November 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1176987] VUL-0: CVE-2019-11556: pagure: XSS via the templates/blame.html blame view.
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176987 https://bugzilla.suse.com/show_bug.cgi?id=1176987#c5 --- Comment #5 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:1810-1: An update that fixes one vulnerability is now available. Category: security (moderate) Bug References: 1176987 CVE References: CVE-2019-11556 JIRA References: Sources used: openSUSE Backports SLE-15-SP1 (src): pagure-5.5-bp151.2.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172026] AutoYaST unable to set NTP client Configuration Source to Static via ntp_policy
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1172026 https://bugzilla.suse.com/show_bug.cgi?id=1172026#c18 --- Comment #18 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:1807-1: An update that has 5 recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1110413,1145269,1172026,1175714,1175725 CVE References: JIRA References: Sources used: openSUSE Leap 15.1 (src): autoyast2-4.1.21-lp151.2.18.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176033] touchpad don't work on Lenovo IdeaPad 3 (LNV81WE00)
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176033 https://bugzilla.suse.com/show_bug.cgi?id=1176033#c10 --- Comment #10 from Alex Alex <sandro.it(a)gmail.com> --- Hi Takashi Iwai, with option don't work. thank you for your attention -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176033] touchpad don't work on Lenovo IdeaPad 3 (LNV81WE00)
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176033 https://bugzilla.suse.com/show_bug.cgi?id=1176033#c9 --- Comment #9 from Alex Alex <sandro.it(a)gmail.com> --- Created attachment 843201 --> https://bugzilla.suse.com/attachment.cgi?id=843201&action=edit dmesg with no option -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176033] touchpad don't work on Lenovo IdeaPad 3 (LNV81WE00)
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1176033 https://bugzilla.suse.com/show_bug.cgi?id=1176033#c8 --- Comment #8 from Alex Alex <sandro.it(a)gmail.com> --- Created attachment 843200 --> https://bugzilla.suse.com/attachment.cgi?id=843200&action=edit dmesg with option -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1178326] New: opensm fails to start
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178326 Bug ID: 1178326 Summary: opensm fails to start Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: i686 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: bart.vanassche+novell(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Starting opensm on a system on which opensm worked fine in the past fails. The following is reported: # systemctl start opensm.service Job for opensm.service failed because the control process exited with error code. See "systemctl status opensm.service" and "journalctl -xe" for details. # systemctl status opensm.service | cat * opensm.service - Starts the OpenSM InfiniBand fabric Subnet Manager Loaded: loaded (/usr/lib/systemd/system/opensm.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Sat 2020-10-31 17:32:52 PDT; 3min 13s ago Docs: man:opensm Process: 5985 ExecStart=/usr/lib/opensm-launch (code=exited, status=203/EXEC) Oct 31 17:32:52 asus systemd[1]: Starting Starts the OpenSM InfiniBand fabric Subnet Manager... Oct 31 17:32:52 asus systemd[5985]: opensm.service: Failed to execute command: No such file or directory Oct 31 17:32:52 asus systemd[5985]: opensm.service: Failed at step EXEC spawning /usr/lib/opensm-launch: No such file or directory Oct 31 17:32:52 asus systemd[1]: opensm.service: Control process exited, code=exited, status=203/EXEC Oct 31 17:32:52 asus systemd[1]: opensm.service: Failed with result 'exit-code'. Oct 31 17:32:52 asus systemd[1]: Failed to start Starts the OpenSM InfiniBand fabric Subnet Manager. Changing ExecStart=/usr/lib/opensm-launch into ExecStart=/usr/sbin/opensm in /usr/lib/systemd/system/opensm.service seems sufficient to make opensm work again. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1174816] Blender SIGSEGV
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1174816 https://bugzilla.suse.com/show_bug.cgi?id=1174816#c5 Hans-Peter Jansen <hpj(a)urpla.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |WONTFIX --- Comment #5 from Hans-Peter Jansen <hpj(a)urpla.net> --- Hopefully, this is fixed in later releases. Reopen otherwise. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176987] New: VUL-0: CVE-2019-11556: pagure: XSS via the templates/blame.html blame view.
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1176987 Bug ID: 1176987 Summary: VUL-0: CVE-2019-11556: pagure: XSS via the templates/blame.html blame view. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/268275/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: ngompa13(a)gmail.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-11556 Pagure before 5.6 allows XSS via the templates/blame.html blame view. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11556 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-11556 https://docs.pagure.org/pagure/changelog.html https://pagure.io/pagure/c/31a0d2950ed409550074ca52ba492f9b87ec3318?branch=… https://pagure.io/pagure/commits/master -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1178330] New: Customer kernel module build leaves null.000i.ipa-clones after "make clean"
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1178330 Bug ID: 1178330 Summary: Customer kernel module build leaves null.000i.ipa-clones after "make clean" Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: snguyen(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hi When I am cleaning up a directory that contains customer modules (make clean), I am always left with a file called null.000i.ipa-clones. Here is an example: -rw-r--r-- 1 root root 2970 Nov 1 18:17 kretprobe_btrfs_put_block_group.c -rw-r--r-- 1 root root 3036 Nov 1 18:40 kretprobe_btrfs_put_transaction.c -rw-r--r-- 1 root root 2970 Nov 1 18:19 kretprobe_btrfs_wait_for_commit.c -rw-r--r-- 1 root root 345 Nov 1 18:27 Makefile -rw-r--r-- 1 root root 0 Nov 1 18:50 null.000i.ipa-clones My Makefile: --- obj-m += kretprobe_btrfs_put_block_group.o kretprobe_btrfs_wait_for_commit.o kretprobe_btrfs_put_transaction.o modules: make -C /usr/src/linux-obj/x86_64/default M=`pwd` modules clean: make -C /usr/src/linux-obj/x86_64/default M=`pwd` clean --- This only happens on Leap and is working fine on Tumbleweed. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1177842] phpMyAdmin 4.9.6 PHP compatibility issues and broken 2FA
by bugzilla_noreply＠suse.com 01 Nov '20

01 Nov '20

https://bugzilla.suse.com/show_bug.cgi?id=1177842 https://bugzilla.suse.com/show_bug.cgi?id=1177842#c8 --- Comment #8 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:1806-1: An update that solves 5 vulnerabilities and has one errata is now available. Category: security (important) Bug References: 1167335,1167336,1167337,1177561,1177562,1177842 CVE References: CVE-2020-10802,CVE-2020-10803,CVE-2020-10804,CVE-2020-26934,CVE-2020-26935 JIRA References: Sources used: openSUSE Leap 15.1 (src): phpMyAdmin-4.9.7-lp151.2.24.1 openSUSE Backports SLE-15-SP1 (src): phpMyAdmin-4.9.7-bp151.3.24.1 openSUSE Backports SLE-15 (src): phpMyAdmin-4.9.7-bp150.43.1 SUSE Package Hub for SUSE Linux Enterprise 12 (src): phpMyAdmin-4.9.7-52.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0