Hello community, here is the log from the commit of package cronic for openSUSE:Factory checked in at 2016-04-14 13:08:49 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/cronic (Old) and /work/SRC/openSUSE:Factory/.cronic.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "cronic" Changes: -------- --- /work/SRC/openSUSE:Factory/cronic/cronic.changes 2014-09-06 16:54:44.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.cronic.new/cronic.changes 2016-04-14 13:08:51.000000000 +0200 @@ -1,0 +2,7 @@ +Wed Apr 13 20:11:17 UTC 2016 - seroton10@gmail.com + +- Security update to v3 (CVE-2016-3992): + * Use mktemp-d to avoid race-conditions and security problems. + * Drop cronic.patch, which has become redundant. + +------------------------------------------------------------------- Old: ---- cronic.patch ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cronic.spec ++++++ --- /var/tmp/diff_new_pack.c4Ey88/_old 2016-04-14 13:08:51.000000000 +0200 +++ /var/tmp/diff_new_pack.c4Ey88/_new 2016-04-14 13:08:51.000000000 +0200 @@ -1,7 +1,7 @@ # # spec file for package cronic # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: cronic -Version: 2 +Version: 3 Release: 0 Summary: A cure for Cron's chronic email problem License: SUSE-Public-Domain @@ -25,7 +25,6 @@ Url: http://habilis.net/cronic/ Source0: http://habilis.net/cronic/cronic Source1: cronic.1 -Patch0: cronic.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build BuildArch: noarch @@ -40,7 +39,6 @@ %prep %setup -q -c -T cp %{SOURCE0} . -%patch0 %build @@ -54,6 +52,6 @@ %files %defattr (-, root, root) %attr(755,root,root) %{_bindir}/cronic -%doc %{_mandir}/man1/cronic.1.gz +%{_mandir}/man1/cronic.1.gz %changelog ++++++ cronic ++++++ --- /var/tmp/diff_new_pack.c4Ey88/_old 2016-04-14 13:08:51.000000000 +0200 +++ /var/tmp/diff_new_pack.c4Ey88/_new 2016-04-14 13:08:51.000000000 +0200 @@ -1,14 +1,15 @@ #!/bin/bash -# Cronic v2 - cron job report wrapper -# Copyright 2007 Chuck Houpt. No rights reserved, whatsoever. +# Cronic v3 - cron job report wrapper +# Copyright 2007-2016 Chuck Houpt. No rights reserved, whatsoever. # Public Domain CC0: http://creativecommons.org/publicdomain/zero/1.0/ set -eu -OUT=/tmp/cronic.out.$$ -ERR=/tmp/cronic.err.$$ -TRACE=/tmp/cronic.trace.$$ +TMP=$(mktemp -d) +OUT=$TMP/cronic.out +ERR=$TMP/cronic.err +TRACE=$TMP/cronic.trace set +e "$@" >$OUT 2>$TRACE @@ -43,6 +44,4 @@ fi fi -rm -f "$OUT" -rm -f "$ERR" -rm -f "$TRACE" +rm -rf "$TMP"