February 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1162765] New: VUL-1: CVE-2019-15617: A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login.
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162765 Bug ID: 1162765 Summary: VUL-1: CVE-2019-15617: A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/252408/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: ecsos(a)schirra.net Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-15617 A missing check in Nextcloud Server 17.0.0 allowed an attacker to set up a new second factor when trying to login. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15617 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15617 https://hackerone.com/reports/722748 https://nextcloud.com/security/advisory/?id=NC-SA-2020-006 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1162764] New: VUL-1: CVE-2019-15616: Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long.
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162764 Bug ID: 1162764 Summary: VUL-1: CVE-2019-15616: Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long. Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/252407/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: ecsos(a)schirra.net Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2019-15616 Dangling remote share attempts in Nextcloud 16 allow a DNS pollution when running long. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-15616 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15616 https://nextcloud.com/security/advisory/?id=NC-SA-2020-005 https://hackerone.com/reports/592864 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1162986] New: NetworkManager VPN connection timeout when connected to VPN
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1162986 Bug ID: 1162986 Summary: NetworkManager VPN connection timeout when connected to VPN Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: msuchanek(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- When I try to connect to VPN the connection gets established (I can access services not available outside VPN), NM keeps spinning the lock icon for a while and disconnects me. Reproducible like 50-75% of the time. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162917] chromium crashes on tumbleweed
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162917 http://bugzilla.opensuse.org/show_bug.cgi?id=1162917#c3 Tomáš Chvátal <tchvatal(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #3 from Tomáš Chvátal <tchvatal(a)suse.com> --- See previous comment. Also note that this should not crash with 80.x series. *** This bug has been marked as a duplicate of bug 1160068 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162511] Flooded with messages dev_pm_opp_set_rate: failed to find current OPP for freq on Raspberry Pi 4B
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1162511 http://bugzilla.suse.com/show_bug.cgi?id=1162511#c7 --- Comment #7 from Freek de Kruijf <freek(a)opensuse.org> --- (In reply to Nicolas Patricio Saenz Julienne from comment #6) > (In reply to Freek de Kruijf from comment #4) > > The following USB devices are plugged in: > > WiFi dongle (when unplugging the messages went on) > > keyboard > > mouse > > Does the issue persist if booted without he WiFi dongle? It did persist. Currently I started all over again with XFCE for RPi4 for Tumbleweed with the latest image: openSUSE-Tumbleweed-ARM-XFCE-raspberrypi4.aarch64-2020.01.30-Snapshot20200201.raw.xz I replaced packet wpa_supplicant by a lower version that I saved earlier. Before first boot I reconfigured the SD card, removed swap partition, moved partition ROOT to the left and enlarged it to 30G, made an 80G HOME and a 4G swap. It is a 128GB SD card. The WiFi interfaces, build-in and dongle, do not start during boot, but do come up using "wicked ifup wlxxx". Until now there is no flooding. I hope to continue configuring the system tomorrow; postfix, dovecot, thunderbird, and other user applications; also testing the XFCE desktop. I need to do other things first. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1159276] New: gajim complains about non existing directory and "Error in download"
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1159276 Bug ID: 1159276 Summary: gajim complains about non existing directory and "Error in download" Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: x86-64 OS: Linux Status: NEW Severity: Minor Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: stakanov(a)freenet.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- This bug is present and present regularly in the TW version and in the leap version alike. The error (which is a popup, right after the program has been loaded and you did enter the password) is: Error in download. An error occurred when downloading. [[Errno 2]] File or directory non esistente] First this happened only in the TW version, then we do now encounter the same with a 15.1 Leap installation and standard repos. So this but is valid for Leap and TW. As the maintainer of the package should be the same, I will open only one bug to avoid redundancy. I mark the bug minor because there is no apparent limitation in functionality but the error is misleading. The download function works normally it seams and the program does not present any apparent limitation. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1143402] New: The Omemo plugin of Gajim complains about: Warning: You are missing Python-Axolotl or use an outdated version
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1143402 Bug ID: 1143402 Summary: The Omemo plugin of Gajim complains about: Warning: You are missing Python-Axolotl or use an outdated version Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: stakanov(a)freenet.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- either python-axolotl is outdated and has to be updated, or the omemo plugin in Leap 15.1 is broken. When installing omemo from plugins the plugin either appears two times (both not working) or is just one but not eligible complaining about the python-axolotl. What the software should do: omemeo is an important asset of gajim and should "just work". -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1162917] chromium crashes on tumbleweed
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162917 http://bugzilla.opensuse.org/show_bug.cgi?id=1162917#c2 Michael Pujos <pujos.michael(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |pujos.michael(a)gmail.com --- Comment #2 from Michael Pujos <pujos.michael(a)gmail.com> --- This is a duplicate of #1160068 See there for the cause and a workaround -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162511] Flooded with messages dev_pm_opp_set_rate: failed to find current OPP for freq on Raspberry Pi 4B
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.suse.com/show_bug.cgi?id=1162511 http://bugzilla.suse.com/show_bug.cgi?id=1162511#c6 --- Comment #6 from Nicolas Patricio Saenz Julienne <nsaenzjulienne(a)suse.com> --- (In reply to Freek de Kruijf from comment #4) > The following USB devices are plugged in: > WiFi dongle (when unplugging the messages went on) > keyboard > mouse Does the issue persist if booted without he WiFi dongle? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1162940] New: Please update qgit to 2.9
by bugzilla_noreply＠novell.com 06 Feb '20

06 Feb '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1162940 Bug ID: 1162940 Summary: Please update qgit to 2.9 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: KDE Applications Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: cfeck(a)kde.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- qgit 2.9 was released on 2019-08-24. There are no code changes since then, so let's assume it is stable and usable. See https://github.com/tibirna/qgit/releases/tag/qgit-2.9 -- You are receiving this mail because: You are on the CC list for the bug.

1 4