August 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1189768] enabling "SELINUX" in installer causes Xserver to hang
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

https://bugzilla.suse.com/show_bug.cgi?id=1189768 David Diaz <dgonzalez(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|yast2-maintainers(a)suse.de |lubos.kocman(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1189768] enabling "SELINUX" in installer causes Xserver to hang
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

https://bugzilla.suse.com/show_bug.cgi?id=1189768 https://bugzilla.suse.com/show_bug.cgi?id=1189768#c1 David Diaz <dgonzalez(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dgonzalez(a)suse.com --- Comment #1 from David Diaz <dgonzalez(a)suse.com> --- Hi Joerg! Thank you for warning us about it. (In reply to joerg reisenweber from comment #0) > did a clean install of KDE-desktop leap15.3, selected "selinux" somewhere in > the installer config (a checkmark if I remember correctly) Most probably, you clicked on the Security header at summary screen and then switched the SELinux mode from "Diasbled" to "Enforcing". See [1] and [2]. I'm pretty sure that there aren't (enough?) SELinux policies for Leap 15.3 yet. In fact, that was the reason for not offering it enabled by default[3], although it allows the user to use it. IMHO, this is wrong and SELinux should not be offered (i.e., not configurable[4]) during the installation if the product does not have a well-defined set of policies ready to make it usable right after booting it. (In reply to joerg reisenweber from comment #0) > ... > > workaround: > deleting the "security=selinux selinux=1" part of grub's config in yast > "system -> bootloader" fixed the issue > Instead, the (experienced) user interested on it should go oppositely and activate it by hand after providing the policies. But this is not a decision for the YaST team. So, let's ask to the openSUSE Leap Release Manager what are his thoughts about this. Thanks! [1] https://github.com/yast/yast-installation/pull/906 [2] https://user-images.githubusercontent.com/1691872/109567179-d92e0e00-7adc-1… [3] https://github.com/yast/skelcd-control-openSUSE/pull/227#discussion_r583534… [4] https://github.com/yast/skelcd-control-openSUSE/blob/ae8be95abe249a1d7eab89… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1189801] VUL-0: envoy-proxy: Multiple vulnerabilities disclosed
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

https://bugzilla.suse.com/show_bug.cgi?id=1189801 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1189801] New: VUL-0: envoy-proxy: Multiple vulnerabilities disclosed
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1189801 Bug ID: 1189801 Summary: VUL-0: envoy-proxy: Multiple vulnerabilities disclosed Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/307953/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: mrostecki(a)suse.com Reporter: gianluca.gabrielli(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- The following CVEs might affect envoy-proxy v1.14.4 in openSUSE:Backports:SLE-15-SP3: - CVE-2021-32780 affects 1.19.0, 1.18.3 - CVE-2021-32777 affects 1.19.0, 1.18.3, 1.17.3, 1.16.4 - CVE-2021-32781 affects 1.19.0, 1.18.3, 1.17.3, 1.16.4 - CVE-2021-32778 affects 1.19.0, 1.18.3, 1.17.3, 1.16.4 - CVE-2021-32779 affects 1.19.0, 1.18.3, 1.17.3, 1.16.4 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185288] elfutils update needed to build current kernel
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1185288 http://bugzilla.opensuse.org/show_bug.cgi?id=1185288#c15 --- Comment #15 from Martin Li��ka <martin.liska(a)suse.com> --- (In reply to Michal Suchanek from comment #14) > ok, branching elfutils in SP4 is new development. Note, there's a SR for elfutils update for SP4: https://build.suse.de/request/show/248029 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1189733] New: Screen fickers and netwok disconnect when on battrey power on Samsung Chromebook3
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1189733 Bug ID: 1189733 Summary: Screen fickers and netwok disconnect when on battrey power on Samsung Chromebook3 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: yitzhakbargeva(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Screen fickers and netwok disconnecst when on battrey power on Samsung Chromebook 3 -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1189797] New: VUL-1: CVE-2020-18778: libav: heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

https://bugzilla.suse.com/show_bug.cgi?id=1189797 Bug ID: 1189797 Summary: VUL-1: CVE-2020-18778: libav: heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/307898/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: alarrosa(a)suse.com Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_p_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18778 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18778 http://www.cvedetails.com/cve/CVE-2020-18778/ https://bugzilla.libav.org/show_bug.cgi?id=1155 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1189796] New: VUL-1: CVE-2020-18776: libav: segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

https://bugzilla.suse.com/show_bug.cgi?id=1189796 Bug ID: 1189796 Summary: VUL-1: CVE-2020-18776: libav: segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/307899/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: alarrosa(a)suse.com Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- In Libav 12.3, there is a segmentation fault in vc1_decode_b_mb_intfr in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18776 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18776 http://www.cvedetails.com/cve/CVE-2020-18776/ https://bugzilla.libav.org/show_bug.cgi?id=1153 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1189795] New: VUL-1: CVE-2020-18775: Iibav: heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

https://bugzilla.suse.com/show_bug.cgi?id=1189795 Bug ID: 1189795 Summary: VUL-1: CVE-2020-18775: Iibav: heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/307900/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: alarrosa(a)suse.com Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-18775 In Libav 12.3, there is a heap-based buffer over-read in vc1_decode_b_mb_intfi in vc1_block.c that allows an attacker to cause denial-of-service via a crafted file. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-18775 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18775 http://www.cvedetails.com/cve/CVE-2020-18775/ https://bugzilla.libav.org/show_bug.cgi?id=1152 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1188941] ppc64 optflags don't enable LTO
by bugzilla_noreply＠suse.com 25 Aug '21

25 Aug '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1188941 http://bugzilla.opensuse.org/show_bug.cgi?id=1188941#c6 --- Comment #6 from Michal Suchanek <msuchanek(a)suse.com> --- For ppc64 I get %{optflags}=-O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -Werror=return-type -g that is I do not get the superfluous flags but I do not get LTO either. Is that the expected result? -- You are receiving this mail because: You are on the CC list for the bug.

1 0