Hello community,
here is the log from the commit of package patchinfo.12047 for
openSUSE:Leap:15.1:Update checked in at 2020-03-23 16:27:12
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Leap:15.1:Update/patchinfo.12047 (Old)
and /work/SRC/openSUSE:Leap:15.1:Update/.patchinfo.12047.new.3160 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "patchinfo.12047"
Mon Mar 23 16:27:12 2020 rev:1 rq:779996 version:unknown
Changes:
--------
New Changes file:
NO CHANGES FILE!!!
New:
----
_patchinfo
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ _patchinfo ++++++
<patchinfo incident="12047">
<issue tracker="bnc" id="1158910">VUL-0: texlive-filesystem: no longer use
/usr/bin/safe-{rm,rmdir}</issue>
<issue tracker="bnc" id="1150556">AUDIT-1: texlive-filesystem: review of cron
job file(s): /etc/cron.daily/suse-texlive</issue>
<issue tracker="bnc" id="1155381">texlive: fir_7gpamp.enc not found</issue>
<issue tracker="bnc" id="1159740">VUL-0: texlive-filesystem: sticky bit for
dirs like /var/lib/texmf/fonts, race condition in spec file</issue>
<packager>WernerFink</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for texlive-filesystem</summary>
<description>This update for texlive-filesystem fixes the following issues:
Security issues fixed:
- Changed default user for ls-R files and font cache directories to user nobody
(bsc#1159740)
- Switched to rm instead of safe-rm or safe-rmdir to avoid race conditions
(bsc#1158910) .
- Made cron script more failsafe (bsc#1150556)
Non-security issue fixed:
- Refreshed font map files on update (bsc#1155381)
This update was imported from the SUSE:SLE-15:Update update
project.</description>
</patchinfo>
