Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package squashfs for openSUSE:Factory checked in at 2022-04-10 19:05:07 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/squashfs (Old) and /work/SRC/openSUSE:Factory/.squashfs.new.1900 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "squashfs" Sun Apr 10 19:05:07 2022 rev:43 rq:967697 version:4.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/squashfs/squashfs.changes 2022-01-05 13:39:33.429516358 +0100 +++ /work/SRC/openSUSE:Factory/.squashfs.new.1900/squashfs.changes 2022-04-10 19:05:09.046668085 +0200 @@ -1,0 +2,41 @@ +Sun Mar 20 19:51:00 UTC 2022 - Dirk M??ller <[email protected]> + +- update to 4.5.1 (bsc#1190531, CVE-2021-41072): + * This release adds Manpages for Mksquashfs(1), Unsquashfs(1), + Sqfstar(1) and Sqfscat(1). + * The -help text output from the utilities has been improved + and extended as well (but the Manpages are now more + comprehensive). + * CVE-2021-41072 which is a writing outside of destination + exploit, has been fixed. + * The number of hard-links in the filesystem is now also + displayed by Mksquashfs in the output summary. + * The number of hard-links written by Unsquashfs is now + also displayed in the output summary. + * Unsquashfs will now write to a pre-existing destination + directory, rather than aborting. + * Unsquashfs now allows "." to used as the destination, to + extract to the current directory. + * The Unsquashfs progress bar now tracks empty files and + hardlinks, in addition to data blocks. + * -no-hardlinks option has been implemented for Sqfstar. + * More sanity checking for "corrupted" filesystems, including + checks for multiply linked directories and directory loops. + * Options that may cause filesystems to be unmountable have + been moved into a new "experts" category in the Mksquashfs + help text (and Manpage). + * Maximum cpiostyle filename limited to PATH_MAX. This + prevents attempts to overflow the stack, or cause system + calls to fail with a too long pathname. + * Don't always use "max open file limit" when calculating + length of queues, as a very large file limit can cause + Unsquashfs to abort. Instead use the smaller of max open + file limit and cache size. + * Fix Mksquashfs silently ignoring Pseudo file definitions + when appending. + * Don't abort if no XATTR support has been built in, and + there's XATTRs in the filesystem. This is a regression + introduced in 2019 in Version 4.4. + * Fix duplicate check when the last file block is sparse. + +------------------------------------------------------------------- Old: ---- 4.5.tar.gz New: ---- 4.5.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ squashfs.spec ++++++ --- /var/tmp/diff_new_pack.On0lDR/_old 2022-04-10 19:05:09.674661133 +0200 +++ /var/tmp/diff_new_pack.On0lDR/_new 2022-04-10 19:05:09.678661089 +0200 @@ -1,7 +1,7 @@ # # spec file for package squashfs # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,13 +17,13 @@ Name: squashfs -Version: 4.5 +Version: 4.5.1 Release: 0 Summary: A Read-Only File System with Efficient Compression License: GPL-2.0-or-later Group: System/Filesystems URL: https://github.com/plougher/squashfs-tools -Source0: https://github.com/plougher/squashfs-tools/archive/refs/tags/4.5.tar.gz +Source0: https://github.com/plougher/squashfs-tools/archive/refs/tags/%{version}.tar.gz Patch0: squashfs-64k.patch Patch1: squashfs-thread-limit BuildRequires: lzma-devel ++++++ 4.5.tar.gz -> 4.5.1.tar.gz ++++++ ++++ 6983 lines of diff (skipped) ++++++ squashfs-64k.patch ++++++ --- /var/tmp/diff_new_pack.On0lDR/_old 2022-04-10 19:05:09.786659893 +0200 +++ /var/tmp/diff_new_pack.On0lDR/_new 2022-04-10 19:05:09.790659849 +0200 @@ -1,26 +1,26 @@ -Index: squashfs-tools-4.5/squashfs-tools/mksquashfs.c +Index: squashfs-tools-4.5.1/squashfs-tools/mksquashfs.c =================================================================== ---- squashfs-tools-4.5.orig/squashfs-tools/mksquashfs.c -+++ squashfs-tools-4.5/squashfs-tools/mksquashfs.c -@@ -5954,7 +5954,7 @@ static void print_options(FILE *stream, - fprintf(stream, "-root-gid <gid>\t\tset root directory group to <gid>\n"); - fprintf(stream, "-force-uid <uid>\tset all file uids to <uid>\n"); - fprintf(stream, "-force-gid <gid>\tset all file gids to <gid>\n"); +--- squashfs-tools-4.5.1.orig/squashfs-tools/mksquashfs.c ++++ squashfs-tools-4.5.1/squashfs-tools/mksquashfs.c +@@ -6079,7 +6079,7 @@ static void print_options(FILE *stream, + fprintf(stream, "\t\t\tOptionally a suffix of K, M or G can be given to "); + fprintf(stream, "specify\n\t\t\tKbytes, Mbytes or Gbytes respectively\n"); + fprintf(stream, "\nExpert options (these may make the filesystem unmountable):\n"); - fprintf(stream, "-nopad\t\t\tdo not pad filesystem to a multiple of 4K\n"); + fprintf(stream, "-nopad\t\t\tdo not pad filesystem to a multiple of 64K\n"); - fprintf(stream, "-keep-as-directory\tif one source directory is specified, "); - fprintf(stream, "create a root\n"); - fprintf(stream, "\t\t\tdirectory containing that directory, rather than the\n"); -@@ -6112,7 +6112,7 @@ static void print_sqfstar_options(FILE * - fprintf(stream, "-root-gid <gid>\t\tset root directory group to <gid>\n"); - fprintf(stream, "-force-uid <uid>\tset all file uids to <uid>\n"); - fprintf(stream, "-force-gid <gid>\tset all file gids to <gid>\n"); + fprintf(stream, "-offset <offset>\tSkip <offset> bytes at the beginning of "); + fprintf(stream, "FILESYSTEM.\n\t\t\tOptionally a suffix of K, M or G can be given "); + fprintf(stream, "to specify\n\t\t\tKbytes, Mbytes or Gbytes respectively.\n"); +@@ -6210,7 +6210,7 @@ static void print_sqfstar_options(FILE * + fprintf(stream, "\t\t\tOptionally a suffix of K, M or G can be given to "); + fprintf(stream, "specify\n\t\t\tKbytes, Mbytes or Gbytes respectively\n"); + fprintf(stream, "\nExpert options (these may make the filesystem unmountable):\n"); - fprintf(stream, "-nopad\t\t\tdo not pad filesystem to a multiple of 4K\n"); + fprintf(stream, "-nopad\t\t\tdo not pad filesystem to a multiple of 64K\n"); - fprintf(stream, "\nFilesystem filter options:\n"); - fprintf(stream, "-ef <exclude_file>\tlist of exclude dirs/files. "); - fprintf(stream, "One per line\n"); -@@ -6877,9 +6877,9 @@ print_sqfstar_compressor_options: + fprintf(stream, "-offset <offset>\tSkip <offset> bytes at the beginning of "); + fprintf(stream, "FILESYSTEM.\n\t\t\tOptionally a suffix of K, M or G can be given "); + fprintf(stream, "to specify\n\t\t\tKbytes, Mbytes or Gbytes respectively.\n"); +@@ -6958,9 +6958,9 @@ print_sqfstar_compressor_options: set_progressbar_state(FALSE); write_filesystem_tables(&sBlk);
