May 2019 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1047218] trackerbug: packages do not build reproducibly from including build time
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1047218 http://bugzilla.suse.com/show_bug.cgi?id=1047218#c47 --- Comment #47 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2019:1329-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1047218 CVE References: Sources used: SUSE Package Hub for SUSE Linux Enterprise 12 (src): inotify-tools-3.20.1-2.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1134122] New: Black screen with enabled NVIDIA driver with hybrid GPU
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.opensuse.org/show_bug.cgi?id=1134122 Bug ID: 1134122 Summary: Black screen with enabled NVIDIA driver with hybrid GPU Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Major Priority: P5 - None Component: X11 3rd Party Driver Assignee: xorg-maintainer-bugs(a)forge.provo.novell.com Reporter: werner(a)suse.com QA Contact: sndirsch(a)suse.com Found By: --- Blocker: --- Created attachment 804179 --> http://bugzilla.opensuse.org/attachment.cgi?id=804179&action=edit /etc/X11/xorg.conf.d/99-local.conf I see a black screen only after latest update of the kernel: > uname -a Linux tux 4.12.14-lp150.12.58-default #1 SMP Mon Apr 1 15:20:46 UTC 2019 (58fcc15) x86_64 x86_64 x86_64 GNU/Linux > rpm -qif /boot/vmlinuz-4.12.14-lp150.12.58-default Name : kernel-default Version : 4.12.14 Release : lp150.12.58.1 Architecture: x86_64 Install Date: Sun Apr 14 14:54:47 2019 Group : System/Kernel Size : 313051417 License : GPL-2.0 Signature : RSA/SHA256, Wed Apr 3 14:29:13 2019, Key ID b88b2fd43dbdc284 Source RPM : kernel-default-4.12.14-lp150.12.58.1.nosrc.rpm Build Date : Wed Apr 3 14:21:53 2019 Build Host : cloud132 Relocations : (not relocatable) Packager : http://bugs.opensuse.org Vendor : openSUSE URL : http://www.kernel.org/ Summary : The Standard Kernel Description : The standard kernel for both uniprocessor and multiprocessor systems. Source Timestamp: 2019-04-01 15:20:46 +0000 GIT Revision: 58fcc15ac40097ec9d9d52290f03e96322aafbea GIT Branch: openSUSE-15.0 Distribution: openSUSE Leap 15.0 > rpm -qif /usr/lib64/xorg/modules/extensions/nvidia/nvidia-libglx.so Name : nvidia-glG04 Version : 390.116 Release : lp150.5.1 Architecture: x86_64 Install Date: Sun Mar 3 10:44:18 2019 Group : System/Libraries Size : 139003037 License : SUSE-NonFree Signature : DSA/SHA1, Thu Feb 28 17:01:06 2019, Key ID f5113243c66b6eae Source RPM : x11-video-nvidiaG04-390.116-lp150.5.1.nosrc.rpm Build Date : Thu Feb 21 16:37:46 2019 Build Host : sheep17 Relocations : (not relocatable) Vendor : obs://build.suse.de/Proprietary:X11:Drivers URL : https://www.nvidia.com/object/unix.html Summary : NVIDIA OpenGL libraries for OpenGL acceleration Description : This package provides the NVIDIA OpenGL libraries to allow OpenGL acceleration under the closed-source NVIDIA drivers. Distribution: Proprietary:X11:Drivers / openSUSE_Leap_15.0 In the attachment the Nvidia part is currently disabled in the section "ServerLayout": Section "ServerLayout" Identifier "Layout" Screen 0 "Intel" # Screen 0 "Nvidia" # Inactive "Intel" InputDevice "Touchpad" EndSection compare with attached 99-local.conf ... after enabling it with Section "ServerLayout" Identifier "Layout" # Screen 0 "Intel" Screen 0 "Nvidia" Inactive "Intel" InputDevice "Touchpad" EndSection I see with on the console started `X :1 vt8' > xrandr -display :1 --listproviders Providers: number : 2 Provider 0: id: 0x243; cap: 0x1 (Source Output); crtcs: 4; outputs: 2; associated providers: 0; name: NVIDIA-0 output DP-0 output DP-1 Provider 1: id: 0x46; cap: 0xf (Source Output, Sink Output, Source Offload, Sink Offload); crtcs: 3; outputs: 4; associated providers: 0; name: modesetting output 0x42 output 0x43 output 0x44 > xrandr -display :1 --setprovideroutputsource modesetting NVIDIA-0 > glxgears -display :1 Running synchronized to the vertical refresh. The framerate should be approximately the same as the monitor refresh rate. 1506 frames in 5.2 seconds = 292.182 FPS and the screen on vt8 remains black! -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1133313] VUL-0: chromium: multiple security fixes in 74.0.3729.108
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1133313 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:10145:important |obs:running:10167:important |obs:running:10142:important | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1047218] trackerbug: packages do not build reproducibly from including build time
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1047218 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:10112:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1133181] putty: Xresources support broken, no X11 support
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1133181 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:10113:moderate |obs:running:10168:moderate -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1132060] VUL-1: CVE-2019-11007: GraphicsMagick,ImageMagick: a heap-based buffer over-read in the ReadMNGImage function of coders/png.c allows attackers to cause a denial of service or information disclosure
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1132060 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:10088:moderate |ibs:running:10857:moderate |ibs:running:10857:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1132054] VUL-0: CVE-2019-11008: GraphicsMagick,ImageMagick: a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c allows remote attackers to cause DOS or other unspecified impact
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1132054 Swamp Workflow Management <swamp(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Whiteboard|obs:running:10088:moderate |obs:running:10143:moderate |obs:running:10143:moderate |obs:running:10144:moderate |obs:running:10144:moderate | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1126516] llvm5: duplicate binaries with llvm7
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1126516 http://bugzilla.suse.com/show_bug.cgi?id=1126516#c5 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(security-team@sus | |e.de) | --- Comment #5 from Marcus Meissner <meissner(a)suse.com> --- CVE-2017-5715 marks the retpoline enablement. we currently do not need it necessarily, as the relevant packages are built with gcc which has it. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1134126] Due to a bug at Mozilla extensions are swirched off.
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1134126 http://bugzilla.suse.com/show_bug.cgi?id=1134126#c1 --- Comment #1 from Marcus Meissner <meissner(a)suse.com> --- Please just wait until it fixes itself. On my tumbleweed install it already is fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1134127] Firefox certificate issue causing add-ons to be disabled
by bugzilla_noreply＠novell.com 04 May '19

04 May '19

http://bugzilla.suse.com/show_bug.cgi?id=1134127 http://bugzilla.suse.com/show_bug.cgi?id=1134127#c5 --- Comment #5 from Marcus Meissner <meissner(a)suse.com> --- Please just wait until it fixes itself. On my tumbleweed install it aklready is fixed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0