October 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1099755] New: /etc/hosts.allow /etc/hosts.deny not support ssh
by bugzilla_noreply＠novell.com 01 Dec '21

01 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1099755 Bug ID: 1099755 Summary: /etc/hosts.allow /etc/hosts.deny not support ssh Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: simon(a)becherer.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- wrong security feeling, because text of file /etc/hosts.allow is wrong. written is: # /etc/hosts.allow # See 'man tcpd' and 'man 5 hosts_access' for a detailed description # of /etc/hosts.allow and /etc/hosts.deny. # # short overview about daemons and servers that are built with # tcp_wrappers support: #. # package name | daemon path | token # ---------------------------------------------------------------------------- # ssh, openssh | /usr/sbin/sshd | sshd, sshd-fwd-x11, sshd-fwd-<port> # quota | /usr/sbin/rpc.rquotad | rquotad # tftpd | /usr/sbin/in.tftpd | in.tftpd # portmap | /sbin/portmap | portmap at least toke sshd to allow and deny will not work any more on actual systems (tumbleweed). (maybe others tokens also affected) so user (as i) with low background knowlidge will feel secure if they make settings like: sshd : ALL : deny sshd : 127.0.0.1 : allow sshd : 192.168.0.30 : allow but the system ignores this. -> leading text and maybe manpage has to be changed! -> or if this 2 files host.allow / hosts.deny ar complete obsolete, do not install it at all. -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1154134] New: Remote desktop access using xrdp/xfreerdp crashes when the clipboard is used
by bugzilla_noreply＠novell.com 01 Dec '21

01 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1154134 Bug ID: 1154134 Summary: Remote desktop access using xrdp/xfreerdp crashes when the clipboard is used Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: suChenshaw(a)talisiorder.ca QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When connecting two computers, both running Leap, via RDP using xrdp/xorgxrdp (server) and freerdp (client), the remote connection will terminate if anything is copied to the clipboard inside the RDP session. Steps to replicate: 1. Install Leap on two separate computers, or VMs, joined with network connectivity. In my environment I have the minimal graphical install (Icewm) on the server and KDE on the client. I do not know if changing the server desktop environment would have any impact. 2. Install and configure xrdp and xorgxrdp on the server. 3. Install xfreerdp on the client. 4. From the client, connect to the server by executing: xfreerdp /v:<ip address> /u:<username> /size:1600x900 /bpp:32 /relax-order-checks +glyph-cache The parameters /relax-order-checks and +glyph-cache are necessary to work around known incompatibilities between xrdp and xfreerdp. 5. Working with the server through the RDP session, copy any text into the clipboard. I have copied text using xterm, Sakura and gedit, all with equal results. 6. The RDP session will terminate. On the client, xfreerdp will show the following errors: [20:02:38:767] [58978:58984] [ERROR][com.freerdp.channels.cliprdr.client] - Invalid short format list length: 24 [20:02:38:767] [58978:58984] [ERROR][com.freerdp.channels.cliprdr.client] - cliprdr_process_format_list failed with error 1359! [20:02:38:767] [58978:58984] [ERROR][com.freerdp.channels.cliprdr.client] - cliprdr_order_recv failed with error 1359! [20:02:38:767] [58978:58979] [ERROR][com.freerdp.core] - cliprdr_virtual_channel_client_thread reported an error. Error was 1359 [20:02:38:767] [58978:58979] [ERROR][com.freerdp.core] - checkChannelErrorEvent() failed - 0 [20:02:38:767] [58978:58979] [INFO][com.freerdp.client.common] - Network disconnect! [20:02:38:767] [58978:58979] [ERROR][com.freerdp.client.x11] - Failed to check FreeRDP file descriptor Observations: Clipboard access when connecting to the (Leap) xrdp server using a Windows client running MSTSC works correctly. Clipboard access when connecting to a xrdp server running Kubuntu 18.04 LTS works correctly with Leap's xfreerdp. It's unclear if this is a bug in xrdp or xfreerdp. Workaround: Disable clipboard sharing. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1146440] New: iputils-s20190709: arping -D is broken
by bugzilla_noreply＠novell.com 30 Nov '21

