July 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1172731] VUL-0: CVE-2020-8024: hylafax+: Problematic permissions allow escalation from uucp to other users
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1172731 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/260969/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172731] VUL-0: CVE-2020-8024: hylafax+: Problematic permissions allow escalation from uucp to other users
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

1 0

[Bug 1173712] $releasever in add_on_repositories.xml does not work
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173712 José Iván López González <jlopez(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED URL| |https://trello.com/c/6Tc5Fu | |oc Assignee|yast2-maintainers(a)suse.de |yast-internal(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173712] $releasever in add_on_repositories.xml does not work
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173712 https://bugzilla.suse.com/show_bug.cgi?id=1173712#c1 José Iván López González <jlopez(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jlopez(a)suse.com --- Comment #1 from José Iván López González <jlopez(a)suse.com> --- Tracking in trello. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173709] Emulators:Wine/wine: wine-5.11 not installable on Leap 15.1
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173709 https://bugzilla.suse.com/show_bug.cgi?id=1173709#c2 --- Comment #2 from Marcus Meissner <meissner(a)suse.com> --- (i released ocl-icd and opencl-headers to 15.1 update, but just not for i586 ... will do so now.) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171883] VUL-0: pcp: outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issues
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1171883 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|SUSE Security Internal, | |novellonly | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173709] Emulators:Wine/wine: wine-5.11 not installable on Leap 15.1
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173709 https://bugzilla.suse.com/show_bug.cgi?id=1173709#c1 --- Comment #1 from Marcus Meissner <meissner(a)suse.com> --- yeah, i will fix this. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173402] Kernel delays boot by 12s if ip= option given
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173402 https://bugzilla.suse.com/show_bug.cgi?id=1173402#c12 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(fvogt(a)suse.com) | --- Comment #12 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Thomas Blume from comment #11) > Can you please give the dracut package at: > > https://build.opensuse.org/package/binaries/home:tsaupe:branches:openSUSE: > Factory:dracut-bsc1173402/dracut/openSUSE_Factory > > a try? Works! Looking at this again, this is quite the mess... AFAICT, touching the did-setup file after a successful "do_dhcp" is generally the right way. This is currently not done, which lead to https://github.com/tblume/dracut/commit/0b998beebc008f2dda2eed8a36d59f4a258… adding another path to create did-setup. This new path was broken by https://github.com/tblume/dracut/commit/28be2f3692d6a641c841f636c03e45c5f3c…, which you now fixed with https://github.com/tblume/dracut/commit/487fb167b82c88871e6d1ace21ccdb0a48e…. What should be done IMO: - Touch did-setup in the "# No ip lines default to dhcp" case after successful do_dhcp - Touch did-setup in the "# no ip option directed at our interface?" case after successful do_dhcp 0b998beebc008f2dda2eed8a36d59f4a258cb27a introduced the code to handle the latter, but: - It also runs in cases where the do_dhcp in this block wasn't actually run (like in this bug report) - The $? it checks is meaningless at this point due to the ifs In the "rd.neednet=1 bootdev=eth0" case it actually runs do_dhcp twice for the interface, as both "# No ip ..." blocks apply. Maybe those blocks should be merged? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1165502] systemd warnings: Failed to create session: Start job for unit user-0.slice failed with 'canceled'
by bugzilla_noreply＠suse.com 06 Jul '20

06 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1165502 https://bugzilla.suse.com/show_bug.cgi?id=1165502#c36 Archie Cobbs <archie.cobbs(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(archie.cobbs@gmai | |l.com) | --- Comment #36 from Archie Cobbs <archie.cobbs(a)gmail.com> --- (In reply to Franck Bui from comment #35) > I'll integrate the fix in the next MU probably. If you still run the test > package including the fix, can you just tell me if you notice anything ? Hi Franck, I have not been running the test package since back in April, so I can't comment on that. On a side note, do you think anyone is going to take a look at this issue? https://bugzilla.suse.com/show_bug.cgi?id=1167576 Thanks. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171177] New: security enhancement: don't enable ssh daemon by default
by bugzilla_noreply＠novell.com 06 Jul '20

06 Jul '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1171177 Bug ID: 1171177 Summary: security enhancement: don't enable ssh daemon by default Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: MicroOS Assignee: kubic-bugs(a)opensuse.org Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- MicroOS enables sshd by default ie exposes an open port by default. That violates best practice of the main product to not expose such services by default. YaST in the main product offers a convenient way to optionally enable ssh in the installation summary screen that could be used for MicroOS as well. In the appliance case openssh on by default is not very useful anyways as the appliance needs to be configured via ignition to have a password or key in the first place. So ignition could also enable the ssh service if needed. -- You are receiving this mail because: You are on the CC list for the bug.

2 2