libspice-server-devel-0.14.3-1.48 >  A `Cfp9|v!\zxgV: "pgeʕ>jO\@G&, t3TA݌]g*LzBւ>oRZUWXp@p<[s?I!E7q,d &ĩ KA<1*<Tք>;GiW0j嫆j䮯Ǔ! X*cz<\-h߀ (rZB'x]F ܃'O aQ+-ca77f241a8bc05c2a76a66155ddb7030db5440ba44c5798a443357246cc24c56c85870ad7b6f3131166b179c7c6503e21e261adb^,`Cfp9|p>=?=d $ P< Rr       8    , `   0   (8 9: F9:G9P H9 I9 X9Y9\9 ]:( ^:b;-c;d<-e<2f<5l<7uLGPL-2.1-or-later OR GPL-2.0-or-laterhttps://www.suse.com/Development/Languages/C and C++https://www.spice-space.org/linuxs390x1 ? ,t)A큤`Cf`Cf`Cf`Cf`Cf`Cf`Cf`Cf`Cf`Cf`Cf`Cf`Cf97e621b081a723ead519f3de826cbe42b8a8f498b1f072978f0e7629adbe4a95909fcd2c3fdbbdd2565b870cd89ba0fca530defb967ea83262c4ae09ec3309a67e6c740959182edef3746f72280c2060b11b50eec61e7d0b2690642778c1dc9af190da5b17d361a92379f920301c8dc332714801b4150ebab59e6419426d3aeb7b4c8c56178b65749536bc36208c147a33c25a39f64d52164820e6c81908c0a7b4ab18c3547d1fa37eebc4c02baf84924f43d2d16bd6bddc8b2f468c07b278baf83376722a2b3890edc0b007641057ba34e9f4188772c262e784901477ef094c29a030049211b1b6770c90513b5760ba8722da47cb2c0ea370c84ea00d6bcd4000681ed24cbd2e2d414b619235facaff983356c7a905fb63ff453025debe7a8aa106e2df58f2adfddc3c65a826adde511f3cb16df6359cf9b6aa772d127d76971da9e2b6daba5ffa68c542b81f354d94517cfb76e15312d57c7ed560175b2901libspice-server.so.1.14.0rootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootspice-0.14.3-1.48.src.rpmlibspice-server-devellibspice-server-devel(s390-64)pkgconfig(spice-server)@@ @ @ @ @@ @     /usr/bin/pkg-configlibspice-server1pkgconfig(gio-2.0)pkgconfig(glib-2.0)pkgconfig(gobject-2.0)pkgconfig(libcacard)pkgconfig(openssl)pkgconfig(pixman-1)pkgconfig(spice-protocol)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)0.14.32.382.382.382.5.10.17.70.14.03.0.4-14.6.0-14.0-15.2-14.14.1_P_{ ^f/^Y^g@\P\y\N[:@[:@[z@[LZp^@Zp^@Z`@Y@X@X@X[@XOX$a@WWVU|@Uq@TCT>abrogers@suse.combrogers@suse.combrogers@suse.combrogers@suse.com9+suse@cirno.systemsbrogers@suse.comolaf@aepfle.debrogers@suse.comastieger@suse.combrogers@suse.comcbosdonnat@suse.comcbosdonnat@suse.comjengelh@inai.detchvatal@suse.comtchvatal@suse.comcbosdonnat@suse.compsimons@suse.comcbosdonnat@suse.comastieger@suse.comcbosdonnat@suse.commsuchanek@suse.comzaitor@opensuse.orgcbosdonnat@suse.comcbosdonnat@suse.comcbosdonnat@suse.comcbosdonnat@suse.comcrrodriguez@opensuse.orgzaitor@opensuse.org- Note: The Mar 9, 2020 spec file cleanup and the following change satisfy jsc#SLE-15520 - Remove gstreamer-plugins-libav and gstreamer-plugins-good as BuildRequires. Even though the configure step of the package build does report detection of features from these packages, the build is actually not otherwise influenced by the presence of these packages. It is at runtime when these plugin packages are utilized, so leave the Recommends for these in the package spec, so that if the packages are available in a distro they can get installed and utilized.- Fix buffer overflow vunerabilities in QUIC image decoding (CVE-2020-14355 bsc#1177158) 0001-quic-Check-we-have-some-data-to-start-decoding-quic-.patch 0002-quic-Check-image-size-in-quic_decode_begin.patch 0003-quic-Check-RLE-lengths.patch 0004-quic-Avoid-possible-buffer-overflow-in-find_bucket.patch- Clean up some spec file conditionals that are no longer helpful- Update to v0.14.3 release The main changes are WebSocket and support for Windows. * Add support for WebSocket, this will allow to use spice-html5 without proxy * Support