February 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1162774] New: VUL-1: CVE-2020-8121: nextcloud: A bug could expose more data in reshared link shares than intended by the sharer
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162774 Bug ID: 1162774 Summary: VUL-1: CVE-2020-8121: nextcloud: A bug could expose more data in reshared link shares than intended by the sharer Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/252435/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: ecsos(a)schirra.net Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-8121 A bug in Nextcloud Server 14.0.4 could expose more data in reshared link shares than intended by the sharer. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8121 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8121 https://hackerone.com/reports/452854 https://nextcloud.com/security/advisory/?id=NC-SA-2019-003 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1162772] New: VUL-1: CVE-2020-8122: nextcloud: missing check could give recipient the possibility to extend the expiration date of a share they received
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162772 Bug ID: 1162772 Summary: VUL-1: CVE-2020-8122: nextcloud: missing check could give recipient the possibility to extend the expiration date of a share they received Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/252436/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: ecsos(a)schirra.net Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-8122 A missing check in Nextcloud Server 14.0.3 could give recipient the possibility to extend the expiration date of a share they received. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8122 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8122 https://nextcloud.com/security/advisory/?id=NC-SA-2019-002 https://hackerone.com/reports/447494 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1162761] New: VUL-1: CVE-2019-15612: A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset.
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162761 Bug ID: 1162761 Summary: VUL-1: CVE-2019-15612: A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other URL: https://smash.suse.de/issue/252403/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: ecsos(a)schirra.net Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-15612 A bug in Nextcloud Server 15.0.2 causes pending 2FA logins to not be correctly expired when the password of the user is reset. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15612 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15612 https://nextcloud.com/security/advisory/?id=NC-SA-2020-001 https://hackerone.com/reports/486693 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1158873] [Build 536.2] openQA test fails in random places on GNOME - wayland session suddenly crashed(sporadic)
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1158873 http://bugzilla.suse.com/show_bug.cgi?id=1158873#c13 --- Comment #13 from Max Lin <mlin(a)suse.com> --- (In reply to Yifan Jiang from comment #12) > Hi Xiaoguang, > > It looks not that rarely happening these days. Would you help to have a > deeper trace on it? Thanks! Hi Yifan and Xiaoguang, we've just merged GNOME 3.34 to Leap 15.2(part of last published snapshot 563.1), I'm not sure will this issue still happen with GNOME 3.34, time will tell :) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162724] netcfg-11.6-5.1 breaks the system
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1162724 http://bugzilla.suse.com/show_bug.cgi?id=1162724#c1 Thorsten Kukuk <kukuk(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #1 from Thorsten Kukuk <kukuk(a)suse.com> --- Please check your /etc/*.rpm* files, especially /etc/nsswitch.conf.rpm* and merge your changes with the one from the distribution. Looks like you ignored that for the last 2 month. *** This bug has been marked as a duplicate of bug 1162666 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162666] /etc/services moved
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1162666 http://bugzilla.suse.com/show_bug.cgi?id=1162666#c7 Thorsten Kukuk <kukuk(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |comes(a)naic.edu --- Comment #7 from Thorsten Kukuk <kukuk(a)suse.com> --- *** Bug 1162724 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160408] open-vm-tools fails with -fno-common
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1160408 http://bugzilla.suse.com/show_bug.cgi?id=1160408#c5 --- Comment #5 from Martin Liška <martin.liska(a)suse.com> --- (In reply to Oliver Kurth from comment #4) > FWIW, in for gcc10 in Fedora we had to make these changes (not yet in our > code base): > https://src.fedoraproject.org/rpms/open-vm-tools/blob/master/f/gcc10-warning. > patch . You can test in the openSUSE:Factory:Staging:M staging project. I bet the patch will help with the issues, please add it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162759] New: grub can not boot windows 10
