Hello community, here is the log from the commit of package virtualbox-ose for openSUSE:Factory checked in at Wed Oct 21 02:04:34 CEST 2009. -------- --- virtualbox-ose/virtualbox-ose.changes 2009-10-09 11:37:16.000000000 +0200 +++ virtualbox-ose/virtualbox-ose.changes 2009-10-15 16:08:43.000000000 +0200 @@ -1,0 +2,5 @@ +Thu Oct 15 14:02:30 UTC 2009 - mseben@novell.com + +- fixed security issue with empty LD_LIBRARY_PATH in wrappers (bnc#448246) + +------------------------------------------------------------------- calling whatdependson for head-i586 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ virtualbox-ose.spec ++++++ --- /var/tmp/diff_new_pack.W3rcr1/_old 2009-10-21 02:02:27.000000000 +0200 +++ /var/tmp/diff_new_pack.W3rcr1/_new 2009-10-21 02:02:27.000000000 +0200 @@ -62,7 +62,7 @@ # ExclusiveArch: %ix86 x86_64 Version: 3.0.6 -Release: 8 +Release: 9 Summary: VirtualBox OSE is an Emulator License: GPL v2 or later Group: System/Emulators/PC @@ -362,7 +362,7 @@ %__cat > %{buildroot}%{_bindir}/$file << EOF #!/bin/bash export QT_NO_KDE_INTEGRATION=1 -LD_LIBRARY_PATH="\$LD_LIBRARY_PATH:%{_vbox_instdir}" %{_vbox_instdir}/$file "\$@" +LD_LIBRARY_PATH="%{_vbox_instdir}\${LD_LIBRARY_PATH:+:\$LD_LIBRARY_PATH}" %{_vbox_instdir}/$file "\$@" EOF #check if used is memeber of vboxusers group or is root, if not show messagebox with warning test $file = 'VirtualBox' && sed -i '3i /usr/bin/id -nG | grep -v -e \"root\" -e \"vboxusers\" >/dev/null && %{_vbox_instdir}/VBoxPermissionMessage && exit' %{buildroot}%{_bindir}/$file ++++++ virtualbox-ose-permissions_warning.diff ++++++ --- /var/tmp/diff_new_pack.W3rcr1/_old 2009-10-21 02:02:28.000000000 +0200 +++ /var/tmp/diff_new_pack.W3rcr1/_new 2009-10-21 02:02:28.000000000 +0200 @@ -70,7 +70,7 @@ + QApplication app(argc, argv); + QMessageBox msgBox; + msgBox.setWindowTitle(QObject::tr("Permissions problem !")); -+ msgBox.setText(QObject::tr("You are not a member of the \"vboxusers\" group. Please add yourself to this group before starting VirtualBox. You could do it using: Yast / Security and Users / User and Group management")); ++ msgBox.setText(QObject::tr("You are not a member of the \"vboxusers\" group. Please add yourself to this group before starting VirtualBox. You could do it using: Yast / Security and Users / User and Group management. Don't forget re-login your user account!")); + int ret = msgBox.exec(); + app.quit(); + return 0; ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... -- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org