Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package vsftpd for openSUSE:Factory checked in at 2022-10-10 18:43:10 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/vsftpd (Old) and /work/SRC/openSUSE:Factory/.vsftpd.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "vsftpd" Mon Oct 10 18:43:10 2022 rev:82 rq:1008380 version:3.0.5 Changes: -------- --- /work/SRC/openSUSE:Factory/vsftpd/vsftpd.changes 2022-09-14 13:44:38.529842900 +0200 +++ /work/SRC/openSUSE:Factory/.vsftpd.new.2275/vsftpd.changes 2022-10-10 18:43:16.446702261 +0200 @@ -1,0 +2,10 @@ +Fri Sep 16 06:18:26 UTC 2022 - Peter Simons <[email protected]> + +- systemd versions prior to 244 do not support the ProtectXYZ + directives we use in our vsftpd.service file and log warnings + every time the daemon starts, which confuses our users. We avoid + this issue by removing the unsupported options from the service + file when installing on a distribution that comes with such an + older version of systemd. [bsc#1196918] + +------------------------------------------------------------------- @@ -21 +31,4 @@ - on all distributions. [jsc#PM-3322, bsc#1187686] + on all distributions. This allows us to update vsftpd in all + maintained SLE codestreams to the current Factory version and + mitigate the newly discovered ALPACA attack. [jsc#SLE-24275, + jsc#PM-3322, bsc#1187686] ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ vsftpd.spec ++++++ --- /var/tmp/diff_new_pack.fs1JtT/_old 2022-10-10 18:43:17.298704095 +0200 +++ /var/tmp/diff_new_pack.fs1JtT/_new 2022-10-10 18:43:17.302704104 +0200 @@ -211,6 +211,9 @@ %if %{with_systemd} ln -sf service %{buildroot}/%{_sbindir}/rc%{name} install -D -m 0644 %{SOURCE7} %{buildroot}/%{_unitdir}/%{name}.service +%if 0%{?sle_version} && 0%{?sle_version} < 150300 +sed -r -i '/^(Protect(Home|Hostname|KernelLogs|Clock|KernelTunables|KernelModules|ControlGroups)|RestrictRealtime|PrivateMounts)=/d' %{buildroot}/%{_unitdir}/%{name}.service +%endif install -D -m 0644 %{SOURCE8} %{buildroot}/%{_unitdir}/%{name}@.service install -D -m 0644 %{SOURCE10} %{buildroot}/%{_unitdir}/%{name}.socket %else
