September 2020 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1174504] AUDIT-0: allow ping and ICMP commands without CAP_NET_RAW
by bugzilla_noreply＠suse.com 09 Sep '20

09 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1174504 https://bugzilla.suse.com/show_bug.cgi?id=1174504#c5 --- Comment #5 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1174504) was mentioned in https://build.opensuse.org/request/show/833187 Factory / aaa_base -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176100] password-store package incorrect system extensions path (/usr/lib vs. /usr/libexec)
by bugzilla_noreply＠suse.com 09 Sep '20

09 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1176100 https://bugzilla.suse.com/show_bug.cgi?id=1176100#c2 Dan Čermák <dcermak(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcermak(a)suse.com, | |mvetter(a)suse.com, | |sean(a)sdoconnell.net Flags| |needinfo?(sean(a)sdoconnell.n | |et) --- Comment #2 from Dan Čermák <dcermak(a)suse.com> --- Could you recheck whether this is still an issue? There has been an update to pass-otp which should fix the /usr/lib -> /usr/libexec move. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1172731] VUL-0: CVE-2020-8024: hylafax+: Problematic permissions allow escalation from uucp to other users
by bugzilla_noreply＠suse.com 09 Sep '20

09 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1172731 https://bugzilla.suse.com/show_bug.cgi?id=1172731#c14 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(jsegitz(a)suse.com) | --- Comment #14 from Johannes Segitz <jsegitz(a)suse.com> --- (In reply to Axel Braun from comment #12) Thanks for the submissions. The permissions are better, but still not perfect. E.g. in /var/spool/hylafax/bin most files are now owned by root, but genfontmap.ps is not. Why? Postscript is a turing complete language and as this file is used in /usr/sbin/faxsetup this might be used to escalate privileges (didn't try it). Please reorder the file list to have all files with default permissions (e.g. owned by root) at the top and then have the exeptions at the end. Currently it's changed several times, which introduces unnecessary risks and makes it hard to read. Please check if %{faxspool}/config/* %{faxspool}/bin/dict/* %{faxspool}/bin/genfontmap.ps %{faxspool}/bin/auto-rotate.ps %{faxspool}%{_sysconfdir}/dpsprinter.ps %{faxspool}%{_sysconfdir}/cover.templ %{faxspool}%{_sysconfdir}/lutRS18.pcf %{faxspool}%{_sysconfdir}/LiberationSans-25.pcf %config(noreplace) %{faxspool}%{_sysconfdir}/dialrules* really need to be owned by uucp -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175492] New: [Jump] XFCE uses upstream theme (wallpaper)
by bugzilla_noreply＠suse.com 09 Sep '20

09 Sep '20

http://bugzilla.opensuse.org/show_bug.cgi?id=1175492 Bug ID: 1175492 Summary: [Jump] XFCE uses upstream theme (wallpaper) Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: aarch64 URL: https://openqa.opensuse.org/tests/1366389/modules/open suse_welcome/steps/4 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Xfce Assignee: bnc-team-xfce(a)forge.provo.novell.com Reporter: guillaume.gardet(a)arm.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- ## Observation openQA test in scenario opensuse-Jump:15.2-DVD-aarch64-create_hdd_xfce@aarch64 fails in [opensuse_welcome](https://openqa.opensuse.org/tests/1366389/modules/opensus… XFCE uses upstream theme (wallpaper) instead of openSUSE wallpaper. ## Test suite description ## Reproducible Fails since (at least) Build [29.1](https://openqa.opensuse.org/tests/1354962) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=aarch64&distri=opensu… -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1176212] sddm can't login in x plasma session (xdm files moved to /usr/etc/X11/xdm)
by bugzilla_noreply＠suse.com 09 Sep '20

09 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1176212 https://bugzilla.suse.com/show_bug.cgi?id=1176212#c13 --- Comment #13 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1176212) was mentioned in https://build.opensuse.org/request/show/833131 Factory / xinit -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1174720] unable to load german console keymap - loadkeys dies with syntax error (fix known)
by bugzilla_noreply＠suse.com 08 Sep '20

08 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1174720 https://bugzilla.suse.com/show_bug.cgi?id=1174720#c7 Stanislav Brabec <sbrabec(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED Depends on| |1176302 Flags| |needinfo?(locilka(a)suse.com) --- Comment #7 from Stanislav Brabec <sbrabec(a)suse.com> --- Thanks, Lukáš. It means that YaST still suggests legacy keymaps. I filled a separate bug 1176302 just to solve this problem. When it will be done, it makes sense to write migration scripts that will cover all users using the default. Legacy keymaps are regularly updated inside package. They are sometimes renamed. But nor kbd nor YaST keeps track on these changes. Using the well established xkb keymap names will decrease the number of problems with file renames. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173991] Firefox translations not available after reinstalling MozillaFirefox-translations-common
by bugzilla_noreply＠suse.com 08 Sep '20

08 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1173991 https://bugzilla.suse.com/show_bug.cgi?id=1173991#c31 --- Comment #31 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2020:1391-1: An update that fixes three vulnerabilities is now available. Category: security (moderate) Bug References: 1173991,1174284,1175686 CVE References: CVE-2020-15663,CVE-2020-15664,CVE-2020-15670 JIRA References: Sources used: openSUSE Leap 15.2 (src): MozillaFirefox-78.2.0-lp152.2.18.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173630] VUL-0: CVE-2020-15395: libmediainfo, mediainfo: buffer overflow in the MpegPs parser
by bugzilla_noreply＠suse.com 08 Sep '20

08 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1173630 https://bugzilla.suse.com/show_bug.cgi?id=1173630#c3 --- Comment #3 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-RU-2020:1390-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1173630 CVE References: JIRA References: Sources used: openSUSE Leap 15.2 (src): libmediainfo-20.08-lp152.4.3.1, mediainfo-20.08-lp152.4.3.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1176206] Dependency of mozilla-nss-32bit prevents installation of p11-kit-nss-trust-32bit
by bugzilla_noreply＠suse.com 08 Sep '20

08 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1176206 Wolfgang Rosenauer <wolfgang(a)rosenauer.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS Flags|needinfo?(dave_accounts@dnh | |ome.uk) | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175977] `po4a-translate -f text` fails with "Unknown format type: text"
by bugzilla_noreply＠suse.com 08 Sep '20

08 Sep '20

https://bugzilla.suse.com/show_bug.cgi?id=1175977 https://bugzilla.suse.com/show_bug.cgi?id=1175977#c5 Luiz Fernando Ranghetti <elchevive68(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #5 from Luiz Fernando Ranghetti <elchevive68(a)gmail.com> --- Hi, I thought the bug will close itself when the package lands on TW but didn't happen, so closing manually. https://build.opensuse.org/request/show/831690 (the sr to TW already landed) And wxmaxima package from Education builds fine again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0