From 5feb66e0551f12881fa8a689d4c623d3a29d5b55517fa23757b4ed94e2fc3d1d Mon Sep 17 00:00:00 2001 From: Matthias Gerstner Date: Wed, 27 Nov 2019 12:48:04 +0000 Subject: [PATCH 1/4] - Update to version 20191122: * faxq-helper: correct "secure" permission for trusted group (bsc#1157498) OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=241 --- _servicedata | 2 +- permissions-20191118.tar.xz | 3 --- permissions-20191122.tar.xz | 3 +++ permissions.changes | 6 ++++++ permissions.spec | 2 +- 5 files changed, 11 insertions(+), 5 deletions(-) delete mode 100644 permissions-20191118.tar.xz create mode 100644 permissions-20191122.tar.xz diff --git a/_servicedata b/_servicedata index 289f54c..8f1cdbf 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/openSUSE/permissions.git - 352142ec492b76beb495b46bc64f159af5635c8a \ No newline at end of file + 7f3d0e12f527632ced175b1f8c68ee80a40269d3 \ No newline at end of file diff --git a/permissions-20191118.tar.xz b/permissions-20191118.tar.xz deleted file mode 100644 index 7472a33..0000000 --- a/permissions-20191118.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5131a0e02a51d5a020907a3a68825d6dacfb4bd5e56da397b5e3c85ede2b740d -size 19588 diff --git a/permissions-20191122.tar.xz b/permissions-20191122.tar.xz new file mode 100644 index 0000000..6d1fd99 --- /dev/null +++ b/permissions-20191122.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5adf3b526a24580ab17246052b9a11fe057ba2897f181a779e62ea58f215784b +size 19556 diff --git a/permissions.changes b/permissions.changes index f99c72c..491cf50 100644 --- a/permissions.changes +++ b/permissions.changes @@ -1,3 +1,9 @@ +------------------------------------------------------------------- +Wed Nov 27 12:47:23 UTC 2019 - matthias.gerstner@suse.com + +- Update to version 20191122: + * faxq-helper: correct "secure" permission for trusted group (bsc#1157498) + ------------------------------------------------------------------- Mon Nov 18 09:52:14 UTC 2019 - malte.kraus@suse.com diff --git a/permissions.spec b/permissions.spec index 1b5dace..c008779 100644 --- a/permissions.spec +++ b/permissions.spec @@ -1,7 +1,7 @@ # # spec file for package permissions # -# Copyright (c) 2019 SUSE LLC. +# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed From 671dc94a750146ac8d2c5ea5b4b3db5012a27630420eef750caaa0cdf595654d Mon Sep 17 00:00:00 2001 From: Matthias Gerstner Date: Wed, 27 Nov 2019 12:48:34 +0000 Subject: [PATCH 2/4] OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=242 --- permissions.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/permissions.spec b/permissions.spec index c008779..bec30d5 100644 --- a/permissions.spec +++ b/permissions.spec @@ -16,7 +16,7 @@ # -%define VERSION 20191118 +%define VERSION 20191122 Name: permissions Version: %{VERSION} From ac5efb502fa023b50c265f58218bc3aa6b99687bba382610145f4a02e741058c Mon Sep 17 00:00:00 2001 From: Malte Kraus Date: Thu, 5 Dec 2019 14:34:56 +0000 Subject: [PATCH 3/4] - Update to version 20191205: * fix privilege escalation through untrusted symlinks (bsc#1150734, CVE-2019-3690) OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=243 --- _servicedata | 2 +- permissions-20191122.tar.xz | 3 --- permissions-20191205.tar.xz | 3 +++ permissions.changes | 7 +++++++ permissions.spec | 2 +- 5 files changed, 12 insertions(+), 5 deletions(-) delete mode 100644 permissions-20191122.tar.xz create mode 100644 permissions-20191205.tar.xz diff --git a/_servicedata b/_servicedata index 8f1cdbf..925e12f 100644 --- a/_servicedata +++ b/_servicedata @@ -1,4 +1,4 @@ https://github.com/openSUSE/permissions.git - 7f3d0e12f527632ced175b1f8c68ee80a40269d3 \ No newline at end of file + 530cade2a85b318e8cb35261f3d2da5223c11af2 \ No newline at end of file diff --git a/permissions-20191122.tar.xz b/permissions-20191122.tar.xz deleted file mode 100644 index 6d1fd99..0000000 --- a/permissions-20191122.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5adf3b526a24580ab17246052b9a11fe057ba2897f181a779e62ea58f215784b -size 19556 diff --git a/permissions-20191205.tar.xz b/permissions-20191205.tar.xz new file mode 100644 index 0000000..37fa365 --- /dev/null +++ b/permissions-20191205.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:33cb35f03205a688daad7bd71ef56a924da6920936ee29cc5e319a761538656a +size 20776 diff --git a/permissions.changes b/permissions.changes index 491cf50..d484248 100644 --- a/permissions.changes +++ b/permissions.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Thu Dec 05 14:31:49 UTC 2019 - malte.kraus@suse.com + +- Update to version 20191205: + * fix privilege escalation through untrusted symlinks (bsc#1150734, + CVE-2019-3690) + ------------------------------------------------------------------- Wed Nov 27 12:47:23 UTC 2019 - matthias.gerstner@suse.com diff --git a/permissions.spec b/permissions.spec index bec30d5..05e5800 100644 --- a/permissions.spec +++ b/permissions.spec @@ -1,7 +1,7 @@ # # spec file for package permissions # -# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2019 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed From cba6c7245b3f6ad68b217c445903a545f89ce3f682801320d10c35d315f7ae7a Mon Sep 17 00:00:00 2001 From: Malte Kraus Date: Thu, 5 Dec 2019 14:37:17 +0000 Subject: [PATCH 4/4] fix version OBS-URL: https://build.opensuse.org/package/show/Base:System/permissions?expand=0&rev=244 --- permissions.spec | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/permissions.spec b/permissions.spec index 05e5800..48c2563 100644 --- a/permissions.spec +++ b/permissions.spec @@ -16,7 +16,7 @@ # -%define VERSION 20191122 +%define VERSION 20191205 Name: permissions Version: %{VERSION}