June 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1171441] VUL-0: CVE-2020-11039,CVE-2020-11038,CVE-2020-11043,CVE-2020-11040,CVE-2020-11041,CVE-2020-11019,CVE-2020-11017,CVE-2020-11018: freerdp: 2.1.0 fixes several CVEs, leaks and crashes
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1171441 Robert Frohl <rfrohl(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |qkzhu(a)suse.com Flags|needinfo?(security-team@sus |needinfo?(qkzhu(a)suse.com) |e.de) | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172346] New: ixpdimm_sw FTBFS in Leap 15.2
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1172346 Bug ID: 1172346 Summary: ixpdimm_sw FTBFS in Leap 15.2 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: mlin(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- ixpdimm_sw fails to build Leap 15.2, it should be caused by recent change in the other dep package. Note that, ixpdimm_sw is SLE package. ` [ 22s] make encryptdir [ 22s] make[3]: Entering directory '/home/abuild/rpmbuild/BUILD/ixpdimm_sw-01.00.00.2287/src/common' [ 22s] ../../build.mk:230: Unrecognized Linux distribution [ 22s] gcc -Wall -Werror -Wfatal-errors -Wformat -Wformat-security -fstack-protector-all -D_FORTIFY_SOURCE=2 -D_XOPEN_SOURCE=500 -fPIE -fPIC -D__PRODUCT_DATADIR__=\"/usr/share/ixpdimm_sw/\" -D__NVM_DLL__ -fvisibility=hidden -O2 -std=c99 -D__LARGE_PAYLOAD__=1 -D__EARLY_HW__=0 -MMD -D__VERSION_MAJOR__=01 -D__VERSION_MINOR__=00 -D__VERSION_HOTFIX__=00 -D__VERSION_BUILDNUM__=2287 -D__VERSION_NUMBER__=01.00.00.2287 -D__ADD_MANUFACTURING__=0 -D__WBEM_PREFIX__='Intel_' -D__INTEL_I18N__ -D__LINUX__ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g -I. -I../../external/sqlite -I../../external/openssl/include -I../../external/precompiled_libs/linux/openssl -I../../external/zlib -I../../src/lib -I../../external/intel_i18n/include/ -c encrypt/encrypt.c -o ../../output/obj/linux/real/release/common/encrypt/encrypt.o -z noexecstack -z relro -z now -pie [ 22s] encrypt/encrypt.c:36:10: fatal error: zlib.h: No such file or directory [ 22s] #include <zlib.h> [ 22s] ^~~~~~~~ [ 22s] compilation terminated. [ 22s] make[3]: *** [makefile:175: encryptdir] Error 1 [ 22s] make[3]: Leaving directory '/home/abuild/rpmbuild/BUILD/ixpdimm_sw-01.00.00.2287/src/common' [ 22s] make[2]: *** [makefile:143: dependencies] Error 2 [ 22s] make[2]: Leaving directory '/home/abuild/rpmbuild/BUILD/ixpdimm_sw-01.00.00.2287/src/common' [ 22s] make[1]: *** [makefile:134: all] Error 2 [ 22s] make[1]: Leaving directory '/home/abuild/rpmbuild/BUILD/ixpdimm_sw-01.00.00.2287/src/common' [ 22s] make: *** [makefile:65: all] Error 2 [ 22s] error: Bad exit status from /var/tmp/rpm-tmp.pK20Lo (%build) ` full build log: https://build.opensuse.org/package/live_build_log/openSUSE:Leap:15.2/ixpdim… -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1172446] New: VUL-1: CVE-2020-13775: znc: allows attackers to trigger an application crash (NULL pointer dereference) if echo-message is not enabled and there is no network
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1172446 Bug ID: 1172446 Summary: VUL-1: CVE-2020-13775: znc: allows attackers to trigger an application crash (NULL pointer dereference) if echo-message is not enabled and there is no network Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/260498/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: mpluskal(a)suse.com Reporter: wolfgang.frisch(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-13775 ZNC before 1.8.1-rc1 allows attackers to trigger an application crash (with a NULL pointer dereference) if echo-message is not enabled and there is no network. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-13775 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13775 https://github.com/znc/znc/commit/2390ad111bde16a78c98ac44572090b33c3bd2d8 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172413] ignition: better handling of missing config
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1172413 http://bugzilla.suse.com/show_bug.cgi?id=1172413#c5 --- Comment #5 from Ignaz Forster <iforster(a)suse.com> --- The problem with our appliance images is that their configuration sources are dynamic: The configuration may either be retrieved from a physical device such as a USB flash drive (customized behavior for openSUSE) or from the platform provider specified in `ignition.platform.id` (upstream functionality). The platform providers in turn are implemented in a way that they won't error out if the provider is reachable, but doesn't provide a configuration - after all this is a valid use case. We *could* ship our images with the `file` provider to provoke a hard fail if the file isn't there, but then it wouldn't be possible to use the platform specific configuration locations of QEMU, VirtualBox, VMWare etc. any more. This