Windows, now Qemu Windows can be build enabling Spice * Fix some alignment problem * Converted some documentation to Asciidoc format to make easier to update, updated some * Minor compatibility fix for PPC64EL and ARMHF * Minor fixes for big endian machines like MIPS * Avoid some crashes with some buggy guest drivers, simply ignore the invalid request * Fix for old OpenSSL versions * Minor fix for Windows clients and brushes, fixed an issue with Photoshop under Windows 7 * Add ability to query video-codecs * Small use-after-free fix * Fix for debugging recording/replaying using QUIC images * Fix a regression where spice reported no monitors to the client * Fix DoS in spicevmc if WebDAV used * Updated and improved test migration script * Some minor fixes to smartcard support * Avoid possible disconnection using proxies using a in-flow keepalive mechanism - The NEWS file is now named CHANGELOG.md, and the previously provided ChangeLog, which was a summary of the git log is no longer provided- Enable video codec support (VPX and MJPEG)- Update to v0.14.2 stable release The main changes are support for Meson build and graphic device info messages allowing to better support multi-monitor configurations. * support H265 in stream-channel * add support for building with meson/ninja * minor tests fixes improving CI * set char device state for smartcard, allowing Qemu optimization * improve red-parse-qxl.c interface making it more consistent * add some instrumentation for streaming device * QXL interface: add a function to identify monitors in the guest (spice_qxl_set_device_info) * add support for GraphicsDeviceInfo messages * video-stream: prevent crash on stream reattach * make channel client callbacks virtual functions * bumped minimum required glib version to 2.38 * attempt to have a reliable led state for keyboard modifiers - Removed patches: (The first two are altered versions of what is carried upstream. I think we're fine with what upstream does here) 0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch 0002-lz-More-checks-on-image-sizes.patch 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch- Use plain python2 for SLE12 builds - Remove PYTHON=python3, configure will find and use the python3- Fix OOB memory access in internal tracking of slot_ids and group_ids. (CVE-2019-3813 bsc#1122706) * 0001-memslot-Fix-off-by-one-error-in-group-slot-boundary-.patch - Remove celt051 Requires directive- Upstream disabled support for the celt051 audio codec by default, do likewise in the spec - Note updated 0.14.1 build dependencies in the spec: * OpenSSL 1.0.0 or newer is now required * glib 2.32 required - add upstream signing key and verify source signature- Update to v0.14.1 stable release The announcement email describes this release as follows: The main change in this release is the addition of a new protocol extension in order to support streaming the remote display as a video stream rather than going through the QXL protocol. Together with spice-streaming-agent, and/or with more work on the qemu/ spice-server side, this should allow streaming of 3D accelerated VMs in the future. At this point, this part of spice-server is still a work in progress (multi-monitor support and various features are missing). * avoid performance issues on Windows 10 KVM guests (boo#1109044) * add new org.spice-space.stream.0 channel used for passing an