0_key(tmpCtx, BN_bin2bn(pubKeyBytes, getDhSize(), NULL), NULL);
++ BIGNUM* pub_key;
++ DH_get0_key(tmpCtx, const_cast(&pub_key), NULL);
++ return DH_compute_key(secret, pub_key, tmpCtx);
++#endif
+ }
+ if (pkType == EC25 || pkType == EC38) {
+ uint8_t buffer[200];
+@@ -305,7 +330,15 @@ uint32_t ZrtpDH::getDhSize() const
+ int32_t ZrtpDH::getPubKeySize() const
+ {
+ if (pkType == DH2K || pkType == DH3K)
++ {
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ return BN_num_bytes(static_cast(ctx)->pub_key);
++#else
++ BIGNUM* pub_key;
++ DH_get0_key(static_cast(ctx), const_cast(&pub_key), NULL);
++ return BN_num_bytes(pub_key);
++#endif
++ }
+
+ if (pkType == EC25 || pkType == EC38)
+ return EC_POINT_point2oct(EC_KEY_get0_group(static_cast(ctx)),
+@@ -324,7 +357,13 @@ int32_t ZrtpDH::getPubKeyBytes(uint8_t *
+ if (prepend > 0) {
+ memset(buf, 0, prepend);
+ }
++#if OPENSSL_VERSION_NUMBER < 0x10100000L
+ return BN_bn2bin(static_cast(ctx)->pub_key, buf + prepend);
++#else
++ BIGNUM* pub_key;
++ DH_get0_key(static_cast(ctx), const_cast(&pub_key), NULL);
++ return BN_bn2bin(pub_key, buf + prepend);
++#endif
+ }
+ if (pkType == EC25 || pkType == EC38) {
+ uint8_t buffer[200];
diff --git a/packages/libz/libzrtpcpp/libzrtpcpp.changes b/packages/libz/libzrtpcpp/libzrtpcpp.changes
index bc1b3a94810..1b782263746 100644
--- a/packages/libz/libzrtpcpp/libzrtpcpp.changes
+++ b/packages/libz/libzrtpcpp/libzrtpcpp.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 22 12:54:43 UTC 2024 - Pedro Monreal
+
+- Adapt libzrtpcpp to build with OpenSSL 3 [bsc#1219884]
+ * Add libzrtpcpp-openssl3.patch
+
-------------------------------------------------------------------
Sun Sep 6 13:52:09 UTC 2020 - Jan Engelhardt
diff --git a/packages/libz/libzrtpcpp/libzrtpcpp.spec b/packages/libz/libzrtpcpp/libzrtpcpp.spec
index 8ec9be9d140..e630cf119eb 100644
--- a/packages/libz/libzrtpcpp/libzrtpcpp.spec
+++ b/packages/libz/libzrtpcpp/libzrtpcpp.spec
@@ -1,7 +1,7 @@
#
# spec file for package libzrtpcpp
#
-# Copyright (c) 2020 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -24,13 +24,13 @@ Summary: A ccrtp extension for ZRTP support
License: GPL-3.0-or-later
Group: Development/Libraries/C and C++
URL: http://www.gnutelephony.org/index.php/GNU_ZRTP
-
#Git-Clone: git://github.com/wernerd/ZRTPCPP
#Git-Web: https://github.com/wernerd/ZRTPCPP
Source: https://github.com/wernerd/ZRTPCPP/archive/%version.tar.gz
+Patch0: libzrtpcpp-openssl3.patch
BuildRequires: cmake
BuildRequires: gcc-c++ >= 4.7
-BuildRequires: libopenssl-1_0_0-devel
+BuildRequires: libopenssl-devel
BuildRequires: pkg-config
BuildRequires: pkgconfig(libccrtp) >= 2
BuildRequires: pkgconfig(sqlite3) >= 3.7
diff --git a/packages/n/NetworkManager-libreswan/.files b/packages/n/NetworkManager-libreswan/.files
index 25467b58134..2d34549d59f 100644
Binary files a/packages/n/NetworkManager-libreswan/.files and b/packages/n/NetworkManager-libreswan/.files differ
diff --git a/packages/n/NetworkManager-libreswan/.rev b/packages/n/NetworkManager-libreswan/.rev
index a93b2d63621..ed3e5da54dd 100644
--- a/packages/n/NetworkManager-libreswan/.rev
+++ b/packages/n/NetworkManager-libreswan/.rev
@@ -122,4 +122,12 @@ This depends on recently checked into tw rpmlint whitelisting - should be "
+ Updated translations. (forwarded request 1175725 from dimstar)
1175726
+
+ 45be659a36cfc767df500d1267080a0f
+ 1.2.24
+
+ anag+factory
+
+ 1217232
+
diff --git a/packages/n/NetworkManager-libreswan/NetworkManager-libreswan-1.2.22.tar.xz b/packages/n/NetworkManager-libreswan/NetworkManager-libreswan-1.2.22.tar.xz
deleted file mode 120000
index 8ab8b461ab0..00000000000
--- a/packages/n/NetworkManager-libreswan/NetworkManager-libreswan-1.2.22.tar.xz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeia32k72xptthmtwqflscs4q5atcumqpjjgdlkhjblc6jegn5da6wa
\ No newline at end of file
diff --git a/packages/n/NetworkManager-libreswan/NetworkManager-libreswan-1.2.24.tar.xz b/packages/n/NetworkManager-libreswan/NetworkManager-libreswan-1.2.24.tar.xz
new file mode 120000
index 00000000000..3a77ebfa1b4
--- /dev/null
+++ b/packages/n/NetworkManager-libreswan/NetworkManager-libreswan-1.2.24.tar.xz
@@ -0,0 +1 @@
+/ipfs/bafybeiehqfdo5jt3qpizqokkyvmyw6kxbxiesvg626gu5uw4w4uhpqkmea
\ No newline at end of file
diff --git a/packages/n/NetworkManager-libreswan/NetworkManager-libreswan.changes b/packages/n/NetworkManager-libreswan/NetworkManager-libreswan.changes
index 929fc79bb56..bd79ce95c4b 100644
--- a/packages/n/NetworkManager-libreswan/NetworkManager-libreswan.changes
+++ b/packages/n/NetworkManager-libreswan/NetworkManager-libreswan.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Tue Oct 22 12:32:50 UTC 2024 - Bjørn Lie
+
+- Update to version 1.2.24:
+ + Fixed formatting of ipsec.conf snippet. This is a security
+ issue with severity of "Important." (CVE-2024-9050).
+ + Added support for "require-id-on-certificate" setting.
+ + Updated translations.
+
-------------------------------------------------------------------
Wed May 22 09:07:30 UTC 2024 - Dominique Leuenberger
diff --git a/packages/n/NetworkManager-libreswan/NetworkManager-libreswan.spec b/packages/n/NetworkManager-libreswan/NetworkManager-libreswan.spec
index dcc50588d20..5fa0f9a1884 100644
--- a/packages/n/NetworkManager-libreswan/NetworkManager-libreswan.spec
+++ b/packages/n/NetworkManager-libreswan/NetworkManager-libreswan.spec
@@ -17,7 +17,7 @@
Name: NetworkManager-libreswan
-Version: 1.2.22
+Version: 1.2.24
Release: 0
Summary: Libreswan VPN client plugin for NetworkManager
License: GPL-2.0-or-later
diff --git a/packages/n/nbdkit/.files b/packages/n/nbdkit/.files
index 3c8a8e30e89..b6b465c20ff 100644
Binary files a/packages/n/nbdkit/.files and b/packages/n/nbdkit/.files differ
diff --git a/packages/n/nbdkit/.rev b/packages/n/nbdkit/.rev
index dd9a35d29ad..175d3ab46f0 100644
--- a/packages/n/nbdkit/.rev
+++ b/packages/n/nbdkit/.rev
@@ -185,4 +185,12 @@ to an old changelog entry in order to submit the same package to
Factory, SLE15-SP7:GA, and SLFO:Main.
1208904
+
+ 0d5f1f98ae7313732a7cc8cac810883b
+ 1.40.4
+
+ anag+factory
+ - Exclude tests when building for ix86
+ 1217085
+
diff --git a/packages/n/nbdkit/nbdkit.changes b/packages/n/nbdkit/nbdkit.changes
index ba86d247b91..7d8c7c25bf9 100644
--- a/packages/n/nbdkit/nbdkit.changes
+++ b/packages/n/nbdkit/nbdkit.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Tue Oct 22 16:31:01 UTC 2024 - James Fehlig
+
+- Exclude tests when building for ix86
+
-------------------------------------------------------------------
Fri Oct 18 17:14:37 UTC 2024 - jfehlig@suse.com
diff --git a/packages/n/nbdkit/nbdkit.spec b/packages/n/nbdkit/nbdkit.spec
index c72fcf6205d..4ead103cc9b 100644
--- a/packages/n/nbdkit/nbdkit.spec
+++ b/packages/n/nbdkit/nbdkit.spec
@@ -24,7 +24,7 @@
# omits any tests that run full qemu, since running qemu under TCG is
# often broken on non-x86_64 arches.
%global complete_test_arches x86_64
-%global broken_test_arches %{arm} aarch64
+%global broken_test_arches %{arm} aarch64 %{ix86}
Name: nbdkit
Version: 1.40.4
@@ -174,9 +174,9 @@ This package contains example plugins for %{name}.
+
# The plugins below have non-trivial dependencies are so are
# packaged separately.
-
%package cdi-plugin
Summary: Containerized Data Import plugin for %{name}
Requires: %{name}-server = %{version}-%{release}
@@ -195,9 +195,9 @@ This package contains cURL (HTTP/FTP) support for %{name}.
+
# In theory this is noarch, but because plugins are placed in _libdir
# which varies across architectures, RPM does not allow this.
-
%package gcs-plugin
Summary: Gooogle Cloud Storage plugin %{name}
Requires: %{name}-python-plugin = %{version}-%{release}
diff --git a/packages/o/open-vm-tools/.files b/packages/o/open-vm-tools/.files
index da5922e1485..6ddc3b0b9f3 100644
Binary files a/packages/o/open-vm-tools/.files and b/packages/o/open-vm-tools/.files differ
diff --git a/packages/o/open-vm-tools/.rev b/packages/o/open-vm-tools/.rev
index 5e4e932c681..94e9b1e87b6 100644
--- a/packages/o/open-vm-tools/.rev
+++ b/packages/o/open-vm-tools/.rev
@@ -1049,4 +1049,12 @@ this is ever going to be fixed
1184375
+
+ a5cf825741f738f5d052cdb0eb9d1a69
+ 12.5.0
+
+ anag+factory
+
+ 1216846
+
diff --git a/packages/o/open-vm-tools/_service b/packages/o/open-vm-tools/_service
index 977ce6b4849..7c97598beb0 100644
--- a/packages/o/open-vm-tools/_service
+++ b/packages/o/open-vm-tools/_service
@@ -1,14 +1,18 @@
-
- git
+
https://github.com/vmware/open-vm-tools.git
- stable-12.4.5
- open-vm-tools
- 12.4.5
+ git
+ stable-12.5.0
+ @PARENT_TAG@
+ stable-(.*)
+
+
+
+
+
-
+
*.tar
- xz
+ gz
-
diff --git a/packages/o/open-vm-tools/open-vm-tools-12.4.5.tar.xz b/packages/o/open-vm-tools/open-vm-tools-12.4.5.tar.xz
deleted file mode 120000
index befde52fd4a..00000000000
--- a/packages/o/open-vm-tools/open-vm-tools-12.4.5.tar.xz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeie37b3hlalbvdja5e4ywky5uc63wamwkjw5kvcb7t4wjhehwexrya
\ No newline at end of file
diff --git a/packages/o/open-vm-tools/open-vm-tools-12.5.0.obscpio b/packages/o/open-vm-tools/open-vm-tools-12.5.0.obscpio
new file mode 120000
index 00000000000..1fc853c62d0
--- /dev/null
+++ b/packages/o/open-vm-tools/open-vm-tools-12.5.0.obscpio
@@ -0,0 +1 @@
+/ipfs/bafybeiebqq5tppnbfxko2ozbsjh4rwsghucpysbyydw7yh6f5miogilu4m
\ No newline at end of file
diff --git a/packages/o/open-vm-tools/open-vm-tools.changes b/packages/o/open-vm-tools/open-vm-tools.changes
index d03165038da..1bbb3142a04 100644
--- a/packages/o/open-vm-tools/open-vm-tools.changes
+++ b/packages/o/open-vm-tools/open-vm-tools.changes
@@ -1,3 +1,23 @@
+-------------------------------------------------------------------
+Fri Oct 11 07:24:04 UTC 2024 - Johannes Kastl
+
+- convert to obs_scm
+- update to 12.5.0 (boo#1231826):
+ There are no new features in the open-vm-tools 12.5.0 release.
+ This is primarily a maintenance release that addresses a few
+ critical problems, including:
+ * A Github pull request has been integrated. Please see the
+ Resolved Issues section of the Release Notes.
+ * For a more complete list of issues resolved in this release,
+ see the Resolved Issues section of the Release Notes.
+ For complete details, see:
+ https://github.com/vmware/open-vm-tools/releases/tag/stable-12.5.0
+ Release Notes are available at:
+ https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/ReleaseNotes.md
+ The granular changes that have gone into the 12.5.0 release are
+ in the ChangeLog at:
+ https://github.com/vmware/open-vm-tools/blob/stable-12.5.0/open-vm-tools/ChangeLog
+
-------------------------------------------------------------------
Mon Jul 1 15:07:51 UTC 2024 - Kirk Allan
diff --git a/packages/o/open-vm-tools/open-vm-tools.obsinfo b/packages/o/open-vm-tools/open-vm-tools.obsinfo
new file mode 100644
index 00000000000..82c602c81b6
--- /dev/null
+++ b/packages/o/open-vm-tools/open-vm-tools.obsinfo
@@ -0,0 +1,4 @@
+name: open-vm-tools
+version: 12.5.0
+mtime: 1728572707
+commit: f2ca37ef3510543172657b82493d1eceefa9a134
diff --git a/packages/o/open-vm-tools/open-vm-tools.spec b/packages/o/open-vm-tools/open-vm-tools.spec
index 713fe36fe06..23f6fc45f6d 100644
--- a/packages/o/open-vm-tools/open-vm-tools.spec
+++ b/packages/o/open-vm-tools/open-vm-tools.spec
@@ -38,13 +38,13 @@
%define with_X 1
Name: open-vm-tools
-Version: 12.4.5
+Version: 12.5.0
Release: 0
Summary: Open Virtual Machine Tools
License: BSD-3-Clause AND GPL-2.0-only AND LGPL-2.1-only
Group: System/Emulators/PC
URL: https://github.com/vmware/open-vm-tools
-Source: %{name}-%{version}.tar.xz
+Source: %{name}-%{version}.tar.gz
Source1: vmtoolsd
Source2: vmtoolsd.service
Source3: vmware-user-autostart.desktop
diff --git a/packages/o/openQA/.files b/packages/o/openQA/.files
index 3569088013e..75be12b38ac 100644
Binary files a/packages/o/openQA/.files and b/packages/o/openQA/.files differ
diff --git a/packages/o/openQA/.rev b/packages/o/openQA/.rev
index 04360287e63..b349d90158c 100644
--- a/packages/o/openQA/.rev
+++ b/packages/o/openQA/.rev
@@ -7357,4 +7357,16 @@
4.6.1729244210.5cfb4dcc
1209012
+
+ 6f16b05851477c3b8e3ca1ed95505280
+ 4.6.1729587891.7145424b
+
+ anag+factory
+ Update to 4.6.1729587891.7145424b
+4.6.1729587891.7145424b
+4.6.1729587891.7145424b
+4.6.1729587891.7145424b
+4.6.1729587891.7145424b
+ 1217000
+
diff --git a/packages/o/openQA/node_modules.obscpio b/packages/o/openQA/node_modules.obscpio
index bece0e19a17..64cd559dd44 120000
--- a/packages/o/openQA/node_modules.obscpio
+++ b/packages/o/openQA/node_modules.obscpio
@@ -1 +1 @@
-/ipfs/bafybeicw7t44uwwogau7aeinnakta6stmhqiqxivyf3yydrrt5x3qunlra
\ No newline at end of file
+/ipfs/bafybeid2hblka2lcjacp5rsflbtj7bkrle5hw7ncxfhkjrjjuhomub7a3a
\ No newline at end of file
diff --git a/packages/o/openQA/node_modules.spec.inc b/packages/o/openQA/node_modules.spec.inc
index 44657bad727..6bc1cec89fb 100644
--- a/packages/o/openQA/node_modules.spec.inc
+++ b/packages/o/openQA/node_modules.spec.inc
@@ -1,11 +1,11 @@
Source1000: https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.4.0.tgz#/@eslint-community-eslint-utils-4.4.0.tgz
Source1001: https://registry.npmjs.org/@eslint-community/regexpp/-/regexpp-4.11.1.tgz#/@eslint-community-regexpp-4.11.1.tgz
Source1002: https://registry.npmjs.org/@eslint/config-array/-/config-array-0.18.0.tgz#/@eslint-config-array-0.18.0.tgz
-Source1003: https://registry.npmjs.org/@eslint/core/-/core-0.6.0.tgz#/@eslint-core-0.6.0.tgz
+Source1003: https://registry.npmjs.org/@eslint/core/-/core-0.7.0.tgz#/@eslint-core-0.7.0.tgz
Source1004: https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-3.1.0.tgz#/@eslint-eslintrc-3.1.0.tgz
-Source1005: https://registry.npmjs.org/@eslint/js/-/js-9.12.0.tgz#/@eslint-js-9.12.0.tgz
+Source1005: https://registry.npmjs.org/@eslint/js/-/js-9.13.0.tgz#/@eslint-js-9.13.0.tgz
Source1006: https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.4.tgz#/@eslint-object-schema-2.1.4.tgz
-Source1007: https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.0.tgz#/@eslint-plugin-kit-0.2.0.tgz
+Source1007: https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.1.tgz#/@eslint-plugin-kit-0.2.1.tgz
Source1008: https://registry.npmjs.org/@humanfs/core/-/core-0.19.0.tgz#/@humanfs-core-0.19.0.tgz
Source1009: https://registry.npmjs.org/@humanfs/node/-/node-0.16.5.tgz#/@humanfs-node-0.16.5.tgz
Source1010: https://registry.npmjs.org/@humanwhocodes/module-importer/-/module-importer-1.0.1.tgz#/@humanwhocodes-module-importer-1.0.1.tgz
@@ -14,7 +14,7 @@ Source1012: https://registry.npmjs.org/@pkgr/core/-/core-0.1.1.tgz#/@pkg
Source1013: https://registry.npmjs.org/@popperjs/core/-/core-2.11.8.tgz#/@popperjs-core-2.11.8.tgz
Source1014: https://registry.npmjs.org/@types/estree/-/estree-1.0.6.tgz#/@types-estree-1.0.6.tgz
Source1015: https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz#/@types-json-schema-7.0.15.tgz
-Source1016: https://registry.npmjs.org/ace-builds/-/ace-builds-1.36.2.tgz#/ace-builds-1.36.2.tgz
+Source1016: https://registry.npmjs.org/ace-builds/-/ace-builds-1.36.3.tgz#/ace-builds-1.36.3.tgz
Source1017: https://registry.npmjs.org/acorn/-/acorn-8.13.0.tgz#/acorn-8.13.0.tgz
Source1018: https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-5.3.2.tgz#/acorn-jsx-5.3.2.tgz
Source1019: https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz#/ajv-6.12.6.tgz
@@ -71,7 +71,7 @@ Source1069: https://registry.npmjs.org/debug/-/debug-4.3.7.tgz#/debug-4.
