May 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1152930] mount.cifs crashes when attempting to mount invalid directories
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1152930 https://bugzilla.suse.com/show_bug.cgi?id=1152930#c13 --- Comment #13 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:0639-1: An update that solves two vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1152930,1174477,1183239,1184815 CVE References: CVE-2020-14342,CVE-2021-20208 JIRA References: Sources used: openSUSE Leap 15.2 (src): cifs-utils-6.9-lp152.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184543] Wayland session restarts due to Xwayland crash when trying to display keyboard layout (gkbd-keyboard-display) in GNOME live system
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1184543 https://bugzilla.suse.com/show_bug.cgi?id=1184543#c32 --- Comment #32 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:0640-1: An update that has two recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1184072,1184543 CVE References: JIRA References: Sources used: openSUSE Leap 15.2 (src): xorg-x11-server-1.20.3-lp152.8.24.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184072] Gnome login failure due to Xwayland crash
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1184072 https://bugzilla.suse.com/show_bug.cgi?id=1184072#c31 --- Comment #31 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:0640-1: An update that has two recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1184072,1184543 CVE References: JIRA References: Sources used: openSUSE Leap 15.2 (src): xorg-x11-server-1.20.3-lp152.8.24.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185398] New: VUL-0: CVE-2021-21227,CVE-2021-21232,CVE-2021-21233,CVE-2021-21228,CVE-2021-21229,CVE-2021-21230,CVE-2021-21231: chromium: Update to 90.0.4430.93
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1185398 Bug ID: 1185398 Summary: VUL-0: CVE-2021-21227,CVE-2021-21232,CVE-2021-21233,CVE-2021- 21228,CVE-2021-21229,CVE-2021-21230,CVE-2021-21231: chromium: Update to 90.0.4430.93 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: gmbr3(a)opensuse.org Reporter: atoptsoglou(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- CVE-2021-21227: Insufficient data validation in V8. CVE-2021-21232: Use after free in Dev Tools. CVE-2021-21233: Heap buffer overflow in ANGLE. CVE-2021-21228: Insufficient policy enforcement in extensions. CVE-2021-21229: Incorrect security UI in downloads. CVE-2021-21230: Type Confusion in V8. CVE-2021-21231: Insufficient data validation in V8. Reference https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-des… -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1184764] New: VUL-0: chromium: Update to 90.0.4430.72
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1184764 Bug ID: 1184764 Summary: VUL-0: chromium: Update to 90.0.4430.72 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: gmbr3(a)opensuse.org Reporter: atoptsoglou(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- CVE-2021-21201: Use after free in permissions. CVE-2021-21202: Use after free in extensions. CVE-2021-21203: Use after free in Blink. CVE-2021-21204: Use after free in Blink. CVE-2021-21205: Insufficient policy enforcement in navigation. CVE-2021-21221: Insufficient validation of untrusted input in Mojo. CVE-2021-21207: Use after free in IndexedDB. CVE-2021-21208: Insufficient data validation in QR scanner. CVE-2021-21209: Inappropriate implementation in storage. CVE-2021-21210: Inappropriate implementation in Network. CVE-2021-21211: Inappropriate implementation in Navigation. CVE-2021-21212: Incorrect security UI in Network Config UI. CVE-2021-21213: Use after free in WebMIDI. CVE-2021-21214: Use after free in Network API. CVE-2021-21215: Inappropriate implementation in Autofill. CVE-2021-21216: Inappropriate implementation in Autofill. CVE-2021-21217: Uninitialized Use in PDFium. CVE-2021-21218: Uninitialized Use in PDFium. CVE-2021-21219: Uninitialized Use in PDFium. Reference https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-des… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1183329] virtualbox 6.1.18 crashes when it runs nested VM
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1183329 https://bugzilla.suse.com/show_bug.cgi?id=1183329#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:0630-1: An update that solves three vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1181197,1181198,1183125,1183329,1184542 CVE References: CVE-2021-2074,CVE-2021-2129,CVE-2021-2264 JIRA References: Sources used: openSUSE Leap 15.2 (src): virtualbox-6.1.20-lp152.2.21.1, virtualbox-kmp-6.1.20-lp152.2.21.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1183125] Leap 15.3 installation in Virtualbox without VBox integration
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1183125 https://bugzilla.suse.com/show_bug.cgi?id=1183125#c23 --- Comment #23 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:0630-1: An update that solves three vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1181197,1181198,1183125,1183329,1184542 CVE References: CVE-2021-2074,CVE-2021-2129,CVE-2021-2264 JIRA References: Sources used: openSUSE Leap 15.2 (src): virtualbox-6.1.20-lp152.2.21.1, virtualbox-kmp-6.1.20-lp152.2.21.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181198] VUL-0: CVE-2021-2129: virtualbox: core: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1181198 https://bugzilla.suse.com/show_bug.cgi?id=1181198#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:0630-1: An update that solves three vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1181197,1181198,1183125,1183329,1184542 CVE References: CVE-2021-2074,CVE-2021-2129,CVE-2021-2264 JIRA References: Sources used: openSUSE Leap 15.2 (src): virtualbox-6.1.20-lp152.2.21.1, virtualbox-kmp-6.1.20-lp152.2.21.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1181197] VUL-0: CVE-2021-2074: virtualbox: core: Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1181197 https://bugzilla.suse.com/show_bug.cgi?id=1181197#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:0630-1: An update that solves three vulnerabilities and has two fixes is now available. Category: security (important) Bug References: 1181197,1181198,1183125,1183329,1184542 CVE References: CVE-2021-2074,CVE-2021-2129,CVE-2021-2264 JIRA References: Sources used: openSUSE Leap 15.2 (src): virtualbox-6.1.20-lp152.2.21.1, virtualbox-kmp-6.1.20-lp152.2.21.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1182098] VUL-0: CVE-2020-13576: gsoap: remote code execution via specially crafted SOAP request inside the WS-Addressing plugin
by bugzilla_noreply＠suse.com 01 May '21

01 May '21

https://bugzilla.suse.com/show_bug.cgi?id=1182098 https://bugzilla.suse.com/show_bug.cgi?id=1182098#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:0632-1: An update that fixes one vulnerability is now available. Category: security (important) Bug References: 1182098 CVE References: CVE-2020-13576 JIRA References: Sources used: openSUSE Leap 15.2 (src): gsoap-2.8.102-lp152.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0