could be solved by supporting multiple platforms (that's basically what would be required for bug 1149701), but at least a year ago there was no interest in it - we may try again though. To sum it up from a technical perspective: With Ignition as it currently is it's not possible to determine whether a configuration has been applied or not. My suggestion to use the `file` provider will only work with customized systems, but not generic images. This problem however could be solved completely differently: With Fedora CoreOS is is made very clear that administrators will have to provide the Ignition file beforehand, and their documentation to do so is imho way better than ours - just have a look at https://docs.fedoraproject.org/en-US/fedora-coreos/getting-started/ (or the nice download list on https://getfedora.org/de/coreos/download?tab=metal_virtualized&stream=stable) Placing such a hint directly next to the download links would make MicroOS way easier to use for newcomers. By the way: You don't have to redeploy just to trigger Ignition again: Just add `ignition.firstboot` to the boot command line as soon as you have the configuration ready. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 646418] text too small for high DPI users and users lacking excellent vision
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=646418 Bug 646418 depends on bug 1065560, which changed state. Bug 1065560 Summary: download.opensuse.org package listing screen usability regressed http://bugzilla.suse.com/show_bug.cgi?id=1065560 What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1065560] download.opensuse.org package listing screen usability regressed
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.suse.com/show_bug.cgi?id=1065560 http://bugzilla.suse.com/show_bug.cgi?id=1065560#c4 Lars Vogdt <lars.vogdt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |FIXED --- Comment #4 from Lars Vogdt <lars.vogdt(a)suse.com> --- Thank you, Felix, for your contributions. Sorry that it took so long to apply your proposed changes. Your patch from attachment 746258 is deployed in production now. I'm currently searching for a place on GitHub - until than, the css and icons life in the package mirrorbrain-icons in the openSUSE:infrastructure repository. Submit requests are more than welcome! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172436] New: [Build 20200602] wine is uninstallable
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1172436 Bug ID: 1172436 Summary: [Build 20200602] wine is uninstallable Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/1285289/modules/wine /steps/15 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_on_kde@64bit fails in [wine](https://openqa.opensuse.org/tests/1285289/modules/wine/steps/15) Wine-32bit is not installable due to missing dependencies: Problem: conflicting requests Solution 1: Following actions will be done: install libOpenCL1-2.2.12-2.3.i586 despite the inferior architecture ## Test suite description ## Reproducible Fails since (at least) Build [20200530](https://openqa.opensuse.org/tests/1284765) ## Expected result Last good: [20200528](https://openqa.opensuse.org/tests/1282626) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1172430] gnucash can't be built with guile-3.0
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1172430 http://bugzilla.opensuse.org/show_bug.cgi?id=1172430#c2 Martin Liška <martin.liska(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS Assignee|screening-team-bugs(a)suse.de |martin.liska(a)suse.com --- Comment #2 from Martin Liška <martin.liska(a)suse.com> --- I likely know how to port it... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172328] New: Yast2 new directory server
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1172328 Bug ID: 1172328 Summary: Yast2 new directory server Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: pjaouen(a)ponctey.fr QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Created attachment 838373 --> http://bugzilla.opensuse.org/attachment.cgi?id=838373&action=edit y2log error new server without certificate erreor with last version : attached y2log 2020-05-31 21:27:58 <1> beta152(32217) [Ruby] dir/ds389.rb:87 TypeError: __init__() got an unexpected keyword argument 'capture_output' -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1163363] missing poll() functionality
by bugzilla_noreply＠suse.com 03 Jun '20

03 Jun '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1163363 http://bugzilla.opensuse.org/show_bug.cgi?id=1163363#c6 Marcus Rückert <mrueckert(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |UPSTREAM --- Comment #6 from Marcus Rückert <mrueckert(a)suse.com> --- Please reopen the bug when the feature is merged upstream -- You are receiving this mail because: You are on the CC list for the bug.

1 0