2020-04-22

mail (1:4)

• no summary given (4 refs); 2021-02.1339, 2021-03.730, 2021-04.373

bugs (30)

• 1170130: Recovery mode: Need to confirm “allow vendor change” hundreds of times
• 1170146: systemd: /usr/share/factory/etc contains inconsistent data
• 1170161: AUDIT-FIND: enlightenment: enlightenment_system: _store_mount_verify() follows symlinks in /media/$user
• 1170162: AUDIT-FIND: enlightenment: enlightenment_system: _store_umount_verify(): does not protect against shell metacharacters and relative path components
• 1170163: AUDIT-FIND: enlightenment: enlightenment_system: _store_device_verify() limitations are insufficient
• 1170165: AUDIT-FIND: enlightenment: enlightenment_system: _cb_l2ping_ping() performs an unbounded sscanf() on untrusted input data, allowing a stack buffer overflow
• 1170166: AUDIT-FIND: enlightenment: enlightenment_system: _cb_l2ping_ping() SEGFAULTs when no parameter is passed.
• 1170169: AUDIT-FIND: enlightenment: enlightenment_system: /etc/enlightenment/sysactions.conf limitations are ineffective
• 1170174: AUDIT-FIND: enlightenment: enlightenment_system: setcwd() is missing and a check for “libcurl.so.5” allows arbitrary file existence tests
• 1170177: AUDIT-FIND: enlightenment: enlightenment_system: _cb_stdio_in_read(): potentially large memory allocation based on untrusted user data
• 1170178: AUDIT-FIND: enlightenment: enlightenment_system: ecore_file_app_installed(): can be tricked into returning bogus results
• 1170224: No sound card list in yast2-sound
• 1170232: Kernel spec self obsoletes
• 1170255: Dracut 049 / 050 use kernel device names instead of udev names when calling ifup
• 1170259: [HPC,pmix] Header and config files should be ‘noarch’
• 1170272: pam_systemd Failed to get user record for Active Directory User
• 1170286: Update libyui-rake build targets
• 1170339: Realtek r8169 Ethernet driver cause ‘systemctl suspend’ to hang
• 1170344: Tumbleweed 20200417+ (plymouth): kernel booting stop at “BTRFS info” output
• 1170376: Enable -moutline-atomics flag for GCC in Tumbleweed
• 1170378: guile .go files vary from parallelism
• 1170409: update-test-trivial: TW test maintenance updates do not work
• 1170418: nothing provides python2-rpm needed by rpmdevtools
• 1170443: su seems to not work any more
• 1170459: AUDIT-FIND: CVE-2020-10737: oddjob-mkhomedir: race condition when copying skeleton tree
• 1170466: [Build 20200417] openQA test fails in select_patterns - Missing package grub2-powerpc-ieee1275 on NET install media
• 1170493: Some armv7 boards boots with network inactive since Snapshot 20200421
• 1170494: YaST adds all subvolumes to /etc/fstab
• 1170495: clock_gettime64() fails with EPERM in a docker container
• 1170496: YaST main menu doesn’t work if run with “su”, works fine only with “su -“

links

• mail announcement