August 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1174342] New: X2go can't connect to remote local desktop session (error invalid mit-magic-cookie-1)
by bugzilla_noreply＠suse.com 06 Oct '22

06 Oct '22

https://bugzilla.suse.com/show_bug.cgi?id=1174342 Bug ID: 1174342 Summary: X2go can't connect to remote local desktop session (error invalid mit-magic-cookie-1) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: virex(a)mail.ru QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After last update x2go can't connect to remote local desktop session. Connect to lxde, KDE, ICEWM work fine, but if connect to local desktop session, then get the error Connection failed. Invalid mit-magic-cookie-1 keyNo protocol specified xwinfo: error: unable to open display ":0" -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1175475] New: VUL-0: CVE-2020-14352: librepo: missing path validation in repomd.xml may lead to directory traversal
by bugzilla_noreply＠suse.com 05 Oct '22

05 Oct '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1175475 Bug ID: 1175475 Summary: VUL-0: CVE-2020-14352: librepo: missing path validation in repomd.xml may lead to directory traversal Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/265258/ OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: christian.voegl(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de CC: pth(a)suse.com Found By: Security Response Team Blocker: --- rh#1866498 Librepo fails to sanitize paths in the 'repomd.xml' configuration file. Malformed or malicious repository metadata could allow a remote attacker to copy files outside of the destination directory via path traversal. Considering that DNF runs as root, this flaw could potentially result in system compromise via arbitrary file overwriting of critical system files. References: https://bugzilla.redhat.com/show_bug.cgi?id=1866498 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-14352 https://access.redhat.com/security/cve/CVE-2020-14352 -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1041794] New: Recent update breaks some Youtube videos
by bugzilla_noreply＠novell.com 04 Oct '22

04 Oct '22

http://bugzilla.suse.com/show_bug.cgi?id=1041794 Bug ID: 1041794 Summary: Recent update breaks some Youtube videos Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.2 Hardware: x86-64 OS: Linux Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: james.knott(a)rogers.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- An update around mid May caused some Youtube videos to fail. When this happens, loading the video stops, leaving only the dot going around a circle showing. This happens with Firefox, Seamonkey and Chromium browsers. The videos that fail play OK in Windows. To verify the problem, I tried the videos with a VirtualBox VM or a fresh 42.2 install. The problem videos played. I then cloned the VM and ensured the videos played. I then updated the clone to the latest updates and now the videos fail. The original non-updated VM still continued to play the videos. It appears the problem is related to the type of codec used. For example, videos with the vp9 codec play, but those with avc1.4d400d now fail. Here are 2 links, this one plays OK: https://www.youtube.com/watch?v=Rzqq581Q3Us But this one doesn't: https://www.youtube.com/watch?v=t8tdmaEhMHE Again, this problem occurred recently. Videos that played a few weeks ago now fail. -- You are receiving this mail because: You are on the CC list for the bug.

2 14

[Bug 1137997] New: Expert Partitioner: import multi-device Btrfs mount points
by bugzilla_noreply＠novell.com 04 Oct '22

04 Oct '22

http://bugzilla.suse.com/show_bug.cgi?id=1137997 Bug ID: 1137997 Summary: Expert Partitioner: import multi-device Btrfs mount points Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: jlopez(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- When importing mount points from a system with a multi-device Btrfs filesystem, the multi-device Btrfs is imported as a single-device. It should reconstruct the multi-device Btrfs, if possible. -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1175678] New: complete packages --unneeded featureset (mostly "apt-mark auto")
by bugzilla_noreply＠suse.com 04 Oct '22

