March 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1208745] VUL-0: CVE-2023-27371: libmicrohttpd: parser bug that could be used to crash servers using the MHD_PostProcessor
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208745 https://bugzilla.suse.com/show_bug.cgi?id=1208745#c1 Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- URL| |https://smash.suse.de/issue | |/358812/ Assignee|security-team(a)suse.de |coldpool(a)suse.de --- Comment #1 from Hu <cathy.hu(a)suse.com> --- Affected: - SUSE:SLE-12:Update/libmicrohttpd 0.9.30 - SUSE:SLE-15:Update/libmicrohttpd 0.9.57 - openSUSE:Factory/libmicrohttpd 0.9.75 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208745] VUL-0: CVE-2023-27371: libmicrohttpd: parser bug that could be used to crash servers using the MHD_PostProcessor
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

1 0

[Bug 1177994] [Build 20201021] Warning about SSH port or service closed/disabled not present in AutoYaST installation
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1177994 Joaqu�n Rivera <jeriveramoya(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(jeriveramoya@suse | |.com) | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208652] (MicroOS) no video thumbnails on Dolphin or videoplayback on mpv (rpm)
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208652 https://bugzilla.suse.com/show_bug.cgi?id=1208652#c3 Jan Engelhardt <jengelh(a)inai.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #3 from Jan Engelhardt <jengelh(a)inai.de> --- in factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208779] New: 2nd instance of xfce panels's workplace switcher ignores config
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208779 Bug ID: 1208779 Summary: 2nd instance of xfce panels's workplace switcher ignores config Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Xfce Assignee: bnc-team-xfce(a)forge.provo.novell.com Reporter: haenig(a)cosifan.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I use a 2 monitor setting (left/right) with one panel each. Each panel has a separate set of items but both have a workplace switcher. For both of these instances I use Appearance: Miniature View Number of Rows: 2 after logging out/in the first instance is double rowed O.K., but the second instance is only single rowed. for both plugins the file ~/.config/xfce4/xfconf/xfce-perchannel-xml/xfce4-panel.xml contains <property name="rows" type="uint" value="2"/> While playing around I found out: Whereas for the Workplace Switcher Properties "Appearance", "Show Workspace Number" as well as for "Switch workspaces using the mouse wheel" a change of the respective setting only modifies the chosen instance, a change in "Number of rows" always modifies both (all?) Instances. also, if I set first instance: Appearance: Miniature View second instance: Appearance: Buttons => Layout is preserved after logging out/in first instance: Appearance: Buttons second instance: Appearance: Buttons => Layout is preserved after logging out/in first instance: Appearance: Buttons second instance: Appearance: Miniature View => Layout is wrong (whereas first instance is double rowed O.K., second instance is single rowed) after logging out/in first instance: Appearance: Miniature View second instance: Appearance: Miniature View => Layout is wrong (whereas first instance is double rowed O.K., second instance is single rowed) after logging out/in this is regardless of the panel's row size (my default is 36px, tried as well 80px) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208724] Video Intel awaking w wrong Brightness level
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208724 https://bugzilla.suse.com/show_bug.cgi?id=1208724#c2 Jiri Slaby <jslaby(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |jslaby(a)suse.com, | |marco.calistri(a)yahoo.com.br Resolution|FIXED |--- Assignee|kernel-bugs(a)opensuse.org |jslaby(a)suse.com Flags| |needinfo?(marco.calistri@ya | |hoo.com.br) --- Comment #2 from Jiri Slaby <jslaby(a)suse.com> --- (In reply to Marco Calistri from comment #1) > GRUB_CMDLINE_LINUX_DEFAULT="resume=/dev/disk/by-uuid/4ff65e75-c664-43d8-ab25- > 25d85336f6b8 mitigations=auto quiet acpi_backlight=native" Could you attach the output of dmidecode, so that we can hardwire it to the kernel and not everyone has to specify this parameter for this PC model? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1208238] New: libyui build failure with GCC 13
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208238 Bug ID: 1208238 Summary: libyui build failure with GCC 13 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: shundhammer(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- This is a Bugzilla mirror of libyui/gh#91 https://github.com/libyui/libyui/issues/91 reported by marxin (Martin Li��ka): libyui build failures with GCC 13 because of warnings "'virtual bool NCPopup::postAgain()' was hidden [-Werror=overloaded-virtual=]". Since we promote compiler warnings to errors, that warning causes the build to fail. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1208775] New: Disable char/pcmcia drivers
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208775 Bug ID: 1208775 Summary: Disable char/pcmcia drivers Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: jslaby(a)suse.com Reporter: jslaby(a)suse.com QA Contact: qa-bugs(a)suse.de CC: mkubecek(a)suse.com Found By: --- Blocker: --- These drivers are about to be removed: https://lore.kernel.org/all/20230222092302.6348-2-jirislaby@kernel.org/ D drivers/char/pcmcia/cm4000_cs.c D drivers/char/pcmcia/cm4040_cs.c D drivers/char/pcmcia/cm4040_cs.h D drivers/char/pcmcia/scr24x_cs.c D drivers/char/pcmcia/synclink_cs.c We drag CVE patches for some of these drivers in master+stable: patches.suse/char-pcmcia-cm4000_cs-Fix-use-after-free-in-cm4000_f.patch patches.suse/char-pcmcia-cm4040_cs-Fix-use-after-free-in-reader_f.patch patches.suse/char-pcmcia-scr24x_cs-Fix-use-after-free-in-scr24x_f.patch as fixes for: bug 1204894 (CVE-2022-44032), bug 1204922 (CVE-2022-44033), and bug 1204901 (CVE-2022-44034), respectively. They never got it to upstream. So let's just disable all of them and drop the patches afterwards. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1208766] Kernel 6.2.1 does not suspend/hibernate anymore for AMD Ryzen 7 Pro
by bugzilla_noreply＠suse.com 01 Mar '23

01 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208766 https://bugzilla.suse.com/show_bug.cgi?id=1208766#c2 Jiri Slaby <jslaby(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jslaby(a)suse.com Assignee|kernel-bugs(a)opensuse.org |jlee(a)suse.com --- Comment #2 from Jiri Slaby <jslaby(a)suse.com> --- Joey, how to enable hibernate support with lockdown again? -- You are receiving this mail because: You are on the CC list for the bug.

1 0