Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package tracker-miners for openSUSE:Factory checked in at 2024-01-11 21:05:03 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/tracker-miners (Old) and /work/SRC/openSUSE:Factory/.tracker-miners.new.21961 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "tracker-miners" Thu Jan 11 21:05:03 2024 rev:55 rq:1138128 version:3.6.2 Changes: -------- --- /work/SRC/openSUSE:Factory/tracker-miners/tracker-miners.changes 2024-01-04 15:59:07.644310584 +0100 +++ /work/SRC/openSUSE:Factory/.tracker-miners.new.21961/tracker-miners.changes 2024-01-11 21:05:20.514930602 +0100 @@ -26,0 +27 @@ + + Drop upstream merged: tracker-miners-CVE-2023-5557.patch @@ -31,0 +33,10 @@ + +------------------------------------------------------------------- +Fri Sep 18 06:12:53 UTC 2023 - Alynx Zhou <alynx.z...@suse.com> + +- Add tracker-miners-CVE-2023-5557.patch: A bug in libcue could + lead to possible sandbox escape in tracker-extract, this fixes it + by adding seccomp rules and applying it to the whole process + (bsc#1216199, glgo#GNOME/tracker-miners!480, CVE-2023-5557). +- Refresh tracker-miners-drop-syscalls-in-seccomp.patch: The patch + context is changed by tracker-miners-CVE-2023-5557.patch. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------