encoded video stream from the guest to the client * add support for TCP_CORK to reduce the amount of packets that we send * fix CVE-2018-10873 (maintainer note: we already carried fix) * fix cursor related migration crash * fix regression causing sound recording to be muted after client disconnection/reconnection (introduced in 0.13.90) * fix regression in corner cases where images could be sent uncompressed when they used to be compressed with QUIC * disable TLS 1.0 support * CELT 0.5.1 support is now disabled by default. If celt051-devel is installed at build-time, --enable-celt051/--disable-celt051 must be explicitly specified * drop support for unsupported OpenSSL version. OpenSSL 1.0.0 or newer is now required * bumped minimum required glib version to 2.32 * endianness fixes * (small) leak fixes * usual round of code cleanups * not directly related to this release, but the upstream git repository is now hosted on gitlab.freedesktop.org - Removed patches: bb15d481-Fix-flexible-array-buffer-overflow.patch- Fix potential heap corruption when demarshalling (CVE-2018-10873, bsc#1104448) Added patch: bb15d481-Fix-flexible-array-buffer-overflow.patch- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295) Added patches: 0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch 0002-lz-More-checks-on-image-sizes.patch- Correct RPM group for shared library.- Split the sle condition again for exact features to allow their override- Enable smartcards on sle15 as the supportlib is available * Condition it using name everywhere instead of suse versions and join together with lz4 - Format with spec-cleaner - Convert dependencies to pkgconfig style - Install documentation and license file - Add configure arguments to most of the options to not rely on autotools automatic behavior * Also enable gstreamer and lz4 options - Drop the not needed python dependencies, they are needed only when building from git snapshot- Release 0.14.0 * fix client mouse with virgl * fix frozen display after seamless migration * set human-readable name on spice threads * add sanity-checks for ORC library as it can abort spice-server when selinux is in use * Close TCP connection early when client did not send the correct SPICE magic bytes: this allows VNC clients to gracefully fail when connecting to a SPICE port * Add VP9 encoding support when GStreamer is being used and misc streaming/encoding improvements * Improvements to replay utility * Limit (deprecated/unusud) QXLMessage size to 100,000 characters for improved safety * Improve image quality in low bitrate situation when using the GStreamer backend * Added GStreamer support to the video streaming code * Fix old migration bug causing migration to never end in some cases * Added lz4 compression to the spicevmc channel * Ongoing code cleanups * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local virgl support * spice_server_set_keepalive_timeout() has been removed in favour of unconditionally sending keepalive probes every 10 minutes * Added public spice_server_set_keepalive_timeout() to make it possible to tweak keepalive on all SPICE connection. This can prevent unwanted idle disconnections if proxies are used between the client and the host. * Fix important memory usage when the webdav channel is used * Do not disconnect when the client requests an unsupported compression type * Fix potential race