May 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1171568] Error installing proprietary NVIDIA drivers on openSUSE Leap 15.2
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1171568 http://bugzilla.opensuse.org/show_bug.cgi?id=1171568#c8 --- Comment #8 from Stefan Dirsch <sndirsch(a)suse.com> --- Ok. Found a regression for the build on Leap 15.1/15 and addressed it. Thu May 14 11:00:01 UTC 2020 - Stefan Dirsch <sndirsch(a)suse.com> - get rid of ksym Requires on Leap 15.1/15.2 by redefining %__kmp_requires Will be fixed with the next update on NVIDIA's server. Probably not before they relaease a new driver ... Not to myself. Needed to fix this already for Leap 15.0. See boo#1087460 for more detals. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171658] VUL-1: CVE-2020-12831: frr: default permission issue eases information leaks
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1171658 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P4 - Low -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171658] New: VUL-1: CVE-2020-12831: frr: default permission issue eases information leaks
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1171658 Bug ID: 1171658 Summary: VUL-1: CVE-2020-12831: frr: default permission issue eases information leaks Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/259522/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: erico.mendonca(a)suse.com Reporter: atoptsoglou(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-12831 Description of problem: By default, frr creates empty configuration files, however unfortunately with too wide permissions: As per http://docs.frrouting.org/en/latest/bgp.html, /etc/frr/bgpd.conf is also meant to contain the BGP password for peerings/sessions, thus proper default permissions should be applied by frr when even creating this file for administrator convenience. Otherwise information leaks are eased. Version-Release number of selected component (if applicable): frr-7.0-5.el8.x86_64 How reproducible: See above and below. Steps to Reproduce: 1. dnf install frr 2. sed -e 's/^zebra=no/zebra=yes/' -e 's/^bgpd=no/bgpd=yes/' -i /etc/frr/daemons 3. systemctl start frr.service 4. ls -l /etc/frr/bgpd.conf -rw-r--r--. 1 frr frr 0 May 4 01:07 /etc/frr/bgpd.conf 5. ls -ld /etc/frr/ drwxr-xr-x. 2 frr frr 4096 May 4 01:07 /etc/frr/ Actual results: World-readable /etc/frr/bgpd.conf by default. Expected results: /etc/frr/bgpd.conf should be maybe 640 by default. Additional info: I did not investigate whether this is an upstream or a downstream issue, given frr.service seems to be built on an old initscript (/usr/lib/frr/frr) rather being a modern systemd unit. References: https://bugzilla.redhat.com/show_bug.cgi?id=1830805 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-12831 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1171535] Include stix2 in texlive
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1171535 http://bugzilla.opensuse.org/show_bug.cgi?id=1171535#c1 Dr. Werner Fink <werner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |UPSTREAM --- Comment #1 from Dr. Werner Fink <werner(a)suse.com> --- Not for TeXLive 2017 of Leap 15.1 and yes stix2 is part of TeXLive 2020 which is currently in staging/QA process and maybe doe swork also for Leap 15.1 ... see project Publishing:TeXLive ... but if you want to use TeXLive 2020 you have to deinstall *all* old TeXLive packages -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171405] avr-gcc-10: skipping incompatible libgcc.a
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1171405 http://bugzilla.suse.com/show_bug.cgi?id=1171405#c1 --- Comment #1 from Richard Biener <rguenther(a)suse.com> --- Hum, I have next to no knowledge about AVR pecularities here so if you think that avr51/libgcc.a is "good" then it would be interesting to see why ld rejects it (I only see subtle differences in the objects, namely ELF Header 'Flags' are different but readelf does not in any way pretty-print those). You can also try to add -v to the compiler command to see whether new GCC pass some different -m flags to the linker. I suppose the issue reproduces even with a trivial 'int main() {}' program as soon as you use -mmcu=atmega1284p? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1170551] Call std::random_device failed when it is used by multiple threads
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1170551 http://bugzilla.suse.com/show_bug.cgi?id=1170551#c3 Richard Biener <rguenther(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |https://gcc.gnu.org/bugzill | |a/show_bug.cgi?id=94087 --- Comment #3 from Richard Biener <rguenther(a)suse.com> --- See comments upstream. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1170635] Create tray icon for wicked
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1170635 Alynx Zhou <alynx.zhou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alynx.zhou(a)suse.com Assignee|screening-team-bugs(a)suse.de |wicked-maintainers(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171535] Include stix2 in texlive
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1171535 Alynx Zhou <alynx.zhou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alynx.zhou(a)suse.com Assignee|screening-team-bugs(a)suse.de |werner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1171176] Please enable strongswan bypass-lan plugin
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1171176 Alynx Zhou <alynx.zhou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alynx.zhou(a)suse.com Assignee|screening-team-bugs(a)suse.de |mmnelemane(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1170516] compile scram-sha1 login method into msmtp
by bugzilla_noreply＠suse.com 14 May '20

14 May '20

http://bugzilla.suse.com/show_bug.cgi?id=1170516 Alynx Zhou <alynx.zhou(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alynx.zhou(a)suse.com Assignee|screening-team-bugs(a)suse.de |mrueckert(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0