July 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1173630] New: VUL-0: CVE-2020-15395: libmediainfo, mediainfo: buffer overflow in the MpegPs parser
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1173630 Bug ID: 1173630 Summary: VUL-0: CVE-2020-15395: libmediainfo, mediainfo: buffer overflow in the MpegPs parser Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/262592/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: aloisio(a)gmx.com Reporter: wolfgang.frisch(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-15395 In MediaInfoLib in MediaArea MediaInfo 20.03, there is a stack-based buffer over-read in Streams_Fill_PerStream in Multiple/File_MpegPs.cpp (aka an off-by-one during MpegPs parsing). References: https://sourceforge.net/p/mediainfo/bugs/1127/ https://bugzilla.redhat.com/show_bug.cgi?id=1852956 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-15395 http://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-15395.html http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15395 https://mediaarea.net/en/MediaInfo -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1172665] New: Syntax error in irqbalance.service
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

http://bugzilla.suse.com/show_bug.cgi?id=1172665 Bug ID: 1172665 Summary: Syntax error in irqbalance.service Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- journalctl is full of: /usr/lib/systemd/system/irqbalance.service:8: Unknown key name 'Environmentfile' in section 'Service', ignoring. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1173633] VUL-0: CVE-2020-14940: tuxguitar: improper configuration of XML parsers might lead to XXE while loading GP6 (.gpx) and GP7 (.gp) tablature files
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173633 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173630] VUL-0: CVE-2020-15395: libmediainfo, mediainfo: buffer overflow in the MpegPs parser
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173630 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173194] After several last updates laptops on I945 did not show graphics (nomodeset did not help anymore)
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173194 https://bugzilla.suse.com/show_bug.cgi?id=1173194#c15 Stefan Dirsch <sndirsch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |WORKSFORME --- Comment #15 from Stefan Dirsch <sndirsch(a)suse.com> --- Ok. Just had a try with current TW on an Intel-only GPU machine. No nvidia repos are added by default - as expected. Therefore of course no nvidia G04 packages could be autoselected. No idea, what has happened on these machine, but I cannot reproduce that. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173248] New: Kernel 5.7.2 - nvidia Installer hangs with high system load
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1173248 Bug ID: 1173248 Summary: Kernel 5.7.2 - nvidia Installer hangs with high system load Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: axel.braun(a)gmx.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 839025 --> http://bugzilla.opensuse.org/attachment.cgi?id=839025&action=edit Installation log Installation of current TW image causes issue if Nvidia-driver is installed: At installation of nvidia-glG05-440.82-30.1.x86_64 , system hangs under high system load. Previous compilation of driver fails, see attachment -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 1172901] New: Kernel
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1172901 Bug ID: 1172901 Summary: Kernel Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: rahmspinat(a)gmx.ch QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:77.0) Gecko/20100101 Firefox/77.0 Build Identifier: On Lenovo Laptop with Ryzen APU I get the message during boot: pci 0000:00:00.2: AMD-Vi: Unable to read/write to IOMMU perf counter. (dmsg | grep IOMMU) Reproducible: Always Steps to Reproduce: Hardware for reproducing is needed. Actual Results: pci 0000:00:00.2: AMD-Vi: Unable to read/write to IOMMU perf counter. Expected Results: pci 0000:00:00.2: AMD-Vi: IOMMU performance counters supported pci 0000:00:00.2: AMD-Vi: Found IOMMU cap 0x40 perf/amd_iommu: Detected AMD IOMMU #0 (2 banks, 4 counters/bank). The expected result I got when booting Ubuntu 20.04. Seems to be that a certain parameter in kernel config needs to be set. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1173402] Kernel delays boot by 12s if ip= option given
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173402 https://bugzilla.suse.com/show_bug.cgi?id=1173402#c6 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(fvogt(a)suse.com) | --- Comment #6 from Fabian Vogt <fvogt(a)suse.com> --- Created attachment 839298 --> https://bugzilla.suse.com/attachment.cgi?id=839298&action=edit Log with rd.neednet=1 rd.debug ip=dhcp Done. It can be seen that in both cases, DHCP is done successfully, but only with ip=dhcp, the did-setup flag file got created. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173402] Kernel delays boot by 12s if ip= option given
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1173402 https://bugzilla.suse.com/show_bug.cgi?id=1173402#c5 --- Comment #5 from Fabian Vogt <fvogt(a)suse.com> --- Created attachment 839297 --> https://bugzilla.suse.com/attachment.cgi?id=839297&action=edit Log with rd.neednet=1 rd.debug -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172924] KDE Tumbleweed image for Raspberry Pi 4B does not show login screen
by bugzilla_noreply＠suse.com 02 Jul '20

02 Jul '20

https://bugzilla.suse.com/show_bug.cgi?id=1172924 https://bugzilla.suse.com/show_bug.cgi?id=1172924#c16 --- Comment #16 from Freek de Kruijf <freek(a)opensuse.org> --- (In reply to Franck Bui from comment #15) > (In reply to Freek de Kruijf from comment #14) > > > > Should I do this? If yes, what is the upstream bug report location? > > https://github.com/systemd/systemd/issues https://github.com/systemd/systemd/issues/16341 -- You are receiving this mail because: You are on the CC list for the bug.

1 0