Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openvswitch for openSUSE:Factory checked in at 2026-11-08 19:21:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openvswitch (Old) and /work/SRC/openSUSE:Factory/.openvswitch.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openvswitch" Sun Nov 8 19:21:13 2026 rev:92 rq:1395809 version:unknown Changes: -------- --- /work/SRC/openSUSE:Factory/openvswitch/openvswitch.changes 2026-09-12 21:16:09.436488432 +0200 +++ /work/SRC/openSUSE:Factory/.openvswitch.new.3759290/openvswitch.changes 2026-11-08 19:21:19.922258361 +0100 @@ -1,0 +2,8 @@ +Tue Nov 3 10:04:00 UTC 2026 - Matthias Gerstner <[email protected]> + +- package %{_tmpfilesdir}/*.conf with root ownership. Currently these files + are owned by unprivileged service users, allowing them to arbitrarily + manipulate systemd-tmpfiles creation rules. This is a defense-in-depth + security issue. + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openvswitch.spec ++++++ --- /var/tmp/diff_new_pack.P00GkN/_old 2026-11-08 19:21:21.387318968 +0100 +++ /var/tmp/diff_new_pack.P00GkN/_new 2026-11-08 19:21:21.391319133 +0100 @@ -906,8 +906,8 @@ %defattr(-,root,openvswitch, 775) %dir %{_sysconfdir}/openvswitch %ghost %dir %{_localstatedir}/log/openvswitch -%defattr(-,openvswitch,openvswitch) %{_tmpfilesdir}/openvswitch.conf +%defattr(-,openvswitch,openvswitch) %config %ghost %attr(0644,root,root) %{_sysconfdir}/openvswitch/system-id.conf # This is no longer the DB path for new installs but we still need this for # upgrades that preserve the old DB path. @@ -1050,8 +1050,8 @@ %{_datadir}/openvswitch/ovsdb/ovsdb-dot %files -n ovn -%defattr(-,openvswitch,openvswitch) %{_tmpfilesdir}/ovn.conf +%defattr(-,openvswitch,openvswitch) %ghost %dir %attr(0755,root,root) %{_localstatedir}/log/ovn %defattr(-,root,root) %{_fillupdir}/sysconfig.ovn
