June 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1186710] wrong/dead symlinks with kernel-default-devel-5.12.4-2.1.x86_64 (after usrmerge?)
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1186710 https://bugzilla.suse.com/show_bug.cgi?id=1186710#c10 --- Comment #10 from Ludwig Nussel <lnussel(a)suse.com> --- (In reply to Ruediger Oertel from comment #8) > proposal: > > diff --git a/brp-25-symlink b/brp-25-symlink > index 2884a34..15ec95c 100755 > --- a/brp-25-symlink > +++ b/brp-25-symlink > @@ -85,6 +85,9 @@ do > /proc/*|/dev/*|/sys/*) # links pointing into kernel file system > should be absolute > link_dest=$link_absolut > ;; > + /lib/modules/*|/lib/firmware/*) # keeping kernel modules and > firmware absolute for now > + link_dest=$link_absolut > + ;; Yup, either that or anything in /lib that links outside of it in general. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186710] wrong/dead symlinks with kernel-default-devel-5.12.4-2.1.x86_64 (after usrmerge?)
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1186710 https://bugzilla.suse.com/show_bug.cgi?id=1186710#c8 --- Comment #8 from Ruediger Oertel <ro(a)suse.com> --- proposal: diff --git a/brp-25-symlink b/brp-25-symlink index 2884a34..15ec95c 100755 --- a/brp-25-symlink +++ b/brp-25-symlink @@ -85,6 +85,9 @@ do /proc/*|/dev/*|/sys/*) # links pointing into kernel file system should be absolute link_dest=$link_absolut ;; + /lib/modules/*|/lib/firmware/*) # keeping kernel modules and firmware absolute for now + link_dest=$link_absolut + ;; ${RPM_BUILD_ROOT}*) echo "ERROR: Link $link -> $link_orig points inside build root!" had_errors=1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186710] wrong/dead symlinks with kernel-default-devel-5.12.4-2.1.x86_64 (after usrmerge?)
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1186710 https://bugzilla.suse.com/show_bug.cgi?id=1186710#c7 --- Comment #7 from Takashi Iwai <tiwai(a)suse.com> --- (In reply to Ruediger Oertel from comment #6) > what about just patching brp-25-symlink to do nothing for kernel-* or > specifically /lib/modules/* in kernel-* ? That sounds feasible (maybe some generic blacklist?). Both /lib/modules/* and /lib/firmware/* are fixed paths, hard to modify. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186710] wrong/dead symlinks with kernel-default-devel-5.12.4-2.1.x86_64 (after usrmerge?)
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1186710 https://bugzilla.suse.com/show_bug.cgi?id=1186710#c6 --- Comment #6 from Ruediger Oertel <ro(a)suse.com> --- what about just patching brp-25-symlink to do nothing for kernel-* or specifically /lib/modules/* in kernel-* ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186027] VUL-1: CVE-2021-32917,CVE-2021-32918,CVE-2021-32919,CVE-2021-32920,CVE-2021-32921: Prosody XMPP server advisory 2021-05-12 (multiple vulnerabilities)
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1186027 https://bugzilla.suse.com/show_bug.cgi?id=1186027#c6 Michael Vetter <mvetter(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #6 from Michael Vetter <mvetter(a)suse.com> --- SRs accepted. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184978] VUL-0: CVE-2020-35628: cgal: code execution vulnerability may lead to oob read
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1184978 https://bugzilla.suse.com/show_bug.cgi?id=1184978#c4 Michael Vetter <mvetter(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #4 from Michael Vetter <mvetter(a)suse.com> --- SRs accepted. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184975] VUL-0: CVE-2020-35636: cgal: code execution vulnerability may lead to oob read
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1184975 https://bugzilla.suse.com/show_bug.cgi?id=1184975#c5 Michael Vetter <mvetter(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED Assignee|mvetter(a)suse.com |security-team(a)suse.de --- Comment #5 from Michael Vetter <mvetter(a)suse.com> --- SRs accepted. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184973] VUL-0: CVE-2020-28601: cgal: code execution vulnerability may lead to oob read
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1184973 https://bugzilla.suse.com/show_bug.cgi?id=1184973#c5 Michael Vetter <mvetter(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED Assignee|mvetter(a)suse.com |security-team(a)suse.de --- Comment #5 from Michael Vetter <mvetter(a)suse.com> --- SRs accepted. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1186722] VUL-0: CVE-2021-32625: redis: integer overflow in STRALGO LCS
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1186722 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1169460] Hibernation -> Resume -> Restart sequence causes grub2-once to prevent start of auditd.service
by bugzilla_noreply＠suse.com 02 Jun '21

02 Jun '21

https://bugzilla.suse.com/show_bug.cgi?id=1169460 https://bugzilla.suse.com/show_bug.cgi?id=1169460#c6 Franck Bui <fbui(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fbui(a)suse.com --- Comment #6 from Franck Bui <fbui(a)suse.com> --- (In reply to Andr� Werlang from comment #0) > This is another manifestation of the issues caused by reloading of PID1 in > systemd, usually a `systemctl enable/disable` during boot. I'm not sure which issues caused by PID1 reloading you're referring to. The only one I'm currently aware is https://github.com/systemd/systemd/issues/12953 but this shouldn't be the one you're affecting by as it affects udevd only. Can you please clarify ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0