August 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1173227] systemd: inconsistent file modes for files created at runtime
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

https://bugzilla.suse.com/show_bug.cgi?id=1173227 https://bugzilla.suse.com/show_bug.cgi?id=1173227#c12 --- Comment #12 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:1143-1: An update that has 9 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1157315,1162698,1164538,1169488,1171145,1172072,1173227,1173229,1173422 CVE References: JIRA References: Sources used: openSUSE Leap 15.2 (src): systemd-234-lp152.31.4.1, systemd-mini-234-lp152.31.4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172072] systemd considers suspend to fail, despite seeming to work fine
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

https://bugzilla.suse.com/show_bug.cgi?id=1172072 https://bugzilla.suse.com/show_bug.cgi?id=1172072#c8 --- Comment #8 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:1143-1: An update that has 9 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1157315,1162698,1164538,1169488,1171145,1172072,1173227,1173229,1173422 CVE References: JIRA References: Sources used: openSUSE Leap 15.2 (src): systemd-234-lp152.31.4.1, systemd-mini-234-lp152.31.4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171145] New: systemd-tmpfiles: don't abort when xattr lines have no valid assignment
by bugzilla_noreply＠novell.com 03 Aug '20

03 Aug '20

http://bugzilla.suse.com/show_bug.cgi?id=1171145 Bug ID: 1171145 Summary: systemd-tmpfiles: don't abort when xattr lines have no valid assignment Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: fbui(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Upstream report: https://github.com/systemd/systemd/issues/15610 -- You are receiving this mail because: You are on the CC list for the bug.

2 9

[Bug 1174850] VUL-1: cacti: Improper escaping of error message leads to XSS during template import preview
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

https://bugzilla.suse.com/show_bug.cgi?id=1174850 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1174656] update-alternatives has no options for cc or ld
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1174656 http://bugzilla.opensuse.org/show_bug.cgi?id=1174656#c7 Aaron Puchert <aaronpuchert(a)alice-dsl.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #7 from Aaron Puchert <aaronpuchert(a)alice-dsl.net> --- Fix landed in Factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173090] New: VUL-1: CVE-2020-14295: cacti: SQL injection issue in color.php allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1173090 Bug ID: 1173090 Summary: VUL-1: CVE-2020-14295: cacti: SQL injection issue in color.php allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/261720/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: Andreas.Stieger(a)gmx.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-14295 A SQL injection issue in color.php in Cacti 1.2.12 allows an admin to inject SQL via the filter parameter. This can lead to remote command execution because the product accepts stacked queries. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-14295 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14295 https://github.com/Cacti/cacti/issues/3622 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1174582] VUL-0: chromium: update to 84.0.4147.105
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1174582 http://bugzilla.opensuse.org/show_bug.cgi?id=1174582#c1 Andreas Stieger <Andreas.Stieger(a)gmx.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS CC| |Andreas.Stieger(a)gmx.de, | |tchvatal(a)suse.com Assignee|tchvatal(a)suse.com |security-team(a)suse.de --- Comment #1 from Andreas Stieger <Andreas.Stieger(a)gmx.de> --- https://build.opensuse.org/request/show/824211 https://build.opensuse.org/request/show/824214 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171904] kvm is applying L1TF mitigations on AMD EPYC CPUs
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

