April 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1198087] New: VUL-1: CVE-2021-43008: adminer: Improper Access Control allows an attacker to achieve Arbitrary File Read on the remote server
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1198087 Bug ID: 1198087 Summary: VUL-1: CVE-2021-43008: adminer: Improper Access Control allows an attacker to achieve Arbitrary File Read on the remote server Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/328115/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-43008 Improper Access Control in Adminer versions 1.12.0 to 4.6.2 (fixed in version 4.6.3) allows an attacker to achieve Arbitrary File Read on the remote server by requesting the Adminer to connect to a remote MySQL database. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-43008 https://github.com/vrana/adminer/releases/tag/v4.6.3 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43008 https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability https://www.adminer.org/ https://podalirius.net/en/cves/2021-43008/ -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1198085] New: Test-bug.
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198085 Bug ID: 1198085 Summary: Test-bug. Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: mozilla-bugs(a)suse.de Reporter: martin.sirringhaus(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Test bug, please ignore. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1198066] [Staging] yast2-ntp relies on the presence of /sbin/netconfig
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1198066 https://bugzilla.suse.com/show_bug.cgi?id=1198066#c2 Steffen Winterfeldt <snwint(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jreidinger(a)suse.com, | |kanderssen(a)suse.com Flags| |needinfo?(kanderssen(a)suse.c | |om), | |needinfo?(jreidinger(a)suse.c | |om) --- Comment #2 from Steffen Winterfeldt <snwint(a)suse.com> --- It updates the target system's config and then runs netconfig. So it makes sense to run it in the target system, in my view. In that case, a package dependency would not make much sense, as yast need not be available in the target system. Josef, Knut, could you comment? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1197552] New: VUL-0: CVE-2022-1096: chromium: Type Confusion in V8
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1197552 Bug ID: 1197552 Summary: VUL-0: CVE-2022-1096: chromium: Type Confusion in V8 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: Andreas.Stieger(a)gmx.de Reporter: Andreas.Stieger(a)gmx.de QA Contact: security-team(a)suse.de CC: gmbr3(a)opensuse.org Found By: Security Response Team Blocker: --- Fixed in Chromium 99.0.4844.84: CVE-2022-1096: Type Confusion in V8 Public exploit exists References: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-des… https://crbug.com/1309225 -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1197163] VUL-0: chromium: multiple security issues fixed in 99.0.4844.74
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1197163 http://bugzilla.opensuse.org/show_bug.cgi?id=1197163#c6 --- Comment #6 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1197163) was mentioned in https://build.opensuse.org/request/show/966962 Factory / qt6-webengine -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1189165] Regression in nVidia 470.57.02 since 460.84: Internal laptop screen cannot be enabled any longer
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1189165 https://bugzilla.suse.com/show_bug.cgi?id=1189165#c41 --- Comment #41 from Stefan Dirsch <sndirsch(a)suse.com> --- 510.60 meanwhile. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1188745] nvidia gfx kernel module: kexec reboot fails since 5.13.4
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1188745 https://bugzilla.suse.com/show_bug.cgi?id=1188745#c29 --- Comment #29 from Stefan Dirsch <sndirsch(a)suse.com> --- 510.60 available now. But not mentioned in changelog, that this issue would have been fixed ... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190392] nvidia-drm [RTX 2070]/Intel UHD Graphics 630: fails since driver release 470.63.01
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1190392 https://bugzilla.suse.com/show_bug.cgi?id=1190392#c15 --- Comment #15 from Stefan Dirsch <sndirsch(a)suse.com> --- 510.60 meanwhile ... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191346] Second screen black on X11 with nvidia offload
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1191346 https://bugzilla.suse.com/show_bug.cgi?id=1191346#c14 --- Comment #14 from Stefan Dirsch <sndirsch(a)suse.com> --- 510.60 meanwhile ... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193852] armv7 kernel crashes on lzo1x_1_do_compress+0xe8/0x600
by bugzilla_noreply＠suse.com 05 Apr '22

05 Apr '22

https://bugzilla.suse.com/show_bug.cgi?id=1193852 https://bugzilla.suse.com/show_bug.cgi?id=1193852#c19 --- Comment #19 from Takashi Iwai <tiwai(a)suse.com> --- Those patches should be merged to SLE15-SP4-GA kernel. David, I suppose those are safe to be cherry-picked to GA kernel (for 64bit systems), right? -- You are receiving this mail because: You are on the CC list for the bug.

1 0