September 2016 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 986251] lost+found directory causes mysql_upgrade to fail
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.suse.com/show_bug.cgi?id=986251 http://bugzilla.suse.com/show_bug.cgi?id=986251#c10 --- Comment #10 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2016:2218-1: An update that fixes four vulnerabilities is now available. Category: security (moderate) Bug References: 984858,985217,986251,991616 CVE References: CVE-2016-3477,CVE-2016-3521,CVE-2016-3615,CVE-2016-5440 Sources used: SUSE Linux Enterprise Workstation Extension 12-SP1 (src): mariadb-10.0.26-9.2 SUSE Linux Enterprise Software Development Kit 12-SP1 (src): mariadb-10.0.26-9.2 SUSE Linux Enterprise Server 12-SP1 (src): mariadb-10.0.26-9.2 SUSE Linux Enterprise Desktop 12-SP1 (src): mariadb-10.0.26-9.2 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 983926] New: VUL-0: CVE-2016-3100 kde: world readable Xauthority file exposes cookie credentials
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.suse.com/show_bug.cgi?id=983926 Bug ID: 983926 Summary: VUL-0: CVE-2016-3100 kde: world readable Xauthority file exposes cookie credentials Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: meissner(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: Security Response Team Blocker: --- via redhat bug rh#1344022 It was found that kdeinit5 creates /tmp/xauth-xxx-_y with inappropriate permission, which are 644 instead of 600. This can be exploited by stealing X11 cookie and running X11 keylogger. Malicious user is able to read key strokes of a different user which might be a sudo user. If attacker can log key events of a sudo user then it can lead to local privilege escalation. Upstream bugs: https://bugs.kde.org/show_bug.cgi?id=358593 https://bugs.kde.org/show_bug.cgi?id=363140 Upstream patches: https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=dece8fd89979cd1a86c03b… https://quickgit.kde.org/?p=kinit.git&a=commitdiff&h=72f3702dbe6cf15c06dc13… References: https://bugzilla.redhat.com/show_bug.cgi?id=1344022 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 985608] not possible to define a new MIME type and to set file associations
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.suse.com/show_bug.cgi?id=985608 http://bugzilla.suse.com/show_bug.cgi?id=985608#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2016:2215-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 985608 CVE References: Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): kde-cli-tools5-5.5.5-5.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 958785] kdesu - command line display may run into the password field
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.suse.com/show_bug.cgi?id=958785 http://bugzilla.suse.com/show_bug.cgi?id=958785#c10 --- Comment #10 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2016:2213-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 958785 CVE References: Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): kde-cli-tools5-5.5.5-9.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 996919] New: cannot type in location bar of additional browser windows
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.suse.com/show_bug.cgi?id=996919 Bug ID: 996919 Summary: cannot type in location bar of additional browser windows Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I am using the XMonad window manager and Chromium and Firefox browsers. When I open more than one window of the same browser only in the tabs in the first window it is possible to type in location bar. In the subsequent windows you can focus the location bar, select text in it with mouse but not type. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 996919] cannot type in location bar of additional browser windows
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.opensuse.org/show_bug.cgi?id=996919 http://bugzilla.opensuse.org/show_bug.cgi?id=996919#c2 Ondřej Súkup <osukup(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |osukup(a)suse.com Resolution|--- |INVALID --- Comment #2 from Ondřej Súkup <osukup(a)suse.com> --- Xmonad is rather library for writing own WM than simple WM .. so whithout your config isn't possible locate problem. Default config work without any problem for both browsers. For help with configuring xmonad I recommend channel #xmonad on irc.freenode.net -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 987638] New: unable to lock screen in gnome
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.opensuse.org/show_bug.cgi?id=987638 Bug ID: 987638 Summary: unable to lock screen in gnome Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: x86-64 OS: openSUSE 42.1 Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: bnc-team-gnome(a)forge.provo.novell.com Reporter: chrismaes87(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I'm unable to lock my screen. I tried changing the shortcut (does not work, while all other shortcuts work). I also activated "automatic screen lock" after 30 seconds; but my screen never gets locked. I've got no idea where to look for error messages... I'd happily provide debug info if necessary. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 996032] openSUSE Tumbleweed 20160826: Chromium crashes systematically when loading certain web pages
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.suse.com/show_bug.cgi?id=996032 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:5568:important |obs:running:5568:important | |obs:running:5579:important -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 995932] Chromium 52 crashes when trying to open page
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.suse.com/show_bug.cgi?id=995932 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:5568:important |obs:running:5568:important | |obs:running:5579:important -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 888137] missing cinnamon-settings modules in cinnamon 2.3.0 from cinnamon repo
by bugzilla_noreply＠novell.com 02 Sep '16

02 Sep '16

http://bugzilla.opensuse.org/show_bug.cgi?id=888137 http://bugzilla.opensuse.org/show_bug.cgi?id=888137#c4 Alexei Sorokin <sor.alexei(a)meowr.ru> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED --- Comment #4 from Alexei Sorokin <sor.alexei(a)meowr.ru> --- Does not appear to be anymore. -- You are receiving this mail because: You are on the CC list for the bug.

1 0