Hello community, here is the log from the commit of package patchinfo.1367 for openSUSE:12.2:Update checked in at 2013-03-01 21:52:05 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:12.2:Update/patchinfo.1367 (Old) and /work/SRC/openSUSE:12.2:Update/.patchinfo.1367.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "patchinfo.1367", Maintainer is "" Changes: -------- New Changes file: NO CHANGES FILE!!! New: ---- _patchinfo ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ _patchinfo ++++++ <patchinfo> <issue id="804983" tracker="bnc">VUL-0: PackageKit "update" can downgrade packages</issue> <category>security</category> <rating>moderate</rating> <packager>coolo</packager> <description> PackageKit was fixed to add a patch to forbid update to downgrade (bnc#804983) As the update operation is allowed for logged in regular users, they could install old package versions which might have been still affected by already fixed security problems. </description> <summary>PackageKit: forbid downgrading packages during update</summary> </patchinfo> -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org