Script 'mail_helper' called by ro Hello packager, This is just FYI. Your package was checked in in distribution "sle12" by autobuild-member: ro. Here comes the log... ---------------------------%<------------------------------ Hi, here is the log from ci_new_pac /mounts/work_src_done/SLE12/yast2-bootloader -> sle12 ## BNC# 866607 : "Links to change install/don't install for boot section of Installation Summary don't change" (NEW/) ## BNC# 864544 : "VUL-0: CVE-2013-4577: grub2: grub-cfg with hashed passwords public readable" (NEW/) Changes: -------- --- /work/SRC/SUSE:SLE-12:GA/yast2-bootloader/yast2-bootloader.changes 2014-02-28 11:22:27.000000000 +0100 +++ /mounts/work_src_done/SLE12/yast2-bootloader/yast2-bootloader.changes 2014-03-04 16:49:54.000000000 +0100 @@ -1,0 +2,13 @@ +Tue Mar 4 12:03:05 UTC 2014 - jreidinger@suse.com + +- fix typo in proposal screen(bnc#866607) +- 3.1.8 + +------------------------------------------------------------------- +Mon Mar 3 10:06:19 UTC 2014 - jreidinger@suse.com + +- fix permissions on file which contain encrypted password to be + readable only by root(BNC#864544)(CVE#2013-4577) +- 3.1.7 + +------------------------------------------------------------------- calling whatdependson for sle12-i586 Packages directly triggered for rebuild: - yast2-bootloader - yast2-kdump - yast2-product-creator - yast2-reipl - yast2-vm ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/SUSE:SLE-12:GA/yast2-bootloader (Old) and /mounts/work_src_done/SLE12/yast2-bootloader (BS:build ID:33817 MAIL:yast-commit@opensuse.org) (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "yast2-bootloader", Maintainer is "yast-commit@opensuse.org" Old: ---- yast2-bootloader-3.1.6.tar.bz2 New: ---- yast2-bootloader-3.1.8.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ yast2-bootloader.spec ++++++ --- /var/tmp/diff_new_pack.VEiKcF/_old 2014-03-04 17:51:22.000000000 +0100 +++ /var/tmp/diff_new_pack.VEiKcF/_new 2014-03-04 17:51:22.000000000 +0100 @@ -17,7 +17,7 @@ Name: yast2-bootloader -Version: 3.1.6 +Version: 3.1.8 Release: 0 BuildRoot: %{_tmppath}/%{name}-%{version}-build ++++++ yast2-bootloader-3.1.6.tar.bz2 -> yast2-bootloader-3.1.8.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-bootloader-3.1.6/package/yast2-bootloader.changes new/yast2-bootloader-3.1.8/package/yast2-bootloader.changes --- old/yast2-bootloader-3.1.6/package/yast2-bootloader.changes 2014-02-27 16:19:30.000000000 +0100 +++ new/yast2-bootloader-3.1.8/package/yast2-bootloader.changes 2014-03-04 16:47:14.000000000 +0100 @@ -1,4 +1,17 @@ ------------------------------------------------------------------- +Tue Mar 4 12:03:05 UTC 2014 - jreidinger@suse.com + +- fix typo in proposal screen(bnc#866607) +- 3.1.8 + +------------------------------------------------------------------- +Mon Mar 3 10:06:19 UTC 2014 - jreidinger@suse.com + +- fix permissions on file which contain encrypted password to be + readable only by root(BNC#864544)(CVE#2013-4577) +- 3.1.7 + +------------------------------------------------------------------- Thu Feb 27 08:32:24 UTC 2014 - jreidinger@suse.com - Add support for password in GRUB2 (FATE#315404) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-bootloader-3.1.6/package/yast2-bootloader.spec new/yast2-bootloader-3.1.8/package/yast2-bootloader.spec --- old/yast2-bootloader-3.1.6/package/yast2-bootloader.spec 2014-02-27 16:19:30.000000000 +0100 +++ new/yast2-bootloader-3.1.8/package/yast2-bootloader.spec 2014-03-04 16:47:14.000000000 +0100 @@ -17,7 +17,7 @@ Name: yast2-bootloader -Version: 3.1.6 +Version: 3.1.8 Release: 0 BuildRoot: %{_tmppath}/%{name}-%{version}-build diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-bootloader-3.1.6/src/lib/bootloader/grub2pwd.rb new/yast2-bootloader-3.1.8/src/lib/bootloader/grub2pwd.rb --- old/yast2-bootloader-3.1.6/src/lib/bootloader/grub2pwd.rb 2014-02-27 16:19:30.000000000 +0100 +++ new/yast2-bootloader-3.1.8/src/lib/bootloader/grub2pwd.rb 2014-03-04 16:47:14.000000000 +0100 @@ -22,7 +22,7 @@ Yast::SCR.Write( Yast::Path.new(".target.string"), - [PWD_ENCRYPTION_FILE, 0755], + [PWD_ENCRYPTION_FILE, 0700], file_content ) end diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-bootloader-3.1.6/src/modules/BootGRUB.rb new/yast2-bootloader-3.1.8/src/modules/BootGRUB.rb --- old/yast2-bootloader-3.1.6/src/modules/BootGRUB.rb 2014-02-27 16:19:30.000000000 +0100 +++ new/yast2-bootloader-3.1.8/src/modules/BootGRUB.rb 2014-03-04 16:47:14.000000000 +0100 @@ -692,7 +692,7 @@ ) else line << _( - "Do not install bootcode into \"/\" partition (do not install</a>" + "Do not install bootcode into \"/\" partition (install</a>" ) end end diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-bootloader-3.1.6/src/modules/BootGRUB2.rb new/yast2-bootloader-3.1.8/src/modules/BootGRUB2.rb --- old/yast2-bootloader-3.1.6/src/modules/BootGRUB2.rb 2014-02-27 16:19:30.000000000 +0100 +++ new/yast2-bootloader-3.1.8/src/modules/BootGRUB2.rb 2014-03-04 16:47:14.000000000 +0100 @@ -148,7 +148,7 @@ ) else line << _( - "Do not install bootcode into \"/\" partition (do not install</a>" + "Do not install bootcode into \"/\" partition (install</a>" ) end end diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/yast2-bootloader-3.1.6/test/grub2pwd_test.rb new/yast2-bootloader-3.1.8/test/grub2pwd_test.rb --- old/yast2-bootloader-3.1.6/test/grub2pwd_test.rb 2014-02-27 16:19:30.000000000 +0100 +++ new/yast2-bootloader-3.1.8/test/grub2pwd_test.rb 2014-03-04 16:47:14.000000000 +0100 @@ -57,7 +57,7 @@ ) expect(Yast::SCR).to receive(:Write).with( kind_of(Yast::Path), - [GRUB2Pwd::PWD_ENCRYPTION_FILE, 0755], + [GRUB2Pwd::PWD_ENCRYPTION_FILE, 0700], /#{passwd}/ ) continue with "q"... Checked in at Tue Mar 4 17:52:05 CET 2014 by ro Remember to have fun... -- To unsubscribe, e-mail: yast-commit+unsubscribe@opensuse.org For additional commands, e-mail: yast-commit+help@opensuse.org