November 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1178306] New: error: request firmware intel/sof/sof-tgl.ri failed err: -2
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178306 Bug ID: 1178306 Summary: error: request firmware intel/sof/sof-tgl.ri failed err: -2 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: lmb(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On the Dell XPS 13, looks like the kernel is trying to load a non-existent audio driver firmware: [ 15.907191] idma64 idma64.1: Found Intel integrated DMA 64-bit [ 15.912927] snd_hda_intel 0000:00:1f.3: DSP detected with PCI class/subclass/prog-if info 0x040100 [ 15.912930] snd_hda_intel 0000:00:1f.3: Digital mics found on Skylake+ platform, using SOF driver [ 15.988359] i2c_hid i2c-DLL0945:00: supply vdd not found, using dummy regulator [ 15.988376] i2c_hid i2c-DLL0945:00: supply vddl not found, using dummy regulator [ 16.011076] input: Dell WMI hotkeys as /devices/platform/PNP0C14:02/wmi_bus/wmi_bus-PNP0C14:02/9DBB5994-A997-11DA-B012-B622A1EF5492/input/input17 [ 16.020321] sof-audio-pci 0000:00:1f.3: DSP detected with PCI class/subclass/prog-if info 0x040100 [ 16.020325] sof-audio-pci 0000:00:1f.3: Digital mics found on Skylake+ platform, using SOF driver [ 16.020338] sof-audio-pci 0000:00:1f.3: enabling device (0000 -> 0002) [ 16.020661] sof-audio-pci 0000:00:1f.3: DSP detected with PCI class/subclass/prog-if 0x040100 [ 16.020775] sof-audio-pci 0000:00:1f.3: bound 0000:00:02.0 (ops i915_audio_component_bind_ops [i915]) [ 16.027386] sof-audio-pci 0000:00:1f.3: use msi interrupt mode [ 16.035823] i2c i2c-15: 8/8 memory slots populated (from DMI) [ 16.035824] i2c i2c-15: Systems with more than 4 memory slots not supported yet, not instantiating SPD [ 16.074627] input: PC Speaker as /devices/platform/pcspkr/input/input18 [ 16.074874] pstore: Efi pstore disabled, enforce via pstore.backend=efi [ 16.074874] pstore: On a broken BIOS, this can severely harm your system [ 16.074874] pstore: Only enable efi based pstore when you know what you are doing [ 16.087833] sof-audio-pci 0000:00:1f.3: hda codecs found, mask 5 [ 16.087834] sof-audio-pci 0000:00:1f.3: using HDA machine driver skl_hda_dsp_generic now [ 16.087837] sof-audio-pci 0000:00:1f.3: DMICs detected in NHLT tables: 2 [ 16.088661] sof-audio-pci 0000:00:1f.3: Direct firmware load for intel/sof/sof-tgl.ri failed with error -2 [ 16.088663] sof-audio-pci 0000:00:1f.3: error: request firmware intel/sof/sof-tgl.ri failed err: -2 [ 16.088666] sof-audio-pci 0000:00:1f.3: error: failed to load DSP firmware -2 [ 16.088978] sof-audio-pci 0000:00:1f.3: error: sof_probe_work failed err: -2 -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1178385] New: VUL-1: CVE-2020-8236: nextcloud: A wrong configuration incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it.
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178385 Bug ID: 1178385 Summary: VUL-1: CVE-2020-8236: nextcloud: A wrong configuration incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/270732/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-8236 A wrong configuration in Nextcloud Server 19.0.1 incorrectly made the user feel the passwordless WebAuthn is also a two factor verification by asking for the PIN of the passwordless WebAuthn but not verifying it. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8236 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8236 https://hackerone.com/reports/924393 https://nextcloud.com/security/advisory/?id=NC-SA-2020-037 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1178384] New: VUL-1: CVE-2020-8183: nextcloud: A logic error caused a plaintext storage of the share password when it was given on the initial create API call.
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178384 Bug ID: 1178384 Summary: VUL-1: CVE-2020-8183: nextcloud: A logic error caused a plaintext storage of the share password when it was given on the initial create API call. Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/270731/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-8183 A logic error in Nextcloud Server 19.0.0 caused a plaintext storage of the share password when it was given on the initial create API call. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8183 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8183 https://nextcloud.com/security/advisory/?id=NC-SA-2020-026 https://hackerone.com/reports/885041 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1178383] New: VUL-1: CVE-2020-8173: nextcloud: A too small set of random characters being used for encryption
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178383 Bug ID: 1178383 Summary: VUL-1: CVE-2020-8173: nextcloud: A too small set of random characters being used for encryption Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/270730/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-8173 A too small set of random characters being used for encryption in Nextcloud Server 18.0.4 allowed decryption in shorter time than intended. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-8173 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8173 https://hackerone.com/reports/852841 https://nextcloud.com/security/advisory/?id=NC-SA-2020-023 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1178321] AUDIT-0: udisks2: polkit-untracked-privilege
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178321 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178296] /usr/etc/skel handling completely broken
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178296 Hans-Peter Jansen <hpj(a)urpla.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hpj(a)urpla.net -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178330] Customer kernel module build leaves null.000i.ipa-clones after "make clean"
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178330 Miroslav Beneš <mbenes(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|kernel-bugs(a)opensuse.org |mbenes(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178349] Gnome shows wrong time after update timezone to 2020b-lp152.3.3.1
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178349 https://bugzilla.suse.com/show_bug.cgi?id=1178349#c10 --- Comment #10 from Marcus Meissner <meissner(a)suse.com> --- we are currently hurrying out fixed updates. I expect them today/tomorrow -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178330] Customer kernel module build leaves null.000i.ipa-clones after "make clean"
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178330 https://bugzilla.suse.com/show_bug.cgi?id=1178330#c1 --- Comment #1 from Takashi Iwai <tiwai(a)suse.com> --- This is a side-effect by patches.suse/livepatch-dump-ipa-clones.patch. We need to add the cleanup of those files, as well as to restrict the build of ipa-clones only for the in-tree code. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178330] Customer kernel module build leaves null.000i.ipa-clones after "make clean"
by bugzilla_noreply＠suse.com 03 Nov '20

03 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1178330 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mbenes(a)suse.com, | |msuchanek(a)suse.com, | |tiwai(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0