Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package shadowsocks-rust for openSUSE:Factory checked in at 2026-10-02 23:04:50 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/shadowsocks-rust (Old) and /work/SRC/openSUSE:Factory/.shadowsocks-rust.new.1631729 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "shadowsocks-rust" Fri Oct 2 23:04:50 2026 rev:22 rq:1382087 version:1.25.0 Changes: -------- --- /work/SRC/openSUSE:Factory/shadowsocks-rust/shadowsocks-rust.changes 2026-09-18 22:04:53.573455308 +0200 +++ /work/SRC/openSUSE:Factory/.shadowsocks-rust.new.1631729/shadowsocks-rust.changes 2026-10-02 23:06:06.260223294 +0200 @@ -1,0 +2,5 @@ +Fri Oct 2 08:44:54 UTC 2026 - Hillwood Yang <[email protected]> + +- Fix: Unable to bind ports below 1024 with SELinux enabled (boo#1284025) + +------------------------------------------------------------------- @@ -15,0 +21,2 @@ + * CVE-2026-93599, CVE-2026-93602, CVE-2026-93601, CVE-2026-93600 and boo#1282208 + * CVE-2026-25541 and boo#1274441 @@ -193 +200 @@ -- Update vendor, fix boo#1215658 CVE-2023-42811 +- Update vendor, fix boo#1215658 and CVE-2023-42811 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ shadowsocks-rust.te ++++++ --- /var/tmp/diff_new_pack.699wqw/_old 2026-10-02 23:06:08.160302720 +0200 +++ /var/tmp/diff_new_pack.699wqw/_new 2026-10-02 23:06:08.168303055 +0200 @@ -21,7 +21,7 @@ class chr_file { read getattr open }; class unix_dgram_socket { create connect sendto }; - class capability { sys_resource }; + class capability { sys_resource net_bind_service}; class file { read open getattr write create unlink entrypoint map execute ioctl lock }; class fifo_file { getattr read write ioctl }; class dir { search getattr write add_name remove_name read }; @@ -77,7 +77,7 @@ # =================================================================== # Core Kernel Capabilities # =================================================================== -allow shadowsocks_rust_t self:capability { sys_resource }; +allow shadowsocks_rust_t self:capability { sys_resource net_bind_service}; # =================================================================== # Plugin Execution Rules (SIP003 Plugins like v2ray-plugin) @@ -92,5 +92,4 @@ # DNS Name Resolution # =================================================================== sysnet_dns_name_resolve(shadowsocks_rust_t) -(No newline at EOF)