30 Nov '21

http://bugzilla.suse.com/show_bug.cgi?id=1146440 Bug ID: 1146440 Summary: iputils-s20190709: arping -D is broken Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin.wilck(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Duplicate address detection mode (DAD) is broken in arping. In DAD mode, if no responses are received, it should return 0. But: apollon:~ # arping -D -c 2 192.168.1.19; echo RESULT=$? ARPING 192.168.1.19 from 0.0.0.0 obr0 Sent 2 probes (2 broadcast(s)) Received 0 response(s) RESULT=1 This may break DHCP client scripts. -- You are receiving this mail because: You are on the CC list for the bug.

2 7

[Bug 1087860] New: wine repeatedly asks to install wine-mono even though the package wine-mono was installed
by bugzilla_noreply＠novell.com 29 Nov '21

29 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1087860 Bug ID: 1087860 Summary: wine repeatedly asks to install wine-mono even though the package wine-mono was installed Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other URL: http://lord.arch/tests/737/modules/wine/steps/26 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: meissner(a)suse.com Reporter: okurz(a)suse.com QA Contact: okurz(a)suse.com Found By: --- Blocker: --- ## Observation After installing packages "wine" and "wine-mono" explicitly on openSUSE Leap build 184.1 and calling wine on even a trivial Windows program a dialog pops up to download and install a "wine-mono" package which should be there already. This can now also be reproduced in an openQA test: scenario opensuse-15.0-DVD-x86_64-wine@64bit in [wine](http://lord.arch.suse.de/tests/737/modules/wine/steps/26) ## Reproducible Every time on a clean installation of wine on openSUSE Leap 15.0 and I think just the same on openSUSE Tumbleweed. Might also be on openSUSE Leap 42.3 but I am not sure about this. ## Expected result There should be no question for wine-mono installation if the system package is alread installed OR a better description of the system package describing what it is actually used for. I think the problem is that even if someone would answer "yes" to the question to install the internal (non-openSUSE) wine-mono package the next time the question pops up again but I'm not 100% sure on this. ## Further details Always latest result in this scenario: [latest](http://lord.arch/tests/latest?arch=x86_64&test=wine&machine=64bit&flavor=DVD&version=15.0&distri=opensuse) -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 1095670] New: Problem with suid pgms on Leap-15.0
by bugzilla_noreply＠novell.com 24 Nov '21

24 Nov '21

http://bugzilla.suse.com/show_bug.cgi?id=1095670 Bug ID: 1095670 Summary: Problem with suid pgms on Leap-15.0 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: dmarkh(a)cfl.rr.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I am upgrading an older SuSE-13.2 box to Leap. I have done a fresh Leap-15.0 install and ported over the source code that we ran on the 13.2 box. It builds fine but I am having an issue. The program is/has to be an suid pgm. It also uses fork/execvpe/wait to execute some external scripts. And that is where my problem lies. The user is a member of several groups but these group memberships seem to disappear when these external scripts are executed. For instance the user is a member of the cdrom group so he can eject and work with a DVD. I have created a simple example script and source for a pgm that execvpe's that script which shows my problem. test.sh script: #!/bin/sh whoami id test.c pgm source: #define _GNU_SOURCE #include <unistd.h> #include <stdio.h> #include <stdlib.h> #include <string.h> int main() { char *path = getenv("PATH"); char pathenv[strlen(path) + sizeof("PATH=")]; sprintf(pathenv, "PATH=%s", path); char *envp[] = {pathenv, NULL}; char *tests[] = {"./test.sh", NULL}; execvpe(tests[0], tests, envp); } #cc test.c #/a.out markh uid=5076(markh) gid=100(users) groups=100(users),19(floppy),200(lcrs),484(tape),485(lp),488(disk),489(dialout),490(cdrom) Then as root: #chown root ./a.out #chgrp root ./a.out #chmod +s ./a.out Then as user #./a.out markh uid=5076(markh) gid=100(users) groups=100(users) Once the pgm is owned by root and suid, I lose all my group memberships for some unknown reason. It is not proper to me. This all works fine on 13.2 but does not on Leap 15 or Leap 42.3. Is there some security setting somewhere that broke this? -- You are receiving this mail because: You are on the CC list for the bug.