Source1070: https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz#/deep-is-0.1.4.tgz
Source1071: https://registry.npmjs.org/delaunator/-/delaunator-5.0.1.tgz#/delaunator-5.0.1.tgz
Source1072: https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-4.0.0.tgz#/escape-string-regexp-4.0.0.tgz
-Source1073: https://registry.npmjs.org/eslint/-/eslint-9.12.0.tgz#/eslint-9.12.0.tgz
+Source1073: https://registry.npmjs.org/eslint/-/eslint-9.13.0.tgz#/eslint-9.13.0.tgz
Source1074: https://registry.npmjs.org/eslint-config-prettier/-/eslint-config-prettier-9.1.0.tgz#/eslint-config-prettier-9.1.0.tgz
Source1075: https://registry.npmjs.org/eslint-plugin-prettier/-/eslint-plugin-prettier-5.2.1.tgz#/eslint-plugin-prettier-5.2.1.tgz
Source1076: https://registry.npmjs.org/eslint-scope/-/eslint-scope-8.1.0.tgz#/eslint-scope-8.1.0.tgz
diff --git a/packages/o/openQA/openQA-4.6.1729244210.5cfb4dcc.obscpio b/packages/o/openQA/openQA-4.6.1729244210.5cfb4dcc.obscpio
deleted file mode 120000
index d0ebbd58fc5..00000000000
--- a/packages/o/openQA/openQA-4.6.1729244210.5cfb4dcc.obscpio
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeiex6wrjltlg2ux3y4yp2ix5q7zoatqlalyv4osgoqf6zo2t2qr2cm
\ No newline at end of file
diff --git a/packages/o/openQA/openQA-4.6.1729587891.7145424b.obscpio b/packages/o/openQA/openQA-4.6.1729587891.7145424b.obscpio
new file mode 120000
index 00000000000..047c0b690ab
--- /dev/null
+++ b/packages/o/openQA/openQA-4.6.1729587891.7145424b.obscpio
@@ -0,0 +1 @@
+/ipfs/bafybeif3s2mbcfp5mnpay4mbiyabbkbhf3l4mugogquuo53xlurw62u27m
\ No newline at end of file
diff --git a/packages/o/openQA/openQA-client-test.spec b/packages/o/openQA/openQA-client-test.spec
index 667e2aaa1e1..471121e741c 100644
--- a/packages/o/openQA/openQA-client-test.spec
+++ b/packages/o/openQA/openQA-client-test.spec
@@ -18,7 +18,7 @@
%define short_name openQA-client
Name: %{short_name}-test
-Version: 4.6.1729244210.5cfb4dcc
+Version: 4.6.1729587891.7145424b
Release: 0
Summary: Test package for %{short_name}
License: GPL-2.0-or-later
diff --git a/packages/o/openQA/openQA-devel-test.spec b/packages/o/openQA/openQA-devel-test.spec
index 03ad8fe74cf..2b85de2d66d 100644
--- a/packages/o/openQA/openQA-devel-test.spec
+++ b/packages/o/openQA/openQA-devel-test.spec
@@ -18,7 +18,7 @@
%define short_name openQA-devel
Name: %{short_name}-test
-Version: 4.6.1729244210.5cfb4dcc
+Version: 4.6.1729587891.7145424b
Release: 0
Summary: Test package for %{short_name}
License: GPL-2.0-or-later
diff --git a/packages/o/openQA/openQA-test.spec b/packages/o/openQA/openQA-test.spec
index e492a2d6914..e946c884f70 100644
--- a/packages/o/openQA/openQA-test.spec
+++ b/packages/o/openQA/openQA-test.spec
@@ -18,7 +18,7 @@
%define short_name openQA
Name: %{short_name}-test
-Version: 4.6.1729244210.5cfb4dcc
+Version: 4.6.1729587891.7145424b
Release: 0
Summary: Test package for openQA
License: GPL-2.0-or-later
diff --git a/packages/o/openQA/openQA-worker-test.spec b/packages/o/openQA/openQA-worker-test.spec
index b2ba5d3f7ad..1bf9e8cda75 100644
--- a/packages/o/openQA/openQA-worker-test.spec
+++ b/packages/o/openQA/openQA-worker-test.spec
@@ -18,7 +18,7 @@
%define short_name openQA-worker
Name: %{short_name}-test
-Version: 4.6.1729244210.5cfb4dcc
+Version: 4.6.1729587891.7145424b
Release: 0
Summary: Test package for %{short_name}
License: GPL-2.0-or-later
diff --git a/packages/o/openQA/openQA.changes b/packages/o/openQA/openQA.changes
index 555217f4bc9..68fa31fd3c1 100644
--- a/packages/o/openQA/openQA.changes
+++ b/packages/o/openQA/openQA.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Tue Oct 22 11:15:29 UTC 2024 - okurz@suse.com
+
+- Update to version 4.6.1729587891.7145424b:
+ * Bump eslint from 9.12.0 to 9.13.0
+ * Improve worker load threshold detection
+ * Bump @eslint/plugin-kit from 0.2.0 to 0.2.1
+ * Bump ace-builds from 1.36.2 to 1.36.3
+ * Return timestamps with offset to client for needle info
+ * Use local timezone in t/ui/21-admin-needles.t
+
-------------------------------------------------------------------
Sun Oct 20 03:14:43 UTC 2024 - okurz@suse.com
diff --git a/packages/o/openQA/openQA.obsinfo b/packages/o/openQA/openQA.obsinfo
index 24c7f806530..f025197e280 100644
--- a/packages/o/openQA/openQA.obsinfo
+++ b/packages/o/openQA/openQA.obsinfo
@@ -1,4 +1,4 @@
name: openQA
-version: 4.6.1729244210.5cfb4dcc
-mtime: 1729244210
-commit: 5cfb4dccf98d2fed1d21bd7f6c346dcd7e854048
+version: 4.6.1729587891.7145424b
+mtime: 1729587891
+commit: 7145424b2a2a29b8c071f58ea9bb62b5629ea66c
diff --git a/packages/o/openQA/openQA.spec b/packages/o/openQA/openQA.spec
index 231c7f8a0cf..265042a55f6 100644
--- a/packages/o/openQA/openQA.spec
+++ b/packages/o/openQA/openQA.spec
@@ -90,7 +90,7 @@
%define devel_requires %devel_no_selenium_requires chromedriver
Name: openQA
-Version: 4.6.1729244210.5cfb4dcc
+Version: 4.6.1729587891.7145424b
Release: 0
Summary: The openQA web-frontend, scheduler and tools
License: GPL-2.0-or-later
diff --git a/packages/o/orafce/.files b/packages/o/orafce/.files
index 7d908053e69..866b8b1903b 100644
Binary files a/packages/o/orafce/.files and b/packages/o/orafce/.files differ
diff --git a/packages/o/orafce/.rev b/packages/o/orafce/.rev
index 4fbcbbfc05c..0c7c2e06cd3 100644
--- a/packages/o/orafce/.rev
+++ b/packages/o/orafce/.rev
@@ -174,4 +174,12 @@
1203572
+
+ aab1335537f1fb6ecc19f9dfc3a4c7f3
+ 4.13.5+git0.ab95f82
+
+ anag+factory
+
+ 1217062
+
diff --git a/packages/o/orafce/_multibuild b/packages/o/orafce/_multibuild
index 02c3ed3e6f6..0151ae85314 100644
--- a/packages/o/orafce/_multibuild
+++ b/packages/o/orafce/_multibuild
@@ -4,4 +4,5 @@
postgresql14
postgresql15
postgresql16
+ postgresql17
diff --git a/packages/o/orafce/_service b/packages/o/orafce/_service
index 1cbbbf350da..ee211090f2e 100644
--- a/packages/o/orafce/_service
+++ b/packages/o/orafce/_service
@@ -1,15 +1,18 @@
-
+
https://github.com/orafce/orafce.git
@PARENT_TAG@+git@TAG_OFFSET@.%h
VERSION_(\d+).(\d+).(\d+)(.*)
\1.\2.\3\4
+ VERSION_4_13_5
+
git
enable
-
+
*.tar
gz
diff --git a/packages/o/orafce/_servicedata b/packages/o/orafce/_servicedata
index 53fed12541a..0f4a27c14c0 100644
--- a/packages/o/orafce/_servicedata
+++ b/packages/o/orafce/_servicedata
@@ -1,4 +1,4 @@
https://github.com/orafce/orafce.git
- 25d74aad957eda018f8da14decba996cc2ce32f2
\ No newline at end of file
+ ab95f8296486801e3f90d101e43a7528674399e0
\ No newline at end of file
diff --git a/packages/o/orafce/orafce-4.13.0+git3.25d74aa.obscpio b/packages/o/orafce/orafce-4.13.0+git3.25d74aa.obscpio
deleted file mode 120000
index a693cee873e..00000000000
--- a/packages/o/orafce/orafce-4.13.0+git3.25d74aa.obscpio
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeib2sfhdmf3fw7vkvzm6hmmlvnftgwmvxydmfxlzpm2kjodj3u3avm
\ No newline at end of file
diff --git a/packages/o/orafce/orafce-4.13.5+git0.ab95f82.obscpio b/packages/o/orafce/orafce-4.13.5+git0.ab95f82.obscpio
new file mode 120000
index 00000000000..619ed1d648e
--- /dev/null
+++ b/packages/o/orafce/orafce-4.13.5+git0.ab95f82.obscpio
@@ -0,0 +1 @@
+/ipfs/bafybeihnwkcfsdwdfzfwjb6vz3bljgapl5ycsdgm4qglwaez3grquqjx6y
\ No newline at end of file
diff --git a/packages/o/orafce/orafce.changes b/packages/o/orafce/orafce.changes
index dec09cc00dd..7f34e70cd87 100644
--- a/packages/o/orafce/orafce.changes
+++ b/packages/o/orafce/orafce.changes
@@ -1,3 +1,46 @@
+-------------------------------------------------------------------
+Tue Oct 22 14:01:46 UTC 2024 - emiliano.langella@suse.com
+
+- Update to version 4.13.5+git0.ab95f82:
+ * prepare for 4.13.5
+ * export orafce_sys_extract_utc and orafce_sys_extract_utc_oracle_date for win build
+ * With Oracle passing en empty string to the to_date(txt, fmt) function returns NULL whereas PostgreSQL returns '0001-01-01 BC'. This true whatever is the format passed as second argument. Change the behavior of function to_date(txt, fmt) to mimic Oracle.
+
+-------------------------------------------------------------------
+Tue Oct 15 12:13:46 UTC 2024 - emiliano.langella@suse.com
+
+- Update to version 4.13.4+git0.8f3f211:
+ * prepare for 4.13.4
+ * fix update script from 4.12 to 4.13
+ * prepare for 4.13.3
+ * umask is usually entered as octec number, then read it as octec number
+
+-------------------------------------------------------------------
+Tue Oct 15 12:06:21 UTC 2024 - mrueckert@suse.de
+
+- Update to version 4.13.4+git0.8f3f211:
+ * prepare for 4.13.4
+ * fix update script from 4.12 to 4.13
+
+-------------------------------------------------------------------
+Tue Oct 15 11:55:06 UTC 2024 - mrueckert@suse.de
+
+- Update to version 4.13.3+git0.0bf0f15:
+ * prepare for 4.13.3
+ * umask is usually entered as octec number, then read it as octec number
+
+-------------------------------------------------------------------
+Sat Sep 28 00:31:28 UTC 2024 - Marcus Rueckert
+
+- enable pg17
+
+-------------------------------------------------------------------
+Sat Sep 28 00:31:10 UTC 2024 - mrueckert@suse.de
+
+- Update to version 4.13.2+git0.f8f8700:
+ * prepare for 4.13.2
+ * fix missing update of control file and regress tests
+
-------------------------------------------------------------------
Wed Sep 25 12:25:11 UTC 2024 - emiliano.langella@suse.com
diff --git a/packages/o/orafce/orafce.obsinfo b/packages/o/orafce/orafce.obsinfo
index 9d4451cb2b2..f27fdea2af6 100644
--- a/packages/o/orafce/orafce.obsinfo
+++ b/packages/o/orafce/orafce.obsinfo
@@ -1,4 +1,4 @@
name: orafce
-version: 4.13.0+git3.25d74aa
-mtime: 1727200358
-commit: 25d74aad957eda018f8da14decba996cc2ce32f2
+version: 4.13.5+git0.ab95f82
+mtime: 1729566529
+commit: ab95f8296486801e3f90d101e43a7528674399e0
diff --git a/packages/o/orafce/orafce.spec b/packages/o/orafce/orafce.spec
index 56a4195c545..c20fb1fe4db 100644
--- a/packages/o/orafce/orafce.spec
+++ b/packages/o/orafce/orafce.spec
@@ -20,7 +20,7 @@
%define realname orafce
Name: %{pgname}-orafce
-Version: 4.13.0+git3.25d74aa
+Version: 4.13.5+git0.ab95f82
Release: 0
Summary: Implementation of some Oracle functions into PostgreSQL
Group: Productivity/Databases/Tools
diff --git a/packages/p/PDAL/.files b/packages/p/PDAL/.files
index 0360a3d2309..bee9ec21539 100644
Binary files a/packages/p/PDAL/.files and b/packages/p/PDAL/.files differ
diff --git a/packages/p/PDAL/.rev b/packages/p/PDAL/.rev
index 94f2b497922..fc1297de0ee 100644
--- a/packages/p/PDAL/.rev
+++ b/packages/p/PDAL/.rev
@@ -83,4 +83,12 @@
1199930
+
+ 8a19d4e8c1379c292a5a474473c2e55f
+ 2.8.0
+
+ anag+factory
+
+ 1217108
+
diff --git a/packages/p/PDAL/PDAL.changes b/packages/p/PDAL/PDAL.changes
index 38568da665e..1d2c205539d 100644
--- a/packages/p/PDAL/PDAL.changes
+++ b/packages/p/PDAL/PDAL.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Oct 22 18:36:23 UTC 2024 - Enno Tensing
+
+- Remove laszip as a build requirement, since PDAL uses a bundled version of
+ the lazperf library for this functionality since 2022-02-03 (see commit
+ 6bdd2e2c281fe0313f8acd8b8b9e4ccf9b2a13c3 upstream)
+
-------------------------------------------------------------------
Tue Sep 10 12:14:57 UTC 2024 - Enno Tensing
diff --git a/packages/p/PDAL/PDAL.spec b/packages/p/PDAL/PDAL.spec
index 1d9f36a25ed..752b03690dd 100644
--- a/packages/p/PDAL/PDAL.spec
+++ b/packages/p/PDAL/PDAL.spec
@@ -22,7 +22,7 @@
%define lname pdal
Name: PDAL
Version: 2.8.0
-Release: 0
+Release: 1
Summary: Point Data Abstraction Library (GDAL for point cloud data)
# The code is licensed BSD except for:
# - filters/private/csf/* and plugins/i3s/lepcc/* are Apache-2.0
@@ -49,8 +49,6 @@ BuildRequires: gdal
BuildRequires: geotiff-devel
BuildRequires: gtest
BuildRequires: jsoncpp-devel
-# We need 3.1.1+ for 1.6
-BuildRequires: laszip-devel
BuildRequires: libboost_filesystem-devel
BuildRequires: libboost_headers-devel
BuildRequires: libboost_program_options-devel
@@ -141,7 +139,6 @@ This package contain the bash completion command for PDAL.
Summary: Development files and tools for PDAL applications
Group: Development/Libraries/C and C++
Requires: cmake
-Requires: laszip-devel
Requires: lib%{name}%{soname} = %{version}
Requires: libboost_filesystem-devel
Requires: libboost_headers-devel
@@ -197,9 +194,7 @@ export CXX=g++-12
-Dgtest_build_tests=OFF \
-DWITH_TESTS=ON \
-DWITH_COMPLETION=ON \
- -DWITH_LASZIP=ON \
-DWITH_LZMA=ON \
- -DLASZIP_INCLUDE_DIR=%{_includedir} \
-DPOSTGRESQL_INCLUDE_DIR=%{_includedir}/pgsql \
-DGEOTIFF_INCLUDE_DIR=%{_includedir}/libgeotiff \
-DBUILD_SHARED_LIBS=ON \
diff --git a/packages/p/postgresql17/.files b/packages/p/postgresql17/.files
index a626effa066..e45260be325 100644
Binary files a/packages/p/postgresql17/.files and b/packages/p/postgresql17/.files differ
diff --git a/packages/p/postgresql17/.rev b/packages/p/postgresql17/.rev
index a1738ee23ce..b38bd81a897 100644
--- a/packages/p/postgresql17/.rev
+++ b/packages/p/postgresql17/.rev
@@ -38,4 +38,12 @@
* https://www.postgresql.org/docs/17/release-17.html
1203910
+
+ 287ace9717a1aaf2ecee64df58bacc4e
+ 17.0
+
+ anag+factory
+
+ 1216991
+
diff --git a/packages/p/postgresql17/postgresql17.changes b/packages/p/postgresql17/postgresql17.changes
index 2646d0c56d8..6359d86d776 100644
--- a/packages/p/postgresql17/postgresql17.changes
+++ b/packages/p/postgresql17/postgresql17.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Oct 7 08:50:46 UTC 2024 - Fabian Vogt
+
+- Use cmake(LLVM) < instead of <= to also allow building against
+ LLVM 18.1 and newer 18.x versions
+
-------------------------------------------------------------------
Thu Sep 26 13:20:36 UTC 2024 - Reinhard Max
diff --git a/packages/p/postgresql17/postgresql17.spec b/packages/p/postgresql17/postgresql17.spec
index 69b268e7e2f..005283249ad 100644
--- a/packages/p/postgresql17/postgresql17.spec
+++ b/packages/p/postgresql17/postgresql17.spec
@@ -21,7 +21,8 @@
%define buildlibs 1
%define tarversion %{pgversion}
%define oldest_supported_llvm_ver 10
-%define latest_supported_llvm_ver 18
+# To be able to use cmake(LLVM) < ...