04 Oct '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1175678 Bug ID: 1175678 Summary: complete packages --unneeded featureset (mostly "apt-mark auto") Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: openSUSE Leap 15.2 Status: NEW Severity: Enhancement Priority: P5 - None Component: libzypp Assignee: zypp-maintainers(a)suse.de Reporter: duge(a)pre-sense.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- openSUSE-13.1 (zypper-1.9.*, libzypp-13.9.*) introduced some nice features: # Remove a package and it's dependencies (if unused) zypper remove --clean-deps PACKAGE # Show unused packages, which haven't been explicitly installed zypper packages --unneeded Sadly this featureset still misses some points. This can also be seen in relation to other package managers: https://wiki.archlinux.org/index.php/Pacman/Rosetta#Basic_operations Especially a counterpart to this command is missing: apt-mark auto PACKAGE # remove manually installed property # Additionally these commands would be nice. apt-mark manual PACKAGE apt-mark showmanual # show manually installed packages # But they can be workarounded. (although it's quite nasty) # apt-mark manual PACKAGE zypper install --force PACKAGE # apt-mark showmanual zypper search '' | grep -E '^i\+' Also it would be very helpfull if "zypper packages --unneeded" would work recursive. The command "zypper remove --clean-deps PACKAGE" already seems to work recursive. And Debian's "apt autoremove" also does. What I mean when saying "recursive": Currently "zypper packages --unneeded" only lists packages which are completely unneeded by other packages (and not manually installed). Let's call them package set A. But after removing set A, all packages which where required by packages in set A also become unneeded. So you have to run "zypper packages --unneeded" again. This repeats, until you finally removed only packages, that didn't had requirements to otherwise unneeded packages themselves. Related: https://bugzilla.opensuse.org/show_bug.cgi?id=1002507 -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1173123] New: Alt+F2 sometimes start krunner (Why???)
by bugzilla_noreply＠suse.com 03 Oct '22

03 Oct '22

https://bugzilla.suse.com/show_bug.cgi?id=1173123 Bug ID: 1173123 Summary: Alt+F2 sometimes start krunner (Why???) Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: LXDE Assignee: andrea(a)opensuse.org Reporter: virex(a)mail.ru QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Something wrong with keybind alt+f2 It is start krunner sumtimes under lxde -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1161828] New: Sound crack on some frequency or peak of audio
by bugzilla_noreply＠novell.com 30 Sep '22

30 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1161828 Bug ID: 1161828 Summary: Sound crack on some frequency or peak of audio Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Sound Assignee: tiwai(a)suse.com Reporter: dev.dorrejo(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- lspci -vvv -s 00:1f.3 00:1f.3 Audio device: Intel Corporation Cannon Lake PCH cAVS (rev 10) DeviceName: Onboard - Sound Subsystem: Micro-Star International Co., Ltd. [MSI] Device 1219 Control: I/O- Mem+ BusMaster+ SpecCycle- MemWINV- VGASnoop- ParErr- Stepping- SERR- FastB2B- DisINTx+ Status: Cap+ 66MHz- UDF- FastB2B- ParErr- DEVSEL=fast >TAbort- <TAbort- <MAbort- >SERR- <PERR- INTx- Latency: 32, Cache Line Size: 64 bytes Interrupt: pin A routed to IRQ 138 Region 0: Memory at a4310000 (64-bit, non-prefetchable) [size=16K] Region 4: Memory at a4100000 (64-bit, non-prefetchable) [size=1M] Capabilities: [50] Power Management version 3 Flags: PMEClk- DSI- D1- D2- AuxCurrent=55mA PME(D0-,D1-,D2-,D3hot+,D3cold+) Status: D0 NoSoftRst+ PME-Enable- DSel=0 DScale=0 PME- Capabilities: [80] Vendor Specific Information: Len=14 <?> Capabilities: [60] MSI: Enable+ Count=1/1 Maskable- 64bit+ Address: 00000000fee00438 Data: 0000 Kernel driver in use: snd_hda_intel Kernel modules: snd_hda_intel, snd_soc_skl, snd_sof_pci -- You are receiving this mail because: You are on the CC list for the bug.

2 6

[Bug 993401] New: grub2-install for EFI installs an EFI entry that is not bootable
by bugzilla_noreply＠novell.com 30 Sep '22

