May 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1169614] New: AUDIT-0: cockpit: setuid, dbus, pam
by bugzilla_noreply＠novell.com 17 Nov '21

17 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1169614 Bug ID: 1169614 Summary: AUDIT-0: cockpit: setuid, dbus, pam Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: lnussel(a)suse.com QA Contact: security-team(a)suse.de CC: kkaempf(a)suse.com Found By: --- Blocker: --- For my package found in OBS in https://build.opensuse.org/package/show/systemsmanagement:cockpit/cockpit I would like a whitelisting for the following rpmlint error: [ 395s] cockpit-ws.x86_64: E: permissions-file-setuid-bit (Badness: 100) /usr/lib/cockpit-session is packaged with setuid/setgid bits (04750) [ 395s] If the package is intended for inclusion in any SUSE product [ 395s] please open a bug report to request review of the program by the [ 395s] security team. Please refer to [ 395s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 395s] more information. [ 395s] [ 395s] cockpit-bridge.x86_64: E: polkit-untracked-privilege (Badness: 100) org.cockpit-project.cockpit.root-bridge (auth_admin:auth_admin:auth_admin) [ 395s] The privilege is not listed in /etc/polkit-default-privs.* which [ 395s] makes it harder for admins to find. Furthermore polkit [ 395s] authorization checks can easily introduce security issues. If the [ 395s] package is intended for inclusion in any SUSE product please open [ 395s] a bug report to request review of the package by the security team. [ 395s] Please refer to [ 395s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs for [ 395s] more information. [ 395s] [ 395s] cockpit-ws.x86_64: E: suse-pam-unauthorized-module (Badness: 10) pam_cockpit_cert.so [ 395s] cockpit-ws.x86_64: E: suse-pam-unauthorized-module (Badness: 10) pam_ssh_add.so [ 395s] The package installs a PAM module. If the package is intended for [ 395s] inclusion in any SUSE product please open a bug report to request [ 395s] review of the service by the security team. Please refer to [ 395s] https://en.opensuse.org/openSUSE:Package_security_guidelines#audit_bugs -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1157498] New: permissions.secure: mismatch between comment and content
by bugzilla_noreply＠novell.com 17 Nov '21

17 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1157498 Bug ID: 1157498 Summary: permissions.secure: mismatch between comment and content Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: suse-beta(a)cboltz.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- >From /etc/permissions.secure: # restrictive, only for "trusted" group users: /usr/lib/mgetty+sendfax/faxq-helper fax:root 4755 /var/spool/fax/outgoing/ fax:root 0755 /var/spool/fax/outgoing/locks fax:root 0755 fax:root 4755/0755 doesn't look like 'only for "trusted" group' ;-) -- You are receiving this mail because: You are on the CC list for the bug.

2 1

[Bug 991027] New: Seamonkey Mail crashes on startup since version 2.40-2.1
by bugzilla_noreply＠novell.com 16 Nov '21

16 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=991027 Bug ID: 991027 Summary: Seamonkey Mail crashes on startup since version 2.40-2.1 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: bjoernv(a)arcor.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 685863 --> http://bugzilla.opensuse.org/attachment.cgi?id=685863&action=edit Stacktrace produced with "seamonkey -safe-mode --debugger gdb -mail 2>&1" The latest release of Seamonkey (2.40-2.1) crashes on startup. It only crashes, if E-Mail accounts are configured in selected profile. Add-Ons do not matter, because I run Seamonkey in safe-mode for testing. The previous version 2.40-1.12 which is still available for download is unaffected, so it can be used until this bug is fixed. A full GDB stacktrace is attached. -- You are receiving this mail because: You are on the CC list for the bug.

2 17

[Bug 984637] New: MozillaFirefox, MozillaThunderbird rebuild failure with binutils
by bugzilla_noreply＠novell.com 16 Nov '21

16 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=984637 Bug ID: 984637 Summary: MozillaFirefox, MozillaThunderbird rebuild failure with binutils Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: pcerny(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de CC: bnc-team-mozilla(a)forge.provo.novell.com, matz(a)suse.com, pcerny(a)suse.com, rguenther(a)suse.com, schwab(a)suse.com, wolfgang(a)rosenauer.org Blocks: 983048 Found By: --- Blocker: --- Looks like the updated binutils in SP2 causes firefox and thunderbird fail to build: [ 2513s] /usr/lib64/gcc/x86_64-suse-linux/4.8/../../../../x86_64-suse-linux/bin/ld: ../../xpcom/components/nsComponentManager.o: relocation R_X86_64_PC32 against protected symbol `end_kPStaticModules_NSModule' can not be used when making a shared object [ 2513s] /usr/lib64/gcc/x86_64-suse-linux/4.8/../../../../x86_64-suse-linux/bin/ld: final link failed: Bad value https://build.opensuse.org/package/live_build_log/openSUSE:Leap:42.2:Stagin… https://build.opensuse.org/package/live_build_log/openSUSE:Leap:42.2:Stagin… Is this a bug in binutils or firefox/tb? -- You are receiving this mail because: You are on the CC list for the bug.

2 10

[Bug 1076907] New: package MozillaFirefox does not provide mimehandler(text/html)
by bugzilla_noreply＠novell.com 16 Nov '21

16 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1076907 Bug ID: 1076907 Summary: package MozillaFirefox does not provide mimehandler(text/html) Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.3 Hardware: x86-64 OS: openSUSE 42.3 Status: NEW Severity: Minor Priority: P5 - None Component: Firefox Assignee: bnc-team-mozilla(a)forge.provo.novell.com Reporter: giecrilj(a)stegny.2a.pl QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- { let i=0 for package in konqueror MozillaFirefox do echo "$package provides:" zypper info --provides "$package" | grep -F 'mimehandler' || let 'i^=1' echo done let i && echo 'Test failed: only one package provides a media handler!' && false } -- You are receiving this mail because: You are on the CC list for the bug.