+%define latest_supported_llvm_ver_plus_one 19
### CUT HERE ###
%define pgname postgresql%pgmajor
@@ -146,8 +147,8 @@ BuildRequires: libselinux-devel
%endif
%if %{with llvm}
BuildRequires: gcc-c++
-BuildRequires: (cmake(Clang) >= %{oldest_supported_llvm_ver} with cmake(Clang) <= %{latest_supported_llvm_ver})
-BuildRequires: (cmake(LLVM) >= %{oldest_supported_llvm_ver} with cmake(LLVM) <= %{latest_supported_llvm_ver})
+BuildRequires: (cmake(Clang) >= %{oldest_supported_llvm_ver} with cmake(Clang) < %{latest_supported_llvm_ver_plus_one})
+BuildRequires: (cmake(LLVM) >= %{oldest_supported_llvm_ver} with cmake(LLVM) < %{latest_supported_llvm_ver_plus_one})
%endif
BuildRequires: libxslt-devel
BuildRequires: openldap2-devel
diff --git a/packages/p/ptokax/.files b/packages/p/ptokax/.files
deleted file mode 100644
index b5c2e7e737c..00000000000
Binary files a/packages/p/ptokax/.files and /dev/null differ
diff --git a/packages/p/ptokax/.meta b/packages/p/ptokax/.meta
deleted file mode 100644
index 5af095284a6..00000000000
--- a/packages/p/ptokax/.meta
+++ /dev/null
@@ -1,5 +0,0 @@
-
- ptokax
- Multi-platform server application for Neo-Modus DC++ sharing network
-
-
diff --git a/packages/p/ptokax/.rev b/packages/p/ptokax/.rev
deleted file mode 100644
index d4fbf79e604..00000000000
--- a/packages/p/ptokax/.rev
+++ /dev/null
@@ -1,67 +0,0 @@
-
-
- 5df9bbb79f7d1bd947582d19dd126ef2
- 0.5.2.1
-
- dimstar_suse
-
- 461959
-
-
- 6afa333db65080d6958ce74e4ccb1c3a
- 0.5.2.2
-
- dimstar_suse
- Automatic submission by obs-autosubmit
- 491538
-
-
- d830176f6666681cae141376fa2fc53d
- 0.5.2.2
-
- dimstar_suse
- - Add gcc7.diff
- 501829
-
-
- a7ed148d6e255c35559fa9d570ab55b2
- 0.5.2.2
-
- coolo
- - Align getent/useradd error hiding with the other Factory packages.
- 676607
-
-
- 1086b5423433a469f950c36e0c04aa68
- 0.5.2.2
-
- dimstar_suse
- Automatic submission by obs-autosubmit
- 821753
-
-
- af76bbfe314bd115f838cc103f308b90
- 0.5.2.2
-
- dimstar_suse
- - Cure build failure with Lua 5.4 by adding pkg-config results
- to the makefile.
- 871622
-
-
- ce6040db8e4532a2c954dbcc5427aec5
- 0.5.3
-
- dimstar_suse
-
- 1094820
-
-
- cb6fe9116168a24ad716885c193ffdce
- 0.5.3
-
- anag+factory
- - Employ %sysusers macros to make the "ptokax" user
- 1143892
-
-
diff --git a/packages/p/ptokax/0.5.3.0-nix-src.tgz b/packages/p/ptokax/0.5.3.0-nix-src.tgz
deleted file mode 120000
index 321baf1d881..00000000000
--- a/packages/p/ptokax/0.5.3.0-nix-src.tgz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeih7jsnss5u2iivkturgsguusvx4mpg3bgva5ean44zoz5gsjwtqoq
\ No newline at end of file
diff --git a/packages/p/ptokax/logs.patch b/packages/p/ptokax/logs.patch
deleted file mode 100644
index 4caa24b0ff9..00000000000
--- a/packages/p/ptokax/logs.patch
+++ /dev/null
@@ -1,33 +0,0 @@
-diff -Pdpru PtokaX.orig/core/ServerManager.cpp PtokaX/core/ServerManager.cpp
---- PtokaX.orig/core/ServerManager.cpp 2017-04-08 13:06:30.000000000 +0300
-+++ PtokaX/core/ServerManager.cpp 2017-04-14 03:21:33.950860135 +0300
-@@ -251,8 +251,8 @@ void ServerManager::Initialize() {
- #else
- srandom(acctime);
-
-- if(DirExist((m_sPath+"/logs").c_str()) == false) {
-- if(mkdir((m_sPath+"/logs").c_str(), 0755) == -1) {
-+ if(DirExist("/var/log/ptokax") == false) {
-+ if(mkdir("/var/log/ptokax", 0755) == -1) {
- if(m_bDaemon == true) {
- syslog(LOG_USER | LOG_ERR, "Creating of logs directory failed!\n");
- } else {
-diff -Pdpru PtokaX.orig/core/utility.cpp PtokaX/core/utility.cpp
---- PtokaX.orig/core/utility.cpp 2017-04-09 12:22:59.000000000 +0300
-+++ PtokaX/core/utility.cpp 2017-04-14 03:26:45.246257342 +0300
-@@ -877,13 +877,13 @@ void AppendLog(const char * sData, const
- #ifdef _WIN32
- fw = fopen((ServerManager::m_sPath + "\\logs\\system.log").c_str(), "a");
- #else
-- fw = fopen((ServerManager::m_sPath + "/logs/system.log").c_str(), "a");
-+ fw = fopen("/var/log/ptokax/system.log", "a");
- #endif
- } else {
- #ifdef _WIN32
- fw = fopen((ServerManager::m_sPath + "\\logs\\script.log").c_str(), "a");
- #else
-- fw = fopen((ServerManager::m_sPath + "/logs/script.log").c_str(), "a");
-+ fw = fopen("/var/log/ptokax/system.log", "a");
- #endif
- }
-
diff --git a/packages/p/ptokax/nodate.diff b/packages/p/ptokax/nodate.diff
deleted file mode 100644
index c0798d996c5..00000000000
--- a/packages/p/ptokax/nodate.diff
+++ /dev/null
@@ -1,47 +0,0 @@
-diff -Pdpru PtokaX.orig/core/HubCommands-RZ.cpp PtokaX/core/HubCommands-RZ.cpp
---- PtokaX.orig/core/HubCommands-RZ.cpp 2017-03-18 22:20:59.000000000 +0200
-+++ PtokaX/core/HubCommands-RZ.cpp 2017-04-14 03:57:53.330916603 +0300
-@@ -413,7 +413,6 @@ bool HubCommands::Stats(ChatCommand * pC
- #ifdef _PtokaX_TESTING_
- " [build " BUILD_NUMBER "]"
- #endif
-- " built on " __DATE__ " " __TIME__ "\n"
-
- #if LUA_VERSION_NUM > 501
- "Lua: " LUA_VERSION_MAJOR "." LUA_VERSION_MINOR "." LUA_VERSION_RELEASE "\n";
-diff -Pdpru PtokaX.orig/core/PtokaX-nix.cpp PtokaX/core/PtokaX-nix.cpp
---- PtokaX.orig/core/PtokaX-nix.cpp 2017-03-19 14:30:04.000000000 +0200
-+++ PtokaX/core/PtokaX-nix.cpp 2017-04-14 03:59:07.235932373 +0300
-@@ -83,7 +83,7 @@ int main(int argc, char* argv[]) {
- }
- }
- } else if(strcasecmp(argv[i], "-v") == 0) {
-- printf("%s built on %s %s\n", g_sPtokaXTitle, __DATE__, __TIME__);
-+ printf("%s built on %s %s\n", g_sPtokaXTitle, "", "");
- return EXIT_SUCCESS;
- } else if(strcasecmp(argv[i], "-h") == 0) {
- printf("Usage: PtokaX [-d] [-v] [-m] [-c configdir] [-p pidfile]\n\n"
-diff -Pdpru PtokaX.orig/core/ServerManager.cpp PtokaX/core/ServerManager.cpp
---- PtokaX.orig/core/ServerManager.cpp 2017-04-08 13:06:30.000000000 +0300
-+++ PtokaX/core/ServerManager.cpp 2017-04-14 04:00:01.937723391 +0300
-@@ -1052,7 +1052,7 @@ void ServerManager::CreateServerThread(c
- //--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
-
- void ServerManager::CommandLineSetup() {
-- printf("%s built on %s %s\n\n", g_sPtokaXTitle, __DATE__, __TIME__);
-+ printf("%s built on %s %s\n\n", g_sPtokaXTitle, "", "");
- printf("Welcome to PtokaX configuration setup.\nDirectory for PtokaX configuration is: %s\nWhen this directory is wrong, then exit this setup.\nTo specify correct configuration directory start PtokaX with -c configdir parameter.", m_sPath.c_str());
-
- const char sMenu[] = "\n\nAvailable options:\n"
-diff -Pdpru PtokaX.orig/skein/Additional_Implementations/skein_test.c PtokaX/skein/Additional_Implementations/skein_test.c
---- PtokaX.orig/skein/Additional_Implementations/skein_test.c 2010-10-15 02:40:28.000000000 +0300
-+++ PtokaX/skein/Additional_Implementations/skein_test.c 2017-04-14 04:01:31.466107739 +0300
-@@ -1213,7 +1213,7 @@ void Skein_MeasurePerformance(const char
- if (targetSize == 0)
- {
- printf("\nSkein performance, in clks per byte, dtMin = %4d clks.\n",dtMin);
-- printf(" [compiled %s,%s by '%s%s', %u-bit]\n",__TIME__,__DATE__,COMPILER_ID,CVER,(uint_t)(8*sizeof(size_t)));
-+ printf(" [compiled %s,%s by '%s%s', %u-bit]\n","","",COMPILER_ID,CVER,(uint_t)(8*sizeof(size_t)));
- printf(" =================================================================\n");
- printf(" || Skein block size |\n");
- printf(" ||--------------------------------------------------------------|\n");
diff --git a/packages/p/ptokax/ptokax.changes b/packages/p/ptokax/ptokax.changes
deleted file mode 100644
index ff76dd1899a..00000000000
--- a/packages/p/ptokax/ptokax.changes
+++ /dev/null
@@ -1,191 +0,0 @@
--------------------------------------------------------------------
-Sat Feb 3 22:07:22 UTC 2024 - Jan Engelhardt
-
-- Employ %sysusers macros to make the "ptokax" user
-- Drop vintage rc symlinks
-
--------------------------------------------------------------------
-Fri Jun 23 07:15:53 UTC 2023 - Jan Engelhardt
-
-- Update to release 0.5.3
- * Fixed missing reason from !tembanip and !fulltempbanip commands
- * Fixed move up/down script in GUI causing invalid memory usage
- for disabled script
- * Fixed non-functional SQL wildcards in !getipinfo command
- * Fixed a crash when script stopped next running script in some
- cases
- * Fixed a crash on script error in OnTimer when timer was removed
- * Fixed issues with Ban commands caused wrong nick and reason
- length counting
-- Delete gcc7.diff (obsolete)
-
--------------------------------------------------------------------
-Sat Feb 13 09:30:54 UTC 2021 - Jan Engelhardt
-
-- Cure build failure with Lua 5.4 by adding pkg-config results
- to the makefile.
-
--------------------------------------------------------------------
-Sun Jul 12 09:10:23 UTC 2020 - Jan Engelhardt
-
-- Trim old RPM constructs. Drop hard dependency on systemd.
-- Add %noreplace for config files.
-
--------------------------------------------------------------------
-Fri Feb 15 23:19:51 UTC 2019 - Jan Engelhardt
-
-- Align getent/useradd error hiding with the other Factory packages.
-
--------------------------------------------------------------------
-Wed Jun 7 23:30:12 UTC 2017 - jengelh@inai.de
-
-- Add gcc7.diff
-
--------------------------------------------------------------------
-Fri Apr 14 01:02:03 UTC 2017 - 13ilya@gmail.com
-
-- Update to 0.5.2.2
- * Added: Reconnect to database on connection failure or connection lost.
- * Fixed: Typo in server manager and resource leak in sqlite on exit.
- * Fixed: Incorrect long length message when incomplete search command was received.
- * Fixed: Search request was sent to users without share.
- * Fixed: Missing $ValidateDenide when user use nick that is in reserved nicks.
- * Fixed: Extra pipe in !checknickban result.
- * Fixed: IP and Port check in DC commands.
- * Fixed: Missing IP check for validity in some hub commands.
- * Fixed: Empty password received from user was not checked properly and accepted as new password for reg.
- * Fixed: Bandwidth waste, when IPv6 user send search request with IPv4 address.
- * Fixed: Possible crash on hublist registration.
- * Fixed: Bind to single IP caused bind to all addresses when IPv6 address was empty.
- * Fixed: Typo in scripting interface. MaxSlotsLimt -> MaxSlotsLimit.
- * Changed: Log script errors is enabled by default.
-- Removed addressofbool.diff
-
--------------------------------------------------------------------
-Sat Nov 12 21:57:52 UTC 2016 - jengelh@inai.de
-
-- Update to new upstream release 0.5.2.1
-* Fixed a crash when redirect on permanent ban is enabled and
- permban redirect address is empty and main redirect addres is
- empty.
-* Added a command line menu with configuration and add registered
- user options to PtokaX service (-m cmd param).
-* Changed settings, reserved nicks and scripts settings files from
- xml to simple text format.
-* Added support for CTM2HUB.
-- Drop redundant words from description, remove redundant
- %clean section.
-- Check for user/group existence before trying to add, and do not
- suppress error messages.
-- Drop makefile_use_shared.patch (no longer needed)
-- Add nodate.diff, addressofbool.diff
-
--------------------------------------------------------------------
-Sat May 4 02:29:45 UTC 2013 - highwaystar.ru@gmail.com
-
-- systemd unit added
-- update to 0.5.0.0
- * Added: Core.SetUserInfo call to Lua api.
- * Added: IDs 28 - 42 for Core.GetUserValue Lua api call (see Lua API docs).
- * Added: IPv6 support to sockets.
- * Added: IPv6 support to bans and range bans.
- * Added: IPv6 country database support.
- * Added: IPv6 client to client connections support.
- * Added: IPv6 search support.
- * Added: IP64 and IPv4 protocol extensions support.
- * Added: Check for IPv4 connection for user connected to hub by IPv6.
- * Added: IPv4 client connection support for users connected to hub
- by IPv6 when IPv4 connection check success.
- * Added: IPv4 search support for users connected to hub by IPv6 when
- IPv4 connection check success.
- * Added: Setting for manual IPv4 and IPv6 addresses.
- * Added: Both IP addresses to !getinfo command for users with IPv6
- and IPv4 connection available.
- * Added: Both IP addresses to !myip command for users with IPv6 and
- IPv4 connection available.
- * Added: Core.GetHubIPs to Lua API.
- * Added: tUser.tIPs to Lua API.
- * Added: Missing end line dots on some hub commands reply (thx Alexey for report).
- * Added: RegUser hub command. OP need to provide online nick and
- profile. Hub will ask user for password and after password is
- entered then user is added to registered users.
- * Added: IP in $Search and $ConnectToMe commands is replaced with
- correct one when user send wrong IP.
- * Added: Smart searching for IPv6 users with IPv4 support.
- * Added: IP2Country now work for 6to4 and Teredo connections.
- * Added: IP2Country.Reload to Lua api.
- * Added: RegMan.AddReg now support second syntax
- RegMan.AddReg(sNick, nProfileNumber). That way user is asked for
- password and registered after he send it.
- * Added: Users connected with IPv6 using 6to4 or teredo tunneling
- have automatically IPv4 active connection available without need
- to support any protocol extension.
- * Added: Targets to makefile.
- * Added: Lua 5.2.x support.
- * Changed: Country database for IPv4 from ip-to-country to IpToCountry
- (http://software77.net/geo-ip/).
- * Changed: Not allowed chars in nick to only space, pipe and dollar.
- Only those protocol disallow. Issues with other chars is client work.
- * Changed: Max simultaneous logins value from 500 to 1000.
- * Changed: UserDisconnected is now called when user is disconnected by
- script in User/Reg/OpConnected.
- * Changed: Max send buffer size on small hubs from 128 kB to 256 kB.
- * Changed: Disabled keep slow client online for clients with zpipe support.
- * Changed: Memory allocation failures checking. When memory allocation
- fail then user who caused that is disconnected and hub not crash.
- * Changed: Line ending to \n on windoze.
- * Changed: Registered users are now stored in binary file instead of xml.
- * Changed: !ban and !tempban now working for offline nicks and create nickban for them.
- * Fixed: TmrMan.RemoveTimer Lua api call in windoze version (thx Cęńoßy+ę for report).
- * Fixed: MOTD was not updated after change in gui (thx mappy for report).
- * Fixed: Few settings was not updated after change in gui.
- * Fixed: Buggy chat input line after using some settings pages (thx The-Master for report).
- * Fixed: All strict aliasing issues with GCC 02 and higher optimization
- level compile.
- * Fixed: Core.GetUsersCount can in rare cases have different user count
- than number of users returned by Core.GetOnlineUsers.
- * Fixed: Crash on script error loging in some cases.
- * Fixed: Memory leak in users and bans ip hashtables.
- * Fixed: Bug in gui initialisation causing rare termination on startup.
- * Fixed: Incorrect translation of "full" in ban commands (thx Alexey for report).
- * Fixed: Shutdown with ctrl+c on non-windows OS (thx Alexey for report).
- * Fixed: Crash in Lua 5.1 on invalid conversion specifier in os.date (fix from Lua 5.2).
- * Fixed: Buggy search length checking for active and passive users (thx Alexey for report).
- * Fixed: Compile with Clang compiler on Linux.
- * Fixed: Message returned on !clrrangetempbans (thx Alexey for report).
- * Fixed: Rare case when short myinfo was sent to ops when they should get long myinfo.
- * Fixed: Error message on script syntax checking when PtokaX api call is outside function.
- * Fixed: Doubleclick in gui on script now open script editor only when it is not on checkbox.
