November 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1160547] New: VUL-1: CVE-2020-6624: jhead: heap-based buffer over-read in process_DQT in jpgqguess.c
by bugzilla_noreply＠novell.com 25 Jul '22

25 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1160547 Bug ID: 1160547 Summary: VUL-1: CVE-2020-6624: jhead: heap-based buffer over-read in process_DQT in jpgqguess.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/250646/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-6624 jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6624 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6624 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744 -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1160544] New: VUL-1: CVE-2020-6625: jhead: heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c
by bugzilla_noreply＠novell.com 25 Jul '22

25 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1160544 Bug ID: 1160544 Summary: VUL-1: CVE-2020-6625: jhead: heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/250647/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-6625 jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6625 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6625 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746 -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1165928] New: Upgrade from Leap 15.1 to 15.2 broke Linphone
by bugzilla_noreply＠novell.com 23 Jul '22

23 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1165928 Bug ID: 1165928 Summary: Upgrade from Leap 15.1 to 15.2 broke Linphone Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Upgrade Problems Assignee: screening-team-bugs(a)suse.de Reporter: sogal(a)opensuse.org QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Hi maintainers, I am currently testing Leap 15.2 Beta. I had a working Linphone setup that is now broken. Starting Linphone via CLI gives the following output: [15:24:58:075][0x555637d786a0][Fatal]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:487: Unable to install default translator. [1] 22611 abort (core dumped) /usr/bin/linphone The same version 4.1.1 installed via Flatpak works fine. Let me know if you think I can provide more information. Regards. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1159688] New: mirrors not carrying latest release for tumbleweed (factory)
by bugzilla_noreply＠novell.com 22 Jul '22

22 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1159688 Bug ID: 1159688 Summary: mirrors not carrying latest release for tumbleweed (factory) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Factory Status: NEW Severity: Critical Priority: P5 - None Component: Network Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: Astara(a)tlinx.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I downloaded repomd.xml from download.opensuse.org/tumbleweed/repo/non-oss/repodata/repomd.xml. That directory had files for Dec 16th. When I tried to open one of the file in that directory ( http://download.opensuse.org/tumbleweed/repo/non-oss/repodata/a424c3aaba9f6… ) I was taken to mirrors.edge.kernel.org. Unfortunately, the latest files in that directory were from the 14th (today is the 20th). The above file wasn't in the outdated mirror. This prevents download of current releases. Perhaps before blindly sending us off to some mirror site, a database should be checked to see what mirrors have which versions and not send us to a site that doesn't have the files for the version that repomd references. This really resolves to 'zero' confidence in the mirror system and low confidence in being able to download a coherent version of the distribution. -- You are receiving this mail because: You are on the CC list for the bug.

2 11

[Bug 1174622] New: System not reconnecting to WLAN after suspend/resume
by bugzilla_noreply＠suse.com 22 Jul '22

22 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1174622 Bug ID: 1174622 Summary: System not reconnecting to WLAN after suspend/resume Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: holgi(a)suse.com QA Contact: qa-bugs(a)suse.de CC: tiwai(a)suse.com Found By: Development Blocker: --- Created attachment 840122 --> https://bugzilla.suse.com/attachment.cgi?id=840122&action=edit Output of hwinfo --netcard System with NetworkManger is connected to a wifi network. After suspend and resume later, it is not able to reconnect to the same wifi network. After a reboot, system is connecting to the same wifi network without any problems. -- You are receiving this mail because: You are on the CC list for the bug.

1 28

[Bug 1172667] New: Missing documentation for project config attribute 'conflict:' in obs user manual
by bugzilla_noreply＠suse.com 21 Jul '22

21 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1172667 Bug ID: 1172667 Summary: Missing documentation for project config attribute 'conflict:' in obs user manual Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Documentation Assignee: fs(a)suse.com Reporter: ralf.habacker(a)freenet.de QA Contact: adrian.schroeter(a)suse.com Found By: --- Blocker: --- https://openbuildservice.org/help/manuals/obs-user-guide/cha.obs.prjconfig.… does not document the project config attribute 'conflict:', which is mentioned at https://en.opensuse.org/openSUSE:Packaging_conflicts. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1174868] New: Upgrade to LEAP 15.2 makes Thinkpad 480s sometimes completely freezes, 20°C warmer and journal is trimmed
by bugzilla_noreply＠suse.com 20 Jul '22