30 Sep '22

http://bugzilla.suse.com/show_bug.cgi?id=993401 Bug ID: 993401 Summary: grub2-install for EFI installs an EFI entry that is not bootable Classification: openSUSE Product: openSUSE Distribution Version: Leap 42.1 Hardware: aarch64 OS: openSUSE 42.1 Status: NEW Severity: Minor Priority: P5 - None Component: Bootloader Assignee: jsrain(a)suse.com Reporter: alan(a)softiron.co.uk QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- Running grub2-install does not yield a bootable entry in EFI's boot menu. On Leap and Tumbleweed, this means booting relies instead on the startup.nsh in the EFI partition. This occurs on Aarch64 with both AMD/AMI firmware and Tianocore/edk2/OpenPlatformPkg firmware. Steps to reproduce: 1. Install Leap 42.1 from the OEM image 2. Restart and boot the system 2a. Observe that the startup.nsh (in the EFI partition) is used to boot the system. 3. Reboot again, but During boot-up, enter the EFI menu. 3a. Observe that in the boot manager in the EFI menus, there is no entry for Leap. 4. Restart the system or select the UEFI shell option, booting from startup.nsh 5. From the command prompt in Leap, run: grub2-install /dev/sda 6. Reboot the system 7. During start-up enter the EFI menu. 7a. Observe that in the EFI menu there is an entry called opensuse-leap42.1-arm-jeos-devel-efi, or something like it. 8. Select the opensuse-leap* boot menu item and try to boot it. 9. Observe that it does not boot, and returns to the boot menu. 10. Select the UEFI Shell option, and observe that it will boot using startup.nsh. 11. From the Linux command prompt, run "efibootmgr -v" 11a. Observe that the entry for opensuse-leap* is truncated :( 11b. Note the same can be observed by running "dumpstore" from the EFI environment. Note: The same thing happens if the bootloader is re-installed using "yast2 bootloader". Note that this is broken in Leap, but works fine in SLES, probably because the path and OS name for SLES is so much shorter. Interestingly, if I try to add my own entry with the proper path: efibootmgr -c -d /dev/sda -p 1 --loader "EFI\\opensuse-leap42.1-arm-jeos-devel-efi\\grubarm64.efi" -L Test_Entry_By_Alan and then inspect it with: efibootmgr -v I see my entry is truncated too :( Boot0007* Test_Entry_By_Alan HD(1,800,64004,cb3a713f-f051-4c9c-b643-b9e1358f6c2d)File(EFI\opensuse-leap42.1-arm-jeos-devel-ef) In summary, grub2-install and/or efibootmgr is simply putting a boot entry into NVRAM that is truncated and not valid. Thanks! Alan. -- You are receiving this mail because: You are on the CC list for the bug.

2 20

[Bug 1163179] New: nscd can't monitor /etc/services after the recent netcfg update
by bugzilla_noreply＠novell.com 29 Sep '22

29 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1163179 Bug ID: 1163179 Summary: nscd can't monitor /etc/services after the recent netcfg update Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Factory Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: arjan.de.jong(a)sighup.nl QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After installing the netcfg update which moves /etc/services to /usr/etc nscd can't monitor the file /etc/services. >From /var/log/zypp/history 2020-02-04 21:03:04|install|netcfg|11.6-5.1|noarch||repo-oss|d37960598c66a976437b84dc749c527b21165630784162c67f9e5a22188937d8| Since that moment I see these entries with "journalctl -u nscd": Feb 04 21:03:04 discovery nscd[2546]: 2546 monitored file `/etc/services` was deleted, removing watch Feb 04 21:03:25 discovery nscd[2546]: 2546 checking for monitored file `/etc/services': No such file or directory Feb 04 21:03:40 discovery nscd[2546]: 2546 checking for monitored file `/etc/services': No such file or directory Feb 04 21:04:00 discovery nscd[2546]: 2546 checking for monitored file `/etc/services': No such file or directory Feb 04 21:04:15 discovery nscd[2546]: 2546 checking for monitored file `/etc/services': No such file or directory Feb 04 21:04:35 discovery nscd[2546]: 2546 checking for monitored file `/etc/services': No such file or directory The entry that states the file was deleted was a single occurence. The entries about no such file or directory continue. -- You are receiving this mail because: You are on the CC list for the bug.

2 5

[Bug 1170971] New: missing dependencies for PlayOnLinux
by bugzilla_noreply＠novell.com 28 Sep '22

28 Sep '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1170971 Bug ID: 1170971 Summary: missing dependencies for PlayOnLinux Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: john_neo(a)usa.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:75.0) Gecko/20100101 Firefox/75.0 Build Identifier: When I try to install PlayOnLinux with the following command : # zypper in PlayOnLinux, I receive issue with following message : # nothing provides dbus-1-python needed by PlayOnLinux-4.3.4-21.4.noarch Reproducible: Always Steps to Reproduce: 1.# zypper in PlayOnLinux 2. 3. Actual Results: # nothing provides dbus-1-python needed by PlayOnLinux-4.3.4-21.4.noarch Expected Results: Installation finish successfully -- You are receiving this mail because: You are on the CC list for the bug.

2 11