September 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1029961] [META] Finalize UsrMerge
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1029961 https://bugzilla.suse.com/show_bug.cgi?id=1029961#c112 --- Comment #112 from Swamp Workflow Management <swamp(a)suse.de> --- # maintenance_jira_update_notice SUSE-RU-2021:3116-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1029961,1174697,1176206,1176934,1179382,1188891 CVE References: JIRA References: Sources used: SUSE OpenStack Cloud Crowbar 9 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE OpenStack Cloud Crowbar 8 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE OpenStack Cloud 9 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE OpenStack Cloud 8 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE Linux Enterprise Software Development Kit 12-SP5 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE Linux Enterprise Server for SAP 12-SP4 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE Linux Enterprise Server for SAP 12-SP3 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE Linux Enterprise Server 12-SP5 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE Linux Enterprise Server 12-SP4-LTSS (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE Linux Enterprise Server 12-SP3-LTSS (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE Linux Enterprise Server 12-SP3-BCL (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 SUSE Linux Enterprise Server 12-SP2-BCL (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 HPE Helion Openstack 8 (src): mozilla-nspr-4.32-19.18.1, mozilla-nss-3.68-58.54.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1179382] mozilla-nss 3.58-1.1 breaks SSL connections in pidgin
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1179382 https://bugzilla.suse.com/show_bug.cgi?id=1179382#c8 --- Comment #8 from Swamp Workflow Management <swamp(a)suse.de> --- # maintenance_jira_update_notice SUSE-RU-2021:3115-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1029961,1174697,1176206,1176934,1179382,1188891 CVE References: JIRA References: Sources used: SUSE MicroOS 5.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Server 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Retail Branch Server 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Proxy 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server for SAP 15 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Server Applications 15-SP3 (src): mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Server Applications 15-SP2 (src): mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Enterprise Storage 6 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE CaaS Platform 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176206] Dependency of mozilla-nss-32bit prevents installation of p11-kit-nss-trust-32bit
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1176206 https://bugzilla.suse.com/show_bug.cgi?id=1176206#c7 --- Comment #7 from Swamp Workflow Management <swamp(a)suse.de> --- # maintenance_jira_update_notice SUSE-RU-2021:3115-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1029961,1174697,1176206,1176934,1179382,1188891 CVE References: JIRA References: Sources used: SUSE MicroOS 5.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Server 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Retail Branch Server 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Proxy 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server for SAP 15 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Server Applications 15-SP3 (src): mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Server Applications 15-SP2 (src): mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Enterprise Storage 6 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE CaaS Platform 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1029961] [META] Finalize UsrMerge
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1029961 https://bugzilla.suse.com/show_bug.cgi?id=1029961#c111 --- Comment #111 from Swamp Workflow Management <swamp(a)suse.de> --- # maintenance_jira_update_notice SUSE-RU-2021:3115-1: An update that has 6 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1029961,1174697,1176206,1176934,1179382,1188891 CVE References: JIRA References: Sources used: SUSE MicroOS 5.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Server 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Retail Branch Server 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Manager Proxy 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server for SAP 15 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Server 15-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Server Applications 15-SP3 (src): mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Server Applications 15-SP2 (src): mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE Enterprise Storage 6 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 SUSE CaaS Platform 4.0 (src): mozilla-nspr-4.32-3.20.1, mozilla-nss-3.68-3.56.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190552] less fails without which
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190552 http://bugzilla.opensuse.org/show_bug.cgi?id=1190552#c8 --- Comment #8 from Christian Boltz <suse-beta(a)cboltz.de> --- I'm afraid your audit.log caused more questions than it answers ;-) Basically you have two events (repeated multiple times): apparmor="DENIED" operation="sendmsg" profile="/usr/bin/lessopen.sh" pid=6779 comm="file" lport=814 family="inet" sock_type="dgram" protocol=17 requested_mask="send" denied_mask="send" apparmor="DENIED" operation="sendmsg" profile="/usr/bin/lessopen.sh" pid=7077 comm="lessopen.sh" lport=814 family="inet" sock_type="dgram" protocol=17 requested_mask="send" denied_mask="send" It's very strange that the lessopen.sh script and "file" need inet dgram permissions. I asked upstream, and the answer was [17:27:28] <jjohansen1> well, you can use it internal to the machine as a message passing protocol [17:27:51] <jjohansen1> this can be convenient if you have a need that could be local or remote [17:28:46] <jjohansen1> but it is certainly suspect, and needs to be looked into [...] [17:49:49] <jjohansen1> its interesting that its the file command and the script [17:50:01] <jjohansen1> perhaps its being used as a pipe? [17:51:41] <jjohansen1> an strace would be interesting to see Unfortunately I'm not able to reproduce what you see, so - can you please do a strace, check that it causes these entries in audit.log again, and then attach the strace output? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180738] New: fail2ban don't work with firewalld
