December 2014 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 906488] VUL-0: CVE-2014-8961: phpMyAdmin: Leakage of line count of an arbitrary file
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.suse.com/show_bug.cgi?id=906488 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Depends on| |908363 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 906900] PostgreSQL improper shutdown
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.suse.com/show_bug.cgi?id=906900 --- Comment #50 from Reinhard Max <max(a)suse.com> --- I haven't tested it yet, but it should work this way. There are two minor things that I'll change when applying this fix to the package: 1. The init script sources /etc/sysconfig/postgresql by itself, so there is no need for the unit file to repeat that. 2. I think I'll pick a different name than "manager" for the former init script, but haven't yet decided what it will be. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 908201] Stopping the bluetooth service with service manager does not stop obexd but shuts down the other 2
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.opensuse.org/show_bug.cgi?id=908201 --- Comment #4 from Bogdan Hlevca <bogdan(a)hlevca.com> --- > > Bogdan, let's not mix two completely different things in one bugreport. > If you feel it's confusing, then, please, report that as a new bug. I agree with you, but when I filed the report I did not have time to do it. No you have a minor bug opened #908370. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 908100] New: Need to select display option No KMS in order to be able to boot on an HP G61
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.opensuse.org/show_bug.cgi?id=908100 Bug ID: 908100 Summary: Need to select display option No KMS in order to be able to boot on an HP G61 Classification: openSUSE Product: openSUSE Distribution Version: 13.2 RC 1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: jones(a)er.uqam.ca QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 615695 --> http://bugzilla.opensuse.org/attachment.cgi?id=615695&action=edit dmesg output. Tried to boot liveusb with default options. Display shows just a background pattern. When I select "No KMS" at boot, I get windows and can use the system. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 908279] logrotate.timer not enabled automatically
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.opensuse.org/show_bug.cgi?id=908279 --- Comment #3 from Christian Boltz <suse-beta(a)cboltz.de> --- I'm following Factory since years, so no new install. I also know how to manually enable logrotate.timer (and already did that after submitting this bugreport). However the question is why it wasn't enable automatically - my guess is that the migration from the cron.daily script fails. (If in doubt, test by upgrading a 13.1 to 13.2 and check if logrotate.timer is enabled.) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 906682] freeradius server fails to start because of openSSL version problem
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.novell.com/show_bug.cgi?id=906682 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard| |obs:running:3282:low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 899718] multimedia:apps/cdrtools: Don't have permissions for cdrtools binaries
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.novell.com/show_bug.cgi?id=899718 Johannes Segitz <jsegitz(a)novell.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsegitz(a)novell.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 899718] multimedia:apps/cdrtools: Don't have permissions for cdrtools binaries
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.suse.com/show_bug.cgi?id=899718 --- Comment #9 from Jan Engelhardt <jengelh(a)inai.de> --- Well, sounds good. Any change you make, feed it back to multimedia:apps/cdrtools as well. Johannes: Do note that -scanbus is not going to work for unprivileged users at this time if any of /dev/sg* is unreadable. Reading and writing from a specific device (using -dev=/dev/something) is (after this bug's fix), though. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 899718] multimedia:apps/cdrtools: Don't have permissions for cdrtools binaries
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.suse.com/show_bug.cgi?id=899718 --- Comment #8 from Marcus Meissner <meissner(a)suse.com> --- The fix would have been simpler and I made the simpler change. - run the set and verify permissions stuff all the time - include verify not mode caps always - do not define %caps to contain anything, as it will be set by the permissions code. we also approved less than there is in the .specfile. /usr/bin/cdrecord root:root 755 +capabilities cap_sys_resource,cap_sys_nice,cap_ipc_lock,cap_sys_rawio=ep # no special privileges are needed for cd reading. /usr/bin/readcd root:root 755 /usr/bin/cdda2wav root:root 755 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 908363] New: CVE-2014-9218: phpMyAdmin: DoS vulnerability with long passwords
by bugzilla_noreply＠novell.com 04 Dec '14

04 Dec '14

http://bugzilla.opensuse.org/show_bug.cgi?id=908363 Bug ID: 908363 Summary: CVE-2014-9218: phpMyAdmin: DoS vulnerability with long passwords Classification: openSUSE Product: openSUSE Distribution Version: 13.2 Hardware: All URL: http://www.phpmyadmin.net/home_page/security/PMASA-201 4-17.php OS: openSUSE 13.2 Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: Andreas.Stieger(a)gmx.de QA Contact: qa-bugs(a)suse.de CC: chris(a)computersalat.de, ecsos(a)schirra.net Found By: --- Blocker: --- >From http://www.phpmyadmin.net/home_page/security/PMASA-2014-17.php > Announcement-ID: PMASA-2014-17 > Date: 2014-12-03 > Summary: DoS vulnerability with long passwords. > Description: With very long passwords it was possible to initiate a denial of service attack on phpMyAdmin. > Severity: We consider this vulnerability to be serious. > Mitigation factor: This vulnerability can be mitigated by configuring throttling in the webserver. > Affected Versions: Versions 4.0.x (prior to 4.0.10.7), 4.1.x (prior to 4.1.14.8) and 4.2.x (prior to 4.2.13.1) are affected. > Solution: Upgrade to phpMyAdmin 4.0.10.7 or newer, or 4.1.14.8 or newer, or 4.2.13.1 or newer, or apply the patch listed below. > Assigned CVE ids: CVE-2014-9218 > CWE ids: CWE-661 CWE-400 > Patches: > The following commits have been made to fix this issue: > 1ac863c7573d12012374d5d41e5c7dc5505ea6e1 > The following commits have been made on the 4.1 branch to fix this issue: > 62b2c918d26cc78d1763945e3d44d1a63294a819 > The following commits have been made on the 4.0 branch to fix this issue: > 095729d81205f15f40d216d25917017da4c2fff8 -- You are receiving this mail because: You are on the CC list for the bug.

1 1