March 2018 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1082778] VUL-0: CVE-2018-7435: freexl: heap-buffer-overflow in freexl::destroy_cell
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1082778 http://bugzilla.suse.com/show_bug.cgi?id=1082778#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0569-1: An update that fixes 5 vulnerabilities is now available. Category: security (important) Bug References: 1082774,1082775,1082776,1082777,1082778 CVE References: CVE-2018-7435,CVE-2018-7436,CVE-2018-7437,CVE-2018-7438,CVE-2018-7439 Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): freexl-1.0.5-8.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082777] VUL-0: CVE-2018-7436: freexl: heap-buffer-overflow in freexl.c:1805 parse_SST parse_SST
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1082777 http://bugzilla.suse.com/show_bug.cgi?id=1082777#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0569-1: An update that fixes 5 vulnerabilities is now available. Category: security (important) Bug References: 1082774,1082775,1082776,1082777,1082778 CVE References: CVE-2018-7435,CVE-2018-7436,CVE-2018-7437,CVE-2018-7438,CVE-2018-7439 Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): freexl-1.0.5-8.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082776] VUL-0: CVE-2018-7437: freexl: heap-buffer-overflow in freexl.c:1866 parse_SST
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1082776 http://bugzilla.suse.com/show_bug.cgi?id=1082776#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0569-1: An update that fixes 5 vulnerabilities is now available. Category: security (important) Bug References: 1082774,1082775,1082776,1082777,1082778 CVE References: CVE-2018-7435,CVE-2018-7436,CVE-2018-7437,CVE-2018-7438,CVE-2018-7439 Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): freexl-1.0.5-8.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082775] VUL-0: CVE-2018-7438: freexl: heap-buffer-overflow in freexl.c:383 parse_unicode_string
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1082775 http://bugzilla.suse.com/show_bug.cgi?id=1082775#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0569-1: An update that fixes 5 vulnerabilities is now available. Category: security (important) Bug References: 1082774,1082775,1082776,1082777,1082778 CVE References: CVE-2018-7435,CVE-2018-7436,CVE-2018-7437,CVE-2018-7438,CVE-2018-7439 Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): freexl-1.0.5-8.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1082774] VUL-0: CVE-2018-7439: freexl: heap-buffer-overflow in freexl.c:3912 read_mini_biff_next_record
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1082774 http://bugzilla.suse.com/show_bug.cgi?id=1082774#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2018:0569-1: An update that fixes 5 vulnerabilities is now available. Category: security (important) Bug References: 1082774,1082775,1082776,1082777,1082778 CVE References: CVE-2018-7435,CVE-2018-7436,CVE-2018-7437,CVE-2018-7438,CVE-2018-7439 Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): freexl-1.0.5-8.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1079672] NetworkManager does not automatically connect to WLAN anymore
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1079672 http://bugzilla.suse.com/show_bug.cgi?id=1079672#c23 --- Comment #23 from Frank Kruger <fkrueger(a)mailbox.org> --- (In reply to Fabian Vogt from comment #22) > (In reply to Frederic Crozat from comment #21) > > should be fixed with https://build.opensuse.org/request/show/580400 > > That patch is for a different bug - that the password is asked for twice > after saving a connection. > > I can't say for sure that it doesn't fix this as well though. I can confirm that this patch does not solve the issue. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 846914] 13.1 RC1 - when hibernating, the system requests root's password.
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.opensuse.org/show_bug.cgi?id=846914 http://bugzilla.opensuse.org/show_bug.cgi?id=846914#c27 --- Comment #27 from Carlos Robinson <carlos.e.r(a)opensuse.org> --- I partially reproduced the issue in 42.3. First I successfully hibernated by using the action buttons. On recover, then I intentionally logged in console as root, tried to hibernate again and it failed with no prompts or messages (desktop computer). <30>1 2018-03-01T13:55:40.458562+01:00 Telcontar xinetd 2312 - - START: nntp from=127.0.0.1 <30>1 2018-03-01T13:55:40.458915+01:00 Telcontar xinetd 2312 - - START: nntp from=127.0.0.1 <86>1 2018-03-01T13:55:40.720430+01:00 Telcontar login - - - pam_unix(login:session): session opened for user root by LOGIN(uid=0) <30>1 2018-03-01T13:55:40.742800+01:00 Telcontar systemd 1 - - Created slice User Slice of root. <30>1 2018-03-01T13:55:40.778105+01:00 Telcontar systemd 1 - - Starting User Manager for UID 0... <30>1 2018-03-01T13:55:40.780826+01:00 Telcontar systemd 1 - - Started Session 1235 of user root. <38>1 2018-03-01T13:55:40.781388+01:00 Telcontar systemd-logind 1753 - - New