condition when using multiple QXL devices * Fix display glitch when using XSpice * Improve help string for 'replay -s' * Fix small leak in MJPEG code - Removed patches: * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch * CVE-2016-9578-remote-dos-via-crafted-message.patch- Added patches to fix two security vulnerabilities. * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch [CVE-2016-9577, bsc#1023078] * CVE-2016-9578-remote-dos-via-crafted-message.patch [CVE-2016-9578, bsc#1023079]- Synchronize with SLES (fate#322402): + bnc#894069: disable smartcard support for SLES + merge changelog- restrict suppression of obsoletes-not-provided warning to spice-client bsc#1013916- Obsolete spice-client (bsc#1013916)- remove ExclusiveArch (boo#1009438)- Update to version 0.12.8: + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.- Update to version 0.12.7 (fate#320079) + spice-server will now send TCP keepalive probes on the TCP connections it uses. This can prevent unwanted idle disconnections if proxies are used between the client and the host. + Fix important memory usage when the webdav channel is used + Do not disconnect when the client requests an unsupported compression type + Fix a few race conditions + Fix display glitch when using XSpice + Improve help string for 'replay -s' + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port configured, USB webcam redirection over a slow link) + Fix various compilation warning when building on 32 bit machines + Some fixes for big-endian machines, more work is likely to be needed + Do not build static libraries by default, this can be reenabled with --enable-static + Fix small leak in MJPEG code- Update to version 0.12.6 + Removed spicec client code, it has been superseded by remote-viewer and other spice-gtk based clients + Unix socket support + LZ4 support + Let clients specify their preferred image compression format + Allow to record and replay a spice-server session + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261 bsc#944787, bsc#948976 + spice-protocol submodule has been removed, spice-protocol must now be installed when building spice-server + Remove write polling in chardevs to reduce wakeups - Remove upstream merged patches: + spice-Don-t-use-48kHz-for-playback-recording-rates.patch + password-length-check.patch + cve-2015-3247.patch- bsc#944460: fix CVE-2015-3247. cve-2015-3247.patch- Don't allow setting password longer than what the spice protocol allows. password-length-check.patch. boo#931044- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)- Update to version 0.12.5: + Added Opus support. Celt support will be obsoleted in a future release. + Addition of webdav channel. + Force use of TLS 1.0 or newer for TLS connections. + Reference manual. + Some optimizations improving CPU use. + Various bug fixes for race conditions, memory corruption, which could be triggered on client disconnections, migration, and cause spice-server to misbehave. + Portability fixes. + Code cleanups. + bsc#848279: fix CVE-2013-4282. - Add pkconfig(opus) BuildRequires: Needed to build new opus support. - Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch: Fix advertised sound playback/recording rates in public headers (rh#1129961). - Drop spice-glibc217.patch: No longer needed. - Run spec-clean on spec file, remove conditionals for obsolete versions of openSUSE, enable parallel