Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package suse-module-tools for openSUSE:Factory checked in at 2023-10-01 21:21:45 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/suse-module-tools (Old) and /work/SRC/openSUSE:Factory/.suse-module-tools.new.28202 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "suse-module-tools" Sun Oct 1 21:21:45 2023 rev:69 rq:1114421 version:16.0.36 Changes: -------- --- /work/SRC/openSUSE:Factory/suse-module-tools/suse-module-tools.changes 2023-09-06 18:57:52.242868781 +0200 +++ /work/SRC/openSUSE:Factory/.suse-module-tools.new.28202/suse-module-tools.changes 2023-10-01 21:21:48.659570144 +0200 @@ -1,0 +2,7 @@ +Fri Sep 29 16:49:41 UTC 2023 - Martin Wilck <mwi...@suse.com> + +- Update to version 16.0.36 + * blacklist RNDIS modules (bsc#1205767, jsc#PED-5731) + * modprobe.d: Blacklist cls_tcindex module (bsc#1210335, CVE-2023-1829) + +------------------------------------------------------------------- Old: ---- suse-module-tools-16.0.35.obscpio New: ---- suse-module-tools-16.0.36.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ suse-module-tools.spec ++++++ --- /var/tmp/diff_new_pack.DnZV99/_old 2023-10-01 21:21:50.063620949 +0200 +++ /var/tmp/diff_new_pack.DnZV99/_new 2023-10-01 21:21:50.063620949 +0200 @@ -36,7 +36,7 @@ %global modprobe_conf_rpmsave %(echo "%{modprobe_conf_files}" | sed 's,\\([^ ]*\\),%{_sysconfdir}/modprobe.d/\\1.conf.rpmsave,g') Name: suse-module-tools -Version: 16.0.35 +Version: 16.0.36 Release: 0 Summary: Configuration for module loading and SUSE-specific utilities for KMPs License: GPL-2.0-or-later ++++++ _servicedata ++++++ --- /var/tmp/diff_new_pack.DnZV99/_old 2023-10-01 21:21:50.095622106 +0200 +++ /var/tmp/diff_new_pack.DnZV99/_new 2023-10-01 21:21:50.099622251 +0200 @@ -1,6 +1,6 @@ <servicedata> <service name="tar_scm"> <param name="url">https://github.com/openSUSE/suse-module-tools.git</param> - <param name="changesrevision">c48173fba4679b2501faab4a6241b8a057b0490e</param></service></servicedata> + <param name="changesrevision">46ad91a426a9b7152a885cc9f3431f069ccda712</param></service></servicedata> (No newline at EOF) ++++++ suse-module-tools-16.0.35.obscpio -> suse-module-tools-16.0.36.obscpio ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/suse-module-tools-16.0.35/modprobe.conf/common/50-blacklist-netcls.conf new/suse-module-tools-16.0.36/modprobe.conf/common/50-blacklist-netcls.conf --- old/suse-module-tools-16.0.35/modprobe.conf/common/50-blacklist-netcls.conf 1970-01-01 01:00:00.000000000 +0100 +++ new/suse-module-tools-16.0.36/modprobe.conf/common/50-blacklist-netcls.conf 2023-09-29 17:47:04.000000000 +0200 @@ -0,0 +1,2 @@ +# Module is affected by bsc#1210335 (CVE-2023-1829), prevent loading it unwittingly +blacklist cls_tcindex diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/suse-module-tools-16.0.35/modprobe.conf/common/50-blacklist-rndis.conf new/suse-module-tools-16.0.36/modprobe.conf/common/50-blacklist-rndis.conf --- old/suse-module-tools-16.0.35/modprobe.conf/common/50-blacklist-rndis.conf 1970-01-01 01:00:00.000000000 +0100 +++ new/suse-module-tools-16.0.36/modprobe.conf/common/50-blacklist-rndis.conf 2023-09-29 17:47:04.000000000 +0200 @@ -0,0 +1,5 @@ +# RNDIS is considered insecure (bsc#1205767, jsc#PED-5731) +blacklist rndis_wlan +blacklist usb_f_rndis +blacklist rndis_host + diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/suse-module-tools-16.0.35/suse-module-tools.spec new/suse-module-tools-16.0.36/suse-module-tools.spec --- old/suse-module-tools-16.0.35/suse-module-tools.spec 2023-09-05 18:16:46.000000000 +0200 +++ new/suse-module-tools-16.0.36/suse-module-tools.spec 2023-09-29 17:47:04.000000000 +0200 @@ -36,7 +36,7 @@ %global modprobe_conf_rpmsave %(echo "%{modprobe_conf_files}" | sed 's,\\([^ ]*\\),%{_sysconfdir}/modprobe.d/\\1.conf.rpmsave,g') Name: suse-module-tools -Version: 16.0.35 +Version: 16.0.36 Release: 0 Summary: Configuration for module loading and SUSE-specific utilities for KMPs License: GPL-2.0-or-later ++++++ suse-module-tools.obsinfo ++++++ --- /var/tmp/diff_new_pack.DnZV99/_old 2023-10-01 21:21:50.195625725 +0200 +++ /var/tmp/diff_new_pack.DnZV99/_new 2023-10-01 21:21:50.199625869 +0200 @@ -1,5 +1,5 @@ name: suse-module-tools -version: 16.0.35 -mtime: 1693930606 -commit: c48173fba4679b2501faab4a6241b8a057b0490e +version: 16.0.36 +mtime: 1696002424 +commit: 46ad91a426a9b7152a885cc9f3431f069ccda712