2 19

[Bug 1139098] New: VUL-0: CVE-2018-18838: netdata: Log Injection
by bugzilla_noreply＠novell.com 24 Nov '21

24 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1139098 Bug ID: 1139098 Summary: VUL-0: CVE-2018-18838: netdata: Log Injection Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/235366/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2018-18838 An issue was discovered in Netdata 1.10.0. Log Injection (or Log Forgery) exists via a %0a sequence in the url parameter to api/v1/registry. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18838 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-18838.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18838 https://www.red4sec.com/cve/netdata_log_injection.txt https://github.com/netdata/netdata/commit/92327c9ec211bd1616315abcb255861b1… https://github.com/netdata/netdata/pull/4521 -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 1139095] New: VUL-0: CVE-2018-18837: netdata: HTTP Header Injection
by bugzilla_noreply＠novell.com 24 Nov '21

24 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1139095 Bug ID: 1139095 Summary: VUL-0: CVE-2018-18837: netdata: HTTP Header Injection Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/235365/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2018-18837 An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18837 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-18837.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18837 https://www.red4sec.com/cve/netdata_header_injection.txt https://github.com/netdata/netdata/pull/4521 https://github.com/netdata/netdata/commit/92327c9ec211bd1616315abcb255861b1… https://github.com/netdata/netdata/blob/798c141c49ee85bddc8f48f25d2cb593ec9… -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1139094] New: VUL-0: CVE-2018-18836: netdata: JSON injection
by bugzilla_noreply＠novell.com 24 Nov '21

24 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1139094 Bug ID: 1139094 Summary: VUL-0: CVE-2018-18836: netdata: JSON injection Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/235364/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2018-18836 An issue was discovered in Netdata 1.10.0. JSON injection exists via the api/v1/data tqx parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-18836 http://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-18836.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18836 https://github.com/netdata/netdata/blob/798c141c49ee85bddc8f48f25d2cb593ec9… https://github.com/netdata/netdata/commit/92327c9ec211bd1616315abcb255861b1… https://github.com/netdata/netdata/pull/4521 https://www.red4sec.com/cve/netdata_json_injection.txt https://github.com/netdata/netdata/blob/798c141c49ee85bddc8f48f25d2cb593ec9… -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1153687] New: Zypper repo name detection broken
by bugzilla_noreply＠novell.com 24 Nov '21

24 Nov '21

http://bugzilla.suse.com/show_bug.cgi?id=1153687 Bug ID: 1153687 Summary: Zypper repo name detection broken Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kubic Assignee: kubic-bugs(a)opensuse.org Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- zypper ar obs://some:where/ results in a URL such as https://download.opensuse.org/repositories/some:/where/openSUSE-MicroOS-201… -- You are receiving this mail because: You are on the CC list for the bug.

2 17

[Bug 929755] New: shutter is missing perl(Gnome2) in Tumbleweed
by bugzilla_noreply＠novell.com 21 Nov '21

21 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=929755 Bug ID: 929755 Summary: shutter is missing perl(Gnome2) in Tumbleweed Classification: openSUSE Product: openSUSE Factory Version: 201503* Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: f_koch(a)gmx.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.101 Safari/537.36 Build Identifier: flo@linux-mvsa:~> sudo zypper in shutter Loading repository data... Reading installed packages... Resolving package dependencies... Problem: nothing provides perl(Gnome2) needed by shutter-0.93.1-1.1.noarch Solution 1: do not install shutter-0.93.1-1.1.noarch Solution 2: break shutter-0.93.1-1.1.noarch by ignoring some of its dependencies Choose from above solutions by number or cancel [1/2/c] (c): Reproducible: Always -- You are receiving this mail because: You are on the CC list for the bug.

2 12