- * Fixed: !nickban and !nicktempban allowed to ban user with higher
- profile when he was offline.
- * Fixed: Reply to chat from Lua script was sent before that chat (ie from talkbot).
- * Fixed: Missing GB translation in !getinfo command (thx Alexey for report).
- * Fixed: Compile errors on Haiku OS.
- * Removed: All info related to old ip-to-country database.
- * Removed: Obsolete client tags.
- * Removed: Obsolete setting to accept unknown tag.
- * Rewritten: Global data queues for better IPv6 support.
- * Updated: makefile to work with buggy gold linker.
-
--------------------------------------------------------------------
-Thu Mar 29 06:24:57 UTC 2012 - highwaystar.ru@gmail.com
-
-- added -lpthread to fix linking error
-
--------------------------------------------------------------------
-Tue Sep 13 02:02:55 UTC 2011 - highwaystar.ru@gmail.com
-
-- update to 0.4.2.0
-- patchset updated
-
--------------------------------------------------------------------
-Sat Jul 31 06:49:30 UTC 2010 - highwaystar.ru@gmail.com
-
-- logs moved to /var/logs/ptokax
-- service now starts as ptokax user
-
--------------------------------------------------------------------
-Sun Feb 14 16:21:14 UTC 2010 - highwaystar.ru@gmail.com
-
-- initial release for openSUSE
-
diff --git a/packages/p/ptokax/ptokax.service b/packages/p/ptokax/ptokax.service
deleted file mode 100644
index 7d82c9d2d45..00000000000
--- a/packages/p/ptokax/ptokax.service
+++ /dev/null
@@ -1,11 +0,0 @@
-[Unit]
-Description=PtokaX DC++ server
-After=syslog.target network.target
-
-[Service]
-ExecStart=/usr/sbin/ptokax -c /etc/ptokax
-User=ptokax
-Group=ptokax
-
-[Install]
-WantedBy=multi-user.target
diff --git a/packages/p/ptokax/ptokax.spec b/packages/p/ptokax/ptokax.spec
deleted file mode 100644
index 1aa8e93ed2d..00000000000
--- a/packages/p/ptokax/ptokax.spec
+++ /dev/null
@@ -1,102 +0,0 @@
-#
-# spec file for package ptokax
-#
-# Copyright (c) 2024 SUSE LLC
-#
-# All modifications and additions to the file contributed by third parties
-# remain the property of their copyright owners, unless otherwise agreed
-# upon. The license for this file, and modifications and additions to the
-# file, is the same license as for the pristine package itself (unless the
-# license for the pristine package is not an Open Source License, in which
-# case the license is the MIT License). An "Open Source License" is a
-# license that conforms to the Open Source Definition (Version 1.9)
-# published by the Open Source Initiative.
-
-# Please submit bugfixes or comments via https://bugs.opensuse.org/
-#
-
-
-Name: ptokax
-Version: 0.5.3
-Release: 0
-Summary: Server application for the Neo-Modus DC++ sharing network
-License: GPL-3.0-only
-Group: Productivity/Networking/File-Sharing
-URL: http://www.ptokax.org/
-BuildRequires: gcc-c++
-BuildRequires: systemd-rpm-macros
-BuildRequires: sysuser-tools
-BuildRequires: tinyxml-devel
-BuildRequires: zlib-devel
-BuildRequires: pkgconfig(lua) >= 5.1
-Source: http://www.ptokax.org/files/0.5.3.0-nix-src.tgz
-Source1: ptokax.service
-Patch1: logs.patch
-Patch2: nodate.diff
-%sysusers_requires
-
-%description
-PtokaX Direct Connect Hub is a server application for Neo-Modus
-Direct Connect Peer-To-Peer sharing network.
-
-PtokaX has a comprehensive user interface, tuned built-in features,
-scripting-based extendability.
-
-%prep
-%autosetup -p1 -n PtokaX
-sed -i 's/\r//' ReadMe.txt Changelog.txt scripting.docs/scripting-interface.txt
-# remove tinyxml as we use system lib
-rm -rf tinyxml
-
-%build
-perl -i -pe '
- s{^CXXFLAGS = .*}{CXXFLAGS = %optflags}g;
- s{-llua5.\d+\b}{'"$(pkg-config lua --libs)"'}g;
- s{-I/usr/include/lua5.\d+\b}{'"$(pkg-config lua --cflags)"'}g;
-' makefile
-%make_build
-
-%install
-b="%buildroot"
-install -Dpm 755 PtokaX "$b/%_sbindir/%name"
-mkdir -p "$b/%_sysconfdir/%name"
-mkdir -p "$b/var/log/%name"
-cp -a cfg.example "$b/%_sysconfdir/%name/cfg"
-cp -a language "$b/%_sysconfdir/%name/"
-
-find scripting.docs -type d -exec chmod a+x {} +
-find scripting.docs -type f -exec chmod a-x {} +
-chmod 644 Changelog.txt ReadMe.txt License.txt
-install -Dpm 644 %SOURCE1 "$b/%_unitdir/%name.service"
-
-mkdir -p "$b/%_sysusersdir"
-echo 'u ptokax - "user for ptokax"' >system-user-ptokax.conf
-cp -a system-user-ptokax.conf "$b/%_sysusersdir/"
-%sysusers_generate_pre system-user-ptokax.conf random system-user-ptokax.conf
-
-%pre -f random.pre
-%service_add_pre %name.service
-
-%post
-%service_add_post %name.service
-
-%preun
-%service_del_preun %name.service
-
-%postun
-%service_del_postun %name.service
-
-%files
-%doc Changelog.txt ReadMe.txt scripting.docs
-%license License.txt
-%_sbindir/%name
-%_unitdir/%name.service
-%_sysusersdir/*
-%attr(-,ptokax,ptokax) %dir %_sysconfdir/%name
-%attr(-,ptokax,ptokax) %dir %_sysconfdir/%name/cfg
-%attr(-,ptokax,ptokax) %dir %_sysconfdir/%name/language
-%config(noreplace) %attr(644,ptokax,ptokax) %_sysconfdir/%name/cfg/*
-%config %attr(644,ptokax,ptokax) %_sysconfdir/%name/language/*
-%attr(-,ptokax,ptokax) %dir /var/log/%name
-
-%changelog
diff --git a/packages/p/python-Bottleneck/.files b/packages/p/python-Bottleneck/.files
index e9acf571917..95d46570c6b 100644
Binary files a/packages/p/python-Bottleneck/.files and b/packages/p/python-Bottleneck/.files differ
diff --git a/packages/p/python-Bottleneck/.rev b/packages/p/python-Bottleneck/.rev
index 5fcededc779..09708e10988 100644
--- a/packages/p/python-Bottleneck/.rev
+++ b/packages/p/python-Bottleneck/.rev
@@ -141,4 +141,16 @@ This is a dependency of python-pandas.
Automatic submission by obs-autosubmit
1186069
+
+ 2d3e3a3337678bf5b01ae159dd162549
+ 1.4.2
+
+ anag+factory
+ - update to 1.4.2:
+ * Add python_requires to setup.py to limit build to 3.9+
+ * Update the classifiers
+ * Deprecate Python 3.7 and 3.8
+ * Add python 3.13 build
+ 1217028
+
diff --git a/packages/p/python-Bottleneck/bottleneck-1.4.0.tar.gz b/packages/p/python-Bottleneck/bottleneck-1.4.0.tar.gz
deleted file mode 120000
index 684175ded02..00000000000
--- a/packages/p/python-Bottleneck/bottleneck-1.4.0.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreif6wnw7kgnyocph2nl4bsldtmb3rbokmnk3x5pfg5jmnbo6kfqfxa
\ No newline at end of file
diff --git a/packages/p/python-Bottleneck/bottleneck-1.4.2.tar.gz b/packages/p/python-Bottleneck/bottleneck-1.4.2.tar.gz
new file mode 120000
index 00000000000..f66cb54b325
--- /dev/null
+++ b/packages/p/python-Bottleneck/bottleneck-1.4.2.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreih2r2hbpgo6uvedzztgsrrgmd45tkkwjh3ptcua2mk3qtwit5cj6q
\ No newline at end of file
diff --git a/packages/p/python-Bottleneck/python-Bottleneck.changes b/packages/p/python-Bottleneck/python-Bottleneck.changes
index 56eae46e89d..80eee50b02d 100644
--- a/packages/p/python-Bottleneck/python-Bottleneck.changes
+++ b/packages/p/python-Bottleneck/python-Bottleneck.changes
@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:13:28 UTC 2024 - Dirk Müller
+
+- update to 1.4.2:
+ * Add python_requires to setup.py to limit build to 3.9+
+ * Update the classifiers
+ * Deprecate Python 3.7 and 3.8
+ * Add python 3.13 build
+
-------------------------------------------------------------------
Mon Jul 1 04:19:18 UTC 2024 - Steve Kowalik
diff --git a/packages/p/python-Bottleneck/python-Bottleneck.spec b/packages/p/python-Bottleneck/python-Bottleneck.spec
index d7427db5805..447799af7d4 100644
--- a/packages/p/python-Bottleneck/python-Bottleneck.spec
+++ b/packages/p/python-Bottleneck/python-Bottleneck.spec
@@ -17,7 +17,7 @@
Name: python-Bottleneck
-Version: 1.4.0
+Version: 1.4.2
Release: 0
Summary: A collection of fast NumPy array functions
License: BSD-2-Clause AND BSD-3-Clause
diff --git a/packages/p/python-Pallets-Sphinx-Themes/.files b/packages/p/python-Pallets-Sphinx-Themes/.files
index ab33139fa74..b8c104f68a2 100644
Binary files a/packages/p/python-Pallets-Sphinx-Themes/.files and b/packages/p/python-Pallets-Sphinx-Themes/.files differ
diff --git a/packages/p/python-Pallets-Sphinx-Themes/.rev b/packages/p/python-Pallets-Sphinx-Themes/.rev
index 30ec410d29c..09ce409344d 100644
--- a/packages/p/python-Pallets-Sphinx-Themes/.rev
+++ b/packages/p/python-Pallets-Sphinx-Themes/.rev
@@ -55,4 +55,26 @@
* Compatibility with changes in Sphinx 7.3. :pr:`100`
1184073
+
+ 9f2808de02f02f72e3207600c9a07465
+ 2.2.0
+
+ anag+factory
+ - update to 2.2.0:
+ * Get canonical URL from environment variable when building on
+ Read the Docs. :pr:`117`
+ * New version warning banner. Use JavaScript to query PyPI when
+ viewing a page, rather than baking the warning into the
+ build. New builds of old versions are no longer required for
+ the banner to be correct. :pr:`117`
+ * Generate 404 page using the sphinx-notfound-page extension.
+ This fixes the URLs when the page is hosted so that it loads
+ the CSS. :issue:`34`
+ * Remove handling for singlehtml_sidebars config which predated
+ Sphinx's support. :pr:`119`
+ * Remove "babel" and "platter" theme variants which were
+ undocumented and did not appear to be used by the relevant
+ projects. :pr:`120`
+ 1217037
+
diff --git a/packages/p/python-Pallets-Sphinx-Themes/pallets_sphinx_themes-2.1.3.tar.gz b/packages/p/python-Pallets-Sphinx-Themes/pallets_sphinx_themes-2.1.3.tar.gz
deleted file mode 120000
index 3d7133781f5..00000000000
--- a/packages/p/python-Pallets-Sphinx-Themes/pallets_sphinx_themes-2.1.3.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreiefhtg4e2mkwcrfglh4embx4ch7c3xtn7n54v65uerji252d5y4bi
\ No newline at end of file
diff --git a/packages/p/python-Pallets-Sphinx-Themes/pallets_sphinx_themes-2.2.0.tar.gz b/packages/p/python-Pallets-Sphinx-Themes/pallets_sphinx_themes-2.2.0.tar.gz
new file mode 120000
index 00000000000..c8ddea30f71
--- /dev/null
+++ b/packages/p/python-Pallets-Sphinx-Themes/pallets_sphinx_themes-2.2.0.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreihcyzmcflm7aq5rhnid6lyavgsrqg6hvdjir7rdye4tvnrkvgxxxa
\ No newline at end of file
diff --git a/packages/p/python-Pallets-Sphinx-Themes/python-Pallets-Sphinx-Themes.changes b/packages/p/python-Pallets-Sphinx-Themes/python-Pallets-Sphinx-Themes.changes
index ff2235f8b0f..fae03b46ec1 100644
--- a/packages/p/python-Pallets-Sphinx-Themes/python-Pallets-Sphinx-Themes.changes
+++ b/packages/p/python-Pallets-Sphinx-Themes/python-Pallets-Sphinx-Themes.changes
@@ -1,3 +1,22 @@
+-------------------------------------------------------------------
+Fri Oct 18 10:50:41 UTC 2024 - Dirk Müller
+
+- update to 2.2.0:
+ * Get canonical URL from environment variable when building on
+ Read the Docs. :pr:`117`
+ * New version warning banner. Use JavaScript to query PyPI when
+ viewing a page, rather than baking the warning into the
+ build. New builds of old versions are no longer required for
+ the banner to be correct. :pr:`117`
+ * Generate 404 page using the sphinx-notfound-page extension.
+ This fixes the URLs when the page is hosted so that it loads
+ the CSS. :issue:`34`
+ * Remove handling for singlehtml_sidebars config which predated
+ Sphinx's support. :pr:`119`
+ * Remove "babel" and "platter" theme variants which were
+ undocumented and did not appear to be used by the relevant
+ projects. :pr:`120`
+
-------------------------------------------------------------------
Sun Jun 30 07:31:17 UTC 2024 - Dirk Müller
diff --git a/packages/p/python-Pallets-Sphinx-Themes/python-Pallets-Sphinx-Themes.spec b/packages/p/python-Pallets-Sphinx-Themes/python-Pallets-Sphinx-Themes.spec
index 7b2e316f9e6..ff7de5432c4 100644
--- a/packages/p/python-Pallets-Sphinx-Themes/python-Pallets-Sphinx-Themes.spec
+++ b/packages/p/python-Pallets-Sphinx-Themes/python-Pallets-Sphinx-Themes.spec
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-Pallets-Sphinx-Themes
-Version: 2.1.3
+Version: 2.2.0
Release: 0
Summary: Themes for the Pallets projects
License: BSD-3-Clause
@@ -29,11 +29,13 @@ BuildRequires: %{python_module Sphinx >= 3.7}
BuildRequires: %{python_module flit-core}
BuildRequires: %{python_module packaging}
BuildRequires: %{python_module pip}
+BuildRequires: %{python_module sphinx-notfound-page}
BuildRequires: %{python_module wheel}
BuildRequires: fdupes
BuildRequires: python-rpm-macros
-Requires: python-Sphinx >= 3
+Requires: python-Sphinx >= 5
Requires: python-packaging
+Requires: python-sphinx-notfound-page
BuildArch: noarch
%python_subpackages
diff --git a/packages/p/python-aiohttp/.files b/packages/p/python-aiohttp/.files
index 61d925ce8b8..923d0d3d82b 100644
Binary files a/packages/p/python-aiohttp/.files and b/packages/p/python-aiohttp/.files differ
diff --git a/packages/p/python-aiohttp/.rev b/packages/p/python-aiohttp/.rev
index 280449d2ced..b166d7c3481 100644
--- a/packages/p/python-aiohttp/.rev
+++ b/packages/p/python-aiohttp/.rev
@@ -618,4 +618,23 @@
1206528
+
+ d6493d61b6fc0b1d07806d4d555b9459
+ 3.10.10
+
+ anag+factory
+ - update to 3.10.10:
+ * Fixed error messages from
+ :py:class:`~aiohttp.resolver.AsyncResolver` being swallowed
+ -- by :user:`bdraco`. Related issues and pull requests on
+ GitHub: :issue:`9451`, :issue:`9455`.
+ * Added :exc:`aiohttp.ClientConnectorDNSError` for
+ differentiating DNS resolution errors from other connector
+ errors -- by :user:`mstojcevich`. Related issues and pull
+ requests on GitHub: :issue:`8455`.
+ * Simplified DNS resolution throttling code to reduce chance of
+ race conditions -- by :user:`bdraco`. Related issues and pull
+ requests on GitHub: :issue:`9454`.
+ 1217029
+
diff --git a/packages/p/python-aiohttp/aiohttp-3.10.10.tar.gz b/packages/p/python-aiohttp/aiohttp-3.10.10.tar.gz
new file mode 120000
index 00000000000..55c7f1512c2
--- /dev/null
+++ b/packages/p/python-aiohttp/aiohttp-3.10.10.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeiaiwh6tfz4zhwrxytjfjhqmqgo3fcsjkk2taj2qnc4givb3unmbqu
\ No newline at end of file
diff --git a/packages/p/python-aiohttp/aiohttp-3.10.9.tar.gz b/packages/p/python-aiohttp/aiohttp-3.10.9.tar.gz
deleted file mode 120000
index 620e693a436..00000000000
--- a/packages/p/python-aiohttp/aiohttp-3.10.9.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeibbbvqx65vqr76phc4vykmq3lhslus7wvep4hedf27xt5gy2zmflm
\ No newline at end of file
diff --git a/packages/p/python-aiohttp/python-aiohttp.changes b/packages/p/python-aiohttp/python-aiohttp.changes
index f0ae8e7e0a9..568c198e18a 100644
--- a/packages/p/python-aiohttp/python-aiohttp.changes
+++ b/packages/p/python-aiohttp/python-aiohttp.changes
@@ -1,3 +1,19 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:14:05 UTC 2024 - Dirk Müller
+
+- update to 3.10.10:
+ * Fixed error messages from
+ :py:class:`~aiohttp.resolver.AsyncResolver` being swallowed
+ -- by :user:`bdraco`. Related issues and pull requests on
+ GitHub: :issue:`9451`, :issue:`9455`.
+ * Added :exc:`aiohttp.ClientConnectorDNSError` for
+ differentiating DNS resolution errors from other connector
+ errors -- by :user:`mstojcevich`. Related issues and pull
+ requests on GitHub: :issue:`8455`.
+ * Simplified DNS resolution throttling code to reduce chance of
+ race conditions -- by :user:`bdraco`. Related issues and pull
+ requests on GitHub: :issue:`9454`.
