Hello community, here is the log from the commit of package trousers for openSUSE:Factory checked in at 2020-11-05 21:55:41 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/trousers (Old) and /work/SRC/openSUSE:Factory/.trousers.new.11331 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "trousers" Thu Nov 5 21:55:41 2020 rev:48 rq:846199 version:0.3.15 Changes: -------- --- /work/SRC/openSUSE:Factory/trousers/trousers.changes 2020-07-27 17:48:58.615494447 +0200 +++ /work/SRC/openSUSE:Factory/.trousers.new.11331/trousers.changes 2020-11-05 21:56:27.451976755 +0100 @@ -1,0 +2,13 @@ +Thu Nov 5 10:34:19 UTC 2020 - Matthias Gerstner <[email protected]> + +- update to new upstream version 0.3.15: + - Corrected mutliple security issues that existed if the tcsd is started by + root instead of the tss user. CVE-2020-24332, CVE-2020-24330, CVE-2020-24331 + - Replaced use of _no_optimize with asm memory barrier + - Fixed multiple potential instances of use after free memory handling + - Removed unused global variables which caused build issue on some distros +- drop gcc-10.patch: now contained in upstream tarball +- drop bsc1164472.patch: now contained in upstream tarball +- adjusted %setup macro invocation which seemed to be wrong + +------------------------------------------------------------------- Old: ---- bsc1164472.patch gcc-10.patch trousers-0.3.14.tar.gz New: ---- trousers-0.3.15.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ trousers.spec ++++++ --- /var/tmp/diff_new_pack.wngiA8/_old 2020-11-05 21:56:28.191975092 +0100 +++ /var/tmp/diff_new_pack.wngiA8/_new 2020-11-05 21:56:28.191975092 +0100 @@ -18,7 +18,7 @@ %define tpmstatedir %{_localstatedir}/lib/tpm Name: trousers -Version: 0.3.14 +Version: 0.3.15 Release: 0 Summary: TSS (TCG Software Stack) access daemon for a TPM chip License: BSD-3-Clause @@ -29,8 +29,6 @@ Source2: baselibs.conf Source3: 91-trousers.rules Patch0: fix-lto.patch -Patch1: bsc1164472.patch -Patch2: gcc-10.patch BuildRequires: gtk2-devel BuildRequires: libtool BuildRequires: openssl-devel @@ -81,10 +79,8 @@ system. It is a character device file major 10 minor 224, 0600 tss:tss. %prep -%setup -q -c %{name}-%{version} +%setup -q -n %{name}-%{version} %patch0 -p1 -%patch1 -p1 -%patch2 -p1 %build CC=gcc ++++++ trousers-0.3.14.tar.gz -> trousers-0.3.15.tar.gz ++++++ ++++ 281689 lines of diff (skipped)
