December 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1192429] Consider bringing newer LLVM to Leap 15.3
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1192429 https://bugzilla.suse.com/show_bug.cgi?id=1192429#c15 --- Comment #15 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:1516-1: An update that has two recommended fixes can now be installed. Category: recommended (low) Bug References: 1192310,1192429 CVE References: JIRA References: Sources used: openSUSE Backports SLE-15-SP3 (src): llvm12-12.0.1-bp153.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1192310] chromium general protection fault in libc upon start
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1192310 https://bugzilla.suse.com/show_bug.cgi?id=1192310#c18 --- Comment #18 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:1516-1: An update that has two recommended fixes can now be installed. Category: recommended (low) Bug References: 1192310,1192429 CVE References: JIRA References: Sources used: openSUSE Backports SLE-15-SP3 (src): llvm12-12.0.1-bp153.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193201] Unable to start an HVM guest containing an SR-IOV device
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1193201 Charles Arnold <carnold(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |carnold(a)suse.com Assignee|xen-bugs(a)suse.de |kvm-bugs(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 972787] New: [gpg-agent] Rework agent startup for DM sessions.
by bugzilla_noreply＠novell.com 01 Dec '21

01 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=972787 Bug ID: 972787 Summary: [gpg-agent] Rework agent startup for DM sessions. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE 42.1 Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: eich(a)suse.com QA Contact: qa-bugs(a)suse.de CC: astieger(a)suse.com, meissner(a)suse.com, premysl.janouch(a)suse.com, werner(a)suse.com, xorg-maintainer-bugs(a)forge.provo.novell.com Found By: Development Blocker: --- The gpg-agent for a user session is started by the script /etc/X11/xdm/sys.xsession. An openSUSE user pointed out to me that the socket handling of the gpg-agent has changed with gpg 2.1 - now neither a env file is written (the option --write-env-file is ignored) nor nor does anything use the env variable GPG_AGENT_INFO. Instead today a standard socket is used in $HOME/.gnupg/S.gpg-agent. Also check: https://gnupg.org/faq/whats-new-in-2.1.html If NFS mounted homes are desired, it can be handled as described in: https://wiki.gnupg.org/NFS This requires reworking of the gpg-agent startup (and possibly also of the ssh-agent) in sys.xsession. Any takers? -- You are receiving this mail because: You are on the CC list for the bug.

2 4

[Bug 1177182] Don't use DES as default password encryption
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1177182 Bj�rn Voigt <bjoernv(a)arcor.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bjoernv(a)arcor.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1183425] Graphical "Please enter passphrase" prompt for disk encryption upon startup is unreadable on HiDPI
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1183425 Bj�rn Voigt <bjoernv(a)arcor.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bjoernv(a)arcor.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1099755] New: /etc/hosts.allow /etc/hosts.deny not support ssh
by bugzilla_noreply＠novell.com 01 Dec '21

01 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1099755 Bug ID: 1099755 Summary: /etc/hosts.allow /etc/hosts.deny not support ssh Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: simon(a)becherer.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- wrong security feeling, because text of file /etc/hosts.allow is wrong. written is: # /etc/hosts.allow # See 'man tcpd' and 'man 5 hosts_access' for a detailed description # of /etc/hosts.allow and /etc/hosts.deny. # # short overview about daemons and servers that are built with # tcp_wrappers support: #. # package name | daemon path | token # ---------------------------------------------------------------------------- # ssh, openssh | /usr/sbin/sshd | sshd, sshd-fwd-x11, sshd-fwd-<port> # quota | /usr/sbin/rpc.rquotad | rquotad # tftpd | /usr/sbin/in.tftpd | in.tftpd # portmap | /sbin/portmap | portmap at least toke sshd to allow and deny will not work any more on actual systems (tumbleweed). (maybe others tokens also affected) so user (as i) with low background knowlidge will feel secure if they make settings like: sshd : ALL : deny sshd : 127.0.0.1 : allow sshd : 192.168.0.30 : allow but the system ignores this. -> leading text and maybe manpage has to be changed! -> or if this 2 files host.allow / hosts.deny ar complete obsolete, do not install it at all. -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1192672] devel:languages:php/php8: Bug /etc/php8/fpm/php.ini is not created
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1192672 https://bugzilla.suse.com/show_bug.cgi?id=1192672#c2 --- Comment #2 from Arjen de Korte <suse+build(a)de-korte.org> --- > "FPM uses php.ini syntax for its configuration file - php-fpm.conf, and pool > configuration files. " It also uses /etc/php8/fpm/php.ini, which is erroneously not packaged right now. > So it looks like to me rather as a duplicate to bug 1192414, this time for > php8. No, this is an additional bug, not a duplicate. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186031] server:database/mariadb: feature request innodb lz4 support
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1186031 https://bugzilla.suse.com/show_bug.cgi?id=1186031#c13 --- Comment #13 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2021:3836-1: An update that solves one vulnerability and has one errata is now available. Category: security (moderate) Bug References: 1186031,1192497 CVE References: CVE-2021-35604 JIRA References: Sources used: SUSE Linux Enterprise Module for Server Applications 15-SP2 (src): mariadb-10.4.22-3.22.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124150] VUL-1: CVE-2019-7310: poppler: A heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1124150 https://bugzilla.suse.com/show_bug.cgi?id=1124150#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:3854-1: An update that fixes 21 vulnerabilities is now available. Category: security (important) Bug References: 1092945,1102531,1107597,1114966,1115185,1115186,1115187,1115626,1120495,1120496,1120939,1120956,1124150,1127329,1129202,1130229,1131696,1131722,1142465,1143950,1179163 CVE References: CVE-2017-18267,CVE-2018-13988,CVE-2018-16646,CVE-2018-18897,CVE-2018-19058,CVE-2018-19059,CVE-2018-19060,CVE-2018-19149,CVE-2018-20481,CVE-2018-20551,CVE-2018-20650,CVE-2018-20662,CVE-2019-10871,CVE-2019-10872,CVE-2019-14494,CVE-2019-7310,CVE-2019-9200,CVE-2019-9631,CVE-2019-9903,CVE-2019-9959,CVE-2020-27778 JIRA References: Sources used: openSUSE Leap 15.3 (src): poppler-0.62.0-4.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0