https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c1 Virgil Brummond changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |uraharakisuke153@gmail.com --- Comment #1 from Virgil Brummond 2013-03-25 02:12:41 UTC --- I can confirm DES password encryption being the default. I installed using openSUSE 12.3 64-bit Gnome Live CD. Does this cause any issues? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c2 Thomas Fehr changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|yast2-maintainers@suse.de |jsuchome@suse.com --- Comment #2 from Thomas Fehr 2013-03-25 17:20:28 UTC --- Reassigned to yast2-users. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c4 --- Comment #4 from Alberto Passalacqua 2013-03-31 03:53:17 UTC --- Created an attachment (id=532736) --> (http://bugzilla.novell.com/attachment.cgi?id=532736) login.defs file -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c6 Jiří Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jsuchome@suse.com AssignedTo|jsuchome@suse.com |kukuk@suse.com --- Comment #6 from Jiří Suchomel 2013-04-02 06:52:41 UTC --- (In reply to comment #5)

I have attached my login.defs above, but it contains sha-512 because I have manually corrected the problem in YaST when I reported it.

Hm, than we cannot know for sure. Anyway, it looks like a pwdutils bug of not updating the files on upgrade. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c Thomas Biege changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team@suse.de |bnc-team-screening@forge.pr | |ovo.novell.com -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c9 Thorsten Kukuk changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO InfoProvider| |albert.passalacqua@gmail.co | |m --- Comment #9 from Thorsten Kukuk 2013-04-17 06:47:49 UTC --- But in that case, you have a rpmnew file next to it, and you have to merge manual. Don't know how this looks like today for openSUSE, but everywhere else it is documented that you have to look at the .rpm{new|save} files. And this does not match comment #1, which speaks about 12.3 LiveDVD installation, thus no update. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c11 --- Comment #11 from Jiří Suchomel 2013-04-23 05:48:28 UTC --- Virgil, that seems to be different problem than originally reported one. Do you know how /etc/login.defs looked after your installation? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c13 --- Comment #13 from Jiří Suchomel 2013-04-25 08:22:46 UTC --- I tested live installation and right after that, ENCRYPT_METHOD seems to be set correctly. But when I run yast2 security, it shows DES, like reported here. Seems like a problem in yast2-security. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c14 Jiří Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |NEEDINFO InfoProvider| |albert.passalacqua@gmail.co | |m --- Comment #14 from Jiří Suchomel 2013-04-25 12:27:52 UTC --- Could you try YaST package from https://build.opensuse.org/package/show?package=yast2-security&project=home%3Ajsuchome%3A12.3 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c16 Jiří Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- InfoProvider|albert.passalacqua@gmail.co |maintenance@opensuse.org |m | --- Comment #16 from Jiří Suchomel 2013-04-26 06:34:53 UTC --- Thanks, Virgil, exactly like my tests. Maintenance: can I prepare yast2-security for update? -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c18 Jiří Suchomel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED --- Comment #18 from Jiří Suchomel 2013-04-26 12:15:23 UTC ---

osc maintenancerequest home:jsuchome:12.3 yast2-security openSUSE:12.3

Using target project 'openSUSE:Maintenance' 173508 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=810600 https://bugzilla.novell.com/show_bug.cgi?id=810600#c20 --- Comment #20 from Swamp Workflow Management 2013-06-10 10:17:42 UTC --- openSUSE-RU-2013:0952-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 810600 CVE References: Sources used: openSUSE 12.3 (src): yast2-security-2.23.6-1.8.1 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.