Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package util-linux for openSUSE:Factory checked in at 2026-10-08 11:55:36 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/util-linux (Old) and /work/SRC/openSUSE:Factory/.util-linux.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "util-linux" Thu Oct 8 11:55:36 2026 rev:314 rq:1382404 version:2.42.4 Changes: -------- --- /work/SRC/openSUSE:Factory/util-linux/util-linux.changes 2026-09-23 14:32:06.357201795 +0200 +++ /work/SRC/openSUSE:Factory/.util-linux.new.3698736/util-linux.changes 2026-10-08 11:55:57.703377544 +0200 @@ -1,0 +2,30 @@ +Sun Oct 4 22:26:56 UTC 2026 - Stanislav Brabec <[email protected]> + +- Update to version 2.42.4 (bsc#1274864, PED-16740): + This release enhances previously released security fixes and adds + protection against symlink attacks in the legacy mount(2)-based + code in libmount. + * lib/fileutils: + * add safe FD-path and no-symlink helpers + * fix RESOLVE_NO_SYMLINKS fallback value + * libmount: + * add mnt_fs_fetch_ids() and populate uniq_id for utab + * use fchmodat2() for X-mount.mode= + * restore the original namespace on error paths + * secure the idmapped mount replacement + * pin the legacy mount target and bind/move source + * harden restricted mount targets and post-mount handling + * fix X-mount.idmap ID names in code and man page + * nsenter: close cgroup.procs fd after join to prevent authority + leak [CVE-2026-78408, bsc#1278348] +- Add two upstream follow-up fixes + (util-linux-libcanonicalize-newline.patch, + util-linux-wall-off-by-one.patch). + +------------------------------------------------------------------- +Wed Sep 30 14:44:36 UTC 2026 - Stanislav Brabec <[email protected]> + +- Fix uuidd tmpfiles installation path (bsc#1283294). +- Mark two check known as failing in chroot environment. + +------------------------------------------------------------------- @@ -4 +34 @@ -- Update to version 2.42.3: +- Update to version 2.42.3 (PED-16740): Old: ---- util-linux-2.42.3.tar.sign util-linux-2.42.3.tar.xz New: ---- util-linux-2.42.4.tar.sign util-linux-2.42.4.tar.xz util-linux-libcanonicalize-newline.patch util-linux-wall-off-by-one.patch ----------(New B)---------- New:- Add two upstream follow-up fixes (util-linux-libcanonicalize-newline.patch, util-linux-wall-off-by-one.patch). New: (util-linux-libcanonicalize-newline.patch, util-linux-wall-off-by-one.patch). ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ util-linux.spec ++++++ --- /var/tmp/diff_new_pack.WS9nMD/_old 2026-10-08 11:55:59.229441445 +0200 +++ /var/tmp/diff_new_pack.WS9nMD/_new 2026-10-08 11:55:59.231441529 +0200 @@ -85,7 +85,7 @@ %endif # ulbuild == python -Version: 2.42.3 +Version: 2.42.4 Release: 0 License: GPL-2.0-or-later #Git-Clone: https://github.com/util-linux/util-linux @@ -113,6 +113,10 @@ Patch3: util-linux-bash-completion-su-chsh-l.patch # PATCH-FIX-SUSE static_lib.patch [email protected] -- Fix build with libeconf. Not upstreamable in this form. Needs work! Patch5: static_lib.patch +# PATCH-FIX-UPSTREAM util-linux-libcanonicalize-newline.patch [email protected] -- libcanonicalize: only strip newline from Device Mapper name if present +Patch6: util-linux-libcanonicalize-newline.patch +# PATCH-FIX-UPSTREAM util-linux-wall-off-by-one.patch [email protected] -- Fix off-by-one in wall. +Patch7: util-linux-wall-off-by-one.patch BuildRequires: audit-devel BuildRequires: bc BuildRequires: binutils-devel @@ -619,7 +623,7 @@ ################ %if "%ulbuild" == "base" %make_install -mkdir -p "%{buildroot}%{_distconfdir}/default" "%{buildroot}%{_pam_vendordir}" "%{buildroot}%{_sysconfdir}/issue.d" "%{buildroot}/usr/lib/issue.d" "%{buildroot}%{_datadir}/user-tmpfiles.d" +mkdir -p "%{buildroot}%{_distconfdir}/default" "%{buildroot}%{_pam_vendordir}" "%{buildroot}%{_sysconfdir}/issue.d" "%{buildroot}/usr/lib/issue.d" "%{buildroot}%{_tmpfilesdir}" install -m 644 %{SOURCE51} %{buildroot}%{_distconfdir}/blkid.conf touch %{buildroot}%{_sysconfdir}/blkid.conf mkdir %{buildroot}%{_sysconfdir}/blkid.conf.d %{buildroot}%{_distconfdir}/blkid.conf.d @@ -642,7 +646,7 @@ "%{buildroot}/%{_mandir}/man8/raw.8"* echo -e "#!