September 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1190272] Most volumes gets unmounted after boot
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190272 https://bugzilla.suse.com/show_bug.cgi?id=1190272#c4 --- Comment #4 from Franck Bui <fbui(a)suse.com> --- (In reply to Linus Kardell from comment #3) > Maybe. There is a "systemd[1]: Reloading" shortly before it starts > unmounting stuff. If it's not triggered by the btrfsmaintenance units then it would be interesting to figure out which unit does that. Looking at the logs, that might be due to grub2-once.service especially since you said that the problem seems to occurs after hibernating. Could you try to modify /usr/lib/systemd/system/grub2-once.service by replacing ExecStartPost=-/usr/bin/systemctl disable grub2-once.service with ExecStartPost=-/usr/bin/systemctl --no-reload disable grub2-once.service ie add the '--no-reload' option ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190690] VUL-1: CVE-2021-32294: libgig: heap-buffer-overflow in function RIFF:List:GetSubList
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190690 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190688] VUL-1: CVE-2021-39530: libredwg: heap-based buffer overflow in function bit_wcs2nlen()
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190688 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190687] VUL-1: CVE-2021-39528: libredwg: double free in function dwg_free_MATERIAL_private()
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190687 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190686] VUL-1: CVE-2021-39527: libredwg: heap-based buffer overflow in function appinfo_private()
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190686 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190685] VUL-1: CVE-2021-39525: libredwg: heap-based buffer overflow in function bit_read_fixed()
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190685 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190684] VUL-1: CVE-2021-39523: libredwg: NULL pointer dereference in function check_POLYLINE_handles()
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190684 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190683] VUL-1: CVE-2021-39522: libredwg: heap-based buffer overflow in function bit_wcs2len()
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190683 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190682] VUL-1: CVE-2021-39521: libredwg: NULL pointer dereference in function bit_read_BB()
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1190682 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190690] New: VUL-1: CVE-2021-32294: libgig: heap-buffer-overflow in function RIFF:List:GetSubList
by bugzilla_noreply＠suse.com 21 Sep '21

21 Sep '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190690 Bug ID: 1190690 Summary: VUL-1: CVE-2021-32294: libgig: heap-buffer-overflow in function RIFF:List:GetSubList Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/310535/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-32294 An issue was discovered in libgig through 20200507. A heap-buffer-overflow exists in the function RIFF::List::GetSubList located in RIFF.cpp. It allows an attacker to cause code Execution. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32294 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32294 https://github.com/drbye78/libgig/issues/1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0