http://bugzilla.opensuse.org/show_bug.cgi?id=1096833
Bug ID: 1096833
Summary: VUL-0: matrix-synapse: event visibility rules not
applied correctly
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 15.0
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Security
Assignee: okurz(a)suse.com
Reporter: astieger(a)suse.com
QA Contact: security-team(a)suse.de
Found By: ---
Blocker: ---
from https://github.com/matrix-org/synapse/releases/tag/v0.31.1
Changes in synapse v0.31.1 (2018-06-08)
v0.31.1 fixes a security bug in the get_missing_events federation API
where event visibility rules were not applied correctly.
We are not aware of it being actively exploited but please upgrade asap.
Bug Fixes:
Fix event filtering in get_missing_events handler (PR #3371)
https://github.com/matrix-org/synapse/commit/ad9edd1d968f19dd4d7c65102fe552…
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1029190
Bug ID: 1029190
Summary: Support for package variants according to the
evaluation of bigger regular expressions
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: All
OS: All
Status: NEW
Severity: Enhancement
Priority: P5 - None
Component: Development
Assignee: bnc-team-screening(a)forge.provo.novell.com
Reporter: Markus.Elfring(a)web.de
QA Contact: qa-bugs(a)suse.de
CC: astieger(a)suse.com
Found By: ---
Blocker: ---
I noticed that the parameter “--with-link-size=2” is used so far in a package
specification.
https://build.opensuse.org/package/view_file/openSUSE:Factory/pcre2/pcre2.s…
This setting limits the size of regular expressions. I would like to work with
bigger search patterns occasionally. So I suggest to generate also variants for
this software with an internal link size of 3 (and 4) for the data processing
with 8 and 16 bit characters.
See also:
Selection of system properties for the regular expressions engine at run time
https://bugs.exim.org/show_bug.cgi?id=1922
By the way:
How do you think about to use the specifications “LDFLAGS“ und
“%{?_smp_mflags}“ as parameters for the script “%configure“ there?
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1052740
Bug ID: 1052740
Summary: convert X keyboards into kbd and set unicode console
font for languages with non-Latin alphabets
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: All
OS: openSUSE Factory
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Basesystem
Assignee: bnc-team-screening(a)forge.provo.novell.com
Reporter: opensuse.lietuviu.kalba(a)gmail.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
Now openSUSE for languages with Latin alphabets use converted keyboard layouts
from X into kbd, also use unicode console font (as converted layouts supports
it).
Remaining task is to do same transition for non-Latin console keyboard layouts
and set appropriate console font. Perhaps we should preconfigure option to
switch between native and US QWERTY in console for these non-Latin languages
and keyboard layouts.
As noted in https://bugzilla.suse.com/show_bug.cgi?id=942896#c70 ,
As noted in https://bugzilla.suse.com/show_bug.cgi?id=942896#c69
Greek seems not have converted console keyboard layout from X into kbd.
For Greek perhaps we can use eurlatgr console font (like for Latin alphabets)
All Cyrillic layouts now use UniCyr_8x16.psf font, but this font seems to be
compatible with cp866, cp1251, iso8859-5 and koi8-r (according
http://www.tldp.org/HOWTO/Belarusian-HOWTO/x28.html) and not compatible with
unicode per se. But openSUSE seems don't provide converted layouts for Russian,
Ukrainian, Serbian, Bulgarian, Tajik.
For Cyrillic alphabets we should use LatArCyrHeb-14, LatArCyrHeb-16+ or
LatArCyrHeb-16 console font, that support unicode.
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1082318
Bug ID: 1082318
Summary: Packages must not mark license files as %doc
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: All
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Other
Assignee: bnc-team-screening(a)forge.provo.novell.com
Reporter: fvogt(a)suse.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
Certain licenses require that license files must be shipped together with the
binaries in all cases.
By using the %doc marker, this is no longer guaranteed (e.g. by enabling
excludedocs).
Thus it is important that for such cases, %license is used instead of %doc.
The effect is that the file is always installed, stored in a different
directory (/usr/share/licenses/<pkg>/) and can be queried using rpm (e.g. "rpm
-qL kernel-firmware").
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1125418
Bug ID: 1125418
Summary: GCC 9: xtrabackup build fails
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Basesystem
Assignee: bnc-team-screening(a)forge.provo.novell.com
Reporter: martin.liska(a)suse.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
Fails here:
https://build.opensuse.org/build/openSUSE:Factory:Staging:Gcc7/standard/x86…
with:
[ 471s] inlined from 'virtual String*
Item_func_format::val_str_ascii(String*)' at
/home/abuild/rpmbuild/BUILD/percona-xtrabackup-2.4.12/sql/item_strfunc.cc:3214:13:
[ 471s] /usr/include/bits/string_fortified.h:34:33: warning: 'void*
__builtin_memcpy(void*, const void*, long unsigned int)' writing 1 or more
bytes into a region of size 0 overflows the destination [-Wstringop-overflow=]
[ 471s] 34 | return __builtin___memcpy_chk (__dest, __src, __len, __bos0
(__dest));
[ 471s] |
~~~~~~~~~~~~~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
[ 471s] [ 80%] Building CXX object sql/CMakeFiles/sql.dir/item_sum.cc.o
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1115455
Bug ID: 1115455
Summary: rkhunter: migrate from cron to systemd timers
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: x86-64
OS: openSUSE Factory
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Basesystem
Assignee: bnc-team-screening(a)forge.provo.novell.com
Reporter: kstreitova(a)suse.com
QA Contact: qa-bugs(a)suse.de
CC: kstreitova(a)suse.com
Found By: ---
Blocker: ---
This bug is part of TRACKERBUG bug#1115430.
