April 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1120170] New: [tmux] split-window/new-window behaviour changed when PWD differs from caller current directory
by bugzilla_noreply＠novell.com 26 Jul '22

26 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1120170 Bug ID: 1120170 Summary: [tmux] split-window/new-window behaviour changed when PWD differs from caller current directory Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: x86-64 OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: sledz(a)zone42.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- tmux 2.8 contains a change in behaviour compared to previous versions when the current directory differs from the contents of the PWD environment variable: Consider running the following at a shell prompt in a tmux session: cd / PWD=/etc tmux split-window With tmux 2.7 (Leap 15.0) the shell in the new split ends up with its current directory set to /, whereas with tmux 2.8 the shell in the new split ends up with its current directory set to /etc. Unfortunately, this breaks processes (such as openembedded's terminal.py) which change the current directory but don't change PWD. The problem was reported upstream at https://github.com/tmux/tmux/issues/1549 and it has been fixed. -- You are receiving this mail because: You are on the CC list for the bug.

2 11

[Bug 1116887] New: VUL-1: CVE-2018-19387: tmux: format_cb_pane_tabs in format.c in tmux 2.7 through 2.8 might allow attackers to cause a denial of service
by bugzilla_noreply＠novell.com 26 Jul '22

26 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1116887 Bug ID: 1116887 Summary: VUL-1: CVE-2018-19387: tmux: format_cb_pane_tabs in format.c in tmux 2.7 through 2.8 might allow attackers to cause a denial of service Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/219484/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: nemysis(a)openSUSE.org Reporter: kbabioch(a)suse.com QA Contact: security-team(a)suse.de CC: mimi.vx(a)gmail.com Found By: Security Response Team Blocker: --- CVE-2018-19387 format_cb_pane_tabs in format.c in tmux 2.7 through 2.8 might allow attackers to cause a denial of service (NULL Pointer Dereference and application crash) by arranging for a malloc failure. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-19387 http://www.cvedetails.com/cve/CVE-2018-19387/ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19387 https://github.com/tmux/tmux/issues/1547 https://github.com/openbsd/src/commit/b32e1d34e10a0da806823f57f02a4ae6e93d7… -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1131264] New: Backport x86/retpolines: Disable switch jump tables when retpolines are enabled (a9d57ef15cbe327fe54416dd194ee0ea66ae53a4)
by bugzilla_noreply＠novell.com 26 Jul '22

26 Jul '22

http://bugzilla.suse.com/show_bug.cgi?id=1131264 Bug ID: 1131264 Summary: Backport x86/retpolines: Disable switch jump tables when retpolines are enabled (a9d57ef15cbe327fe54416dd194ee0ea66ae53a4) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: martin.liska(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Please backport the revision into all Linux code streams where we have retpolines enabled. Some micro-benchmark numbers can be seen here: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86952#c21 -- You are receiving this mail because: You are on the CC list for the bug.

2 31

[Bug 1133091] New: LTO: libapparmor build fails
by bugzilla_noreply＠novell.com 25 Jul '22

25 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1133091 Bug ID: 1133091 Summary: LTO: libapparmor build fails Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: martin.liska(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Fails due to: [ 23s] libtool: link: gcc -Wall -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -flto=8 -g -o .libs/test_multi.multi test_multi_multi-test_multi.o -L../src/.libs /home/abuild/rpmbuild/BUILD/apparmor-2.13.2/libraries/libapparmor/src/.libs/libapparmor.so -pthread -Wl,-rpath -Wl,/usr/lib64 [ 23s] /usr/lib64/gcc/x86_64-suse-linux/9/../../../../x86_64-suse-linux/bin/ld: /home/abuild/rpmbuild/BUILD/apparmor-2.13.2/libraries/libapparmor/src/.libs/libapparmor.so: undefined reference to `aa_query_label' libraries/libapparmor/src/kernel.c:symbol_version(__aa_query_label, aa_query_label, APPARMOR_1.1); The package uses symbol versioning: https://en.opensuse.org/openSUSE:LTO#Symbol_versioning -- You are receiving this mail because: You are on the CC list for the bug.

2 8

[Bug 1134234] New: Missing networkmanager applet icon when VPN activated on openSUSEdark
by bugzilla_noreply＠novell.com 25 Jul '22

25 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1134234 Bug ID: 1134234 Summary: Missing networkmanager applet icon when VPN activated on openSUSEdark Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.0 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: noga.dany(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 804281 --> http://bugzilla.opensuse.org/attachment.cgi?id=804281&action=edit Dark theme, openVPN, missing icon openSUSE Leap 15.0 with all updates on KDE 1) Use openSUSEdark KDE theme 2) Connect with NetworkManager applet to openVPN network 3) I don't see NetworkManager applet icon -- You are receiving this mail because: You are on the CC list for the bug.