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162759 Bug ID: 1162759 Summary: grub can not boot windows 10 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Windows 10 Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: jsrain(a)suse.com Reporter: notepad2(a)live.cn QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- here is my disk list: when I use grub2-efi boot windows 10 it told me this: error:no such device:92C3-83AC ERror:file '/efi/Microsoft/Boot/bootmgfw.efi' not found. Press any key to continue... but if I boot windows 10 with motherboard efi chooser,then reboot with grub,the bootentry windows in grub2-efi works. /dev/nvme0n1p1 is my windows bootloader partition. I tried this: /dev/disk/by-uuid # ls 329fc2b6-d2ed-4c64-8aea-8b09c34c3eea 7663ac5f-ba35-45bb-a68c-f4c2e69d746d e77a3159-ebf6-41b4-8a02-0826aaec297e 386C088A6C0844DA 7a67ee15-5ae9-4fb7-8ae0-0474cfd49271 e9b7a17d-ff96-430b-9909-bd6cfc356b02 67E3-17ED 92C3-83AC FE20-83D4 6AE86C13E86BDC37 E04A4C204A4BF238 #blkid /dev/nvme0n1p1 /dev/nvme0n1p1: LABEL="EFI-500" UUID="92C3-83AC" TYPE="vfat" PARTLABEL="EFI system partition" PARTUUID="76e8c1df-bc3f-4ca0-813d-2a46616030d8" motherboard:asus prime b360 plus disk list: 1.nvme SSD 500G,windows on this disk with boot,gpt partition 2.intel SSD 240G,opensuse tw on this disk,gpt partition,part 1 is EFI,mounted to /efi/boot 3.seagate hdd drive 3TB,gpt partition doc disk. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1162435] lots of entries in vmware-vmsvc-root.log "[ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name;
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1162435 http://bugzilla.suse.com/show_bug.cgi?id=1162435#c6 --- Comment #6 from Michael Krapp <mkrapp(a)suse.com> --- Created attachment 829221 --> http://bugzilla.suse.com/attachment.cgi?id=829221&action=edit open-vm-tools 11 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162435] lots of entries in vmware-vmsvc-root.log "[ warning] [guestinfo] GuestInfoGetDiskDevice: Missing disk device name;
by bugzilla_noreply＠novell.com 05 Feb '20

05 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1162435 http://bugzilla.suse.com/show_bug.cgi?id=1162435#c5 --- Comment #5 from Michael Krapp <mkrapp(a)suse.com> --- Hi John, thanks for looking into this issue. I'm the engineer working with our customer. Here's the virtual disc controler: 47: PCI 10.0: 0100 SCSI storage controller [Created at pci.386] Unique ID: 37TO.741NuwlerHD SysFS ID: /devices/pci0000:00/0000:00:10.0 SysFS BusID: 0000:00:10.0 Hardware Class: storage Model: "VMware LSI Logic Parallel SCSI Controller" Vendor: pci 0x1000 "LSI Logic / Symbios Logic" Device: pci 0x0030 "53c1030 PCI-X Fusion-MPT Dual Ultra320 SCSI" SubVendor: pci 0x15ad "VMware, Inc." SubDevice: pci 0x1976 "LSI Logic Parallel SCSI Controller" Revision: 0x01 Driver: "mptspi" Driver Modules: "mptspi" I/O Ports: 0x1400-0x14ff (rw) Memory Range: 0xfeba0000-0xfebbffff (rw,non-prefetchable) Memory Range: 0xfebc0000-0xfebdffff (rw,non-prefetchable) Memory Range: 0xc0208000-0xc020bfff (ro,non-prefetchable,disabled) IRQ: 17 (12770600 events) Module Alias: "pci:v00001000d00000030sv000015ADsd00001976bc01sc00i00" Driver Info #0: Driver Status: mptspi is active Driver Activation Cmd: "modprobe mptspi" Config Status: cfg=no, avail=yes, need=no, active=unknown and here's the disk attached to it: 61: SCSI 00.0: 10600 Disk [Created at block.245] Unique ID: R7kM.BGTPw++Qg19 Parent ID: 37TO.741NuwlerHD SysFS ID: /class/block/sda SysFS BusID: 0:0:0:0 SysFS Device Link: /devices/pci0000:00/0000:00:10.0/host0/target0:0:0/0:0:0:0 Hardware Class: disk Model: "VMware Virtual disk" Vendor: "VMware" Device: "Virtual disk" Revision: "1.0" Driver: "mptspi", "sd" Driver Modules: "mptspi", "sd_mod" Device File: /dev/sda (/dev/sg0) Device Files: /dev/sda, /dev/disk/by-path/pci-0000:00:10.0-scsi-0:0:0:0 Device Number: block 8:0-8:15 (char 21:0) BIOS id: 0x82 Geometry (Logical): CHS 4177/255/63 Size: 67108864 sectors a 512 bytes Capacity: 32 GB (34359738368 bytes) Config Status: cfg=no, avail=yes, need=no, active=unknown Attached to: #47 (SCSI storage controller) just for clarification, we never tried VMwaretools, but only open-vm-tools and only the latest update in the SLES12SP4 channel shows this behaviour. I attached the versions we use as openvmtools11.zip Let me know if you need further information, please -- You are receiving this mail because: You are on the CC list for the bug.

1 0