Hello community,
here is the log from the commit of package openssh for openSUSE:Factory checked
in at 2019-11-18 20:05:09
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/openssh (Old)
and /work/SRC/openSUSE:Factory/.openssh.new.26869 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openssh"
Mon Nov 18 20:05:09 2019 rev:136 rq:748711 version:8.1p1
Changes:
--------
--- /work/SRC/openSUSE:Factory/openssh/openssh.changes 2019-10-25
18:39:55.831772282 +0200
+++ /work/SRC/openSUSE:Factory/.openssh.new.26869/openssh.changes
2019-11-18 20:05:39.685735390 +0100
@@ -1,0 +2,7 @@
+Fri Nov 8 18:05:37 UTC 2019 - Cristian RodrÃguez <crrodrig...@opensuse.org>
+
+- Add openssh-8.1p1-seccomp-clock_nanosleep.patch, allow clock_nanosleep
+ glibc master implements multiple functions using that syscall making
+ the privsep sandbox kill the preauth process.
+
+-------------------------------------------------------------------
New:
----
openssh-8.1p1-seccomp-clock_nanosleep.patch
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ openssh-askpass-gnome.spec ++++++
--- /var/tmp/diff_new_pack.VEOhTt/_old 2019-11-18 20:05:42.229734113 +0100
+++ /var/tmp/diff_new_pack.VEOhTt/_new 2019-11-18 20:05:42.245734105 +0100
@@ -1,7 +1,7 @@
#
# spec file for package openssh-askpass-gnome
#
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LLC.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
++++++ openssh.spec ++++++
--- /var/tmp/diff_new_pack.VEOhTt/_old 2019-11-18 20:05:42.305734075 +0100
+++ /var/tmp/diff_new_pack.VEOhTt/_new 2019-11-18 20:05:42.321734066 +0100
@@ -1,7 +1,7 @@
#
# spec file for package openssh
#
-# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2019 SUSE LLC.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -99,6 +99,7 @@
Patch33: openssh-7.7p1-sftp_print_diagnostic_messages.patch
Patch34: openssh-7.9p1-keygen-preserve-perms.patch
Patch35: openssh-7.9p1-revert-new-qos-defaults.patch
+Patch36: openssh-8.1p1-seccomp-clock_nanosleep.patch
BuildRequires: audit-devel
BuildRequires: autoconf
BuildRequires: groff
++++++ openssh-8.1p1-seccomp-clock_nanosleep.patch ++++++
Index: openssh-8.1p1/sandbox-seccomp-filter.c
===================================================================
--- openssh-8.1p1.orig/sandbox-seccomp-filter.c
+++ openssh-8.1p1/sandbox-seccomp-filter.c
@@ -248,6 +248,9 @@ static const struct sock_filter preauth_
#ifdef __NR_nanosleep
SC_ALLOW(__NR_nanosleep),
#endif
+#ifdef __NR_clock_nanosleep
+ SC_ALLOW(__NR_clock_nanosleep),
+#endif
#ifdef __NR__newselect
SC_ALLOW(__NR__newselect),
#endif
