April 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1029976] New: sysvinit-tools has binaries in /bin
by bugzilla_noreply＠novell.com 10 May '21

10 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1029976 Bug ID: 1029976 Summary: sysvinit-tools has binaries in /bin Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: daniel.molkentin(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- sysvinit-tools is one of the remaining packages in Tumbleweed to install binaries to /bin. Please make sure all binaries previously in /usr go to %_bindir (aka /usr/bin), and /bin contains a symlink to those. See https://bugzilla.opensuse.org/show_bug.cgi?id=1029961 for an overview. If you need assistance, don't hesitate to ask. General discussions should happen in the meta bug (see previous link). -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1091516] New: gdm login screen is scaled to 200% apparently
by bugzilla_noreply＠novell.com 10 May '21

10 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1091516 Bug ID: 1091516 Summary: gdm login screen is scaled to 200% apparently Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: bnc-team-gnome(a)forge.provo.novell.com Reporter: wolfgang(a)rosenauer.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I've got a 14 inch laptop with resolution 2560x1440. My Gnome session settings are to not scale (100%) and I only scale fonts to my needs. Still GDM decides to scale my screen which looks like 200%. Ok, GDM does not know anything about my personal settings at this point but it seems scaling to 200% with the resolution and size as outlined above is quite overkill? -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1079832] New: VUL-0: CVE-2018-6789: exim: Buffer overflow in an utility function
by bugzilla_noreply＠novell.com 06 May '21

06 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1079832 Bug ID: 1079832 Summary: VUL-0: CVE-2018-6789: exim: Buffer overflow in an utility function Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/199626/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: jsegitz(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- Heiko Schlittermann: CVE-2018-6789 Exim 4.90 and earlier =================================== There is a buffer overflow in an utility function, if some pre-conditions are met. Using a handcrafted message, remote code execution seems to be possible. A patch exists already and is being tested. Currently we're unsure about the severity, we *believe*, an exploit is difficult. A mitigation isn't known. Next steps: * t0: Distros will get access to our "security" non-public git repo (based on the SSH keys known to us) * t0 +7d: Patch will be published on the official public git repo t0 will be around 2018-02-08. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-6789 http://seclists.org/oss-sec/2018/q1/133 https://exim.org/security/CVE-2018-6789.txt -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1123411] New: falkon browser seeks libs in /usr/bin
by bugzilla_noreply＠novell.com 03 May '21

03 May '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1123411 Bug ID: 1123411 Summary: falkon browser seeks libs in /usr/bin Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: aarch64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: j.reitsma(a)hccnet.nl QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- The fakon browser complains about /usr/bin/libGLESv2.so not being available. When I, just to see what would happen, copie the GLES lib from /usr/lib64 to /usr/bin, falkon complains about /usr/bin/libEGL.so not being found. These libs should be searched in /usr/lib64, not in /usr/bin/ -- You are receiving this mail because: You are on the CC list for the bug.

2 12

[Bug 1095817] New: containers packages fail randomly due to %check
by bugzilla_noreply＠novell.com 30 Apr '21

30 Apr '21

http://bugzilla.suse.com/show_bug.cgi?id=1095817 Bug ID: 1095817 Summary: containers packages fail randomly due to %check Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Containers Assignee: containers-bugowner(a)suse.de Reporter: asarai(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- We've had tests in the %check section for a long time, but to be honest they've been nothing but a source of trouble. We end up having to run smoke tests anyway, and I'm not aware of a single time %check has actually caught an issue (and it has also caused many issues). So we have to remove it from basically all of our container packages (docker/containerd/runc/docker-libnetwork and the corresponding Kubic packages). -- You are receiving this mail because: You are on the CC list for the bug.

2 16

[Bug 1051429] New: docker and runc failed to build with kernel 4.12 on ppc64le
by bugzilla_noreply＠novell.com 30 Apr '21

30 Apr '21

http://bugzilla.suse.com/show_bug.cgi?id=1051429 Bug ID: 1051429 Summary: docker and runc failed to build with kernel 4.12 on ppc64le Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: PowerPC-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mlin(a)suse.com QA Contact: qa-bugs(a)suse.de CC: asarai(a)suse.com, jmassaguerpla(a)suse.com, jslaby(a)suse.com, normand(a)linux.vnet.ibm.com Found By: --- Blocker: --- Currently we see docker[1] and runc[2] failed to build with kernel 4.12[3] in the staging project, and it does happened only on ppc64le build. [1] https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… [2] https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:… [3] https://build.opensuse.org/request/show/512894 -- You are receiving this mail because: You are on the CC list for the bug.