2 16

[Bug 1062195] New: seamonkey 2.49.1 translation common / -other package doesn't contain files
by bugzilla_noreply＠novell.com 16 Nov '21

16 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1062195 Bug ID: 1062195 Summary: seamonkey 2.49.1 translation common / -other package doesn't contain files Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: i686 OS: openSUSE 42.2 Status: NEW Severity: Normal Priority: P5 - None Component: Translations Assignee: ke(a)suse.com Reporter: cupra2(a)gmx.de QA Contact: ke(a)suse.com Found By: --- Blocker: --- opensuse 13.1 / 13.2 / 42.1 / 42.2 / 42.3 ( 32 and 64 bit ) seamonkey-translation-common and -other packages from download.opensuse.org/repositories/mozilla/ doesn't contain files Hello Wolfgang, could you take a look at this please ? Thank you very much in advanced Norman -- You are receiving this mail because: You are on the CC list for the bug.

2 11

[Bug 1021636] New: firefox-esr 45.6.0 and 45.7.0 fail to show https://www.google.com and other sites
by bugzilla_noreply＠novell.com 16 Nov '21

16 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1021636 Bug ID: 1021636 Summary: firefox-esr 45.6.0 and 45.7.0 fail to show https://www.google.com and other sites Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: x86-64 OS: openSUSE 42.2 Status: NEW Severity: Major Priority: P5 - None Component: 3rd party software Assignee: wolfgang(a)rosenauer.org Reporter: joerg.steffens(a)dass-it.de QA Contact: opensuse-communityscreening(a)forge.provo.novell.com Found By: --- Blocker: --- https://build.opensuse.org/project/show/mozilla After updating to firefox-esr-45.6.0-1.1.x86_64 Tue Jan 24 12:07:24 2017 mozilla-nss-3.28.1-2.1.x86_64 Tue Jan 24 11:32:19 2017 mozilla-nspr-4.13.1-2.1.x86_64 Tue Jan 24 11:32:18 2017 from http://download.opensuse.org/repositories/mozilla/openSUSE_Leap_42.2/x86_64/ (https://build.opensuse.org/project/show/mozilla) some pages fail to load: https://www.google.de https://www.google.com https://www.wikipedia.org Error message: """ Secure Connection Failed An error occurred during a connection to www.google.com. The key does not support the requested operation. Error code: SEC_ERROR_INVALID_KEY The page you are trying to view cannot be shown because the authenticity of the received data could not be verified. Please contact the website owners to inform them of this problem. ... """ Some other https sites are handled without problems. Tested with openSUSE 13.1 and openSUSE 42.2, fresh (empty) firefox profile. Some problem with firefox-esr 45.7.0 (from https://build.opensuse.org/package/show/home:steffens:lvermgeo:firefox/fire…) An earlier version of firefox-esr 45.6.0 has been known to work. However, this older version has been compiled against: mozilla-nss-3.26.2-1.1.x86_64 mozilla-nspr-4.12-1.1.x86_64 -- You are receiving this mail because: You are on the CC list for the bug.

2 17

[Bug 1017174] New: firefox in english for a french installation
by bugzilla_noreply＠novell.com 16 Nov '21

16 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1017174 Bug ID: 1017174 Summary: firefox in english for a french installation Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: bnc-team-mozilla(a)forge.provo.novell.com Reporter: epistemepromeneur(a)free.fr QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- i made a french and clean install of 42.2 + KDE FF is in english i tried : - using yast language manager to set to french - in FF i add french and french-fr and i set them to the upper priority FF is still in english i assume there is something in the environment which indicates system is in english. -- You are receiving this mail because: You are on the CC list for the bug.

2 19

[Bug 1161917] New: Firefox grows memory usage when running for multiple days
by bugzilla_noreply＠novell.com 15 Nov '21

15 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1161917 Bug ID: 1161917 Summary: Firefox grows memory usage when running for multiple days Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Firefox Assignee: bnc-team-mozilla(a)forge.provo.novell.com Reporter: jbrielmaier(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I use Firefox on my workstation. The workstation runs 24/7 so Firfox is running then as well. The problem is that Firefox memory usage grows steady with the time. At the moment I have 6 tabs open and FF uses over 4GiB of RAM. If I close the browser and open the very same 6 tabs, it will be around 1GiB of RAM. How can I provide valuable logs etc. to debug this problem? Using the free memory commands from about:memory doesn't help. -- You are receiving this mail because: You are on the CC list for the bug.

2 3

[Bug 1152373] New: mozilla:Factory/MozillaFirefox: feature request. Recommand emojii and symbol fonts for a good web experience
by bugzilla_noreply＠novell.com 15 Nov '21

15 Nov '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1152373 Bug ID: 1152373 Summary: mozilla:Factory/MozillaFirefox: feature request. Recommand emojii and symbol fonts for a good web experience Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: 3rd party software Assignee: wolfgang(a)rosenauer.org Reporter: jon(a)moozaad.co.uk QA Contact: bnc-team-screening(a)forge.provo.novell.com Found By: --- Blocker: --- Fairly regularly we have posts on reddit about missing unicode glyphs. Please consider adding the following suggestions or recommendations to the package for the best web experience: noto-coloremoji-fonts noto-sans-symbols-fonts noto-sans-symbols2-fonts -- You are receiving this mail because: You are on the CC list for the bug.

2 1