build and drop obsolete clean section.s390zp32 1615029914 0.14.3-1.480.14.3-1.480.14.3spice-serverspice-audio.hspice-char.hspice-core.hspice-input.hspice-migration.hspice-qxl.hspice-replay.hspice-server.hspice-version.hspice.hlibspice-server.sospice-server.pc/usr/include//usr/include/spice-server//usr/lib64//usr/lib64/pkgconfig/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP3:GA/standard/c0b128c8ee32b2da65363ad9479c4fd5-spicecpioxz5s390x-suse-linuxdirectoryC source, ASCII textpkgconfig file PRRRRRRRRT}w.3C"utf-8554e7d9c63ff23f8f54d73b794ef4dbc32bd2ad57d11c63fb98425cd3d14e93a? 7zXZ !t/;<] crt:bLL.]e(d[7%#J~oE1/!$Ԩ =5 lGS<!msq^eƉ9WlݸgZ'wc+82M#kK8Ù7O yQ0~F:mO1~*6qmyϸ(̄p؅2! =zGnLZҞ~c L F<jhޗ )BmZȷ8!vh`1u%%@|zat1ͅ0wuI3k/w3JlaKul]]Wsc. 4Yj.=d. |p{+)v+$.eBでIPH]g"mۗ?5kn1Kc5qWivJ^3u$j.><2A )]e8C0wף2EǶH#ºn."ϩsxջj5D0xi0#,mRp3Xmm7ȔW!#s%t7)L=,O۾y0J2bsEǰއwj"0Ӱ=,ްƦmdӌrM%bS!ZEc x|f7r[]D!I>*bnh*UnB}{53=nOI/m;K"qč\'tD:*nmc7z9uMN-ҋǨ"lO GBd- o!S?5BOӼiS$Z181`-U!ɛ!rQ;qj1rKbk[u{;zkkid Shڦ0GA˕n'mtc6ȖK\z犭;!+rͫfN5UX_@Y@7J$ݟ>fES6>wۍ F}o}?f ^Q.' 47j9ʉ z^Eť kY=WxE: M籟!A9>7QN"5mrɢ>EnS_"'n3zOvi)+XÐ2aa徥X}Gvq~ QsVd qcD18q~C)id K3L7~GyVDZzR O\lTspdY_gǝçDϳR/2#뱉QR>,tya^;qƙXDEm%\sB$6BfTgi~Вicgn*Gmyrg 50v >Ⲛ_cy4źr9hK/v8HH^g2sȭD2b>oˀ-P{5 ^T >1 .ZGj mϙ:5)~^T%an t  /ʘt31.:5w$PټȑA\*l$jEEЀ4o$n#!T{&3s N'gD,yx}]W>BS d_4Wb`V% B?Ϯ-+ڦDDW3M~tV?w *|ZgBuT틼NՂHmdH/4U\=ϱ3CKU@cVٹ yM'"3B)K%Z0+:-y_6: vDJVI>bB ̉qKFRhH'c6&щmj1^Fb(Q+!H9A#/:|ND4o=fC:4G a/*RUe$5&u(M~'#¥FZc%Ӛ@w)2,c֖ה]NMC[c (/@ʷRQJGԆtGl_//w9 vSҽuLxN-x=^pLB&MB[Omec,%M:ev‰fn/f#Y(-Ȫd-4_qV+OgT_|De}M 5 -2=|rPR}y>,LEJHJLh]Jl!xR5-C=4+JmH8t[-QiwMcnK>v8gWGv꘣2pkHy_-"z,&UGvP0;9}/[m! UI13Mޠƞz1PRyN,Tΐ"һtR[tYɬiOb)&8 { 'J1D#:}d5˨6f`IQל! Ux&9RZ\:_񌇩N&82&pݞ/eŅiΚ)*ޝZ~Np%`f~4&`JY6Z^ٙϯ0=z^W@0@--! E|$T-oD+&*l'.w}!5__2QN7Ʊ'sI7P ;HN k ,FLvaj9'osϴ<̫h2w2 %*a{YמD -D<мϡbVǶO߳Bi,-Ow .~cs`g 3[O}ACRIr@`Xwнõ}k.nڑ0Z֣T&"j){1s5gZT#<؀{tO>zܘuR\4i(!-Q{ ٿfv4ZFQ4C*R G?I=ֶ;3aJwl_ Y6ZeY{q[=kz=8s+b+G#0g8uಥ*a?/[U3`pF\ִy?%d s4}쌏 MeM ~~G%>Vd{2q\NnԸs 1 %肊Yl_۾y,pmPI#f+1sݵ7Iquړ6X^!֨͛"1*c GBmސ*sӭP1 Cg8Ba!Z'yQHl#Ód$rzҪ&;H-O ]ŧ(=hvca4I"rMp@d]i-M3Fo} (9EEh8竾T@&Da;nd:ËRmfoYOO'( 4W5!QSZz12䰜7^*I> {\.[./5y ϺA0Y+R辘U&⺋ ۢxqAN(]Nykrк?ZbUMh` [/NY3DwƋ>-Ciܙ[vqACS_5 V 怶 KX "#24]f\ pD1v[F 1NE=MޛJ9~h9 '8%~7AZX\\,3U0)VU_m>ȶn :# mzɿ]&wYLuPp6ˆx<M) Ma^rL?$|juMFBV{?=FZF(h߅SB'z,(e.iy}IeGzՖKu`"4X5|ρC]J̙?s zis- ɋɱnz;"GO+)Mm .áC[~cAv-.BH먂V^͎gB^aOҪ1= d,P4%ex**p%~sn !,̂"jskB7NЪ+ ulIqXy 9ϻݙJ(F2l)}WBV{=.u  q遼CL2i5r"ćh1[1 y~:6WK3#Mxـܺbb|24Q`gloMu$sjUܾJ h..3W-Rj%Ч 3"5k Q8&ypw9?D՛t6Û,4(ς"bu:g\D*j-oaByA^#0,϶y*}R2BB}9% #l1JzǗ oqMء.fzA QfbOB:@Dy!6NJU3au{#~䘽C;bN M4#tsDZgW,vl\iW:~+. ?AA &jdns MR&C^FC "AP`I,Wh-aF+b,Yx`E%Pwwح:{~.:jktYIT(R F52}_ZLԍķ/"$|;cqhzPٕdE3ŔRM 0ѻB"ڴ`h0vn9WNH5[g4UV0L %Hr `ηE!EebX }Rr Lh/xmI4`,53.7u AsF&EM٭7kw?dΓN;䜘u~A'f3sRN܉3AR#ҩJM|QR5i=IRoxd]Y VIC;Ji)g:d!924Fq\Rcncۜ_=%pVp~Gިh σK- Rv5ek(bYRËXNJ%j:5;R6auiѫґdzynƤcUBwMY bm)HXUtsk cD?NA@#˞5ii@δѺS/eNJhs|uXZВqԤ{0 AT1HDNI64ɔVƪ3{. K)PuUlơÿذeA+XKEa@y=td71; ʪtAqnSl8Yz3{)?k M-0B.WYĊ`Հf/%("Eo: )mSyg- 2 8w fE"TоyNTE%נ8$ l&Dى(/8HE'pJ3P .gw$~w̫JNV|#ѮG2' J3WTtfS[x=*#kP){X#St4p@+%>I4Hd8y8ˏoxH"=ijgqP{%JYP6br (!8Bur3|4Qcs|;[4-M&ynguN Oy#@ d.jj#&vkc8D,NZ.pK[$2S7.j7eC37YÏMl輥@r˗U7Lhku;4B|Q7rE+:@PUY϶PhRdP.' ٘1˲f/)"5Kӧ/cvIYp?"%Es{4aH0~eL$dMԉFX<>,ԋh՞=,ӓKV*.kdxt#Xg]7C/Q ""PNhЪ녩;׳dizp1$Bi޾q}#WOn2dG62y4L`i5Dt3A򺢥6B "X*?0⪠nZzofݛirx Ac`>z6+~t)i+bMAU2s󴪒jR-pi>z`eQ3-P9iUk[RΙ*s/Ǝ"MWÐ;psݰ6B*&8 rqFpb#,G"l w/6DrD+sշ{NrfS{x[0hCjm0[xjƢ2@$$h3X}CșNGc%Zr Vד߶r LbYGOnD=iQi8/ YZ