20 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1174868 Bug ID: 1174868 Summary: Upgrade to LEAP 15.2 makes Thinkpad 480s sometimes completely freezes, 20°C warmer and journal is trimmed Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: markus.zimmermann(a)symflower.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- One of our machines here a Thinkpad T480s on openSUSE 15.2 kernel 5.3.18-lp152.33-default. In general this machine was upgraded from LEAP 15.1 to 15.2 and then the problems started to show. The CPU is constantly hotter while working. by 20°C. This machine now freezes sometimes completely. The machine is then - not pingable - no keyboard interaction works - lid close/open does nothng - no mouse interaction works - the notebook is really warm - When a freeze happens also a trim of the journal happens... e.g. we loose the whole journal for the day. - We SSH'ed into the machine and watched via "htop", "journal -f" and "sensors". WHen the machine freezes, there is no significant load via htop seeable, there are no interesting logs in journal and sensors shows that it is simply hotter. Interestingly, we upgraded another machine before (also a Thinkpad T480s) and this does not have any problems. We are btw on the latest firmwares using fwupdmgr. What should we try? How can we debug it? -- You are receiving this mail because: You are on the CC list for the bug.

1 20

[Bug 1116431] New: systemd tmpfiles does not clean-up sddm-auth files
by bugzilla_noreply＠novell.com 20 Jul '22

20 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1116431 Bug ID: 1116431 Summary: systemd tmpfiles does not clean-up sddm-auth files Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: 64bit OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin(a)winter-rosenheim.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Over time, the /tmp directory contains a growing number of sddm-auth files. The systemd tmpfile services makes no attempt to clean them up. I would suggest to add a rule to /etc/tmpfiles.d to remove these files. -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 1084717] New: The Leap 15.0 installation procedure creates a 500 MB EFI partition
by bugzilla_noreply＠novell.com 19 Jul '22

19 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1084717 Bug ID: 1084717 Summary: The Leap 15.0 installation procedure creates a 500 MB EFI partition Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: bugrprt21882(a)online.de QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Executing a default "fresh" Leap 15.0 installation (Build 153) results in a 500 MB EFI partition being created. Attempting to change the EFI partition size to something less than 256 MB results in an error message indicating that, "the partition size is much too small" being raised. -- You are receiving this mail because: You are on the CC list for the bug.

2 7

[Bug 1168104] New: Issue with Patch openSUSE-2020-401
by bugzilla_noreply＠novell.com 19 Jul '22

19 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1168104 Bug ID: 1168104 Summary: Issue with Patch openSUSE-2020-401 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance Assignee: maintenance(a)opensuse.org Reporter: bugrprt21882(a)online.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Running the Patch openSUSE-2020-401 from the KDE Update Plasma - PackageKit - results in the following errors being noted in the Zypper history: # 2020-03-29 15:26:07 Output of grub2-i386-pc-2.02-lp151.21.12.1.noarch.rpm %posttrans script: # update-bootloader: 2020-03-29 15:26:04 <3> update-bootloader-6892 run_command.294: '/usr/lib/bootloader/grub2-efi/ install' failed with exit code 127, output: # <<<<<<<<<<<<<<<< # target = x86_64-efi # + /usr/sbin/shim-install --config-file=/boot/grub2/grub.cfg # copying /usr/lib64/efi/grub.efi to /boot/efi/EFI/opensuse/grub.efi # x86_64-efi wird f374r Ihre Plattform installiert. # installation beendet. Keine Fehler aufgetreten. # /usr/sbin/shim-install: Zeile 326: efibootmgr: Kommando nicht gefunden. # /usr/sbin/shim-install: Zeile 352: efibootmgr: Kommando nicht gefunden. # >>>>>>>>>>>>>>>> # update-bootloader: 2020-03-29 15:26:07 <3> update-bootloader-6892 run_command.294: '/usr/lib/bootloader/grub2-efi/config' failed with exit code 127, output: # <<<<<<<<<<<<<<<< # + /usr/sbin/grub2-mkconfig -o /boot/grub2/grub.cfg # Generating grub configuration file ... # Found theme: /boot/grub2/themes/openSUSE/theme.txt # Found linux image: /boot/vmlinuz-4.12.14-lp151.28.44-default # Found initrd image: /boot/initrd-4.12.14-lp151.28.44-default # Found linux image: /boot/vmlinuz-4.12.14-lp151.28.40-default # Found initrd image: /boot/initrd-4.12.14-lp151.28.40-default # Found linux image: /boot/vmlinuz-4.12.14-lp151.28.36-default # Found initrd image: /boot/initrd-4.12.14-lp151.28.36-default # /etc/grub.d/80_suse_btrfs_snapshot: Zeile 7: btrfs: Kommando nicht gefunden. # >>>>>>>>>>>>>>>> -- You are receiving this mail because: You are on the CC list for the bug.

2 5