July 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1169238] AUDIT-STALE: enlightenment: changes to binaries requiring suid bits
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1169238 Bug 1169238 depends on bug 1170161, which changed state. Bug 1170161 Summary: AUDIT-FIND: enlightenment: enlightenment_system: _store_mount_verify() follows symlinks in /media/$user https://bugzilla.suse.com/show_bug.cgi?id=1170161 What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1170162] New: AUDIT-FIND: enlightenment: enlightenment_system: _store_umount_verify(): does not protect against shell metacharacters and relative path components
by bugzilla_noreply＠novell.com 05 Jul '22

05 Jul '22

http://bugzilla.suse.com/show_bug.cgi?id=1170162 Bug ID: 1170162 Summary: AUDIT-FIND: enlightenment: enlightenment_system: _store_umount_verify(): does not protect against shell metacharacters and relative path components Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: simonf.lees(a)suse.com Reporter: matthias.gerstner(a)suse.com QA Contact: qa-bugs(a)suse.de CC: security-team(a)suse.de Blocks: 1169238 Found By: --- Blocker: --- +++ This bug was initially created as a clone of Bug #1169238 This function tries to make sure that the user can only unmount his own mounts below /media/$user. It also rejects backslashes in the path. However it does not reject relative path components or shell characters. - this allows a regular user to unmount arbitrary file systems by passing paths like "/media/$user/../../tmp. - since the unmount is performed by calling the `umount` utility via "/bin/sh", shell metacharacters will be interpreted. Passing a path like '/media/testuser/$(date)' will cause the setuid-root program to execute the `date` program as root. This leads to full code execution as root. The only requirement is that a directory of the same name exists. Spaces are also allowed in the path, therefore even complex commands can be executed as root. I recommend to reject relative path components and shell metacharacters in this function to fix the issue. -- You are receiving this mail because: You are on the CC list for the bug.

2 11

[Bug 1169238] AUDIT-STALE: enlightenment: changes to binaries requiring suid bits
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1169238 Bug 1169238 depends on bug 1170162, which changed state. Bug 1170162 Summary: AUDIT-FIND: enlightenment: enlightenment_system: _store_umount_verify(): does not protect against shell metacharacters and relative path components https://bugzilla.suse.com/show_bug.cgi?id=1170162 What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201066] kernel upgrade fails with Failed to enroll new keys
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1201066 https://bugzilla.suse.com/show_bug.cgi?id=1201066#c4 --- Comment #4 from Darragh O'Reilly <doreilly(a)suse.com> --- Created attachment 860011 --> https://bugzilla.suse.com/attachment.cgi?id=860011&action=edit strace output openat(AT_FDCWD, "/sys/firmware/efi/efivars/MokNew-605dab50-e046-4300-abb6-3dd810dd8b23", O_RDONLY) = -1 ENOENT (No such file or directory) openat(AT_FDCWD, "/sys/firmware/efi/efivars/MokNew-605dab50-e046-4300-abb6-3dd810dd8b23", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EROFS (Read-only file system) ioctl(-1, FS_IOC_SETFLAGS, [0]) = -1 EBADF (Bad file descriptor) write(2, "Failed to enroll new keys\n", 26) = 26 exit_group(-1) = ? +++ exited with 255 +++ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1200879] New: Installing packages, "remaining" stuck at same number of packages instead of decreasing
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1200879 Bug ID: 1200879 Summary: Installing packages, "remaining" stuck at same number of packages instead of decreasing Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: swilmet(a)informatique-libre.be QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- During the installation of openSUSE Leap 15.4, when the packages were being installed there was a progress bar with: > Installing packages (remaining: [...] GB, N packages) Something like that. The number of GB/MB were correctly decreasing, while the number of packages N was stuck at the same number during the installation of all the packages (it was 2200 packages if I recall correctly, with a standard GNOME installation). -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1200425] New: Zypper fails to refresh repo for first time
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1200425 Bug ID: 1200425 Summary: Zypper fails to refresh repo for first time Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)suse.de Reporter: dheidler(a)suse.com QA Contact: qa-bugs(a)suse.de CC: ma(a)suse.com Found By: --- Blocker: --- Created attachment 859529 --> http://bugzilla.opensuse.org/attachment.cgi?id=859529&action=edit zypper logs for the failing refresh call Steps to reproduce: podman run --rm -it registry.opensuse.org/opensuse/leap bash zypper -n addrepo https://download.opensuse.org/repositories/devel:/openQA/openSUSE_Leap_15.4 'devel:openQA' zypper -n --gpg-auto-import-keys refresh This will lead to the error: Repository 'devel:openQA' is invalid. [devel:openQA|https://download.opensuse.org/repositories/devel:/openQA/openS…] Valid metadata not found at specified URL History: - File './repodata/2ad6a48622cfbd2c7a5da44242c2b188c7c97fd31a9e08f2951650964a589bba-primary.xml.gz' not found on medium 'https://download.opensuse.org/repositories/devel:/openQA/openSUSE_Leap_15.4' - Can't provide ./repodata/2ad6a48622cfbd2c7a5da44242c2b188c7c97fd31a9e08f2951650964a589bba-primary.xml.gz Please check if the URIs defined for this repository are pointing to a valid repository. Skipping repository 'devel:openQA' because of the above error. Even though the repo is valid. And the odd thing is that when calling "zypper -n --gpg-auto-import-keys refresh" again, it will work from now on. Related Ticket: https://progress.opensuse.org/issues/111587 -- You are receiving this mail because: You are on the CC list for the bug.

1 27

[Bug 1201215] VUL-0: CVE-2017-18359: librttopo: denial of service in rtgeom_to_x3d3()
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1201215 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201204] New: regression: cannot build arm-trusted-firmware on 15.3/15.4 - missing cross-arm-none-gcc7
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201204 Bug ID: 1201204 Summary: regression: cannot build arm-trusted-firmware on 15.3/15.4 - missing cross-arm-none-gcc7 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: screening-team-bugs(a)suse.de Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On 15.2 cross-arm-none-gcc7 is available and arm-trusted-firmware can be built. This is no longer the case on 15.3/15.4. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1201198] /etc/sysconfig/irqbalance should be migrated to use IRQBALANCE_BANNED_CPULIST
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1201198 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Severity|Minor |Enhancement -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201212] New: VUL-1: CVE-2022-32325: JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c.
by bugzilla_noreply＠suse.com 05 Jul '22

05 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1201212 Bug ID: 1201212 Summary: VUL-1: CVE-2022-32325: JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/336142/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: avvissu(a)yandex.by Reporter: cathy.hu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2022-32325 JPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ memory access at jpegoptim.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-32325 http://www.cvedetails.com/cve/CVE-2022-32325/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32325 https://github.com/tjko/jpegoptim/issues/107 -- You are receiving this mail because: You are on the CC list for the bug.

1 3