/bin/sh\n/sbin/blockdev --flushbufs \$1" > %{buildroot}%{_sbindir}/flushb chmod 755 %{buildroot}%{_sbindir}/flushb -install -m0644 uuidd.tmpfiles %{buildroot}%{_datadir}/user-tmpfiles.d/uuidd.conf +install -m0644 uuidd.tmpfiles %{buildroot}%{_tmpfilesdir}/uuidd.conf # arch dependent @@ -1448,7 +1452,6 @@ %exclude %{_datadir}/bash-completion/completions/logger %exclude %{_datadir}/bash-completion/completions/lsblk %exclude %{_datadir}/bash-completion/completions/lslogins -%exclude %{_datadir}/user-tmpfiles.d/uuidd.conf %exclude %{_bindir}/findmnt %exclude %{_bindir}/logger @@ -1462,6 +1465,8 @@ %exclude %{_mandir}/man8/uuidd.8.gz +%exclude %{_tmpfilesdir}/uuidd.conf + %ghost /var/adm/update-messages/%{name}-%{version}-%{release}-1 %endif # ulsubset == core, ulbuild == base @@ -1814,8 +1819,8 @@ %attr(-,uuidd,uuidd) %ghost %{_sharedstatedir}/libuuid/clock.txt %attr(-,uuidd,uuidd) %ghost %dir /run/uuidd %{_datadir}/bash-completion/completions/uuidd -%{_datadir}/user-tmpfiles.d/uuidd.conf %{_mandir}/man8/uuidd.8.gz +%{_tmpfilesdir}/uuidd.conf %{_unitdir}/uuidd.service %{_unitdir}/uuidd.socket ++++++ util-linux-2.42.3.tar.xz -> util-linux-2.42.4.tar.xz ++++++ /work/SRC/openSUSE:Factory/util-linux/util-linux-2.42.3.tar.xz /work/SRC/openSUSE:Factory/.util-linux.new.3698736/util-linux-2.42.4.tar.xz differ: char 15, line 1 ++++++ util-linux-libcanonicalize-newline.patch ++++++ >From a3205a6fd4cc0e03e787b09e614058527f63ac54 Mon Sep 17 00:00:00 2001 From: Leefancy <[email protected]> Date: Mon, 14 Sep 2026 17:31:46 +0800 Subject: [PATCH] libcanonicalize: only strip newline from DM name if present Signed-off-by: Leefancy <[email protected]> (cherry picked from commit 326136177724da60100dd760b63f2bf2df64bc1b) --- lib/canonicalize.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/lib/canonicalize.c b/lib/canonicalize.c index 854e61146..967410579 100644 --- a/lib/canonicalize.c +++ b/lib/canonicalize.c @@ -48,7 +48,9 @@ char *ul_canonicalize_dm_name_prefixed(const char *prefix, const char *ptname) /* read "<name>\n" from sysfs */ if (fgets(name, sizeof(name), f) && (sz = strlen(name)) > 1) { - name[sz - 1] = '\0'; + if (name[sz - 1] == '\n') + name[sz - 1] = '\0'; + snprintf(path, sizeof(path), _PATH_DEV_MAPPER "/%s", name); if ((prefix && *prefix) || access(path, F_OK) == 0) -- 2.55.0 ++++++ util-linux-wall-off-by-one.patch ++++++ >From b7c52e8505ddf430a4860d0973dd5eb419b747c4 Mon Sep 17 00:00:00 2001 From: gmkbenjamin <[email protected]> Date: Sun, 27 Sep 2026 18:20:51 +1000 Subject: [PATCH] wall: fix off-by-one in is_gr_member() group matching is_gr_member() tested buf->groups[ngroups], one past the valid range 0..ngroups-1 filled by getgrouplist(). The extra slot (zero-initialized GID 0, or stale on reuse) let a non-member pass `wall --group`, and read one past the initialized array. Iterate over 0..ngroups-1 instead so only actual group members match. Fixes: https://github.com/util-linux/util-linux/issues/4654 Signed-off-by: gmkbenjamin <[email protected]> (cherry picked from commit ac280f2f34588d1a22a699b3e55fc147b27e6a2e) --- term-utils/wall.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/term-utils/wall.c b/term-utils/wall.c index 2cf8f38bb..abef43278 100644 --- a/term-utils/wall.c +++ b/term-utils/wall.c @@ -183,8 +183,8 @@ static int is_gr_member(const char *login, const struct group_workspace *buf) _("getgrouplist found more groups than sysconf allows")); } - for (; ngroups >= 0; --ngroups) { - if (buf->requested_group == (gid_t) buf->groups[ngroups]) + for (int i = 0; i < ngroups; i++) { + if (buf->requested_group == (gid_t) buf->groups[i]) return 1; } -- 2.55.0