+
-------------------------------------------------------------------
Wed Oct 9 08:04:22 UTC 2024 - John Paul Adrian Glaubitz
diff --git a/packages/p/python-aiohttp/python-aiohttp.spec b/packages/p/python-aiohttp/python-aiohttp.spec
index 9868623bbc0..82e20457341 100644
--- a/packages/p/python-aiohttp/python-aiohttp.spec
+++ b/packages/p/python-aiohttp/python-aiohttp.spec
@@ -19,7 +19,7 @@
%bcond_with docs
%{?sle15_python_module_pythons}
Name: python-aiohttp
-Version: 3.10.9
+Version: 3.10.10
Release: 0
Summary: Asynchronous HTTP client/server framework
License: Apache-2.0
diff --git a/packages/p/python-anyio/.files b/packages/p/python-anyio/.files
index 714c9cbd20c..5a71ef00812 100644
Binary files a/packages/p/python-anyio/.files and b/packages/p/python-anyio/.files differ
diff --git a/packages/p/python-anyio/.rev b/packages/p/python-anyio/.rev
index bf48d3dc322..0ec8175cf9b 100644
--- a/packages/p/python-anyio/.rev
+++ b/packages/p/python-anyio/.rev
@@ -327,4 +327,18 @@ SR for python stack proposal
1205309
+
+ da025a07231e8f8a5093fcef03c93fa6
+ 4.6.2.post1
+
+ anag+factory
+ - update to 4.6.2:
+ * Fixed regression caused by (\#807) that prevented the use
+ of parametrized async fixtures
+- update to 4.6.1:
+ * Fixed TaskGroup and CancelScope producing cyclic references
+ in tracebacks when raising exceptions (\#806) (PR by
+ @graingert)
+ 1217080
+
diff --git a/packages/p/python-anyio/anyio-4.6.0.tar.gz b/packages/p/python-anyio/anyio-4.6.0.tar.gz
deleted file mode 120000
index 1e08114bc29..00000000000
--- a/packages/p/python-anyio/anyio-4.6.0.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreiatpncvts5qgtchofsqi77lw37yh44q7q5sbpyydqp4bjzizof65m
\ No newline at end of file
diff --git a/packages/p/python-anyio/anyio-4.6.2.post1.tar.gz b/packages/p/python-anyio/anyio-4.6.2.post1.tar.gz
new file mode 120000
index 00000000000..1d0bccac988
--- /dev/null
+++ b/packages/p/python-anyio/anyio-4.6.2.post1.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreicmrpbrztnvdr7xxusr6uogbhqdrvr6gqqzwrfkq3shk5rytcaljq
\ No newline at end of file
diff --git a/packages/p/python-anyio/python-anyio.changes b/packages/p/python-anyio/python-anyio.changes
index 9e71b2e8ba5..47ead7898ed 100644
--- a/packages/p/python-anyio/python-anyio.changes
+++ b/packages/p/python-anyio/python-anyio.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Tue Oct 22 16:00:48 UTC 2024 - Dirk Müller
+
+- update to 4.6.2:
+ * Fixed regression caused by (\#807) that prevented the use
+ of parametrized async fixtures
+- update to 4.6.1:
+ * Fixed TaskGroup and CancelScope producing cyclic references
+ in tracebacks when raising exceptions (\#806) (PR by
+ @graingert)
+
-------------------------------------------------------------------
Wed Oct 2 18:02:06 UTC 2024 - Antonio Larrosa
diff --git a/packages/p/python-anyio/python-anyio.spec b/packages/p/python-anyio/python-anyio.spec
index 4ad8a0c5451..b3c9a4da8d0 100644
--- a/packages/p/python-anyio/python-anyio.spec
+++ b/packages/p/python-anyio/python-anyio.spec
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-anyio
-Version: 4.6.0
+Version: 4.6.2.post1
Release: 0
Summary: High level compatibility layer for asynchronous event loop implementations
License: MIT
diff --git a/packages/p/python-astroid/.files b/packages/p/python-astroid/.files
index 97e7f1997c1..4109a122c15 100644
Binary files a/packages/p/python-astroid/.files and b/packages/p/python-astroid/.files differ
diff --git a/packages/p/python-astroid/.rev b/packages/p/python-astroid/.rev
index 1491c0ca989..993972337dc 100644
--- a/packages/p/python-astroid/.rev
+++ b/packages/p/python-astroid/.rev
@@ -610,4 +610,15 @@ python-logilab-common is in openSUSE:Factory so this builds now.
strings.
1202985
+
+ 805eda7edb7a5affb309226c9c3f1d84
+ 3.3.5
+
+ anag+factory
+ - update to 3.3.5:
+ * Control setting local nodes outside of the supposed local's
+ constructor.
+ * Fix Python 3.13 compatibility re: `collections.abc`
+ 1217044
+
diff --git a/packages/p/python-astroid/astroid-3.3.4-gh.tar.gz b/packages/p/python-astroid/astroid-3.3.4-gh.tar.gz
deleted file mode 120000
index 461d17607c2..00000000000
--- a/packages/p/python-astroid/astroid-3.3.4-gh.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeib3uxcjzqhl2u7mazllvfaoxow4si3heepkyyhzt5nv4jnumbfy2q
\ No newline at end of file
diff --git a/packages/p/python-astroid/astroid-3.3.5-gh.tar.gz b/packages/p/python-astroid/astroid-3.3.5-gh.tar.gz
new file mode 120000
index 00000000000..1216956c2e1
--- /dev/null
+++ b/packages/p/python-astroid/astroid-3.3.5-gh.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeiazq2axrbyltxwzxogrdrihcea2ynnmrvvtdlguacojnajxkxaljq
\ No newline at end of file
diff --git a/packages/p/python-astroid/python-astroid.changes b/packages/p/python-astroid/python-astroid.changes
index 962515231bf..d2cef075ea2 100644
--- a/packages/p/python-astroid/python-astroid.changes
+++ b/packages/p/python-astroid/python-astroid.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:46:15 UTC 2024 - Dirk Müller
+
+- update to 3.3.5:
+ * Control setting local nodes outside of the supposed local's
+ constructor.
+ * Fix Python 3.13 compatibility re: `collections.abc`
+
-------------------------------------------------------------------
Tue Sep 24 13:54:23 UTC 2024 - Dirk Müller
diff --git a/packages/p/python-astroid/python-astroid.spec b/packages/p/python-astroid/python-astroid.spec
index 5dc5ba5db24..6d6a130a69a 100644
--- a/packages/p/python-astroid/python-astroid.spec
+++ b/packages/p/python-astroid/python-astroid.spec
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-astroid
-Version: 3.3.4
+Version: 3.3.5
Release: 0
Summary: Representation of Python source as an AST for pylint
License: LGPL-2.1-or-later
diff --git a/packages/p/python-astropy-iers-data/.files b/packages/p/python-astropy-iers-data/.files
index c1abec8674c..d607204498d 100644
Binary files a/packages/p/python-astropy-iers-data/.files and b/packages/p/python-astropy-iers-data/.files differ
diff --git a/packages/p/python-astropy-iers-data/.rev b/packages/p/python-astropy-iers-data/.rev
index b7be2f3afaa..e2356edf674 100644
--- a/packages/p/python-astropy-iers-data/.rev
+++ b/packages/p/python-astropy-iers-data/.rev
@@ -74,4 +74,18 @@
- Add test multibuild and use astropy testsuite (forwarded request 1197896 from bnavigator)
1197899
+
+ 1f7ec8d5e6f1e794c2ceb307b8a384e8
+ 0.2024.10.21.0.33.21
+
+ anag+factory
+ - update to 0.2024.10.21.0.33.21:
+ * Bump actions/checkout from 4.2.0 to 4.2.1
+ * MNT: Use hash for Action workflow versions and update if
+ needed
+ * Remove leading zeros in tag to make tag consistent with PyPI
+ release
+ * Fix continuous integration
+ 1217072
+
diff --git a/packages/p/python-astropy-iers-data/astropy_iers_data-0.2024.10.21.0.33.21.tar.gz b/packages/p/python-astropy-iers-data/astropy_iers_data-0.2024.10.21.0.33.21.tar.gz
new file mode 120000
index 00000000000..cc0c0103e4a
--- /dev/null
+++ b/packages/p/python-astropy-iers-data/astropy_iers_data-0.2024.10.21.0.33.21.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeicn34o4dve73q5j76xl6kziygeizbadioeo2b462gsgx22synv3ye
\ No newline at end of file
diff --git a/packages/p/python-astropy-iers-data/astropy_iers_data-0.2024.8.27.10.28.29.tar.gz b/packages/p/python-astropy-iers-data/astropy_iers_data-0.2024.8.27.10.28.29.tar.gz
deleted file mode 120000
index 0911589f3ad..00000000000
--- a/packages/p/python-astropy-iers-data/astropy_iers_data-0.2024.8.27.10.28.29.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeig6qyydord56gq2d7y5lckkhubv7dsakfp3q4nwgj3bv3tooe4xnq
\ No newline at end of file
diff --git a/packages/p/python-astropy-iers-data/python-astropy-iers-data.changes b/packages/p/python-astropy-iers-data/python-astropy-iers-data.changes
index 056c542ca25..1a659491536 100644
--- a/packages/p/python-astropy-iers-data/python-astropy-iers-data.changes
+++ b/packages/p/python-astropy-iers-data/python-astropy-iers-data.changes
@@ -1,3 +1,14 @@
+-------------------------------------------------------------------
+Tue Oct 22 15:52:04 UTC 2024 - Dirk Müller
+
+- update to 0.2024.10.21.0.33.21:
+ * Bump actions/checkout from 4.2.0 to 4.2.1
+ * MNT: Use hash for Action workflow versions and update if
+ needed
+ * Remove leading zeros in tag to make tag consistent with PyPI
+ release
+ * Fix continuous integration
+
-------------------------------------------------------------------
Fri Aug 30 15:14:22 UTC 2024 - Ben Greiner
diff --git a/packages/p/python-astropy-iers-data/python-astropy-iers-data.spec b/packages/p/python-astropy-iers-data/python-astropy-iers-data.spec
index e2707c36f23..aa25e6081ee 100644
--- a/packages/p/python-astropy-iers-data/python-astropy-iers-data.spec
+++ b/packages/p/python-astropy-iers-data/python-astropy-iers-data.spec
@@ -26,7 +26,7 @@
%endif
Name: python-astropy-iers-data%{psuffix}
-Version: 0.2024.8.27.10.28.29
+Version: 0.2024.10.21.0.33.21
Release: 0
Summary: IERS Earth Rotation and Leap Second tables for the astropy core package
License: BSD-3-Clause
diff --git a/packages/p/python-async-wrapper/.files b/packages/p/python-async-wrapper/.files
index c2fa10a8d8d..98a6c096304 100644
Binary files a/packages/p/python-async-wrapper/.files and b/packages/p/python-async-wrapper/.files differ
diff --git a/packages/p/python-async-wrapper/.rev b/packages/p/python-async-wrapper/.rev
index 7bc695d3179..fd3e3a3fc3a 100644
--- a/packages/p/python-async-wrapper/.rev
+++ b/packages/p/python-async-wrapper/.rev
@@ -21,4 +21,16 @@
1205227
+
+ f98b38695bae1a8999d4dc008e5a77da
+ 0.11.1
+
+ anag+factory
+ - update to 0.11.1:
+ * fix python 3.13 uvloop
+ * support python 3.13
+
+- Initial release of python-async-wrapper 0.10.0
+ 1217073
+
diff --git a/packages/p/python-async-wrapper/async-wrapper-0.10.0.tar.gz b/packages/p/python-async-wrapper/async-wrapper-0.10.0.tar.gz
deleted file mode 120000
index fb9ba0ca62b..00000000000
--- a/packages/p/python-async-wrapper/async-wrapper-0.10.0.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreihii6dqij4agjaywes2x2tee3mabfaz2yeh42kyudpyc6aubduy54
\ No newline at end of file
diff --git a/packages/p/python-async-wrapper/async-wrapper-0.11.1.tar.gz b/packages/p/python-async-wrapper/async-wrapper-0.11.1.tar.gz
new file mode 120000
index 00000000000..01d769dd129
--- /dev/null
+++ b/packages/p/python-async-wrapper/async-wrapper-0.11.1.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreicbwkb7tgyra3j6araizif2rpgxdvgcr5zmhvrcyt2iaqpfrjhpd4
\ No newline at end of file
diff --git a/packages/p/python-async-wrapper/python-async-wrapper.changes b/packages/p/python-async-wrapper/python-async-wrapper.changes
index 82b23d6f225..163b42bddf4 100644
--- a/packages/p/python-async-wrapper/python-async-wrapper.changes
+++ b/packages/p/python-async-wrapper/python-async-wrapper.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Oct 22 15:53:16 UTC 2024 - Dirk Müller
+
+- update to 0.11.1:
+ * fix python 3.13 uvloop
+ * support python 3.13
+
-------------------------------------------------------------------
Wed Oct 2 14:59:25 UTC 2024 - Matej Cepl
@@ -11,4 +18,4 @@ Wed Oct 2 14:59:25 UTC 2024 - Matej Cepl
-------------------------------------------------------------------
Thu Sep 26 19:14:00 UTC 2024 - Antonio Larrosa
-- Initial release of python-async-wrapper 0.10.0
+- Initial release of python-async-wrapper 0.10.0
diff --git a/packages/p/python-async-wrapper/python-async-wrapper.spec b/packages/p/python-async-wrapper/python-async-wrapper.spec
index 330c88c944a..9b515c138ad 100644
--- a/packages/p/python-async-wrapper/python-async-wrapper.spec
+++ b/packages/p/python-async-wrapper/python-async-wrapper.spec
@@ -17,7 +17,7 @@
Name: python-async-wrapper
-Version: 0.10.0
+Version: 0.11.1
Release: 0
Summary: Library for improving async programming
License: MIT
diff --git a/packages/p/python-blinker/.files b/packages/p/python-blinker/.files
index d65b022b79d..1f5e2203f06 100644
Binary files a/packages/p/python-blinker/.files and b/packages/p/python-blinker/.files differ
diff --git a/packages/p/python-blinker/.rev b/packages/p/python-blinker/.rev
index c058845cd06..01083896694 100644
--- a/packages/p/python-blinker/.rev
+++ b/packages/p/python-blinker/.rev
@@ -207,4 +207,41 @@
1126823
+
+ 8f921c5b715067b37b8b02793a8f0b89
+ 1.8.2
+
+ anag+factory
+ - update to 1.8.2:
+ * Simplify type for _async_wrapper and _sync_wrapper arguments.
+ :pr:`156`
+ * Restore identity handling for str and int senders. :pr:`148`
+ * Fix deprecated blinker.base.WeakNamespace import. :pr:`149`
+ * Fix deprecated blinker.base.receiver_connected import.
+ :pr:`153`
+ * Use types from collections.abc instead of typing. :pr:`150`
+ * Fully specify exported types as reported by pyright.
+ :pr:`152`
+ * Deprecate the __version__ attribute. Use feature detection,
+ or importlib.metadata.version("blinker"), instead.
+ :issue:`128`
+ * Specify that the deprecated temporarily_connected_to will be
+ removed in the next version.
+ * Show a deprecation warning for the deprecated global
+ receiver_connected signal and specify that it will be removed
+ in the next version.
+ * Show a deprecation warning for the deprecated WeakNamespace
+ and specify that it will be removed in the next version.
+ * Greatly simplify how the library uses weakrefs. This is a
+ significant change internally but should not affect any
+ public API. :pr:`144`
+ * Expose the namespace used by signal() as default_namespace.
+ :pr:`145`
+- add remove-sphinxextensions.patch to remove an optional
+ sphinxextension
+
+- use setup.py option to record file list for rpm package
+- Fixed doc section in file list
+ 1217042
+
diff --git a/packages/p/python-blinker/blinker-1.7.0.tar.gz b/packages/p/python-blinker/blinker-1.7.0.tar.gz
deleted file mode 120000
index eab7532e7e9..00000000000
--- a/packages/p/python-blinker/blinker-1.7.0.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreihgqih7n6sojuoy4j2hyiudosod6vd6j7xbck4ykvonzwxdfglbqi
\ No newline at end of file
diff --git a/packages/p/python-blinker/blinker-1.8.2.tar.gz b/packages/p/python-blinker/blinker-1.8.2.tar.gz
new file mode 120000
index 00000000000..656f2fc5b3d
--- /dev/null
+++ b/packages/p/python-blinker/blinker-1.8.2.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreiepo6yj2o7xy6k6s2pjjbxttqwf5hbz2txaoqsl4k6fstwoszbnqm
\ No newline at end of file
diff --git a/packages/p/python-blinker/python-blinker.changes b/packages/p/python-blinker/python-blinker.changes
index 1cd35883c64..d4c49c1cb2e 100644
--- a/packages/p/python-blinker/python-blinker.changes
+++ b/packages/p/python-blinker/python-blinker.changes
@@ -1,3 +1,34 @@
+-------------------------------------------------------------------
+Tue Oct 22 11:58:39 UTC 2024 - Dirk Müller
+
+- update to 1.8.2:
+ * Simplify type for _async_wrapper and _sync_wrapper arguments.
+ :pr:`156`
+ * Restore identity handling for str and int senders. :pr:`148`
+ * Fix deprecated blinker.base.WeakNamespace import. :pr:`149`
+ * Fix deprecated blinker.base.receiver_connected import.
+ :pr:`153`
+ * Use types from collections.abc instead of typing. :pr:`150`
+ * Fully specify exported types as reported by pyright.
+ :pr:`152`
+ * Deprecate the __version__ attribute. Use feature detection,
+ or importlib.metadata.version("blinker"), instead.
+ :issue:`128`
+ * Specify that the deprecated temporarily_connected_to will be
+ removed in the next version.
+ * Show a deprecation warning for the deprecated global
+ receiver_connected signal and specify that it will be removed
+ in the next version.
+ * Show a deprecation warning for the deprecated WeakNamespace
+ and specify that it will be removed in the next version.
+ * Greatly simplify how the library uses weakrefs. This is a
+ significant change internally but should not affect any
+ public API. :pr:`144`
+ * Expose the namespace used by signal() as default_namespace.