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1180738 Bug ID: 1180738 Summary: fail2ban don't work with firewalld Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: ae(a)ae-online.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After the change to firewalld fail2ban is not adding the IPs to the firewall. You see messages in the fail2ban log: Warning 0.0.0.0 already banned. See https://serverfault.com/questions/852755/fail2ban-doesnt-add-ips-to-ipset-f… I added /etc/fail2ban/action.d/custom-firewalld.conf with ----------------------------- START ----------------------------- #/etc/fail2ban/action.d/custom-firewalld.conf [INCLUDES] before = [Definition] actionstart = actionstop = actioncheck = #actionflush = sed -i '/<source address=/d' /etc/firewalld/zones/public.xml actionban = firewall-cmd --change-source=<ip> --zone=drop && firewall-cmd --change-source=<ip> --zone=drop --permanent actionunban = firewall-cmd --remove-source=<ip> --zone=drop && firewall-cmd --remove-source=<ip> --zone=drop --permanent || echo 0 [Init] ----------------------------- END ----------------------------- /etc/fail2ban/jail.conf ----------------------------- START ----------------------------- [...] # # Action shortcuts. To be used to define action parameter banaction = custom-firewalld banaction_allports = firewallcmd-allports [....] ----------------------------- END ----------------------------- -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1188610] New: VUL-0: CVE-2021-32749: fail2ban: Command injection via mail comand
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1188610 Bug ID: 1188610 Summary: VUL-0: CVE-2021-32749: fail2ban: Command injection via mail comand Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/304472/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#1983222 fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command `mail` from mailutils package used in mail actions like `mail-whois` can execute command if unescaped sequences (`\n~`) are available in "foreign" input (for instance in whois output). To exploit the vulnerability, an attacker would need to insert malicious characters into the response sent by the whois server, either via a MITM attack or by taking over a whois server. The issue is patched in versions 0.10.7 and 0.11.3. As a workaround, one may avoid the usage of action `mail-whois` or patch the vulnerability manually. https://github.com/fail2ban/fail2ban/commit/410a6ce5c80dd981c22752da034f252… https://github.com/fail2ban/fail2ban/commit/2ed414ed09b3bb4c478abc9366a1ff2… https://github.com/fail2ban/fail2ban/security/advisories/GHSA-m985-3f3v-cwmm References: https://bugzilla.redhat.com/show_bug.cgi?id=1983222 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-32749 https://github.com/fail2ban/fail2ban/commit/410a6ce5c80dd981c22752da034f252… https://github.com/fail2ban/fail2ban/security/advisories/GHSA-m985-3f3v-cwmm http://www.cvedetails.com/cve/CVE-2021-32749/ https://github.com/fail2ban/fail2ban/commit/2ed414ed09b3bb4c478abc9366a1ff2… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32749 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1185744] System hangs at reboot and shutdown, waiting for network
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1185744 https://bugzilla.suse.com/show_bug.cgi?id=1185744#c14 --- Comment #14 from Takashi Iwai <tiwai(a)suse.com> --- TW is a rolling distro, and a daily update may invalidate the things of yesterday :) In this case, the major kernel version changed in between; hence we cannot fix anything about your tested 5.13.x kernel, as the package is already built from a newer version, i.e. a completely new code base. It was too old, literally. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190157] New: No Debug Info packages available for the openSUSE Leap 15.3 (SLE) repository
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190157 Bug ID: 1190157 Summary: No Debug Info packages available for the openSUSE Leap 15.3 (SLE) repository Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: x86-64 OS: openSUSE Leap 15.3 Status: NEW Severity: Major Priority: P5 - None Component: Maintenance Assignee: maintenance(a)opensuse.org Reporter: bugrprt21882(a)online.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Packages supplied by the "Online updates for openSUSE Leap 15.3 (SLE)" repository [openSUSE_Leap_15.3_SLE-Update] do not have any corresponding debuginfo packages. <http://download.opensuse.org/update/leap/15.3/sle/> This leads to errors such as the following when attempting to create a back trace to report by KDE Plasma crashes: Package 'libX11-6-debuginfo-1.6.5-3.21.1.x86_64' not found. Package 'libX11-xcb1-debuginfo-1.6.5-3.21.1.x86_64' not found. Package 'libdbus-1-3-debuginfo-1.12.2-8.11.2.x86_64' not found. Package 'libgcc_s1-debuginfo-10.3.0+git1587-1.6.4.x86_64' not found. Package 'liblz4-1-debuginfo-1.9.2-3.3.1.x86_64' not found. Package 'libpcre1-debuginfo-8.41-6.4.2.x86_64' not found. Package 'libstdc++6-debuginfo-10.3.0+git1587-1.6.4.x86_64' not found. Package 'libsystemd0-debuginfo-246.15-7.11.1.x86_64' not found. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1189448] vmware installer thinks that KVM is running and therefore refuses to install
by bugzilla_noreply＠suse.com 16 Sep '21

16 Sep '21

https://bugzilla.suse.com/show_bug.cgi?id=1189448 https://bugzilla.suse.com/show_bug.cgi?id=1189448#c3 James Fehlig <jfehlig(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jfehlig(a)suse.com --- Comment #3 from James Fehlig <jfehlig(a)suse.com> --- As a workaround, you could blacklist the kvm module. -- You are receiving this mail because: You are on the CC list for the bug.

1 0