2 10

[Bug 1148642] New: Eigen3Config.cmake incorrect
by bugzilla_noreply＠novell.com 25 Jul '22

25 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1148642 Bug ID: 1148642 Summary: Eigen3Config.cmake incorrect Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Development Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: ajmay81(a)googlemail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- /usr/share/eigen3/cmake/Eigen3Config.cmake contains the following lines which are clearly not correct: set (EIGEN3_INCLUDE_DIR "${PACKAGE_PREFIX_DIR}/${PACKAGE_PREFIX_DIR}/include") set (EIGEN3_INCLUDE_DIRS "${PACKAGE_PREFIX_DIR}/${PACKAGE_PREFIX_DIR}/include") and this results in cmake determining EIGEN3_INCLUDE_DIR to be /usr//usr/include/eigen3. I think this all comes from: https://build.opensuse.org/package/view_file/openSUSE:Leap:15.1/eigen3/eige… where there appears to be a misunderstanding as to what -DINCLUDE_INSTALL_DIR is specifying. -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1160547] New: VUL-1: CVE-2020-6624: jhead: heap-based buffer over-read in process_DQT in jpgqguess.c
by bugzilla_noreply＠novell.com 25 Jul '22

25 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1160547 Bug ID: 1160547 Summary: VUL-1: CVE-2020-6624: jhead: heap-based buffer over-read in process_DQT in jpgqguess.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: Other URL: https://smash.suse.de/issue/250646/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-6624 jhead through 3.04 has a heap-based buffer over-read in process_DQT in jpgqguess.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6624 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6624 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858744 -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1160544] New: VUL-1: CVE-2020-6625: jhead: heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c
by bugzilla_noreply＠novell.com 25 Jul '22

25 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1160544 Bug ID: 1160544 Summary: VUL-1: CVE-2020-6625: jhead: heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/250647/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: sbrabec(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-6625 jhead through 3.04 has a heap-based buffer over-read in Get32s when called from ProcessGpsInfo in gpsinfo.c. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-6625 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-6625 https://bugs.launchpad.net/ubuntu/+source/jhead/+bug/1858746 -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1165928] New: Upgrade from Leap 15.1 to 15.2 broke Linphone
by bugzilla_noreply＠novell.com 23 Jul '22

23 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1165928 Bug ID: 1165928 Summary: Upgrade from Leap 15.1 to 15.2 broke Linphone Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Upgrade Problems Assignee: screening-team-bugs(a)suse.de Reporter: sogal(a)opensuse.org QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Hi maintainers, I am currently testing Leap 15.2 Beta. I had a working Linphone setup that is now broken. Starting Linphone via CLI gives the following output: [15:24:58:075][0x555637d786a0][Fatal]/home/abuild/rpmbuild/BUILD/linphoneqt-4.1.1/src/app/App.cpp:487: Unable to install default translator. [1] 22611 abort (core dumped) /usr/bin/linphone The same version 4.1.1 installed via Flatpak works fine. Let me know if you think I can provide more information. Regards. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1159688] New: mirrors not carrying latest release for tumbleweed (factory)
by bugzilla_noreply＠novell.com 22 Jul '22

22 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1159688 Bug ID: 1159688 Summary: mirrors not carrying latest release for tumbleweed (factory) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Factory Status: NEW Severity: Critical Priority: P5 - None Component: Network Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: Astara(a)tlinx.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I downloaded repomd.xml from download.opensuse.org/tumbleweed/repo/non-oss/repodata/repomd.xml. That directory had files for Dec 16th. When I tried to open one of the file in that directory ( http://download.opensuse.org/tumbleweed/repo/non-oss/repodata/a424c3aaba9f6… ) I was taken to mirrors.edge.kernel.org. Unfortunately, the latest files in that directory were from the 14th (today is the 20th). The above file wasn't in the outdated mirror. This prevents download of current releases. Perhaps before blindly sending us off to some mirror site, a database should be checked to see what mirrors have which versions and not send us to a site that doesn't have the files for the version that repomd references. This really resolves to 'zero' confidence in the mirror system and low confidence in being able to download a coherent version of the distribution. -- You are receiving this mail because: You are on the CC list for the bug.

2 11