April 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1131253] Please update PHPunit from 7.0 to 8
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1131253 http://bugzilla.suse.com/show_bug.cgi?id=1131253#c2 Johannes Weberhofer <jweberhofer(a)weberhofer.at> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jiachen.zhang(a)suse.com Flags| |needinfo?(jiachen.zhang@sus | |e.com) --- Comment #2 from Johannes Weberhofer <jweberhofer(a)weberhofer.at> --- jiachen, this should be done by one of the opensuse 15.1 maintainers. We can't -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1121051] FTBFS: gpgme fails since early 2019
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1121051 http://bugzilla.suse.com/show_bug.cgi?id=1121051#c12 --- Comment #12 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2019:1091-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 1121051 CVE References: Sources used: openSUSE Leap 15.0 (src): gpgme-1.10.0-lp150.3.3.1 *** NOTE: This information is not intended to be used for external communication, because this may only be a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1120405] Serial Wacom tablet and touchscreen (X201t) not detected in Tumbleweed/15.0
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1120405 http://bugzilla.suse.com/show_bug.cgi?id=1120405#c31 --- Comment #31 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2019:1093-1: An update that has one recommended fix can now be installed. Category: recommended (low) Bug References: 1120405 CVE References: Sources used: openSUSE Leap 15.0 (src): xf86-input-wacom-0.34.2-lp150.2.3.1 *** NOTE: This information is not intended to be used for external communication, because this may only be a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1123316] YaST2 iSCSI LIO Target does not accept lvm volumes as /dev/vg/lvol for LUN
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1123316 http://bugzilla.suse.com/show_bug.cgi?id=1123316#c20 --- Comment #20 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2019:1098-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1123316 CVE References: Sources used: openSUSE Leap 15.0 (src): yast2-iscsi-lio-server-4.0.12-lp150.2.6.1 *** NOTE: This information is not intended to be used for external communication, because this may only be a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1115118] open-vm-tools 10.3.5 released
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1115118 http://bugzilla.suse.com/show_bug.cgi?id=1115118#c10 --- Comment #10 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2019:1102-1: An update that has 5 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1115118,1121964,1122435,1124397,1126102 CVE References: Sources used: openSUSE Leap 15.0 (src): open-vm-tools-10.3.5-lp150.2.10.2, xmlsec1-1.2.26-lp150.7.2 *** NOTE: This information is not intended to be used for external communication, because this may only be a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1131253] Please update PHPunit from 7.0 to 8
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1131253 http://bugzilla.suse.com/show_bug.cgi?id=1131253#c1 --- Comment #1 from Arjen de Korte <suse+build(a)de-korte.org> --- It's great that someone assigned this to me, but I don't think I have the necessary rights to do so. Or do I? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1130448] cannot suspend while BT audio device is connected
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1130448 http://bugzilla.suse.com/show_bug.cgi?id=1130448#c33 --- Comment #33 from Al Cho <acho(a)suse.com> --- Created attachment 801935 --> http://bugzilla.suse.com/attachment.cgi?id=801935&action=edit journal logs with bluetooth headphone This log is what I use "/usr/lib/bluetooth/bluetoothd -d" and connect with my bt headphone, and then I can reproduce this issue - S3 waked up immediately. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1131253] Please update PHPunit from 7.0 to 8
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1131253 Jiachen Zhang <jiachen.zhang(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|bnc-team-screening(a)forge.pr |suse+build(a)de-korte.org |ovo.novell.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1130448] cannot suspend while BT audio device is connected
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.suse.com/show_bug.cgi?id=1130448 http://bugzilla.suse.com/show_bug.cgi?id=1130448#c32 --- Comment #32 from Al Cho <acho(a)suse.com> --- Thanks for Comment #30 and Comment #31 logs. But there still are no others enough information about this issue in those logs. (In reply to Michal Suchanek from comment #27) > :~> cat /proc/acpi/wakeup > Device S-state Status Sysfs node > LANC S5 *disabled > EHC1 S3 *enabled pci:0000:00:1d.0 > EHC2 S3 *enabled pci:0000:00:1a.0 > XHC S3 *enabled pci:0000:00:14.0 > PCIB S5 *disabled > RP02 S4 *disabled > ECF0 S4 *disabled > RP03 S4 *disabled pci:0000:00:1c.2 > RP04 S5 *disabled pci:0000:00:1c.3 > WNIC S5 *disabled pci:0000:03:00.0 > RP06 S5 *disabled pci:0000:00:1c.5 > NIC S5 *disabled pci:0000:04:00.0 > RP07 S4 *disabled > RP08 S4 *disabled > HST1 S5 *disabled > > FTR reverted the revert in 5.0.4-2.g76ff396-default and observe > > - keypress on the audio device does wakeup the machine immediately > - with or without audio stream running the machine wakes up after a while > (not immediately as with 5.0.2) > - the packet that wakes it up seems to be key management related That is really interesting. I test with enable my EHC1 XHC to S3 by setting enable in BIOS/Power Management - USB Wake Support ( follow the patch describe : a0085f2510e8 Bluetooth: btusb: driver to enable the usb-wakeup feature (v4.14-rc1)) then for testing use Bluetooth mouse (hid-generic 0005:046D:B008.0009: input,hidraw0: BLUETOOTH HID v3.18 Mouse [Bluetooth Laser Travel Mouse] on 10:02:b5:98:71:4f) and Bluetooth touchpad (magicmouse 0005:05AC:030E.000B: input,hidraw0: BLUETOOTH HID v1.60 Mouse [AL's touchpad] on 10:02:b5:98:71:4f) and bluetooth headphones. Only use bluetooth mouse can wake up my laptop (for sure). I will try to find one bluetooth headphone to reproduce and also fix the wakeup from BT (over HID) more properly at the same time. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1131254] New: VUL-0: CVE-2019-10654: lrzip: Invalid memory read and application crash via crafted file
by bugzilla_noreply＠novell.com 02 Apr '19

02 Apr '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1131254 Bug ID: 1131254 Summary: VUL-0: CVE-2019-10654: lrzip: Invalid memory read and application crash via crafted file Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/228521/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: mpluskal(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- The lzo1x_decompress function in liblzo2.so.2 in LZO 2.10, as used in Long Range Zip (aka lrzip) 0.631, allows remote attackers to cause a denial of service (invalid memory read and application crash) via a crafted archive, a different vulnerability than CVE-2017-8845. Upstream issue: https://github.com/ckolivas/lrzip/issues/108 References: https://bugzilla.redhat.com/show_bug.cgi?id=1694847 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-10654 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10654 https://github.com/ckolivas/lrzip/issues/108 -- You are receiving this mail because: You are on the CC list for the bug.

1 1