Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package openssh for openSUSE:Factory checked
in at 2021-07-22 22:42:59
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/openssh (Old)
and /work/SRC/openSUSE:Factory/.openssh.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openssh"
Thu Jul 22 22:42:59 2021 rev:153 rq:907490 version:8.4p1
Changes:
--------
--- /work/SRC/openSUSE:Factory/openssh/openssh.changes 2021-06-25
15:01:43.092179407 +0200
+++ /work/SRC/openSUSE:Factory/.openssh.new.1899/openssh.changes
2021-07-22 22:43:29.231189893 +0200
@@ -1,0 +2,8 @@
+Mon Jul 19 14:51:08 UTC 2021 - Cristian Rodr??guez <crrodrig...@opensuse.org>
+
+- The linux kernel has close_range(2) syscall which current glibc
+ uses to implement closefrom(3) which will be then used by openssh.
+ whitelist the new system call so closefrom does not fail or
+ fallback to iterating proc/self/fd (openssh-whitelist-syscalls.patch)
+
+-------------------------------------------------------------------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
openssh.spec: same change
++++++ openssh-whitelist-syscalls.patch ++++++
--- /var/tmp/diff_new_pack.LL2qO7/_old 2021-07-22 22:43:31.275187230 +0200
+++ /var/tmp/diff_new_pack.LL2qO7/_new 2021-07-22 22:43:31.275187230 +0200
@@ -1,8 +1,16 @@
-diff --git a/sandbox-seccomp-filter.c b/sandbox-seccomp-filter.c
-index 797a14b..02698cc 100644
--- a/sandbox-seccomp-filter.c
+++ b/sandbox-seccomp-filter.c
-@@ -204,6 +204,9 @@ static const struct sock_filter preauth_insns[] = {
+@@ -195,6 +195,9 @@
+ #ifdef __NR_close
+ SC_ALLOW(__NR_close),
+ #endif
++#ifdef __NR_close_range
++ SC_ALLOW(__NR_close_range),
++#endif
+ #ifdef __NR_exit
+ SC_ALLOW(__NR_exit),
+ #endif
+@@ -204,6 +207,9 @@
#ifdef __NR_futex
SC_ALLOW(__NR_futex),
#endif
@@ -12,7 +20,7 @@
#ifdef __NR_geteuid
SC_ALLOW(__NR_geteuid),
#endif
-@@ -282,6 +285,9 @@ static const struct sock_filter preauth_insns[] = {
+@@ -282,6 +288,9 @@
#ifdef __NR_pselect6
SC_ALLOW(__NR_pselect6),
#endif
