Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package tigervnc for openSUSE:Factory 
checked in at 2023-04-04 21:17:02
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/tigervnc (Old)
 and      /work/SRC/openSUSE:Factory/.tigervnc.new.19717 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "tigervnc"

Tue Apr  4 21:17:02 2023 rev:98 rq:1076858 version:1.13.1

Changes:
--------
--- /work/SRC/openSUSE:Factory/tigervnc/tigervnc.changes        2023-03-22 
22:29:04.369719471 +0100
+++ /work/SRC/openSUSE:Factory/.tigervnc.new.19717/tigervnc.changes     
2023-04-04 21:17:03.059901467 +0200
@@ -1,0 +2,7 @@
+Mon Apr  3 08:57:25 UTC 2023 - Joan Torres <joan.tor...@suse.com>
+
+- Fixes for bsc#1209283
+  * Drop chown vnc:vnc calls in with-vnc-key.sh
+  * Add TLSNone to -securitytypes to increase security in xvnc@.service
+
+-------------------------------------------------------------------

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ with-vnc-key.sh ++++++
--- /var/tmp/diff_new_pack.5vEEvO/_old  2023-04-04 21:17:04.279909245 +0200
+++ /var/tmp/diff_new_pack.5vEEvO/_new  2023-04-04 21:17:04.283909271 +0200
@@ -19,7 +19,6 @@
     # If the key file doesn't exist or has zero size (because it doubles as 
lock), generate it.
     if ! test -s $TLSKEY ; then
         (umask 077 && openssl genrsa -out $TLSKEY 2048) >&200
-        chown vnc:vnc $TLSKEY
     fi
 
     # If the cert file doesn't exist, generate it.
@@ -28,7 +27,6 @@
         CN="`hostname`"
         CN=${CN:0:64}
         openssl req -new -x509 -extensions usr_cert -key $TLSKEY -out $TLSCERT 
-days 7305 -subj "/CN=$CN/"
-        chown vnc:vnc $TLSCERT
     fi
 
 ) 200>>$TLSKEY 2>/dev/null

++++++ x...@.service.in ++++++
--- /var/tmp/diff_new_pack.5vEEvO/_old  2023-04-04 21:17:04.407910062 +0200
+++ /var/tmp/diff_new_pack.5vEEvO/_new  2023-04-04 21:17:04.411910087 +0200
@@ -2,7 +2,7 @@
 Description=Xvnc Server
 
 [Service]
-ExecStart=@LIBEXECDIR@/vnc/with-vnc-key.sh /usr/bin/Xvnc -noreset -inetd -once 
-query localhost -geometry 1024x768 -securitytypes X509None,None -X509Key 
/etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30 -extension MIT-SHM
+ExecStart=@LIBEXECDIR@/vnc/with-vnc-key.sh /usr/bin/Xvnc -noreset -inetd -once 
-query localhost -geometry 1024x768 -securitytypes X509None,TLSNone,None 
-X509Key /etc/vnc/tls.key -X509Cert /etc/vnc/tls.cert -log *:syslog:30 
-extension MIT-SHM
 User=vnc
 StandardInput=socket
 StandardOutput=socket

Reply via email to