Based on fate#323635 (Reduce usage of cron package in favor of systemd timers)
we would like to minimize the number of packages that use cron in favour of
systemd timers.
It seems that your package uses cron. Please take a look at it and evaluate if
it's possible to migrate your package to use systemd timers without impacting
behaviour. If it's not possible, please write down the reason.
Please note that by default, services are not enabled when the package is
installed. You probably want your service to be enabled by default so you
should create a submit request on systemd-presets-branding-openSUSE package,
modifying default-openSUSE.preset file by adding "enable
your_service_name.service".
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1115430
Bug ID: 1115430
Summary: [TRACKERBUG-OPENSUSE] FATE#323635: Reduce usage of
cron in favour of systemd timers
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: x86-64
OS: openSUSE Factory
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Basesystem
Assignee: kstreitova(a)suse.com
Reporter: kstreitova(a)suse.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
This is a tracker bug for fate#323635 (Reduce usage of cron package in favor of
systemd timers). It tracks openSUSE packages only (for SLE packages see
bug#1115399).
The goal is to minimize the number of openSUSE:Factory packages that use cron
in favour of systemd timers. See dependent bugs for more information about
particular packages that should be migrated.
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1103805
Bug ID: 1103805
Summary: No access to mysql/mariadb databases using jdbc driver
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 15.0
Hardware: Other
OS: Linux
Status: NEW
Severity: Minor
Priority: P5 - None
Component: LibreOffice
Assignee: bnc-team-screening(a)forge.provo.novell.com
Reporter: r.cabane(a)free.fr
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
Please look a this bug I filed :
https://bugs.documentfoundation.org/show_bug.cgi?id=119091
The mysql-connector-java (version 5.1.43) as supplied by the OpenSUSE 15.0
distribution is either flawed or incompatible with Libreoffice 6.
I solved the case installing the Mariadb connector from the Mariadb website.
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=987114
Bug ID: 987114
Summary: Bluetooth headset connected but not showing under
'Sound Settings'
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: x86-64
OS: Other
Status: NEW
Severity: Major
Priority: P5 - None
Component: GNOME
Assignee: bnc-team-gnome(a)forge.provo.novell.com
Reporter: damien.lloyd21(a)gmail.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:47.0) Gecko/20100101
Firefox/47.0
Build Identifier:
On openSUSE Tumbleweed, my bluetooth headset pairs and connects successfully
through GNOME's bluetooth interface, but after going to the 'Sound Settings' my
bluetooth headset doesn't show up, even though it is paired up. Because I can't
see my bluetooth headset under 'Sound Settings' it's not possible to re-route
sound through it, which means I can't use my bluetooth headset.
Reproducible: Always
Steps to Reproduce:
1. Make bluetooth headset discoverable;
2. Open up GNOME's bluetooth interface and select bluetooth headset;
3. Connect to bluetooth headset;
4. Once paired, access 'Sound Settings': bluetooth headset doesn't show up.
Actual Results:
The bluetooth headset doesn't show up under 'Sound Settings' even though it is
connected and paired.
Expected Results:
The bluetooth headset should appear under 'Sound Settings' so that sound can be
re-routed through it.
My headset is a UE MEGABOOM and it worked under Ubuntu 14.04/16.04 extremely
well. It doesn't work under openSUSE Tumbleweed.
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1110245
Bug ID: 1110245
Summary: Connection to online repositories should be HTTPS
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 42.3
Hardware: All
OS: All
Status: NEW
Severity: Enhancement
Priority: P5 - None
Component: YaST2
Assignee: yast2-maintainers(a)suse.de
Reporter: digitalmon(a)rambler.ru
QA Contact: jsrain(a)suse.com
Found By: ---
Blocker: ---
Although the online repository servers support HTTPS connection, downloading of
packets still occurs via the HTTP protocol. This compromises the security of
users. If their connection to the Internet is intercepted, if they work through
any proxy server, the attackers can modify the packages on the fly during the
download. To install malware and spyware into target system.
At the moment, you can only manually change the URLs of the repositories to
https so that the packets are downloaded over a secure channel. I want that by
default in the operating system the connection to the online-repositories, the
downloading of packets, should be with HTTPS connection.
This will make users' safety a step higher. I'm sure there will be less
glitches, bugs in user systems.
But Https is not a panacea. She is also vulnerable to the attack of MITM. The
private surveilance service known to me, generates its own RSA-keys to encrypt
the HTTPS, brute-force for them a digital signature so that the browser of user
does not suspect forgery. The attacker's computer connects to the remote server
by https, downloads packages, replaces executable files, infects them with a
virus, and the user gives https traffic with his encryption key and a digital
signature. But such an attack is not for everyone. To make it more difficult,
you need to use long encryption keys and digital signatures on the repository
servers. RSA4096 at least.
I know that even LTE-connection to the Internet can be intercepted with using
of special technical means and OpenLTE, so I do not trust to LTE.
LTE-connection can work without encryption, and 3G connection seems to be
always encrypted.
A wired connection to the Internet, to intercept - generally easy. As PPPoe, as
DHCP (DHCP is without authorization and verification of provider access
point).
The 3G modem with a good antenna has the same speed as the LTE.
--
You are receiving this mail because:
You are on the CC list for the bug.