January 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1172028] Wrong patch4 in Plymouth: need to remove it in order to have qemu working.
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1172028 https://bugzilla.suse.com/show_bug.cgi?id=1172028#c18 --- Comment #18 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:0037-1: An update that has 8 recommended fixes can now be installed. Category: recommended (important) Bug References: 1051692,1105688,1129386,1134660,1138248,1164123,1170906,1172028 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Packagehub Subpackages 15-SP1 (src): plymouth-0.9.5+git20190908+3abfab2-3.14.1 SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): plymouth-0.9.5+git20190908+3abfab2-3.14.1 SUSE Linux Enterprise Module for Basesystem 15-SP1 (src): plymouth-0.9.5+git20190908+3abfab2-3.14.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180210] libvirt cannot start VMs, host doesn't support requested feature error
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180210 https://bugzilla.suse.com/show_bug.cgi?id=1180210#c9 Bruce Rogers <brogers(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #9 from Bruce Rogers <brogers(a)suse.com> --- (In reply to Lin Ma from comment #5) ... > > Adding qemu-audio-sice dependency can workaround this issue, But I believe > our qemu in factory will carry this commit soon. > As indicated by the autogenerated Submit Request bugzilla comment, a fix for this is submitted. > Personally I don't like adding qemu-audio-sice dependency, Whether or not > adding it, Let me cc Bruce to make the decision. We are looking into the best ways to provide an easy way to indicate what type of qemu usage you are looking for when installing QEMU/KVM support. As of right now, the "one size fits all" approach has been to not consider audio support a "core virtualization feature". I hope we can soon have a better stratification of QEMU/KVM features, which allows for the full range of use cases from "minimal footprint" QEMU/KVM all the way up to "everything plus the kitchen sink" usage. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180563] display-manager freezes with new Kernel 5.10.4-1 on bare metal laptop
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180563 https://bugzilla.suse.com/show_bug.cgi?id=1180563#c9 --- Comment #9 from Petr Vorel <petr.vorel(a)suse.com> --- Affected with this on my Dell laptop as well on Tumbleweed kernels: kernel-default-5.11.rc2-1.1.gb4a462c.x86_64 kernel-default-5.10.4-1.1.x86_64 Going to test snd_hda_codec_hdmi.enable_silent_stream=0 as well. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180623] New: VUL-0: CVE-2020-16044: MozillaFirefox: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk (MFSA 2021-01)
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1180623 Bug ID: 1180623 Summary: VUL-0: CVE-2020-16044: MozillaFirefox: Use-after-free write when handling a malicious COOKIE-ECHO SCTP chunk (MFSA 2021-01) Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Security Assignee: cgrobertson(a)suse.com Reporter: Andreas.Stieger(a)gmx.de QA Contact: qa-bugs(a)suse.de CC: mozilla-bugs(a)suse.de, security-team(a)suse.de, wolfgang(a)rosenauer.org Found By: Corporate Interoperability Test Blocker: --- A malicious peer could have modified a COOKIE-ECHO chunk in a SCTP packet in a way that potentially resulted in a use-after-free. We presume that with enough effort it could have been exploited to run arbitrary code. Fixed in Firefox 84.0.2, Firefox ESR 78.6.1 References: https://www.mozilla.org/en-US/security/advisories/mfsa2021-01/ https://bugzilla.mozilla.org/show_bug.cgi?id=1683964 https://www.mozilla.org/en-US/firefox/84.0.2/releasenotes/ https://www.mozilla.org/en-US/firefox/78.6.1/releasenotes/ -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180563] display-manager freezes with new Kernel 5.10.4-1 on bare metal laptop
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180563 Petr Vorel <petr.vorel(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |petr.vorel(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180210] libvirt cannot start VMs, host doesn't support requested feature error
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180210 https://bugzilla.suse.com/show_bug.cgi?id=1180210#c8 Bruce Rogers <brogers(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sirdeiu(a)bydeiu.net --- Comment #8 from Bruce Rogers <brogers(a)suse.com> --- *** Bug 1180499 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180499] qemu-system-x86_64 segfault
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180499 https://bugzilla.suse.com/show_bug.cgi?id=1180499#c3 Bruce Rogers <brogers(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED CC| |brogers(a)suse.com Resolution|--- |DUPLICATE --- Comment #3 from Bruce Rogers <brogers(a)suse.com> --- I agree Lin, that this is almost certainly the issue. I've submitted a fixed qemu to Factory, and it should show up in Tumbleweed in not too many days. I'll close this as a duplicate of the other bug report for this issue. If you find it is a different issue, please re-open. *** This bug has been marked as a duplicate of bug 1180210 *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180620] New: yast2-http-server uses apache2-mod_wsgi-python3 package which is not available in TW
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180620 Bug ID: 1180620 Summary: yast2-http-server uses apache2-mod_wsgi-python3 package which is not available in TW Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: lslezak(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- The HTTP-server module installs the apache2-mod_wsgi-python3 package when enabling Python support. Unfortunately the package is not available in the current Tumbleweed (https://download.opensuse.org/tumbleweed/repo/oss/x86_64/) (Found by a regular check: https://github.com/yast/yast-http-server/runs/1656935809?check_suite_focus=…) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1178859] apparmor startup produce warning Cache: failed to add read only location '/usr/share/apparmor/cache'
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1178859 http://bugzilla.opensuse.org/show_bug.cgi?id=1178859#c3 --- Comment #3 from Christian Boltz <suse-beta(a)cboltz.de> --- (In reply to lili zhao from comment #2) > Another bug bsc#1178646 was "verified fixed" but its status can not be "You are not authorized to access bug #1178646." I'm afraid that makes helping a bit ;-) hard. Goldwyn: for this bug - can you please show the result of ls -l /var/cache/apparmor /usr/share/apparmor/cache -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1167974] VUL-0: CVE-2020-5283: viewvc: CVS lastlog filename not escaped (XSS)
by bugzilla_noreply＠suse.com 06 Jan '21

06 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1167974 https://bugzilla.suse.com/show_bug.cgi?id=1167974#c6 --- Comment #6 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1167974) was mentioned in https://build.opensuse.org/request/show/860756 15.1 / viewvc -- You are receiving this mail because: You are on the CC list for the bug.

1 0