September 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1190813] [Build 20210921] SELINUX: command not found
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190813 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178488] meta+e shortcut starts Dolphin as root, no pw asked
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1178488 https://bugzilla.suse.com/show_bug.cgi?id=1178488#c18 --- Comment #18 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2021:3220-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1178488 CVE References: JIRA References: Sources used: openSUSE Leap 15.3 (src): kglobalaccel-5.76.0-3.6.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187260] installation openuse 15.3 does not start on macbook
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1187260 https://bugzilla.suse.com/show_bug.cgi?id=1187260#c24 --- Comment #24 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:3224-1: An update that has 12 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1177315,1177789,1182057,1184454,1185232,1185261,1185441,1185464,1185621,1185961,1187260,1187696 CVE References: JIRA References: Sources used: SUSE MicroOS 5.0 (src): shim-15.4-3.32.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): shim-susesigned-15.4-3.10.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): shim-15.4-3.32.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185261] UEFI Boot fail after standard update - could not create MoklistXRT, import_mok_state() failed: Out of Resources
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1185261 https://bugzilla.suse.com/show_bug.cgi?id=1185261#c64 --- Comment #64 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:3224-1: An update that has 12 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1177315,1177789,1182057,1184454,1185232,1185261,1185441,1185464,1185621,1185961,1187260,1187696 CVE References: JIRA References: Sources used: SUSE MicroOS 5.0 (src): shim-15.4-3.32.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): shim-susesigned-15.4-3.10.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): shim-15.4-3.32.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185232] something has gone seriously wrong: shim_init() - system does not boot anymore after installing today's updates
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1185232 https://bugzilla.suse.com/show_bug.cgi?id=1185232#c98 --- Comment #98 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:3224-1: An update that has 12 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1177315,1177789,1182057,1184454,1185232,1185261,1185441,1185464,1185621,1185961,1187260,1187696 CVE References: JIRA References: Sources used: SUSE MicroOS 5.0 (src): shim-15.4-3.32.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): shim-susesigned-15.4-3.10.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): shim-15.4-3.32.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184454] [Build B.403.1] openQA test fails in journal_check
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1184454 https://bugzilla.suse.com/show_bug.cgi?id=1184454#c11 --- Comment #11 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:3224-1: An update that has 12 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1177315,1177789,1182057,1184454,1185232,1185261,1185441,1185464,1185621,1185961,1187260,1187696 CVE References: JIRA References: Sources used: SUSE MicroOS 5.0 (src): shim-15.4-3.32.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): shim-susesigned-15.4-3.10.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): shim-15.4-3.32.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1187260] installation openuse 15.3 does not start on macbook
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1187260 https://bugzilla.suse.com/show_bug.cgi?id=1187260#c23 --- Comment #23 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:14808-1: An update that has 7 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1185232,1185261,1185441,1185621,1187071,1187260,1187696 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Server 11-SP4-LTSS (src): shim-15.4-12.11.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185261] UEFI Boot fail after standard update - could not create MoklistXRT, import_mok_state() failed: Out of Resources
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1185261 https://bugzilla.suse.com/show_bug.cgi?id=1185261#c63 --- Comment #63 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:14808-1: An update that has 7 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1185232,1185261,1185441,1185621,1187071,1187260,1187696 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Server 11-SP4-LTSS (src): shim-15.4-12.11.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1185232] something has gone seriously wrong: shim_init() - system does not boot anymore after installing today's updates
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1185232 https://bugzilla.suse.com/show_bug.cgi?id=1185232#c97 --- Comment #97 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:14808-1: An update that has 7 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1185232,1185261,1185441,1185621,1187071,1187260,1187696 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Server 11-SP4-LTSS (src): shim-15.4-12.11.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190852] New: VUL-1: CVE-2021-38153: kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients
by bugzilla_noreply＠suse.com 24 Sep '21

24 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190852 Bug ID: 1190852 Summary: VUL-1: CVE-2021-38153: kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/310623/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mrostecki(a)suse.com Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been fixed. The affected versions include Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, and 2.8.0. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-38153 http://seclists.org/oss-sec/2021/q3/184 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38153 http://www.cvedetails.com/cve/CVE-2021-38153/ https://kafka.apache.org/cve-list -- You are receiving this mail because: You are on the CC list for the bug.

1 2