December 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1118739] Error "Failed to get a list of devices: Forbidden" when adding printer
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

1 0

[Bug 1158466] Firefox 71.0 crashes on startup
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1158466 http://bugzilla.opensuse.org/show_bug.cgi?id=1158466#c6 --- Comment #6 from Frank Kruger <fkrueger(a)mailbox.org> --- I will check the new build tonight. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1099167] Cannot print to old CUPS server because IPP 2.0 is used despite client.conf
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=1099167 http://bugzilla.suse.com/show_bug.cgi?id=1099167#c4 Johannes Meixner <jsmeix(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #4 from Johannes Meixner <jsmeix(a)suse.com> --- Currently we have CUPS 2.3 at https://build.opensuse.org/package/show/Printing/cups so I assume this issue is meanwhile fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1105274] New: HP 3050 Printer driver : wrong script or pattern for automatic configuration
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=1105274 Bug ID: 1105274 Summary: HP 3050 Printer driver : wrong script or pattern for automatic configuration Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: SLED 15 Status: NEW Severity: Normal Priority: P5 - None Component: Printing Assignee: jsmeix(a)suse.com Reporter: luisangelgonzo(a)gmail.com QA Contact: jsmeix(a)suse.com Found By: --- Blocker: --- In openSUSE Leap 15, When plugging HP 3050 Printer, GNOME or Yast's "Printers" configures automatically a Fujitsu driver instead of HP's, and it doesn't manage the printer to respond. I've had to manually install hplip and reconfigure the device. Maybe it's a wrong pattern/script in automatic configuration of printers? -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1150549] New: AUDIT-1: munin: review of cron job file(s): /etc/cron.d/munin
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=1150549 Bug ID: 1150549 Summary: AUDIT-1: munin: review of cron job file(s): /etc/cron.d/munin Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: matthias.gerstner(a)suse.com QA Contact: qa-bugs(a)suse.de CC: jsegitz(a)suse.com, malte.kraus(a)suse.com, matthias.gerstner(a)suse.com, wolfgang(a)rosenauer.org Blocks: 1150175 Found By: --- Blocker: --- +++ This bug was initially created as a clone of Bug #1150175 As discussed in the proactive security team we want to restrict the installation of cron job files in the future. To achieve this we first need to cover the currently existing packages that do this. munin installs a cron file in /etc/cron.d/munin. It should be reviewed and whitelisted if all is well. -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1143959] Reduce kernel firmware file installations
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=1143959 http://bugzilla.suse.com/show_bug.cgi?id=1143959#c14 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(tiwai(a)suse.com) | --- Comment #14 from Takashi Iwai <tiwai(a)suse.com> --- It's an openSUSE stuff, so Bugzilla should be sufficient. I don't mind if you guys open a JIRA entry for handling in your side, though. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1158294] Mailing lists show garbage footers if a mail is encoded with Base64
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

1 0

[Bug 1158393] VUL-0: CVE-2019-19331: knot: Denial of service through high CPU utilization
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=1158393 http://bugzilla.suse.com/show_bug.cgi?id=1158393#c4 Alexandros Toptsoglou <atoptsoglou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|SUSE Security Internal, | |novellonly | Component|Incidents |Security Version|unspecified |Leap 15.0 Assignee|mrueckert(a)suse.com |i(a)marguerite.su Product|SUSE Security Incidents |openSUSE Distribution Target Milestone|--- |Leap 15.0 Summary|VUL-0: EMBARGOED: |VUL-0: CVE-2019-19331: |CVE-2019-19331: knot: |knot: Denial of service |Denial of service through |through high CPU |high CPU utilization |utilization QA Contact|security-team(a)suse.de |qa-bugs(a)suse.de --- Comment #4 from Alexandros Toptsoglou <atoptsoglou(a)suse.com> --- now public through oss [1] Hello everyone, here are some details on the vulnerability (fix) disclosed today. Impact ====== Some DNS packets might take even a few seconds to process with full CPU utilization, allowing DoS. Unembargo date ============== Wednesday 4th December 2019, afternoon GMT Fixes ===== Most of the issue can be mitigated by updating libknot dependency to >= 2.9.1. Otherwise a complete fix was released in Knot Resolver 4.3.0, which also does not require libknot update. The attached patches are applicable to recent releases (when doc diff is stripped). [Affected version (required)]: Knot Resolver <= 4.2.2 [Fixed version (optional)]: Knot Resolver 4.3.0 [Vulnerability type]: CWE-407: Inefficient Algorithmic Complexity [Impact of exploitation]: Denial of service through high CPU utilization. [Description of vulnerability]: DNS replies with very many resource records might be processed very inefficiently, in extreme cases taking even several CPU seconds for each such uncached message. For example, a few thousand A records can be squashed into one DNS message (limit is 64kB). To execute an attack it is enough to: + own a rogue authoritative server or utilize an existing name with a huge RRset, and + trigger DNS query for that name from the resolver to be attacked Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None Scope (S): Unchanged Confidentiality (C): None Integrity (I): None Availability (A): High Technical Details: CWE-407 [Reference URL]: https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v4.3.0 [1]https://seclists.org/oss-sec/2019/q4/119 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1047897] New: conflict in cups debuginfo
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=1047897 Bug ID: 1047897 Summary: conflict in cups debuginfo Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Printing Assignee: jsmeix(a)suse.com Reporter: ohering(a)suse.com QA Contact: jsmeix(a)suse.com Found By: --- Blocker: --- openSUSE Tumbleweed 20170524-0 -> 20170708-0 File /usr/lib/debug/usr/lib/cups/filter/foomatic-rip.debug from install of cups-filters-debuginfo-1.14.0-1.1.x86_64 (debug) conflicts with file from package cups-filters-foomatic-rip-debuginfo-1.13.3-2.2.x86_64 (@System) File /usr/lib/debug/usr/lib/cups/filter/gstoraster.debug from install of cups-filters-debuginfo-1.14.0-1.1.x86_64 (debug) conflicts with file from package cups-filters-ghostscript-debuginfo-1.13.3-2.2.x86_64 (@System) File /usr/lib/debug/usr/lib64/libcupsfilters.so.1.0.0.debug from install of cups-filters-debuginfo-1.14.0-1.1.x86_64 (debug) conflicts with file from package cups-filters-ghostscript-debuginfo-1.13.3-2.2.x86_64 (@System) File /usr/lib/debug/usr/sbin/cups-browsed.debug from install of cups-filters-debuginfo-1.14.0-1.1.x86_64 (debug) conflicts with file from package cups-filters-cups-browsed-debuginfo-1.13.3-2.2.x86_64 (@System) -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1143959] Reduce kernel firmware file installations
by bugzilla_noreply＠novell.com 05 Dec '19

05 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=1143959 http://bugzilla.suse.com/show_bug.cgi?id=1143959#c13 Lukas Ocilka <locilka(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tiwai(a)suse.com Flags| |needinfo?(tiwai(a)suse.com) --- Comment #13 from Lukas Ocilka <locilka(a)suse.com> --- Please provide link to JIRA. It's a feature request. -- You are receiving this mail because: You are on the CC list for the bug.

1 0