+ :pr:`145`
+- add remove-sphinxextensions.patch to remove an optional
+ sphinxextension
+
-------------------------------------------------------------------
Tue Nov 14 21:30:44 UTC 2023 - Benoît Monin
@@ -125,12 +156,12 @@ Thu Sep 15 13:51:06 UTC 2016 - rjschwei@suse.com
-------------------------------------------------------------------
Fri Mar 11 08:27:10 UTC 2016 - freitag@opensuse.org
-- use setup.py option to record file list for rpm package
+- use setup.py option to record file list for rpm package
-------------------------------------------------------------------
Sun Jan 3 20:55:02 UTC 2016 - freitag@opensuse.org
-- Fixed doc section in file list
+- Fixed doc section in file list
-------------------------------------------------------------------
Sun Jan 3 20:35:36 UTC 2016 - freitag@opensuse.org
@@ -156,7 +187,7 @@ Sun Feb 22 17:44:07 UTC 2015 - benoit.monin@gmx.fr
Wed Aug 15 02:59:55 UTC 2012 - highwaystar.ru@gmail.com
- python3 package added
-- spec improved (files section)
+- spec improved (files section)
-------------------------------------------------------------------
Fri Jun 22 13:16:29 UTC 2012 - saschpe@suse.de
diff --git a/packages/p/python-blinker/python-blinker.spec b/packages/p/python-blinker/python-blinker.spec
index 99a1a5286c1..944ec6c8d49 100644
--- a/packages/p/python-blinker/python-blinker.spec
+++ b/packages/p/python-blinker/python-blinker.spec
@@ -1,7 +1,7 @@
#
# spec file for package python-blinker
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,15 +18,14 @@
%{?sle15_python_module_pythons}
Name: python-blinker
-Version: 1.7.0
+Version: 1.8.2
Release: 0
Summary: Object-to-object and broadcast signaling in Python
License: MIT
Group: Development/Languages/Python
URL: https://github.com/pallets-eco/blinker/
Source: https://files.pythonhosted.org/packages/source/b/blinker/blinker-%{version}.tar.gz
-BuildRequires: %{python_module Pallets-Sphinx-Themes}
-BuildRequires: %{python_module Sphinx}
+Patch1: remove-sphinxextensions.patch
BuildRequires: %{python_module base >= 3.8}
BuildRequires: %{python_module flit-core}
BuildRequires: %{python_module pip}
@@ -49,6 +48,11 @@ sent by any sender.
%package -n python-blinker-doc
Summary: Documentation for %{name}
Group: Documentation/HTML
+BuildRequires: %{python_module Pallets-Sphinx-Themes}
+BuildRequires: %{python_module Sphinx}
+BuildRequires: %{python_module sphinxcontrib-htmlhelp}
+BuildRequires: %{python_module sphinxcontrib-jsmath}
+BuildRequires: %{python_module sphinxcontrib-serializinghtml}
Provides: %{python_module blinker-doc = %{version}}
%description -n python-blinker-doc
@@ -85,8 +89,8 @@ popd
%pytest
%files %{python_files}
-%license LICENSE.rst
-%doc CHANGES.rst README.rst
+%license LICENSE.txt
+%doc CHANGES.rst README.md
%{python_sitelib}/blinker-%{version}*-info
%{python_sitelib}/blinker
diff --git a/packages/p/python-blinker/remove-sphinxextensions.patch b/packages/p/python-blinker/remove-sphinxextensions.patch
new file mode 100644
index 00000000000..cb852beebf5
--- /dev/null
+++ b/packages/p/python-blinker/remove-sphinxextensions.patch
@@ -0,0 +1,12 @@
+Index: blinker-1.8.2/docs/conf.py
+===================================================================
+--- blinker-1.8.2.orig/docs/conf.py
++++ blinker-1.8.2/docs/conf.py
+@@ -9,7 +9,6 @@ default_role = "code"
+ extensions = [
+ "sphinx.ext.autodoc",
+ "sphinx.ext.extlinks",
+- "sphinxcontrib.log_cabinet",
+ "pallets_sphinx_themes",
+ ]
+ autodoc_member_order = "groupwise"
diff --git a/packages/p/python-bracex/.files b/packages/p/python-bracex/.files
index 783c878ad1b..134322b7776 100644
Binary files a/packages/p/python-bracex/.files and b/packages/p/python-bracex/.files differ
diff --git a/packages/p/python-bracex/.rev b/packages/p/python-bracex/.rev
index f0588046e21..ebed7bb8466 100644
--- a/packages/p/python-bracex/.rev
+++ b/packages/p/python-bracex/.rev
@@ -40,4 +40,13 @@
* **NEW** Add Python 3.13 support.
1192789
+
+ 913b818eb55f91151a4dc34dffadb9bc
+ 2.5.post1
+
+ anag+factory
+ - update to 2.5.post1:
+ * **FIX**: Fix PyPI landing page.
+ 1217074
+
diff --git a/packages/p/python-bracex/bracex-2.5.post1.tar.gz b/packages/p/python-bracex/bracex-2.5.post1.tar.gz
new file mode 120000
index 00000000000..0c7d431d5b9
--- /dev/null
+++ b/packages/p/python-bracex/bracex-2.5.post1.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreiasyueveqk37j3t2lm4zohhszi3rtnr6mnef5qjdoae625cwstgwy
\ No newline at end of file
diff --git a/packages/p/python-bracex/bracex-2.5.tar.gz b/packages/p/python-bracex/bracex-2.5.tar.gz
deleted file mode 120000
index dfe627b5199..00000000000
--- a/packages/p/python-bracex/bracex-2.5.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreiahexnfarpi2n7kswjkwnqu3c2wdyrmhrp54olengn6m4xaokvwce
\ No newline at end of file
diff --git a/packages/p/python-bracex/python-bracex.changes b/packages/p/python-bracex/python-bracex.changes
index e348485c1bb..79a8d4b5d8e 100644
--- a/packages/p/python-bracex/python-bracex.changes
+++ b/packages/p/python-bracex/python-bracex.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 22 15:54:37 UTC 2024 - Dirk Müller
+
+- update to 2.5.post1:
+ * **FIX**: Fix PyPI landing page.
+
-------------------------------------------------------------------
Fri Aug 9 06:54:40 UTC 2024 - Dirk Müller
diff --git a/packages/p/python-bracex/python-bracex.spec b/packages/p/python-bracex/python-bracex.spec
index dca73da7b68..667a74f60f5 100644
--- a/packages/p/python-bracex/python-bracex.spec
+++ b/packages/p/python-bracex/python-bracex.spec
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-bracex
-Version: 2.5
+Version: 2.5.post1
Release: 0
Summary: Bash style brace expander
License: MIT
diff --git a/packages/p/python-calmjs.parse/.files b/packages/p/python-calmjs.parse/.files
index a67d83f50fb..03b924bc0da 100644
Binary files a/packages/p/python-calmjs.parse/.files and b/packages/p/python-calmjs.parse/.files differ
diff --git a/packages/p/python-calmjs.parse/.rev b/packages/p/python-calmjs.parse/.rev
index 06018f5ad2d..b6451b0d797 100644
--- a/packages/p/python-calmjs.parse/.rev
+++ b/packages/p/python-calmjs.parse/.rev
@@ -79,4 +79,15 @@
reflect which of the required dependencies are missing.
1124864
+
+ 72771703d40fd3cf6ec96b78f439a8bc
+ 1.3.2
+
+ anag+factory
+ - update to 1.3.2:
+ * Ensure building from source tree under Python 3.13 works.
+ * Dropped support for building under Python 2 in source tree. [
+ #44 ]
+ 1217048
+
diff --git a/packages/p/python-calmjs.parse/1.3.1.tar.gz b/packages/p/python-calmjs.parse/1.3.1.tar.gz
deleted file mode 120000
index c26d3286a37..00000000000
--- a/packages/p/python-calmjs.parse/1.3.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreig7oer7rkfzcvgpo5pb2fo7gldwyhlptsud3iqc4znw5cj4jtg4h4
\ No newline at end of file
diff --git a/packages/p/python-calmjs.parse/1.3.2.tar.gz b/packages/p/python-calmjs.parse/1.3.2.tar.gz
new file mode 120000
index 00000000000..16641f12954
--- /dev/null
+++ b/packages/p/python-calmjs.parse/1.3.2.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreihhb3kdctvxe4wokgn7hrf3gknzbnhfras5rh2ca3j43zzbqao4x4
\ No newline at end of file
diff --git a/packages/p/python-calmjs.parse/python-calmjs.parse.changes b/packages/p/python-calmjs.parse/python-calmjs.parse.changes
index 70b2bedca8b..4083661836e 100644
--- a/packages/p/python-calmjs.parse/python-calmjs.parse.changes
+++ b/packages/p/python-calmjs.parse/python-calmjs.parse.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:58:56 UTC 2024 - Dirk Müller
+
+- update to 1.3.2:
+ * Ensure building from source tree under Python 3.13 works.
+ * Dropped support for building under Python 2 in source tree. [
+ #44 ]
+
-------------------------------------------------------------------
Fri Nov 10 11:43:35 UTC 2023 - Dirk Müller
diff --git a/packages/p/python-calmjs.parse/python-calmjs.parse.spec b/packages/p/python-calmjs.parse/python-calmjs.parse.spec
index fb525cb837c..4eb0f908abf 100644
--- a/packages/p/python-calmjs.parse/python-calmjs.parse.spec
+++ b/packages/p/python-calmjs.parse/python-calmjs.parse.spec
@@ -1,7 +1,7 @@
#
# spec file for package python-calmjs.parse
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-calmjs.parse
-Version: 1.3.1
+Version: 1.3.2
Release: 0
Summary: Various parsers for ECMA standards
License: MIT
diff --git a/packages/p/python-cbor2/.files b/packages/p/python-cbor2/.files
index cdce60bd025..28c21d8308e 100644
Binary files a/packages/p/python-cbor2/.files and b/packages/p/python-cbor2/.files differ
diff --git a/packages/p/python-cbor2/.rev b/packages/p/python-cbor2/.rev
index e19941f2932..19a4bccb7af 100644
--- a/packages/p/python-cbor2/.rev
+++ b/packages/p/python-cbor2/.rev
@@ -142,4 +142,13 @@
1179021
+
+ c812e7593ad0cc6160e429a4adbe7417
+ 5.6.5
+
+ anag+factory
+ - update to 5.6.5:
+ * Published binary wheels for Python 3.13
+ 1217046
+
diff --git a/packages/p/python-cbor2/cbor2-5.6.4.tar.gz b/packages/p/python-cbor2/cbor2-5.6.4.tar.gz
deleted file mode 120000
index 3ace5740259..00000000000
--- a/packages/p/python-cbor2/cbor2-5.6.4.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreia4km6fbxpinpxry2kqmaqfjih7upbxn2fq4ighxd23ccdzh5uyhy
\ No newline at end of file
diff --git a/packages/p/python-cbor2/cbor2-5.6.5.tar.gz b/packages/p/python-cbor2/cbor2-5.6.5.tar.gz
new file mode 120000
index 00000000000..3fe3fd2bc89
--- /dev/null
+++ b/packages/p/python-cbor2/cbor2-5.6.5.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreifwqkbam57odw52ix35uemjrutsb6joa27dnlhmfeegpvpl6pl6be
\ No newline at end of file
diff --git a/packages/p/python-cbor2/python-cbor2.changes b/packages/p/python-cbor2/python-cbor2.changes
index d58b2554cb8..38552e1c326 100644
--- a/packages/p/python-cbor2/python-cbor2.changes
+++ b/packages/p/python-cbor2/python-cbor2.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:48:00 UTC 2024 - Dirk Müller
+
+- update to 5.6.5:
+ * Published binary wheels for Python 3.13
+
-------------------------------------------------------------------
Thu Jun 6 10:36:17 UTC 2024 - John Paul Adrian Glaubitz
diff --git a/packages/p/python-cbor2/python-cbor2.spec b/packages/p/python-cbor2/python-cbor2.spec
index 2292af850cb..c49a2977004 100644
--- a/packages/p/python-cbor2/python-cbor2.spec
+++ b/packages/p/python-cbor2/python-cbor2.spec
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-cbor2
-Version: 5.6.4
+Version: 5.6.5
Release: 0
Summary: Pure Python CBOR (de)serializer with extensive tag support
License: MIT
diff --git a/packages/p/python-certifi/.files b/packages/p/python-certifi/.files
index 76f7b1e1494..b4c6e2fe91d 100644
Binary files a/packages/p/python-certifi/.files and b/packages/p/python-certifi/.files differ
diff --git a/packages/p/python-certifi/.rev b/packages/p/python-certifi/.rev
index d84656ab9ad..2e840562d76 100644
--- a/packages/p/python-certifi/.rev
+++ b/packages/p/python-certifi/.rev
@@ -350,4 +350,17 @@
* Fix leaking certificate issue
1186314
+
+ 929ee1e72e64f2d638130760c2692c50
+ 2024.8.30
+
+ anag+factory
+ - update to 2024.8.30:
+ added certs:
+ * TWCA CYBER Root CA O=TAIWAN-CA OU=Root CA
+ * SecureSign Root CA12 O=Cybertrust Japan Co., Ltd.
+ * SecureSign Root CA14 O=Cybertrust Japan Co., Ltd.
+ * SecureSign Root CA15 O=Cybertrust Japan Co., Ltd.
+ 1217075
+
diff --git a/packages/p/python-certifi/certifi-2024.7.4.tar.gz b/packages/p/python-certifi/certifi-2024.7.4.tar.gz
deleted file mode 120000
index 66b32207d4d..00000000000
--- a/packages/p/python-certifi/certifi-2024.7.4.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreic2dz3elpaoyynatytmg33ba3ouz5amnwz2d63dkkycitt7wbl4pm
\ No newline at end of file
diff --git a/packages/p/python-certifi/certifi-2024.8.30.tar.gz b/packages/p/python-certifi/certifi-2024.8.30.tar.gz
new file mode 120000
index 00000000000..b4299dde15e
--- /dev/null
+++ b/packages/p/python-certifi/certifi-2024.8.30.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreif6zfa5fkubsxrerjqlgh7z6bkyfbgpagssleoo3jz6vgx77vu73e
\ No newline at end of file
diff --git a/packages/p/python-certifi/python-certifi.changes b/packages/p/python-certifi/python-certifi.changes
index c37f8cf4105..fe1ad843d99 100644
--- a/packages/p/python-certifi/python-certifi.changes
+++ b/packages/p/python-certifi/python-certifi.changes
@@ -1,3 +1,13 @@
+-------------------------------------------------------------------
+Wed Oct 9 06:43:31 UTC 2024 - Dirk Müller
+
+- update to 2024.8.30:
+ added certs:
+ * TWCA CYBER Root CA O=TAIWAN-CA OU=Root CA
+ * SecureSign Root CA12 O=Cybertrust Japan Co., Ltd.
+ * SecureSign Root CA14 O=Cybertrust Japan Co., Ltd.
+ * SecureSign Root CA15 O=Cybertrust Japan Co., Ltd.
+
-------------------------------------------------------------------
Tue Jul 9 06:36:13 UTC 2024 - Daniel Garcia
diff --git a/packages/p/python-certifi/python-certifi.spec b/packages/p/python-certifi/python-certifi.spec
index 5dcbff01cf6..9d3cfb7441b 100644
--- a/packages/p/python-certifi/python-certifi.spec
+++ b/packages/p/python-certifi/python-certifi.spec
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-certifi
-Version: 2024.7.4
+Version: 2024.8.30
Release: 0
Summary: Python package for providing Mozilla's CA Bundle
License: MPL-2.0
diff --git a/packages/p/python-charset-normalizer/.files b/packages/p/python-charset-normalizer/.files
index 2a4533fd7ca..0227372c66e 100644
Binary files a/packages/p/python-charset-normalizer/.files and b/packages/p/python-charset-normalizer/.files differ
diff --git a/packages/p/python-charset-normalizer/.rev b/packages/p/python-charset-normalizer/.rev
index 491508dd3c3..7fa828bbacf 100644
--- a/packages/p/python-charset-normalizer/.rev
+++ b/packages/p/python-charset-normalizer/.rev
@@ -321,4 +321,21 @@
from the community
1128743
+
+ aa6f07f269e46028b0f120cf45a8f554
+ 3.4.0
+
+ anag+factory
+ - update to 3.4.0:
+ * Argument `--no-preemptive` in the CLI to prevent the detector
+ to search for hints.
+ * Support for Python 3.13
+ * Relax the TypeError exception thrown when trying to compare a
+ CharsetMatch with anything else than a CharsetMatch.
+ * Improved the general reliability of the detector based on
+ user feedbacks. (#520) (#509) (#498) (#407)
+ * Declared charset in content (preemptive detection) not
+ changed when converting to utf-8 bytes.
+ 1217078
+
diff --git a/packages/p/python-charset-normalizer/charset_normalizer-3.3.2.tar.gz b/packages/p/python-charset-normalizer/charset_normalizer-3.3.2.tar.gz
deleted file mode 120000
index 86e1a2646d2..00000000000
--- a/packages/p/python-charset-normalizer/charset_normalizer-3.3.2.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreiezjds4c6brsfxpdewph4tmorgvhhvw6tu6hmbo5jsjkuwffminse
\ No newline at end of file
diff --git a/packages/p/python-charset-normalizer/charset_normalizer-3.4.0.tar.gz b/packages/p/python-charset-normalizer/charset_normalizer-3.4.0.tar.gz
new file mode 120000
index 00000000000..2528e10e179
--- /dev/null
+++ b/packages/p/python-charset-normalizer/charset_normalizer-3.4.0.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreihi36tanj6d6tkfidt7msfgaizygi7ob5pelacdvthvtnfaje3yh4
\ No newline at end of file
diff --git a/packages/p/python-charset-normalizer/python-charset-normalizer.changes b/packages/p/python-charset-normalizer/python-charset-normalizer.changes
index d82ab9394bf..34c782db202 100644
--- a/packages/p/python-charset-normalizer/python-charset-normalizer.changes
+++ b/packages/p/python-charset-normalizer/python-charset-normalizer.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Tue Oct 22 16:00:12 UTC 2024 - Dirk Müller
+
+- update to 3.4.0:
+ * Argument `--no-preemptive` in the CLI to prevent the detector
+ to search for hints.
+ * Support for Python 3.13
+ * Relax the TypeError exception thrown when trying to compare a
+ CharsetMatch with anything else than a CharsetMatch.
+ * Improved the general reliability of the detector based on
+ user feedbacks. (#520) (#509) (#498) (#407)
+ * Declared charset in content (preemptive detection) not
+ changed when converting to utf-8 bytes.
