September 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1176110] New: VUL-0: CVE-2020-16150: mbedtls: local side channel attack on classical CBC decryption in (D)TLS
by bugzilla_noreply＠suse.com 03 Sep '20

03 Sep '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1176110 Bug ID: 1176110 Summary: VUL-0: CVE-2020-16150: mbedtls: local side channel attack on classical CBC decryption in (D)TLS Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/266589/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1875047 / CVE-2020-16150 A Lucky 13 timing side channel in mbedtls_ssl_decrypt_buf in library/ssl_msg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affects CBC mode because of a computed time difference based on a padding length. References: https://bugzilla.redhat.com/show_bug.cgi?id=1875047 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-16150 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16150 https://tls.mbed.org/tech-updates/security-advisories/mbedtls-security-advi… https://tls.mbed.org/tech-updates/security-advisories -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175939] New: finding kernel-default 5.8.4 for tumbleweed by software.opensuse.org but it can't be found inside
by bugzilla_noreply＠suse.com 03 Sep '20

03 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1175939 Bug ID: 1175939 Summary: finding kernel-default 5.8.4 for tumbleweed by software.opensuse.org but it can't be found inside Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: BuildService Assignee: screening-team-bugs(a)suse.de Reporter: virex(a)mail.ru QA Contact: adrian.schroeter(a)suse.com Found By: --- Blocker: --- finding kernel-default 5.8.4 for tumbleweed by software.opensuse.org but it can't be found inside then try to download binary directly (https://download.opensuse.org/tumbleweed/repo/oss/x86_64/kernel-default-5.8…) - got the error -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1176094] New: after last big update ssh works fine, but sshfs can't connect to updated remote server
by bugzilla_noreply＠suse.com 03 Sep '20

03 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1176094 Bug ID: 1176094 Summary: after last big update ssh works fine, but sshfs can't connect to updated remote server Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: virex(a)mail.ru QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- after last update can't connect ti updated tumbleweed by sshfs (but ssh work fine) -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1169668] lshw SIGABRT on aarch64
by bugzilla_noreply＠suse.com 03 Sep '20

03 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1169668 https://bugzilla.suse.com/show_bug.cgi?id=1169668#c16 --- Comment #16 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2020:2470-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1168865,1169668,1172156 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): lshw-B.02.19.2-3.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1168865] [Build 20200402] openQA test fails in lshw segfault ppc64le
by bugzilla_noreply＠suse.com 03 Sep '20

03 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1168865 https://bugzilla.suse.com/show_bug.cgi?id=1168865#c11 --- Comment #11 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2020:2470-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1168865,1169668,1172156 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): lshw-B.02.19.2-3.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173441] icewm update cannot be installed
by bugzilla_noreply＠suse.com 03 Sep '20

03 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1173441 https://bugzilla.suse.com/show_bug.cgi?id=1173441#c22 --- Comment #22 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2020:2464-1: An update that has two recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1170420,1173441 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): icewm-1.4.2-7.12.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): icewm-1.4.2-7.12.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175882] pesign-obs-integration doesn't respect _binary_payload from the original .spec
by bugzilla_noreply＠suse.com 03 Sep '20

03 Sep '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1175882 R Silverman <suselist2(a)cableone.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |suselist2(a)cableone.net -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175625] hwclock: settimeofday() failed
by bugzilla_noreply＠suse.com 03 Sep '20

03 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1175625 https://bugzilla.suse.com/show_bug.cgi?id=1175625#c3 Stanislav Brabec <sbrabec(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #3 from Stanislav Brabec <sbrabec(a)suse.com> --- I can half reproduce this problem as well: > ioctl(4, RTC_UIE_ON, 0): Invalid argument It looks wrong, and I cannot reproduce. > hwclock: settimeofday() failed: Invalid argument This is also wrong, and I can reproduce. > With openSUSE Leap 15.2 I don't get the error, if that helps. Yes. So it is a regression. I just verified, that util-linux from openSUSE 15.2 has the same problem in Tumbleweed. So it is either incompatibility of hwclock with the current kernel, or it is a kernel regression. Hopefully, testing the current upstream git hwclock, failure on my machine is fixed. I am going to update to util-linux-2.36. It will fix the problem: https://build.opensuse.org/package/show/home:sbrabec:branches:util-linux-mu… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172951] Trackpoint/Trackpad gone/unfunctional after resume (closing/opening LID cycle) [kernel issue]
by bugzilla_noreply＠suse.com 02 Sep '20

02 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1172951 https://bugzilla.suse.com/show_bug.cgi?id=1172951#c43 --- Comment #43 from Takashi Iwai <tiwai(a)suse.com> --- OK, so far, so good. Now, please test suspend/resume, and confirm whether the touchpad works. If the problem persists, please upload the dmesg output taken after the resume again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172951] Trackpoint/Trackpad gone/unfunctional after resume (closing/opening LID cycle) [kernel issue]
by bugzilla_noreply＠suse.com 02 Sep '20

02 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1172951 https://bugzilla.suse.com/show_bug.cgi?id=1172951#c40 --- Comment #40 from Takashi Iwai <tiwai(a)suse.com> --- Erm, your dmesg output shows that you're running 5.3.18-lp152.36-default, which is the official update kernel, and not the test kernel I've provided. It's likely because you didn't choose explicitly the kernel to boot at GRUB menu. The test kernel has a smaller version number, 5.3.18-lp152.1.1.g00a927a, so please choose this kernel at GRUB boot menu, and test with it. BTW, you can check the version of the running kernel by "uname -r" command. -- You are receiving this mail because: You are on the CC list for the bug.

1 0