https://bugzilla.suse.com/show_bug.cgi?id=1171904 https://bugzilla.suse.com/show_bug.cgi?id=1171904#c29 --- Comment #29 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:2107-1: An update that solves 16 vulnerabilities and has 82 fixes is now available. Category: security (important) Bug References: 1051510,1065729,1071995,1085030,1111666,1112178,1113956,1114279,1144333,1148868,1150660,1151927,1152107,1152624,1158983,1159058,1161016,1162002,1162063,1163309,1166985,1167104,1168081,1168959,1169194,1169514,1169771,1169795,1170011,1170442,1170592,1170617,1170618,1171124,1171424,1171529,1171530,1171558,1171732,1171739,1171743,1171753,1171759,1171835,1171841,1171868,1171904,1172247,1172257,1172344,1172458,1172484,1172537,1172538,1172687,1172719,1172759,1172775,1172781,1172782,1172783,1172871,1172872,1172999,1173060,1173074,1173146,1173265,1173280,1173284,1173428,1173514,1173567,1173573,1173659,1173746,1173818,1173820,1173825,1173826,1173833,1173838,1173839,1173845,1173857,1174113,1174115,1174122,1174123,1174186,1174187,1174296,1174343,1174356,1174409,1174438,1174462,1174543 CVE References: CVE-2019-16746,CVE-2019-20810,CVE-2019-20908,CVE-2020-0305,CVE-2020-10766,CVE-2020-10767,CVE-2020-10768,CVE-2020-10769,CVE-2020-10773,CVE-2020-10781,CVE-2020-12771,CVE-2020-12888,CVE-2020-13974,CVE-2020-14416,CVE-2020-15393,CVE-2020-15780 JIRA References: Sources used: SUSE Linux Enterprise Workstation Extension 15-SP1 (src): kernel-default-4.12.14-197.48.1 SUSE Linux Enterprise Module for Live Patching 15-SP1 (src): kernel-default-4.12.14-197.48.1, kernel-livepatch-SLE15-SP1_Update_13-1-3.3.1 SUSE Linux Enterprise Module for Legacy Software 15-SP1 (src): kernel-default-4.12.14-197.48.1 SUSE Linux Enterprise Module for Development Tools 15-SP1 (src): kernel-docs-4.12.14-197.48.1, kernel-obs-build-4.12.14-197.48.1, kernel-source-4.12.14-197.48.1, kernel-syms-4.12.14-197.48.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): kernel-default-4.12.14-197.48.1, kernel-source-4.12.14-197.48.1, kernel-zfcpdump-4.12.14-197.48.1 SUSE Linux Enterprise High Availability 15-SP1 (src): kernel-default-4.12.14-197.48.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1169771] Bug in install-brcmfmac.sh [pkg bcm43xx-firmware]
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

https://bugzilla.suse.com/show_bug.cgi?id=1169771 https://bugzilla.suse.com/show_bug.cgi?id=1169771#c27 --- Comment #27 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:2107-1: An update that solves 16 vulnerabilities and has 82 fixes is now available. Category: security (important) Bug References: 1051510,1065729,1071995,1085030,1111666,1112178,1113956,1114279,1144333,1148868,1150660,1151927,1152107,1152624,1158983,1159058,1161016,1162002,1162063,1163309,1166985,1167104,1168081,1168959,1169194,1169514,1169771,1169795,1170011,1170442,1170592,1170617,1170618,1171124,1171424,1171529,1171530,1171558,1171732,1171739,1171743,1171753,1171759,1171835,1171841,1171868,1171904,1172247,1172257,1172344,1172458,1172484,1172537,1172538,1172687,1172719,1172759,1172775,1172781,1172782,1172783,1172871,1172872,1172999,1173060,1173074,1173146,1173265,1173280,1173284,1173428,1173514,1173567,1173573,1173659,1173746,1173818,1173820,1173825,1173826,1173833,1173838,1173839,1173845,1173857,1174113,1174115,1174122,1174123,1174186,1174187,1174296,1174343,1174356,1174409,1174438,1174462,1174543 CVE References: CVE-2019-16746,CVE-2019-20810,CVE-2019-20908,CVE-2020-0305,CVE-2020-10766,CVE-2020-10767,CVE-2020-10768,CVE-2020-10769,CVE-2020-10773,CVE-2020-10781,CVE-2020-12771,CVE-2020-12888,CVE-2020-13974,CVE-2020-14416,CVE-2020-15393,CVE-2020-15780 JIRA References: Sources used: SUSE Linux Enterprise Workstation Extension 15-SP1 (src): kernel-default-4.12.14-197.48.1 SUSE Linux Enterprise Module for Live Patching 15-SP1 (src): kernel-default-4.12.14-197.48.1, kernel-livepatch-SLE15-SP1_Update_13-1-3.3.1 SUSE Linux Enterprise Module for Legacy Software 15-SP1 (src): kernel-default-4.12.14-197.48.1 SUSE Linux Enterprise Module for Development Tools 15-SP1 (src): kernel-docs-4.12.14-197.48.1, kernel-obs-build-4.12.14-197.48.1, kernel-source-4.12.14-197.48.1, kernel-syms-4.12.14-197.48.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): kernel-default-4.12.14-197.48.1, kernel-source-4.12.14-197.48.1, kernel-zfcpdump-4.12.14-197.48.1 SUSE Linux Enterprise High Availability 15-SP1 (src): kernel-default-4.12.14-197.48.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173860] kernel-5.3.18-lp152.20.7.1 crash at boot in case LVM Raid is used
by bugzilla_noreply＠suse.com 03 Aug '20

