Hello community,
here is the log from the commit of package yast2-multipath for openSUSE:Factory
checked in at 2019-01-10 15:15:47
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/yast2-multipath (Old)
and /work/SRC/openSUSE:Factory/.yast2-multipath.new.28833 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "yast2-multipath"
Thu Jan 10 15:15:47 2019 rev:42 rq:663283 version:4.1.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/yast2-multipath/yast2-multipath.changes
2018-12-31 09:40:30.782505214 +0100
+++
/work/SRC/openSUSE:Factory/.yast2-multipath.new.28833/yast2-multipath.changes
2019-01-10 15:15:51.422775135 +0100
@@ -1,0 +2,6 @@
+Fri Nov 30 09:23:19 UTC 2018 - [email protected]
+
+- CVE-2018-17955, use random file name (bsc#1117592)
+- 4.1.1
+
+-------------------------------------------------------------------
Old:
----
yast2-multipath-4.1.0.tar.bz2
New:
----
yast2-multipath-4.1.1.tar.bz2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ yast2-multipath.spec ++++++
--- /var/tmp/diff_new_pack.7uq4fH/_old 2019-01-10 15:15:51.850774725 +0100
+++ /var/tmp/diff_new_pack.7uq4fH/_new 2019-01-10 15:15:51.850774725 +0100
@@ -1,7 +1,7 @@
#
# spec file for package yast2-multipath
#
-# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: yast2-multipath
-Version: 4.1.0
+Version: 4.1.1
Release: 0
BuildRoot: %{_tmppath}/%{name}-%{version}-build
++++++ yast2-multipath-4.1.0.tar.bz2 -> yast2-multipath-4.1.1.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/yast2-multipath-4.1.0/package/yast2-multipath.changes
new/yast2-multipath-4.1.1/package/yast2-multipath.changes
--- old/yast2-multipath-4.1.0/package/yast2-multipath.changes 2018-11-28
13:59:25.000000000 +0100
+++ new/yast2-multipath-4.1.1/package/yast2-multipath.changes 2019-01-07
09:25:56.000000000 +0100
@@ -1,4 +1,10 @@
-------------------------------------------------------------------
+Fri Nov 30 09:23:19 UTC 2018 - [email protected]
+
+- CVE-2018-17955, use random file name (bsc#1117592)
+- 4.1.1
+
+-------------------------------------------------------------------
Sun Nov 25 18:30:26 UTC 2018 - Stasiek Michalski <[email protected]>
- Provide icon with module (boo#1109310)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/yast2-multipath-4.1.0/package/yast2-multipath.spec
new/yast2-multipath-4.1.1/package/yast2-multipath.spec
--- old/yast2-multipath-4.1.0/package/yast2-multipath.spec 2018-11-28
13:59:25.000000000 +0100
+++ new/yast2-multipath-4.1.1/package/yast2-multipath.spec 2019-01-07
09:25:56.000000000 +0100
@@ -17,7 +17,7 @@
Name: yast2-multipath
-Version: 4.1.0
+Version: 4.1.1
Release: 0
BuildRoot: %{_tmppath}/%{name}-%{version}-build
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/yast2-multipath-4.1.0/src/include/multipath/complex.rb
new/yast2-multipath-4.1.1/src/include/multipath/complex.rb
--- old/yast2-multipath-4.1.0/src/include/multipath/complex.rb 2018-11-28
13:59:25.000000000 +0100
+++ new/yast2-multipath-4.1.1/src/include/multipath/complex.rb 2019-01-07
09:25:56.000000000 +0100
@@ -29,6 +29,7 @@
require "yast"
require "y2storage"
+require "tempfile"
module Yast
module MultipathComplexInclude
@@ -49,7 +50,11 @@
@service_status = 0
@has_dumbtab = false
@device_template = "vendor %1; product %2"
- @builtin_multipath_conf_path = "/tmp/.yast2-multipath-builtin-conf"
+
+ # Using instance variable to keep the reference to the tempfile
+ # to avoid removing by the object finalizer
+ @tfile = Tempfile.new('.yast2-multipath-builtin-conf')
+ @builtin_multipath_conf_path = @tfile.path
Yast.include include_target, "multipath/options.rb"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/yast2-multipath-4.1.0/src/modules/Multipath.rb
new/yast2-multipath-4.1.1/src/modules/Multipath.rb
--- old/yast2-multipath-4.1.0/src/modules/Multipath.rb 2018-11-28
13:59:25.000000000 +0100
+++ new/yast2-multipath-4.1.1/src/modules/Multipath.rb 2019-01-07
09:25:56.000000000 +0100
@@ -30,6 +30,7 @@
# Input and output routines.
require "yast"
require "y2storage"
+require "yast2/execute"
module Yast
class MultipathClass < Module
@@ -87,10 +88,20 @@
# prepare for loading built-in configurations
- SCR.Execute(
- path(".target.bash"),
- Ops.add("/sbin/multipath -t > ", @builtin_multipath_conf_path)
- )
+ cmd = "/sbin/multipath"
+ para = "-t"
+ begin
+ File.open(@builtin_multipath_conf_path, "w") do |stdout|
+ Cheetah.run(cmd, para, stdout: stdout)
+ end
+ rescue Cheetah::ExecutionFailed => e
+ if e.stderr != nil
+ err_msg = _("Failed to show the currently used multipathd
configuration.")
+ err_msg += e.stderr
+ Yast::Popup.Error(err_msg)
+ return false
+ end
+ end
ret = Read_MultipathConfig()
if ret == false
