From e904c4487390e1a4f4c423dc050243a490bca07526d82f12ef4a5810c2cee061 Mon Sep 17 00:00:00 2001 From: Luigi Baldoni Date: Mon, 4 Oct 2021 15:42:36 +0000 Subject: [PATCH] Accepting request 923069 from home:alois:branches:X11:Utilities - Update to version 4.2.3 * network layer: + ensure the http headers cache is never modified unintentionally + invalid packet encoder names should not cause fatal errors + preserve audio packets chunking (avoids an HTML5 client bug) + prefer https links + prefer sha256 to sha1 for file transfer checksums + mmap setup error handling + `sndbuf_bytes` value was incorrect (currently unused) + socket timeout too long - broke VNC connections + AES DoS with unreasonably large number of password stretching iterations + tone down http content security policy for the HTML5 client + parsing of remote ssh command output + reply with a 404 if we have no http data to send + stricter validation of challenge digest attribute + stricter validation of packet indexes + specifying invalid compressors should not be fatal + handle more VNC clients correctly + server errors when VNC clients are connected + proxy sessions not found due to socket-dirs + mmap group lookup * encodings: + don't enable video encoders not present in 'encodings' option + ffmpeg H264 errors with unreleased version + ffmpeg codecs silencing too many warnings + vpx encoder lossless mode detection + potential race conditions in the proxy server's encoder loop + visual corruption with scaled jpeg updates + incorrect error messages with the jpeg YUV decoder + error in 'void' paint events (currently unused) + CUDA 11.4 and Ampere cards + RPM build errors when CUDA is disabled + restrict the number of NVENC errors tagged as transient + more robust OpenGL picture decoding sanity checks * packaging and platforms: + find the fakeXinerama library more reliably on all platforms + platform detection for CentOS / RedHat + missing default configuration files on MS Windows + missing webp with latest Pillow builds on MacOS + build fix for non-amd64 Debian (missing nvfbc) * clipboard selections getting stuck with MS Windows and MacOS clients * clipboard errors with some packet encoders sending strings * authentication modules not honouring `socket-dirs` option * make it easier to dismiss the splash screen * ssh password and key dialogs timing out without being shown * menu loading race condition causing empty start menu * window size hints may not have been honoured (rare case) * honour the force-replace-wm flag when upgrading * correctly handle command timeouts when probing servers * test scripts and command line tools fixups: unit tests, U2F tool, audio test, etc * system tray save-to-file debugging failures * minor cosmetic fixes to logging messages, unreachable code, icon loading errors * make it easier to run in a prefixed installation - Update xpra-html5 to version 4.5.1 and uglify-js to 3.14.2 OBS-URL: https://build.opensuse.org/request/show/923069 OBS-URL: https://build.opensuse.org/package/show/X11:Utilities/xpra?expand=0&rev=88 --- uglify-js-3.13.9.tgz | 3 -- uglify-js-3.14.2.tgz | 3 ++ xpra-4.2.2.tar.gz | 3 -- xpra-4.2.3.tar.xz | 3 ++ xpra-html5-4.2.tar.xz | 3 -- xpra-html5-4.5.1.tar.xz | 3 ++ xpra.changes | 67 +++++++++++++++++++++++++++++++++++++++++ xpra.spec | 8 ++--- 8 files changed, 80 insertions(+), 13 deletions(-) delete mode 100644 uglify-js-3.13.9.tgz create mode 100644 uglify-js-3.14.2.tgz delete mode 100644 xpra-4.2.2.tar.gz create mode 100644 xpra-4.2.3.tar.xz delete mode 100644 xpra-html5-4.2.tar.xz create mode 100644 xpra-html5-4.5.1.tar.xz diff --git a/uglify-js-3.13.9.tgz b/uglify-js-3.13.9.tgz deleted file mode 100644 index fcae82b..0000000 --- a/uglify-js-3.13.9.tgz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:870a117087080f3c2e5aab3ad2ad5066070a069d163886c67946ecb54dce5e04 -size 213624 diff --git a/uglify-js-3.14.2.tgz b/uglify-js-3.14.2.tgz new file mode 100644 index 0000000..3fdbd67 --- /dev/null +++ b/uglify-js-3.14.2.tgz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:7422f2401d544809fef1761bcf4816fa3b3d89a9af28386ecf80ecf78f389ba5 +size 216720 diff --git a/xpra-4.2.2.tar.gz b/xpra-4.2.2.tar.gz deleted file mode 100644 index 99497b6..0000000 --- a/xpra-4.2.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:26f1f60b7eb4eb672e7a0b33c827d24f0275548d0d99d25d2c0de17f804c7e5a -size 3894227 diff --git a/xpra-4.2.3.tar.xz b/xpra-4.2.3.tar.xz new file mode 100644 index 0000000..e03a5b5 --- /dev/null +++ b/xpra-4.2.3.