May 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1171039] VUL-0: CVE-2020-12626: roundcubemail: CSRF attack may lead to logging out an authenticated user
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1171039 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|security-team(a)suse.de |aj(a)ajaissle.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171039] New: VUL-0: CVE-2020-12626: roundcubemail: CSRF attack may lead to logging out an authenticated user
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1171039 Bug ID: 1171039 Summary: VUL-0: CVE-2020-12626: roundcubemail: CSRF attack may lead to logging out an authenticated user Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/258957/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-12626 An issue was discovered in Roundcube Webmail before 1.4.4. A CSRF attack can cause an authenticated user to be logged out because POST was not considered. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-12626 https://github.com/roundcube/roundcubemail/pull/7302 https://github.com/roundcube/roundcubemail/commit/9bbda422ff0b782b81de59c86… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12626 https://github.com/roundcube/roundcubemail/releases/tag/1.4.4 https://github.com/roundcube/roundcubemail/compare/1.4.3...1.4.4 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1157615] New: Virtualization:Appliances:Images:openSUSE-Leap-15.1/kiwi-images-vagrant: Bug
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1157615 Bug ID: 1157615 Summary: Virtualization:Appliances:Images:openSUSE-Leap-15.1/ki wi-images-vagrant: Bug Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: 64bit OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: BuildService Assignee: dcermak(a)suse.com Reporter: mike(a)mykolab.ch QA Contact: adrian(a)suse.com Found By: --- Blocker: --- Created attachment 824833 --> http://bugzilla.opensuse.org/attachment.cgi?id=824833&action=edit Shows the running box + pavucontrol window. compar PV device desc + VBox machien name Whenever I run the container it requests the use of the microphone on the laptop. No other virtual machine does that. This has been tested on 3 occasions several weeks apart with 3 different downloads. ### Steps to reproduce: 1) download https://build.opensuse.org/package/binary/download/Virtualization:Appliance… 2) do vagrant box add <name> <filename. 3) do vagrant init <name> 4) vagrant up --provider=virtualbox 5) wait for setup to finish ### Expected behaviour: Microphone is not used ### Observed behaviour: The the machine uses the host's microphone ### The host system: OS: openSUSE Tumbleweed x86_64 Host: Kratos EL04R4L Kernel: 5.3.11-1-default Uptime: 1 hour, 25 mins Packages: 2898 (rpm), 11 (flatpak), 9 (snap) Shell: zsh 5.7.1 Resolution: 1920x1080, 1440x900 DE: Plasma WM: KWin Theme: Breeze [GTK2/3] Icons: breeze [GTK2/3] Terminal: konsole CPU: Intel i7-8750H (12) @ 4.100GHz GPU: NVIDIA GeForce MX150 GPU: Intel UHD Graphics 630 Memory: 4200MiB / 31832MiB I hope that this helps, please contact me on mike at mykolab dot ch to get if I can be of any help. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1110339] xine-lib xine-list-1.2 randomly missing entries
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.novell.com/show_bug.cgi?id=1110339 http://bugzilla.novell.com/show_bug.cgi?id=1110339#c5 Dave Plater <davejplater(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #5 from Dave Plater <davejplater(a)gmail.com> --- Sorry I forgot about this bug. I think it's resolved. I had libxine2-1.2.9 installed and made 3 files from xine-list and then updated to current 1.2.10 then made another 3 xine-list files. The 1.2.9 files were all identical as were the 1.2.10 ones and as might have been expected the 1.2.9 and 1.2.10 files differed. Judging by the bug's last modified date this bug was against 1.2.9. The plugin abi looks like it has changed to 2.8 Is this fixed, reopen if it's not -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171009] bleachbit update for Leap 15.2
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1171009 http://bugzilla.suse.com/show_bug.cgi?id=1171009#c4 --- Comment #4 from Michael Vetter <mvetter(a)suse.com> --- Review SR#799724 accepted. Thanks Andreas! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1161705] Swap Partition and EFI Partition don't get mounted automatically after boot
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1161705 http://bugzilla.suse.com/show_bug.cgi?id=1161705#c7 Franck Bui <fbui(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |NORESPONSE --- Comment #7 from Franck Bui <fbui(a)suse.com> --- It looks like OP is no more interested in the resolution of this bug. If that is incorrect please re-open the bug after making sure to answer the info requested in comment #6 but for the time being I'll close it. Hope that makes sense. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1078466] systemd: duplicated entries in tmpfiles.d
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1078466 http://bugzilla.suse.com/show_bug.cgi?id=1078466#c45 Franck Bui <fbui(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED --- Comment #45 from Franck Bui <fbui(a)suse.com> --- (In reply to Franck Bui from comment #42) > I'm about to drop from systemd package: etc.conf, home.conf, legacy.conf, > tmp.conf, var.conf. > This is eventually done and landed in Factory. The packages shipping generic paths are now fully responsible of their creation (which includes the init of their permissions). Closing. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1143132] projectM makes clementine's visualizations a memory hog
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.novell.com/show_bug.cgi?id=1143132 http://bugzilla.novell.com/show_bug.cgi?id=1143132#c7 Dave Plater <davejplater(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #7 from Dave Plater <davejplater(a)gmail.com> --- This is resolved upstream: https://github.com/projectM-visualizer/projectm/issues/233 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1166404] Pan not able to post to any newsgroups
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.novell.com/show_bug.cgi?id=1166404 http://bugzilla.novell.com/show_bug.cgi?id=1166404#c5 --- Comment #5 from Jason Evans <jason.evans(a)suse.com> --- (In reply to Atri Bhattacharya from comment #4) > (In reply to Atri Bhattacharya from comment #3) > > I'll follow the upstream bug and add a patch when the come up with a > > when *they* come up with... Since it's already fixed in the TW version, hopefully it's just a matter of backporting the fix. I have not tried it in 15.2 beta yet, but I can do that later today. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1170146] systemd: /usr/share/factory/etc contains inconsistent data
by bugzilla_noreply＠novell.com 04 May '20

04 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1170146 http://bugzilla.suse.com/show_bug.cgi?id=1170146#c5 Franck Bui <fbui(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #5 from Franck Bui <fbui(a)suse.com> --- (In reply to Ludwig Nussel from comment #0) > I'd suggest to simply not ship those files in the systemd package but leave > the decision to use the mechanism to the individual packages that actually > consume those configs (like glibc or pam). Done and let individual packages choose the content of the files used by the factory-reset mechanism (as well as the associated tmpfiles config files). Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 0