2 25

[Bug 1102261] New: "zypper patch --with update" should implicitly assume "--with-optional" and not tell me that I need to do something more to install optional patches, since it will install them anyway
by bugzilla_noreply＠novell.com 29 Apr '21

29 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1102261 Bug ID: 1102261 Summary: "zypper patch --with update" should implicitly assume "--with-optional" and not tell me that I need to do something more to install optional patches, since it will install them anyway Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: All OS: All Status: NEW Severity: Enhancement Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)forge.provo.novell.com Reporter: antoine.mechelynck(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I'm reporting this in severity "enhancement" because it is an RFE, not a bug. The following is from my latest run of "zypper patch --with-update": > Loading repository data... > Reading installed packages... > Patch '8464-1' is optional. Use 'zypper in patch:8464' to install it, or > '--with-optional' to include all optional patches. > Resolving package dependencies... > > The following 2 NEW packages are going to be installed: > ffmpeg-3 libzimg2 > > The following package is going to be REMOVED: > ffmpeg > > The following 14 packages are going to be upgraded: > libavcodec57 libavcodec58 libavdevice57 libavfilter6 libavformat57 libavformat58 > libavresample3 libavutil55 libavutil56 libpostproc54 libsodium23 libswresample2 > libswresample3 libswscale4 > > 14 packages to upgrade, 2 new, 1 to remove. > Overall download size: 8.5 MiB. Already cached: 0 B. After the operation, additional > 997.9 KiB will be used. > Continue? [y/n/...? shows all options] (y): Of course, these 1 removed, 2 new and 14 updated packages are from patch 8464, and after letting this update run its course, "zypper lp -a" shows patch 8464 as "installed". So "--with-update" should not believe that it won't install optional patches: ideally, it should have said instead: "The following patch is going to be installed: 8464". -- You are receiving this mail because: You are on the CC list for the bug.

2 9

[Bug 1130388] New: deepin-clone: polkit-untracked-privilege badness
by bugzilla_noreply＠novell.com 26 Apr '21

26 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1130388 Bug ID: 1130388 Summary: deepin-clone: polkit-untracked-privilege badness Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: hillwoodroc(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- [ 129s] deepin-clone.x86_64: E: polkit-untracked-privilege (Badness: 10000) com.deepin.pkexec.deepin-clone (auth_admin:auth_admin:auth_admin) [ 129s] The privilege is not listed in /etc/polkit-default-privs.* which makes it [ 129s] harder for admins to find. Furthermore polkit authorization checks can easily [ 129s] introduce security issues. If the package is intended for inclusion in any [ 129s] SUSE product please open a bug report to request review of the package by the [ 129s] security team. Please refer to [ 129s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 129s] more information. [ 129s] [ 129s] (none): E: badness 10000 exceeds threshold 1000, aborting. [ 129s] 3 packages and 0 specfiles checked; 1 errors, 2 warnings. -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1131065] New: Tumbleweed: please add checkbox to allow temporary suspension of Thunderbird email account
by bugzilla_noreply＠novell.com 25 Apr '21

25 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1131065 Bug ID: 1131065 Summary: Tumbleweed: please add checkbox to allow temporary suspension of Thunderbird email account Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Enhancement Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: erbenton(a)comcast.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Like most people i have a number of email accounts setup in Thunderbird. Whats really needed is a simple setting like a checkbox on the Account Settings page that would suspend completely all sending and receiving for the account without losing the password, emails or other important data. this should prevent the account from doing any internet activity like contacting the server EVEN if the "Get all Messages" menu-button is used. In all cases it should just skip over that account if the checkbox is checked to disable it. Unchecking the box would resume normal behavior with no further input required of the user. e.g don't come back and ask for the password again because like with a lot of people its long forgotten I have a bit wordy because googling around there are all sorts of wacky suggestions like inserting a space in the user login name or deleting the password, none of which are acceptable, nor do they work properly. -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 986593] New: security/john: Tools in run/ not packaged and undefined maintainer of john
by bugzilla_noreply＠novell.com 25 Apr '21

25 Apr '21

http://bugzilla.opensuse.org/show_bug.cgi?id=986593 Bug ID: 986593 Summary: security/john: Tools in run/ not packaged and undefined maintainer of john Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: opensuse-communityscreening(a)forge.provo.novell.com Reporter: sebix+novell.com(a)sebix.at QA Contact: opensuse-communityscreening(a)forge.provo.novell.com CC: meissner(a)suse.com Found By: --- Blocker: --- The tools which are in run/ in the jumbo-repository[2] are not packaged. The tools like pdf2john.py (and other *2john programs) are very helpful (or essential) to work with john. Beside packing them into the john-package, another possibility would be to create a john-tools package. Which variant do you prefer? (I can help with packaging in July) And: The mentioned maintainer-email on OBS (solar(a)false.com) is not reachable (no MX or A record for that domain. And: By clicking "report bug" on https://build.opensuse.org/package/show/security/john "lars.vogdt(a)microfocus.dmm" was assigned, but bugzilla did not accept this input. -- You are receiving this mail because: You are on the CC list for the bug.

2 3