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:a474aa36e2e6de7debb16964f636d338e38daac832cb28cd80138d171c2fcb58 +size 2707220 diff --git a/xpra-html5-4.2.tar.xz b/xpra-html5-4.2.tar.xz deleted file mode 100644 index 2b2a6df..0000000 --- a/xpra-html5-4.2.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:f32b1778ec1b13b206982e346714d32d9b322588d91c06f19c093609dbd21ac2 -size 1184068 diff --git a/xpra-html5-4.5.1.tar.xz b/xpra-html5-4.5.1.tar.xz new file mode 100644 index 0000000..a216134 --- /dev/null +++ b/xpra-html5-4.5.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:23542bef997344e515dfee04486dc490914dd9ae3dc57e8833a1c2b6f10d4e56 +size 1154024 diff --git a/xpra.changes b/xpra.changes index 5b87cb0..4980ca6 100644 --- a/xpra.changes +++ b/xpra.changes @@ -1,3 +1,70 @@ +------------------------------------------------------------------- +Mon Oct 4 15:04:17 UTC 2021 - Luigi Baldoni + +- Update to version 4.2.3 + * network layer: + + ensure the http headers cache is never modified + unintentionally + + invalid packet encoder names should not cause fatal errors + + preserve audio packets chunking (avoids an HTML5 client + bug) + + prefer https links + + prefer sha256 to sha1 for file transfer checksums + + mmap setup error handling + + `sndbuf_bytes` value was incorrect (currently unused) + + socket timeout too long - broke VNC connections + + AES DoS with unreasonably large number of password + stretching iterations + + tone down http content security policy for the HTML5 client + + parsing of remote ssh command output + + reply with a 404 if we have no http data to send + + stricter validation of challenge digest attribute + + stricter validation of packet indexes + + specifying invalid compressors should not be fatal + + handle more VNC clients correctly + + server errors when VNC clients are connected + + proxy sessions not found due to socket-dirs + + mmap group lookup + * encodings: + + don't enable video encoders not present in 'encodings' + option + + ffmpeg H264 errors with unreleased version + + ffmpeg codecs silencing too many warnings + + vpx encoder lossless mode detection + + potential race conditions in the proxy server's encoder + loop + + visual corruption with scaled jpeg updates + + incorrect error messages with the jpeg YUV decoder + + error in 'void' paint events (currently unused) + + CUDA 11.4 and Ampere cards + + RPM build errors when CUDA is disabled + + restrict the number of NVENC errors tagged as transient + + more robust OpenGL picture decoding sanity checks + * packaging and platforms: + + find the fakeXinerama library more reliably on all + platforms + + platform detection for CentOS / RedHat + + missing default configuration files on MS Windows + + missing webp with latest Pillow builds on MacOS + + build fix for non-amd64 Debian (missing nvfbc) + * clipboard selections getting stuck with MS Windows and MacOS + clients + * clipboard errors with some packet encoders sending strings + * authentication modules not honouring `socket-dirs` option + * make it easier to dismiss the splash screen + * ssh password and key dialogs timing out without being shown + * menu loading race condition causing empty start menu + * window size hints may not have been honoured (rare case) + * honour the force-replace-wm flag when upgrading + * correctly handle command timeouts when probing servers + * test scripts and command line tools fixups: unit tests, U2F + tool, audio test, etc + * system tray save-to-file debugging failures + * minor cosmetic fixes to logging messages, unreachable code, + icon loading errors + * make it easier to run in a prefixed installation +- Update xpra-html5 to version 4.5.1 and uglify-js to 3.14.2 + ------------------------------------------------------------------- Tue Aug 10 07:51:04 UTC 2021 - Luigi Baldoni diff --git a/xpra.spec b/xpra.spec index d576af7..90a8f16 100644 --- a/xpra.spec +++ b/xpra.spec @@ -22,9 +22,9 @@ %endif %bcond_with pandoc -%define xpra_ver 4.2.2 -%define html5_ver 4.2 -%define uglifyjs_ver 3.13.9 +%define xpra_ver 4.2.3 +%define html5_ver 4.5.1 +%define uglifyjs_ver 3.14.2 %global __requires_exclude ^typelib\\(GtkosxApplication\\)|typelib\\(GdkGLExt\\)|typelib\\(GtkGLExt\\).*$ Name: xpra Version: %{xpra_ver} @@ -32,7 +32,7 @@ Release: 0 Summary: Remote display server for applications and desktops License: BSD-3-Clause AND GPL-2.0-or-later AND LGPL-3.0-or-later AND MIT URL: https://www.xpra.org/ -Source0: https://xpra.org/src/%{name}-%{version}.tar.gz +Source0: https://xpra.org/src/%{name}-%{version}.tar.xz Source1: xpra-icon.png Source2: https://xpra.org/src/%{name}-html5-%{html5_ver}.tar.xz Source3: https://registry.npmjs.org/uglify-js/-/uglify-js-%{uglifyjs_ver}.tgz