openSUSE Security December 2011

security@lists.opensuse.org

3 participants
3 discussions

[opensuse-security] otrs and permissions file

by Christian

Hi, for otrs I need this config: (https://build.opensuse.org/package/show?package=otrs&project=network%3Aotrs…) %defattr(0644,%{name},www,0775) %dir /opt/%{name}/var/article %dir /opt/%{name}/var/log %dir /opt/%{name}/var/tmp but obs is complaining: permissions-directory-setuid-bit and I should contact security(a)suse.de Here I am :) Is this acceptable ? Kind Regards Chris -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

10 years, 2 months

[opensuse-security] repomd.xml from buildservice security repo has invalid signature

by Armin Herbert

Hi, when I today refreshed the repos via zypper, this file's signature was invalid: http://download.opensuse.org/repositories/security/openSUSE_11.4/repodata/r… That is, the signature in the provided .asc file was not a valid signature of this file. The .key file contains the very same key this repo was signed with before. I thought I should let someone know, so here you go. Also, it would be nice if you could confirm or falsify. Here are the sha256sums of the failed files: http://susepaste.org/20982404 Here is the repomd.xml: http://susepaste.org/665013 and here its failed signature: http://susepaste.org/69011785 Best regards Armin -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

10 years, 6 months

[opensuse-security] Re: [security-announce] SUSE-SU-2011:1292-1: important: Security update for xorg-x11-server

by Stefan Seyfried

Hi, Am 02.12.2011 08:08, schrieb opensuse-security(a)opensuse.org: > <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4028 nothing found at that place > <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4029 Nothing found at that place > http://support.novell.com/security/cve/CVE-2011-4028.html 404 > http://support.novell.com/security/cve/CVE-2011-4029.html 404 > https://bugzilla.novell.com/722944 Permission denied Nice try. FAIL. -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

10 years, 7 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

1996

openSUSE Security December 2011