November 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1178263] VUL-0: CVE-2020-27347: tmux: stack buffer overflow in input_csi_dispatch
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178263 http://bugzilla.opensuse.org/show_bug.cgi?id=1178263#c15 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #15 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- done (on it's way to Factory) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 356689] M1: define and implement interface to request set of build logs
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=356689 https://bugzilla.suse.com/show_bug.cgi?id=356689#c1 Adrian Schröter <adrian.schroeter(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FEATURE --- Comment #1 from Adrian Schröter <adrian.schroeter(a)suse.com> --- not needed anymore -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178311] Add nm-applet to basic distribution
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178311 https://bugzilla.suse.com/show_bug.cgi?id=1178311#c3 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fvogt(a)suse.com --- Comment #3 from Fabian Vogt <fvogt(a)suse.com> --- According to the skelcd, "generic desktop" has <network_manager>always</network_manager>. So it would indeed make sense to install a tool for configuring NM graphically. The system-wide icewm startup config could even have some logic to only start it if NM is active. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178497] Add Xfce system role to Yast Installer
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178497 https://bugzilla.suse.com/show_bug.cgi?id=1178497#c2 Stefan Schubert <schubi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |schubi(a)suse.com Assignee|yast2-maintainers(a)suse.de |lubos.kocman(a)suse.com --- Comment #2 from Stefan Schubert <schubi(a)suse.com> --- (In reply to Maurizio Galli from comment #0) > > I'm opening this tracker with the purpose of tracking the progress. > I believe it should be a similar entry as done in TW here: > https://github.com/yast/skelcd-control-openSUSE/blob/master/control/control. > openSUSE.xml#L364 guillaume_g (in IRC) has told me that there will be used a local fork for 15.3 in OBS. We do not have access to it. So Lubos, could you please take over to coordinate this ? Thanks ! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178096] [Build 20201023] pam_sh: userdel fails to remove home directory
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178096 https://bugzilla.suse.com/show_bug.cgi?id=1178096#c3 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE Flags|needinfo?(fvogt(a)suse.com) | --- Comment #3 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Dr. Werner Fink from comment #2) > (In reply to Fabian Vogt from comment #1) > > What happens is this: > > > > useradd -p asdflol tstpamunix_des > > ... > > + USRSKELDIR=/usr/etc/skel > > ++ ls -A /usr/etc/skel > > + for file in $(ls -A $USRSKELDIR) > > + test -e /home/tstpamunix_des/.config > > + cp -a /usr/etc/skel/.config /home/tstpamunix_des > > + chown -R tstpamunix_des.100 /home/tstpamunix_des/.config > > chown: cannot access '/home/tstpamunix_des/.config': No such file or > > directory > > > > Note that "-m" was not passed to useradd, so it did not create > > /home/tstpamunix_des. This means /usr/etc/skel/.config was copied to > > /home/tstpamunix_des, but not into that directory. > > > > This also explains why other users in the same test are not affected, those > > were created with the "-m" option. > > > > Reassinging to shadow and raising priority - useradd must not > > unconditionally create home directories. > > Ah ... is sounds like a dup of boo#1178296 ... please test with latest > version curently tested with SR#845486 I thought that would only fix the issue that the home location was wrong, but apparently not. With that installed, the tests pass. *** This bug has been marked as a duplicate of bug 1178296 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175006] VUL-1: CVE-2020-28241: libmaxminddb: use of uninitialized memory leading to heap-buffer-overflow in mmdblookup
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1175006 https://bugzilla.suse.com/show_bug.cgi?id=1175006#c5 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #5 from Robert Frohl <rfrohl(a)suse.com> --- released -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175006] VUL-1: CVE-2020-28241: libmaxminddb: use of uninitialized memory leading to heap-buffer-overflow in mmdblookup
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1175006 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/264918/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175006] VUL-1: CVE-2020-28241: libmaxminddb: use of uninitialized memory leading to heap-buffer-overflow in mmdblookup
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

1 0

[Bug 1178497] Add Xfce system role to Yast Installer
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178497 https://bugzilla.suse.com/show_bug.cgi?id=1178497#c1 Lubos Kocman <lubos.kocman(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lubos.kocman(a)suse.com --- Comment #1 from Lubos Kocman <lubos.kocman(a)suse.com> --- +1 from me, this has been pre-agreed in 15.2 and I can confirm that there is a big interest in Xfce based on the 15.2 retro. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178263] VUL-0: CVE-2020-27347: tmux: stack buffer overflow in input_csi_dispatch
by bugzilla_noreply＠suse.com 06 Nov '20

06 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178263 http://bugzilla.opensuse.org/show_bug.cgi?id=1178263#c14 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gber(a)opensuse.org, | |mimi.vx(a)gmail.com, | |nemysis(a)openSUSE.org --- Comment #14 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- https://build.opensuse.org/request/show/845163 still missing for Tumbleweed, no action from the maintainers. -- You are receiving this mail because: You are on the CC list for the bug.

1 0