+
-------------------------------------------------------------------
Sat Nov 25 14:12:18 UTC 2023 - Dirk Müller
diff --git a/packages/p/python-charset-normalizer/python-charset-normalizer.spec b/packages/p/python-charset-normalizer/python-charset-normalizer.spec
index 69511901f85..319a4d5b64e 100644
--- a/packages/p/python-charset-normalizer/python-charset-normalizer.spec
+++ b/packages/p/python-charset-normalizer/python-charset-normalizer.spec
@@ -1,7 +1,7 @@
#
# spec file for package python-charset-normalizer
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-charset-normalizer
-Version: 3.3.2
+Version: 3.4.0
Release: 0
Summary: Python Universal Charset detector
License: MIT
@@ -29,7 +29,7 @@ BuildRequires: %{python_module setuptools}
BuildRequires: fdupes
BuildRequires: python-rpm-macros
Requires(post): update-alternatives
-Requires(postun):update-alternatives
+Requires(postun): update-alternatives
Suggests: python-unicodedata2
BuildArch: noarch
# SECTION test requirements
diff --git a/packages/p/python-click-aliases/.files b/packages/p/python-click-aliases/.files
index 909118d2488..e6083a92a3a 100644
Binary files a/packages/p/python-click-aliases/.files and b/packages/p/python-click-aliases/.files differ
diff --git a/packages/p/python-click-aliases/.rev b/packages/p/python-click-aliases/.rev
index 9b87d68e014..5f3068a9c09 100644
--- a/packages/p/python-click-aliases/.rev
+++ b/packages/p/python-click-aliases/.rev
@@ -33,4 +33,15 @@
* convert to poetry
1135261
+
+ 320c56e2d92f4f47f8261090156fed50
+ 1.0.5
+
+ anag+factory
+ - update to 1.0.5:
+ * typing hints
+ * fix cmd.name to name
+ * dependency bumps
+ 1217047
+
diff --git a/packages/p/python-click-aliases/click-aliases-1.0.4-gh.tar.gz b/packages/p/python-click-aliases/click-aliases-1.0.4-gh.tar.gz
deleted file mode 120000
index 3e7aee44838..00000000000
--- a/packages/p/python-click-aliases/click-aliases-1.0.4-gh.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreiauotdvq6ufv4ibgn7lhenpixzdsey2r4qar5jkjiqyq4rajhw2xy
\ No newline at end of file
diff --git a/packages/p/python-click-aliases/click-aliases-1.0.5-gh.tar.gz b/packages/p/python-click-aliases/click-aliases-1.0.5-gh.tar.gz
new file mode 120000
index 00000000000..99188d42a4f
--- /dev/null
+++ b/packages/p/python-click-aliases/click-aliases-1.0.5-gh.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreidsn57two4i2n7biqjqjbo7znf6swqf4gw7iut47fxl3y5fsrd6cm
\ No newline at end of file
diff --git a/packages/p/python-click-aliases/python-click-aliases.changes b/packages/p/python-click-aliases/python-click-aliases.changes
index 1e3e3de936b..35e2158aa2e 100644
--- a/packages/p/python-click-aliases/python-click-aliases.changes
+++ b/packages/p/python-click-aliases/python-click-aliases.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:58:08 UTC 2024 - Dirk Müller
+
+- update to 1.0.5:
+ * typing hints
+ * fix cmd.name to name
+ * dependency bumps
+
-------------------------------------------------------------------
Wed Dec 27 10:09:10 UTC 2023 - Dirk Müller
diff --git a/packages/p/python-click-aliases/python-click-aliases.spec b/packages/p/python-click-aliases/python-click-aliases.spec
index b0747a07268..dcad24eb270 100644
--- a/packages/p/python-click-aliases/python-click-aliases.spec
+++ b/packages/p/python-click-aliases/python-click-aliases.spec
@@ -1,7 +1,7 @@
#
# spec file for package python-click-aliases
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-click-aliases
-Version: 1.0.4
+Version: 1.0.5
Release: 0
Summary: Command aliases for Click
License: MIT
diff --git a/packages/p/python-consolekit/.files b/packages/p/python-consolekit/.files
index b135605df32..e9e2b955565 100644
Binary files a/packages/p/python-consolekit/.files and b/packages/p/python-consolekit/.files differ
diff --git a/packages/p/python-consolekit/.rev b/packages/p/python-consolekit/.rev
index b9acb376318..6fe64a1d447 100644
--- a/packages/p/python-consolekit/.rev
+++ b/packages/p/python-consolekit/.rev
@@ -7,4 +7,13 @@
- Initial release of 1.7.1
1190065
+
+ cce24ecb49ac71aebdd319f361f8dc5f
+ 1.7.2
+
+ anag+factory
+ - update to 1.7.2:
+ * Automatically copied from PyPI.
+ 1217030
+
diff --git a/packages/p/python-consolekit/consolekit-1.7.1.tar.gz b/packages/p/python-consolekit/consolekit-1.7.1.tar.gz
deleted file mode 120000
index 73f52447e0f..00000000000
--- a/packages/p/python-consolekit/consolekit-1.7.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreicwjbwd46yaf4p6evci36nvajwkeidcxivntz4xllg45ce2m3aj7a
\ No newline at end of file
diff --git a/packages/p/python-consolekit/consolekit-1.7.2.tar.gz b/packages/p/python-consolekit/consolekit-1.7.2.tar.gz
new file mode 120000
index 00000000000..2fa89bd3e8a
--- /dev/null
+++ b/packages/p/python-consolekit/consolekit-1.7.2.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreihgdxi5bfk7h7yqcqkiooy6nuesgkx7vq57jofkbnzdwhltmo3kk4
\ No newline at end of file
diff --git a/packages/p/python-consolekit/python-consolekit.changes b/packages/p/python-consolekit/python-consolekit.changes
index 961e2975a5e..9280295aefa 100644
--- a/packages/p/python-consolekit/python-consolekit.changes
+++ b/packages/p/python-consolekit/python-consolekit.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:14:37 UTC 2024 - Dirk Müller
+
+- update to 1.7.2:
+ * Automatically copied from PyPI.
+
-------------------------------------------------------------------
Fri Jul 26 07:14:34 UTC 2024 - Steve Kowalik
diff --git a/packages/p/python-consolekit/python-consolekit.spec b/packages/p/python-consolekit/python-consolekit.spec
index 72131e85d52..3da894a06f5 100644
--- a/packages/p/python-consolekit/python-consolekit.spec
+++ b/packages/p/python-consolekit/python-consolekit.spec
@@ -25,7 +25,7 @@
%bcond_with test
%endif
Name: python-consolekit%{psuffix}
-Version: 1.7.1
+Version: 1.7.2
Release: 0
Summary: Additional utilities for click
License: MIT
diff --git a/packages/p/python-coverage/.files b/packages/p/python-coverage/.files
index eea34d756b9..2866aae8748 100644
Binary files a/packages/p/python-coverage/.files and b/packages/p/python-coverage/.files differ
diff --git a/packages/p/python-coverage/.rev b/packages/p/python-coverage/.rev
index f4398fc31cc..72c42bf03c7 100644
--- a/packages/p/python-coverage/.rev
+++ b/packages/p/python-coverage/.rev
@@ -799,4 +799,41 @@ update to latest version
coverage data" and "statement coverage data."
1198085
+
+ 5371c037361ad9466abe4d1576c92e9a
+ 7.6.4
+
+ anag+factory
+ - update to 7.6.4:
+ * fix: multi-line with statements could cause contained
+ branches to be incorrectly marked as missing (issue 1880).
+ This is now fixed.
+ * Fix: nested context managers could incorrectly be analyzed to
+ flag a missing branch on the last context manager, as
+ described in issue 1876. This is now fixed.
+ * Fix: the missing branch message about not exiting a module
+ had an extra "didn't," as described in issue 1873. This is
+ now fixed.
+ * Dropped support for Python 3.8 and PyPy 3.8.
+ * Fix: a final wildcard match/case clause assigning to a name
+ (case _ as value) was incorrectly marked as a missing branch.
+ This is now fixed, closing issue 1860.
+ * Fewer things are considered branches now. Lambdas,
+ comprehensions, and generator expressions are no longer
+ marked as missing branches if they don't complete execution.
+ Closes issue 1852.
+ * Fix: the HTML report didn't properly show multi-line
+ f-strings that end with a backslash continuation. This is
+ now fixed, closing issue 1836, thanks to LiuYinCarl and Marco
+ Ricci.
+ * Fix: the LCOV report now has correct line numbers (fixing
+ issue 1846) and better branch descriptions for BRDA records
+ (fixing issue 1850). There are other changes to lcov also,
+ including a new configuration option :ref:`line_checksums
+ <config_lcov_line_checksums>` to control whether line
+ checksums are included in the lcov report. The default is
+ false. To keep checksums set it to true. All this work is
+ thanks to Zack Weinberg (pull 1849 and pull 1851).
+ 1217070
+
diff --git a/packages/p/python-coverage/coverage-7.6.1.tar.gz b/packages/p/python-coverage/coverage-7.6.1.tar.gz
deleted file mode 120000
index a33d0f1bd2f..00000000000
--- a/packages/p/python-coverage/coverage-7.6.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeicnbfi3xrdx2iz4wenj257nhy77qzu7skrswarbwtsbgve3lxxtfq
\ No newline at end of file
diff --git a/packages/p/python-coverage/coverage-7.6.4.tar.gz b/packages/p/python-coverage/coverage-7.6.4.tar.gz
new file mode 120000
index 00000000000..7d7ce6959e3
--- /dev/null
+++ b/packages/p/python-coverage/coverage-7.6.4.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeibhakuswjfrgpaefsq43xiug4y7gq6l4owy3vz6bj4sc62miy3u64
\ No newline at end of file
diff --git a/packages/p/python-coverage/python-coverage.changes b/packages/p/python-coverage/python-coverage.changes
index d935bf4f306..592fff4857a 100644
--- a/packages/p/python-coverage/python-coverage.changes
+++ b/packages/p/python-coverage/python-coverage.changes
@@ -1,3 +1,41 @@
+-------------------------------------------------------------------
+Tue Oct 22 15:51:19 UTC 2024 - Dirk Müller
+
+- update to 7.6.4:
+ * fix: multi-line with statements could cause contained
+ branches to be incorrectly marked as missing (issue 1880).
+ This is now fixed.
+ * Fix: nested context managers could incorrectly be analyzed to
+ flag a missing branch on the last context manager, as
+ described in issue 1876. This is now fixed.
+ * Fix: the missing branch message about not exiting a module
+ had an extra "didn't," as described in issue 1873. This is
+ now fixed.
+ * Dropped support for Python 3.8 and PyPy 3.8.
+ * Fix: a final wildcard match/case clause assigning to a name
+ (case _ as value) was incorrectly marked as a missing branch.
+ This is now fixed, closing issue 1860.
+ * Fewer things are considered branches now. Lambdas,
+ comprehensions, and generator expressions are no longer
+ marked as missing branches if they don't complete execution.
+ Closes issue 1852.
+ * Fix: the HTML report didn't properly show multi-line
+ f-strings that end with a backslash continuation. This is
+ now fixed, closing issue 1836, thanks to LiuYinCarl and Marco
+ Ricci.
+ * Fix: the LCOV report now has correct line numbers (fixing
+ issue 1846) and better branch descriptions for BRDA records
+ (fixing issue 1850). There are other changes to lcov also,
+ including a new configuration option :ref:`line_checksums
+ ` to control whether line
+ checksums are included in the lcov report. The default is
+ false. To keep checksums set it to true. All this work is
+ thanks to Zack Weinberg (pull 1849 and pull 1851).
+ * Fixed the docs for multi-line regex exclusions, closing issue
+ 1863.
+ * Fixed a potential crash in the C tracer, closing issue 1835,
+ thanks to Jan Kühle.
+
-------------------------------------------------------------------
Sat Aug 31 13:44:09 UTC 2024 - Dirk Müller
diff --git a/packages/p/python-coverage/python-coverage.spec b/packages/p/python-coverage/python-coverage.spec
index 6be39e49acc..6ed9ddead64 100644
--- a/packages/p/python-coverage/python-coverage.spec
+++ b/packages/p/python-coverage/python-coverage.spec
@@ -18,13 +18,13 @@
%{?sle15_python_module_pythons}
Name: python-coverage
-Version: 7.6.1
+Version: 7.6.4
Release: 0
Summary: Code coverage measurement for Python
License: Apache-2.0
URL: https://github.com/nedbat/coveragepy
Source: https://files.pythonhosted.org/packages/source/c/coverage/coverage-%{version}.tar.gz
-BuildRequires: %{python_module devel >= 3.8}
+BuildRequires: %{python_module devel >= 3.9}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module wheel}
diff --git a/packages/p/python-cryptography-vectors/.files b/packages/p/python-cryptography-vectors/.files
index 04ac26ca45a..45cd2cf1340 100644
Binary files a/packages/p/python-cryptography-vectors/.files and b/packages/p/python-cryptography-vectors/.files differ
diff --git a/packages/p/python-cryptography-vectors/.rev b/packages/p/python-cryptography-vectors/.rev
index 24f4f9bc39a..5aefcd4ddbc 100644
--- a/packages/p/python-cryptography-vectors/.rev
+++ b/packages/p/python-cryptography-vectors/.rev
@@ -377,4 +377,13 @@
* Update test vectors to match python-cryptography 43.0.1
1204398
+
+ 131d68f48462f0303fd9cc4154789ef4
+ 43.0.3
+
+ anag+factory
+ - update to 43.0.3:
+ * Update test vectors to match python-cryptography 43.0.3
+ 1217034
+
diff --git a/packages/p/python-cryptography-vectors/cryptography_vectors-43.0.1.tar.gz b/packages/p/python-cryptography-vectors/cryptography_vectors-43.0.1.tar.gz
deleted file mode 120000
index fddd0478857..00000000000
--- a/packages/p/python-cryptography-vectors/cryptography_vectors-43.0.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeifvm7rxpphrsbzipyyd62jancfi4uttjls3y4ymmnhqq5xzje42sa
\ No newline at end of file
diff --git a/packages/p/python-cryptography-vectors/cryptography_vectors-43.0.3.tar.gz b/packages/p/python-cryptography-vectors/cryptography_vectors-43.0.3.tar.gz
new file mode 120000
index 00000000000..5d633c4b5e0
--- /dev/null
+++ b/packages/p/python-cryptography-vectors/cryptography_vectors-43.0.3.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeicd35bhulqes4uxlyklzsip2abwfczuvjlfgzawwa2e7tpv7pgztm
\ No newline at end of file
diff --git a/packages/p/python-cryptography-vectors/python-cryptography-vectors.changes b/packages/p/python-cryptography-vectors/python-cryptography-vectors.changes
index 93bb11abe7a..647e9964cfe 100644
--- a/packages/p/python-cryptography-vectors/python-cryptography-vectors.changes
+++ b/packages/p/python-cryptography-vectors/python-cryptography-vectors.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:04:55 UTC 2024 - Dirk Müller
+
+- update to 43.0.3:
+ * Update test vectors to match python-cryptography 43.0.3
+
-------------------------------------------------------------------
Sat Sep 28 19:20:56 UTC 2024 - Dirk Müller
diff --git a/packages/p/python-cryptography-vectors/python-cryptography-vectors.spec b/packages/p/python-cryptography-vectors/python-cryptography-vectors.spec
index 5f0d63ab6af..4efa92ae8d7 100644
--- a/packages/p/python-cryptography-vectors/python-cryptography-vectors.spec
+++ b/packages/p/python-cryptography-vectors/python-cryptography-vectors.spec
@@ -20,7 +20,7 @@
%{?sle15_python_module_pythons}
Name: python-cryptography-vectors
# ALWAYS KEEP IN SYNC WITH python-cryptography!
-Version: 43.0.1
+Version: 43.0.3
Release: 0
Summary: Test vectors for the cryptography package
License: Apache-2.0 OR BSD-3-Clause
diff --git a/packages/p/python-cryptography/.files b/packages/p/python-cryptography/.files
index 00b5e58e882..24d3fa53b5c 100644
Binary files a/packages/p/python-cryptography/.files and b/packages/p/python-cryptography/.files differ
diff --git a/packages/p/python-cryptography/.rev b/packages/p/python-cryptography/.rev
index c0d20bba6ef..658d1e81446 100644
--- a/packages/p/python-cryptography/.rev
+++ b/packages/p/python-cryptography/.rev
@@ -1159,4 +1159,14 @@
OpenSSL 3.3.2.
1204397
+
+ 6fc21b13b166c01e15dbff57091c8b70
+ 43.0.3
+
+ anag+factory
+ - update to 43.0.3:
+ * Fixed release metadata for cryptography-vectors
+ * Fixed compilation when using LibreSSL 4.0.0.
