December 2011 - openSUSE Security - openSUSE Mailing Lists

[opensuse-security] otrs and permissions file
by Christian 24 Apr '12

24 Apr '12

Hi, for otrs I need this config: (https://build.opensuse.org/package/show?package=otrs&project=network%3Aotrs…) %defattr(0644,%{name},www,0775) %dir /opt/%{name}/var/article %dir /opt/%{name}/var/log %dir /opt/%{name}/var/tmp but obs is complaining: permissions-directory-setuid-bit and I should contact security(a)suse.de Here I am :) Is this acceptable ? Kind Regards Chris -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 6

[opensuse-security] repomd.xml from buildservice security repo has invalid signature
by Armin Herbert 14 Dec '11

14 Dec '11

Hi, when I today refreshed the repos via zypper, this file's signature was invalid: http://download.opensuse.org/repositories/security/openSUSE_11.4/repodata/r… That is, the signature in the provided .asc file was not a valid signature of this file. The .key file contains the very same key this repo was signed with before. I thought I should let someone know, so here you go. Also, it would be nice if you could confirm or falsify. Here are the sha256sums of the failed files: http://susepaste.org/20982404 Here is the repomd.xml: http://susepaste.org/665013 and here its failed signature: http://susepaste.org/69011785 Best regards Armin -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

1 0

[opensuse-security] Re: [security-announce] SUSE-SU-2011:1292-1: important: Security update for xorg-x11-server
by Stefan Seyfried 02 Dec '11

02 Dec '11

Hi, Am 02.12.2011 08:08, schrieb opensuse-security(a)opensuse.org: > <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4028 nothing found at that place > <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4029 Nothing found at that place > http://support.novell.com/security/cve/CVE-2011-4028.html 404 > http://support.novell.com/security/cve/CVE-2011-4029.html 404 > https://bugzilla.novell.com/722944 Permission denied Nice try. FAIL. -- Stefan Seyfried "Dispatch war rocket Ajax to bring back his body!" -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-security+owner(a)opensuse.org

2 1