03 Aug '20

https://bugzilla.suse.com/show_bug.cgi?id=1173860 https://bugzilla.suse.com/show_bug.cgi?id=1173860#c62 --- Comment #62 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2020:2105-1: An update that solves 22 vulnerabilities and has 193 fixes is now available. Category: security (important) Bug References: 1058115,1065729,1071995,1085030,1148868,1152472,1152489,1153274,1154353,1154492,1155518,1155798,1156395,1157169,1158050,1158242,1158265,1158748,1158765,1158983,1159781,1159867,1160947,1161495,1162002,1162063,1162400,1162702,1164648,1164777,1164780,1165211,1165933,1165975,1166985,1167104,1167651,1167773,1168230,1168779,1168838,1168959,1169021,1169094,1169194,1169514,1169681,1169771,1170011,1170284,1170442,1170617,1170774,1170879,1170891,1170895,1171150,1171189,1171191,1171219,1171220,1171246,1171417,1171513,1171529,1171530,1171662,1171688,1171699,1171732,1171739,1171743,1171759,1171828,1171857,1171868,1171904,1171915,1171982,1171983,1171988,1172017,1172046,1172061,1172062,1172063,1172064,1172065,1172066,1172067,1172068,1172069,1172073,1172086,1172095,1172169,1172170,1172201,1172208,1172223,1172342,1172343,1172344,1172365,1172366,1172374,1172391,1172393,1172394,1172453,1172458,1172467,1172484,1172537,1172543,1172687,1172719,1172739,1172751,1172759,1172775,1172781,1172782,1172783,117281 4,1172823,1172841,1172871,1172938,1172939,1172940,1172956,1172983,1172984,1172985,1172986,1172987,1172988,1172989,1172990,1172999,1173060,1173068,1173074,1173085,1173139,1173206,1173271,1173280,1173284,1173428,1173438,1173461,1173514,1173552,1173573,1173625,1173746,1173776,1173817,1173818,1173820,1173822,1173823,1173824,1173825,1173826,1173827,1173828,1173830,1173831,1173832,1173833,1173834,1173836,1173837,1173838,1173839,1173841,1173843,1173844,1173845,1173847,1173849,1173860,1173894,1173941,1174018,1174072,1174116,1174126,1174127,1174128,1174129,1174185,1174244,1174263,1174264,1174331,1174332,1174333,1174345,1174356,1174396,1174398,1174407,1174409,1174411,1174438,1174462,1174513,1174527,1174543,1174627,962849 CVE References: CVE-2019-19462,CVE-2019-20810,CVE-2019-20812,CVE-2020-0305,CVE-2020-10135,CVE-2020-10711,CVE-2020-10732,CVE-2020-10751,CVE-2020-10766,CVE-2020-10767,CVE-2020-10768,CVE-2020-10773,CVE-2020-10781,CVE-2020-12656,CVE-2020-12769,CVE-2020-12771,CVE-2020-12888,CVE-2020-13143,CVE-2020-13974,CVE-2020-14416,CVE-2020-15393,CVE-2020-15780 JIRA References: Sources used: SUSE Linux Enterprise Workstation Extension 15-SP2 (src): kernel-default-5.3.18-24.9.1 SUSE Linux Enterprise Module for Live Patching 15-SP2 (src): kernel-default-5.3.18-24.9.1, kernel-livepatch-SLE15-SP2_Update_1-1-5.3.6 SUSE Linux Enterprise Module for Legacy Software 15-SP2 (src): kernel-default-5.3.18-24.9.1 SUSE Linux Enterprise Module for Development Tools 15-SP2 (src): kernel-docs-5.3.18-24.9.2, kernel-obs-build-5.3.18-24.9.1, kernel-preempt-5.3.18-24.9.1, kernel-source-5.3.18-24.9.1, kernel-syms-5.3.18-24.9.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): kernel-default-5.3.18-24.9.1, kernel-default-base-5.3.18-24.9.1.9.2.6, kernel-preempt-5.3.18-24.9.1, kernel-source-5.3.18-24.9.1 SUSE Linux Enterprise High Availability 15-SP2 (src): kernel-default-5.3.18-24.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0