+ 1217043
+
diff --git a/packages/p/python-cryptography/cryptography-43.0.1.tar.gz b/packages/p/python-cryptography/cryptography-43.0.1.tar.gz
deleted file mode 120000
index 677ea18e261..00000000000
--- a/packages/p/python-cryptography/cryptography-43.0.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeiexjhtv5huzrkde4cepbpdai4bfndtdmu7aewywczfqgcgp3qw3ji
\ No newline at end of file
diff --git a/packages/p/python-cryptography/cryptography-43.0.3.tar.gz b/packages/p/python-cryptography/cryptography-43.0.3.tar.gz
new file mode 120000
index 00000000000..0f0babb6c58
--- /dev/null
+++ b/packages/p/python-cryptography/cryptography-43.0.3.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeievjirp6a6n7f63m2p2bq6ebh3uigxe6wveu6zsdkerukugsryfyi
\ No newline at end of file
diff --git a/packages/p/python-cryptography/no-pytest_benchmark.patch b/packages/p/python-cryptography/no-pytest_benchmark.patch
index 39fc37c50cc..67caf30f79a 100644
--- a/packages/p/python-cryptography/no-pytest_benchmark.patch
+++ b/packages/p/python-cryptography/no-pytest_benchmark.patch
@@ -7,13 +7,13 @@
tests/bench/test_x509.py | 16 ++++++-------
7 files changed, 37 insertions(+), 68 deletions(-)
-Index: cryptography-43.0.1/pyproject.toml
+Index: cryptography-43.0.3/pyproject.toml
===================================================================
---- cryptography-43.0.1.orig/pyproject.toml
-+++ cryptography-43.0.1/pyproject.toml
+--- cryptography-43.0.3.orig/pyproject.toml
++++ cryptography-43.0.3/pyproject.toml
@@ -66,8 +66,6 @@ nox = ["nox"]
test = [
- "cryptography_vectors==43.0.1",
+ "cryptography_vectors==43.0.3",
"pytest >=6.2.0",
- "pytest-benchmark",
- "pytest-cov",
@@ -63,10 +63,10 @@ Index: cryptography-43.0.1/pyproject.toml
[tool.ruff]
line-length = 79
-Index: cryptography-43.0.1/tests/bench/test_aead.py
+Index: cryptography-43.0.3/tests/bench/test_aead.py
===================================================================
---- cryptography-43.0.1.orig/tests/bench/test_aead.py
-+++ cryptography-43.0.1/tests/bench/test_aead.py
+--- cryptography-43.0.3.orig/tests/bench/test_aead.py
++++ cryptography-43.0.3/tests/bench/test_aead.py
@@ -26,84 +26,84 @@ def _aead_supported(cls):
not _aead_supported(ChaCha20Poly1305),
reason="Requires OpenSSL with ChaCha20Poly1305 support",
@@ -172,10 +172,10 @@ Index: cryptography-43.0.1/tests/bench/test_aead.py
ct = aes.encrypt(b"\x00" * 12, b"hello world plaintext", None)
- benchmark(aes.decrypt, b"\x00" * 12, ct, None)
+ aes.decrypt(b"\x00" * 12, ct, None)
-Index: cryptography-43.0.1/tests/bench/test_ec_load.py
+Index: cryptography-43.0.3/tests/bench/test_ec_load.py
===================================================================
---- cryptography-43.0.1.orig/tests/bench/test_ec_load.py
-+++ cryptography-43.0.1/tests/bench/test_ec_load.py
+--- cryptography-43.0.3.orig/tests/bench/test_ec_load.py
++++ cryptography-43.0.3/tests/bench/test_ec_load.py
@@ -5,9 +5,9 @@
from ..hazmat.primitives.fixtures_ec import EC_KEY_SECP256R1
@@ -190,10 +190,10 @@ Index: cryptography-43.0.1/tests/bench/test_ec_load.py
- benchmark(EC_KEY_SECP256R1.private_key)
+def test_load_ec_private_numbers():
+ EC_KEY_SECP256R1.private_key()
-Index: cryptography-43.0.1/tests/bench/test_hashes.py
+Index: cryptography-43.0.3/tests/bench/test_hashes.py
===================================================================
---- cryptography-43.0.1.orig/tests/bench/test_hashes.py
-+++ cryptography-43.0.1/tests/bench/test_hashes.py
+--- cryptography-43.0.3.orig/tests/bench/test_hashes.py
++++ cryptography-43.0.3/tests/bench/test_hashes.py
@@ -5,10 +5,10 @@
from cryptography.hazmat.primitives import hashes
@@ -207,10 +207,10 @@ Index: cryptography-43.0.1/tests/bench/test_hashes.py
- benchmark(bench)
+ bench()
-Index: cryptography-43.0.1/tests/bench/test_hmac.py
+Index: cryptography-43.0.3/tests/bench/test_hmac.py
===================================================================
---- cryptography-43.0.1.orig/tests/bench/test_hmac.py
-+++ cryptography-43.0.1/tests/bench/test_hmac.py
+--- cryptography-43.0.3.orig/tests/bench/test_hmac.py
++++ cryptography-43.0.3/tests/bench/test_hmac.py
@@ -5,10 +5,10 @@
from cryptography.hazmat.primitives import hashes, hmac
@@ -224,10 +224,10 @@ Index: cryptography-43.0.1/tests/bench/test_hmac.py
- benchmark(bench)
+ bench()
-Index: cryptography-43.0.1/tests/bench/test_x509.py
+Index: cryptography-43.0.3/tests/bench/test_x509.py
===================================================================
---- cryptography-43.0.1.orig/tests/bench/test_x509.py
-+++ cryptography-43.0.1/tests/bench/test_x509.py
+--- cryptography-43.0.3.orig/tests/bench/test_x509.py
++++ cryptography-43.0.3/tests/bench/test_x509.py
@@ -13,40 +13,40 @@ from cryptography import x509
from ..utils import load_vectors_from_file
diff --git a/packages/p/python-cryptography/python-cryptography.changes b/packages/p/python-cryptography/python-cryptography.changes
index 5a7845a87c6..6888a258536 100644
--- a/packages/p/python-cryptography/python-cryptography.changes
+++ b/packages/p/python-cryptography/python-cryptography.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:26:21 UTC 2024 - Dirk Müller
+
+- update to 43.0.3:
+ * Fixed release metadata for cryptography-vectors
+ * Fixed compilation when using LibreSSL 4.0.0.
+
-------------------------------------------------------------------
Sat Sep 28 19:45:04 UTC 2024 - Dirk Müller
diff --git a/packages/p/python-cryptography/python-cryptography.spec b/packages/p/python-cryptography/python-cryptography.spec
index bb4a2966a4c..1e8c51aa742 100644
--- a/packages/p/python-cryptography/python-cryptography.spec
+++ b/packages/p/python-cryptography/python-cryptography.spec
@@ -27,7 +27,8 @@
%endif
%{?sle15_python_module_pythons}
Name: python-cryptography%{psuffix}
-Version: 43.0.1
+# ALWAYS KEEP IN SYNC WITH python-cryptography-vectors!
+Version: 43.0.3
Release: 0
Summary: Python library which exposes cryptographic recipes and primitives
License: Apache-2.0 OR BSD-3-Clause
diff --git a/packages/p/python-cryptography/vendor.tar.zst b/packages/p/python-cryptography/vendor.tar.zst
index 953b807a1e7..8fee8c5ffaf 120000
--- a/packages/p/python-cryptography/vendor.tar.zst
+++ b/packages/p/python-cryptography/vendor.tar.zst
@@ -1 +1 @@
-/ipfs/bafybeiggewvcgsyykkpojxn7cx2hrsbw65xauiz5sbjstm6u4gxp6lbt6a
\ No newline at end of file
+/ipfs/bafybeidt6c3coj5c3fxmtny4mgu63tc336pe5zta3ojmanpxd6d2l22bbe
\ No newline at end of file
diff --git a/packages/p/python-dill/.files b/packages/p/python-dill/.files
index 6fa4bd832aa..9bcced761bc 100644
Binary files a/packages/p/python-dill/.files and b/packages/p/python-dill/.files differ
diff --git a/packages/p/python-dill/.rev b/packages/p/python-dill/.rev
index 514b41ee9d1..2d757302d3f 100644
--- a/packages/p/python-dill/.rev
+++ b/packages/p/python-dill/.rev
@@ -194,4 +194,40 @@
1197807
+
+ 83c645cfbe3ad2532b1b5718f168199f
+ 0.3.9
+
+ anag+factory
+ - update to 0.3.9:
+ * further skip BufferedRandomType if does not exist
+ * remove stray import of dbm in objects
+ * Add `UnpicklingError` import for `dill.load_session()` to fix
+ #648
+ * fix fencepost error when getting source inside decorator in
+ interpreter (fixes #603)
+ * type check for Integral, bool by value
+ * diff USE_NUMPY imports numpy.ma
+ * adjust testing to account for frame.f_locals as a proxy in
+ 3.13
+ * better handle import strings of numpy scalars
+ * handle a ThreadHandleType
+ * more extensive testing for dill.source
+ * add formal support for python 3.13
+
+ * test for qualname in get_typedef_type
+ * drop formal support for python 3.7
+ * define html_theme as rtd workaround
+ * update install doc in tests by
+ * formal support for 3.12, initial support for 3.13
+ * add build to rtfd config by
+ * add guard for math.log in Logger record size calculation by
+ * updated copyright for 2024 by
+ * Bump jinja2 from 3.1.1 to 3.1.3 in /docs by
+ * Import submodule properly when there is an attribute of the module with the same name
+ * update sphinx to 6.2.1
+ * Bump readthedocs-sphinx-search from 0.3.1 to 0.3.2 in /docs by
+ * skip BufferedRandomType on pyodide
+ 1217040
+
diff --git a/packages/p/python-dill/dill-0.3.8.tar.gz b/packages/p/python-dill/dill-0.3.8.tar.gz
deleted file mode 120000
index 80da8cce24c..00000000000
--- a/packages/p/python-dill/dill-0.3.8.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreibum6umwr6khqmnv5tgq5rrqds6exyfgtpvjzqjaabvwr2yazy53m
\ No newline at end of file
diff --git a/packages/p/python-dill/dill-0.3.9.tar.gz b/packages/p/python-dill/dill-0.3.9.tar.gz
new file mode 120000
index 00000000000..0032fe68b5b
--- /dev/null
+++ b/packages/p/python-dill/dill-0.3.9.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreiavozlccqhxsvpet7uesvuma4labztnts46uqd2ecokfbawz3j3xe
\ No newline at end of file
diff --git a/packages/p/python-dill/python-dill.changes b/packages/p/python-dill/python-dill.changes
index c3a75369dcd..6aab538d71c 100644
--- a/packages/p/python-dill/python-dill.changes
+++ b/packages/p/python-dill/python-dill.changes
@@ -1,20 +1,39 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:27:09 UTC 2024 - Dirk Müller
+
+- update to 0.3.9:
+ * further skip BufferedRandomType if does not exist
+ * remove stray import of dbm in objects
+ * Add `UnpicklingError` import for `dill.load_session()` to fix
+ #648
+ * fix fencepost error when getting source inside decorator in
+ interpreter (fixes #603)
+ * type check for Integral, bool by value
+ * diff USE_NUMPY imports numpy.ma
+ * adjust testing to account for frame.f_locals as a proxy in
+ 3.13
+ * better handle import strings of numpy scalars
+ * handle a ThreadHandleType
+ * more extensive testing for dill.source
+ * add formal support for python 3.13
+
-------------------------------------------------------------------
Thu Aug 29 14:56:31 UTC 2024 - Frantisek Simorda
- update to 0.3.8:
- * test for qualname in get_typedef_type
- * drop formal support for python 3.7
- * define html_theme as rtd workaround
- * update install doc in tests by
- * formal support for 3.12, initial support for 3.13
- * add build to rtfd config by
- * add guard for math.log in Logger record size calculation by
- * updated copyright for 2024 by
- * Bump jinja2 from 3.1.1 to 3.1.3 in /docs by
- * Import submodule properly when there is an attribute of the module with the same name
- * update sphinx to 6.2.1
- * Bump readthedocs-sphinx-search from 0.3.1 to 0.3.2 in /docs by
- * skip BufferedRandomType on pyodide
+ * test for qualname in get_typedef_type
+ * drop formal support for python 3.7
+ * define html_theme as rtd workaround
+ * update install doc in tests by
+ * formal support for 3.12, initial support for 3.13
+ * add build to rtfd config by
+ * add guard for math.log in Logger record size calculation by
+ * updated copyright for 2024 by
+ * Bump jinja2 from 3.1.1 to 3.1.3 in /docs by
+ * Import submodule properly when there is an attribute of the module with the same name
+ * update sphinx to 6.2.1
+ * Bump readthedocs-sphinx-search from 0.3.1 to 0.3.2 in /docs by
+ * skip BufferedRandomType on pyodide
-------------------------------------------------------------------
diff --git a/packages/p/python-dill/python-dill.spec b/packages/p/python-dill/python-dill.spec
index c0052572ec1..e0be913c951 100644
--- a/packages/p/python-dill/python-dill.spec
+++ b/packages/p/python-dill/python-dill.spec
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-dill
-Version: 0.3.8
+Version: 0.3.9
Release: 0
Summary: Module to serialize all of Python
License: BSD-3-Clause
diff --git a/packages/p/python-dirty-equals/.files b/packages/p/python-dirty-equals/.files
index b177c40a429..73b94615b7c 100644
Binary files a/packages/p/python-dirty-equals/.files and b/packages/p/python-dirty-equals/.files differ
diff --git a/packages/p/python-dirty-equals/.rev b/packages/p/python-dirty-equals/.rev
index 5366a30a1d7..cf3b77785e9 100644
--- a/packages/p/python-dirty-equals/.rev
+++ b/packages/p/python-dirty-equals/.rev
@@ -59,4 +59,21 @@
- Drop patch datetime.patch, now included.
1155774
+
+ 17578e747aff0582fe3549a0a967b850
+ 0.8.0
+
+ anag+factory
+ - update to 0.8.0:
+ * set requires-python to 3.8
+ * use zoneinfo instead of pytz where possible
+ * No need to call datetime.replace for utc_now
+ * Patch pprint to make pytest diffs nicer for big objects
+ * uprev test, lint and docs dependencies
+ * Support Python 3.13
+ * Uprev version
+- update to 0.7.1-post0:
+ * Fix publication of docs.
+ 1217076
+
diff --git a/packages/p/python-dirty-equals/dirty-equals-0.7.1.tar.gz b/packages/p/python-dirty-equals/dirty-equals-0.7.1.tar.gz
deleted file mode 120000
index 1a0039f02cc..00000000000
--- a/packages/p/python-dirty-equals/dirty-equals-0.7.1.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafkreibvra6fkrjzmwiolw5u5do5tfhxnqvk2qgl66ipltl22hzr2konh4
\ No newline at end of file
diff --git a/packages/p/python-dirty-equals/dirty-equals-0.8.0.tar.gz b/packages/p/python-dirty-equals/dirty-equals-0.8.0.tar.gz
new file mode 120000
index 00000000000..d9fe031ad49
--- /dev/null
+++ b/packages/p/python-dirty-equals/dirty-equals-0.8.0.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafkreigxpfxyrx7l522mt2n23la2il2bhrupytqtnwyhujdwcamxnt22hq
\ No newline at end of file
diff --git a/packages/p/python-dirty-equals/python-dirty-equals.changes b/packages/p/python-dirty-equals/python-dirty-equals.changes
index e3ebf3c7ce6..620f8bb92b7 100644
--- a/packages/p/python-dirty-equals/python-dirty-equals.changes
+++ b/packages/p/python-dirty-equals/python-dirty-equals.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Tue Oct 22 15:55:37 UTC 2024 - Dirk Müller
+
+- update to 0.8.0:
+ * set requires-python to 3.8
+ * use zoneinfo instead of pytz where possible
+ * No need to call datetime.replace for utc_now
+ * Patch pprint to make pytest diffs nicer for big objects
+ * uprev test, lint and docs dependencies
+ * Support Python 3.13
+ * Uprev version
+- update to 0.7.1-post0:
+ * Fix publication of docs.
+
-------------------------------------------------------------------
Thu Mar 7 03:28:45 UTC 2024 - Steve Kowalik
diff --git a/packages/p/python-dirty-equals/python-dirty-equals.spec b/packages/p/python-dirty-equals/python-dirty-equals.spec
index 61a764e9815..8495f7014de 100644
--- a/packages/p/python-dirty-equals/python-dirty-equals.spec
+++ b/packages/p/python-dirty-equals/python-dirty-equals.spec
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-dirty-equals
-Version: 0.7.1
+Version: 0.8.0
Release: 0
Summary: Doing dirty (but useful) things with equals
License: MIT
diff --git a/packages/p/python-django-avatar/.files b/packages/p/python-django-avatar/.files
index df9912de3ed..3245ff485fd 100644
Binary files a/packages/p/python-django-avatar/.files and b/packages/p/python-django-avatar/.files differ
diff --git a/packages/p/python-django-avatar/.rev b/packages/p/python-django-avatar/.rev
index 1be2f130b34..0da598e8d1d 100644
--- a/packages/p/python-django-avatar/.rev
+++ b/packages/p/python-django-avatar/.rev
@@ -142,4 +142,15 @@
1163247
+
+ 065254cabf4df0d0ad44f23cb0672ed9
+ 8.0.1
+
+ anag+factory
+ - update to 8.0.1:
+ * Fix Django 5.1 compatibility
+
+ saving succeeds.
+ 1217031
+
diff --git a/packages/p/python-django-avatar/django-avatar-8.0.0.tar.gz b/packages/p/python-django-avatar/django-avatar-8.0.0.tar.gz
deleted file mode 120000
index ce2d6e9823a..00000000000
--- a/packages/p/python-django-avatar/django-avatar-8.0.0.tar.gz
+++ /dev/null
@@ -1 +0,0 @@
-/ipfs/bafybeiapftvo53qqpe27ae63lurmon22kweeyhm6jc4t6rfm2ecemo4pwq
\ No newline at end of file
diff --git a/packages/p/python-django-avatar/django-avatar-8.0.1.tar.gz b/packages/p/python-django-avatar/django-avatar-8.0.1.tar.gz
new file mode 120000
index 00000000000..630969859b6
--- /dev/null
+++ b/packages/p/python-django-avatar/django-avatar-8.0.1.tar.gz
@@ -0,0 +1 @@
+/ipfs/bafybeibq44c735v46lkqfpus77r3jqaqa7uz4rlxzve7wc3qfseqizf4ve
\ No newline at end of file
diff --git a/packages/p/python-django-avatar/python-django-avatar.changes b/packages/p/python-django-avatar/python-django-avatar.changes
index d6d6951f588..b3412ead658 100644
--- a/packages/p/python-django-avatar/python-django-avatar.changes
+++ b/packages/p/python-django-avatar/python-django-avatar.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Tue Oct 22 13:15:26 UTC 2024 - Dirk Müller
+
+- update to 8.0.1:
+ * Fix Django 5.1 compatibility
+
-------------------------------------------------------------------
Thu Mar 28 05:39:38 UTC 2024 - Max Lin
@@ -44,7 +50,7 @@ Fri Mar 31 03:43:23 UTC 2023 - Steve Kowalik
* Don't leak usernames through image alt-tags when AVATAR_EXPOSE_USERNAMES
is False.
* Use original image as thumbnail if thumbnail creation failed but image
- saving succeeds.
+ saving succeeds.
- Remove patch support-django-40.patch, no longer required.
-------------------------------------------------------------------
diff --git a/packages/p/python-django-avatar/python-django-avatar.spec b/packages/p/python-django-avatar/python-django-avatar.spec
index 700212d8531..97b207be8df 100644
--- a/packages/p/python-django-avatar/python-django-avatar.spec
+++ b/packages/p/python-django-avatar/python-django-avatar.spec
@@ -1,7 +1,7 @@
#
# spec file for package python-django-avatar
#
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -15,9 +15,10 @@
# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
+
%{?sle15_python_module_pythons}
Name: python-django-avatar
-Version: 8.0.0
+Version: 8.0.1
Release: 0
Summary: Django-avatar package
License: BSD-3-Clause
diff --git a/packages/p/python-django-rest-knox/.files b/packages/p/python-django-rest-knox/.files
index c1fc69dbdc6..e0517b2bd45 100644
Binary files a/packages/p/python-django-rest-knox/.files and b/packages/p/python-django-rest-knox/.files differ
diff --git a/packages/p/python-django-rest-knox/.rev b/packages/p/python-django-rest-knox/.rev
index 8ba90b81ced..2a29bcf283d 100644
--- a/packages/p/python-django-rest-knox/.rev
+++ b/packages/p/python-django-rest-knox/.rev
@@ -112,4 +112,14 @@
* Use pytest-django to run the tests, rather than django-nose.