session 1235 of user root. <86>1 2018-03-01T13:55:40.789160+01:00 Telcontar systemd - - - pam_unix(systemd-user:session): session opened for user root by (uid=0) <30>1 2018-03-01T13:55:40.867403+01:00 Telcontar systemd 1 - - Started User Manager for UID 0. <30>1 2018-03-01T13:55:40.930737+01:00 Telcontar console-kit-daemon 5074 - - (process:22717): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed <85>1 2018-03-01T13:55:40.947803+01:00 Telcontar login - - - ROOT LOGIN ON tty1 Logged as root in console, then ctrl-alt-f7 <30>1 2018-03-01T13:55:41.515839+01:00 Telcontar xinetd 2312 - - EXIT: nntp status=0 duration=914(sec) <30>1 2018-03-01T13:55:41.533116+01:00 Telcontar xinetd 2312 - - EXIT: nntp status=0 duration=914(sec) <30>1 2018-03-01T13:55:42.959235+01:00 Telcontar console-kit-daemon 5074 - - (process:22774): GLib-CRITICAL **: g_slice_set_config: assertion 'sys_page_size == 0' failed <86>1 2018-03-01T13:56:01.232952+01:00 Telcontar cron 22824 - - pam_unix(crond:session): session opened for user news by (uid=0) <30>1 2018-03-01T13:56:01.259186+01:00 Telcontar systemd 1 - - Created slice User Slice of news. <30>1 2018-03-01T13:56:01.314026+01:00 Telcontar systemd 1 - - Starting User Manager for UID 9... <30>1 2018-03-01T13:56:01.316793+01:00 Telcontar systemd 1 - - Started Session 1236 of user news. <86>1 2018-03-01T13:56:01.318738+01:00 Telcontar systemd - - - pam_unix(systemd-user:session): session opened for user news by (uid=0) <30>1 2018-03-01T13:56:01.424978+01:00 Telcontar systemd 1 - - Started User Manager for UID 9. <86>1 2018-03-01T13:56:14.282389+01:00 Telcontar CRON 22824 - - pam_unix(crond:session): session closed for user news <30>1 2018-03-01T13:56:16.741122+01:00 Telcontar systemd 1 - - Stopping User Manager for UID 9... <86>1 2018-03-01T13:56:16.787246+01:00 Telcontar systemd - - - pam_unix(systemd-user:session): session closed for user news <30>1 2018-03-01T13:56:16.787897+01:00 Telcontar systemd 1 - - Stopped User Manager for UID 9. <30>1 2018-03-01T13:56:16.788877+01:00 Telcontar systemd 1 - - Removed slice User Slice of news. Request hibernation from action buttons <28>1 2018-03-01T13:56:29.532249+01:00 Telcontar systemd-sleep 21829 - - system-sleep terminated by signal ALRM. <30>1 2018-03-01T13:56:29.535824+01:00 Telcontar systemd 1 - - Started Hibernate. <30>1 2018-03-01T13:56:29.536033+01:00 Telcontar systemd 1 - - sleep.target: Unit not needed anymore. Stopping. <30>1 2018-03-01T13:56:29.536207+01:00 Telcontar systemd 1 - - Stopped target Sleep. <30>1 2018-03-01T13:56:29.536376+01:00 Telcontar systemd 1 - - Reached target Hibernate. <38>1 2018-03-01T13:56:29.537128+01:00 Telcontar systemd-logind 1753 - - Operation 'sleep' finished. <30>1 2018-03-01T13:56:29.537715+01:00 Telcontar systemd 1 - - hibernate.target: Unit is bound to inactive unit systemd-hibernate.service. Stopping, too. <30>1 2018-03-01T13:56:29.537895+01:00 Telcontar systemd 1 - - Stopped target Hibernate. <86>1 2018-03-01T13:56:36.665811+01:00 Telcontar unix2_chkpwd - - - gkr-pam: unlocked login keyring <22>1 2018-03-01T13:57:33.311035+01:00 Telcontar dovecot - - - imap-login: Login: user=<cer>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=23019, TLS, session=<3ws2Z1lm5qJ/AAAB> <86>1 2018-03-01T14:00:01.288602+01:00 Telcontar cron 23313 - - pam_unix(crond:session): session opened for user root by (uid=0) After a while with blank screen, I enter password on screensaver. I see no prompt or message saying why hibernation failed. Instead, I routinely hibernate by command line as root, to avoid such XFCE problems: #!/bin/bash date --rfc-3339=seconds systemctl hibernate sleep 3 xscreensaver-command -lock -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1036756] VUL-1: CVE-2017-9286: nextcloud package security issues
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1036756 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|novellonly | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1079672] NetworkManager does not automatically connect to WLAN anymore
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1079672 http://bugzilla.suse.com/show_bug.cgi?id=1079672#c22 --- Comment #22 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Frederic Crozat from comment #21) > should be fixed with https://build.opensuse.org/request/show/580400 That patch is for a different bug - that the password is asked for twice after saving a connection. I can't say for sure that it doesn't fix this as well though. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1079672] NetworkManager does not automatically connect to WLAN anymore
by bugzilla_noreply＠novell.com 01 Mar '18

01 Mar '18

http://bugzilla.suse.com/show_bug.cgi?id=1079672 http://bugzilla.suse.com/show_bug.cgi?id=1079672#c21 Frederic Crozat <fcrozat(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fcrozat(a)suse.com --- Comment #21 from Frederic Crozat <fcrozat(a)suse.com> --- should be fixed with https://build.opensuse.org/request/show/580400 -- You are receiving this mail because: You are on the CC list for the bug.

1 0