January 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1179537] earlyoom pulls in heavy dependencies
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1179537 https://bugzilla.suse.com/show_bug.cgi?id=1179537#c3 --- Comment #3 from Mindaugas Baranauskas <opensuse.lietuviu.kalba(a)gmail.com> --- Thanks, accepted in Base:System and forwarded to Factory. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180358] [Build 20201224] timeout while waiting for vagrant box
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180358 Charles Arnold <carnold(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|virt-bugs(a)suse.de |dcermak(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1179607] xdm does not install
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1179607 https://bugzilla.suse.com/show_bug.cgi?id=1179607#c3 --- Comment #3 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1179607) was mentioned in https://build.opensuse.org/request/show/860225 Factory / xdm -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180368] New: .Xauthority not created when user logs in
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1180368 Bug ID: 1180368 Summary: .Xauthority not created when user logs in Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: X.Org Assignee: gfx-bugs(a)suse.de Reporter: rs.opensuse(a)spitzenpfeil.org QA Contact: gfx-bugs(a)suse.de Found By: --- Blocker: --- I know that the xauth information of a logged in user is available via "/run/user/UID/xauth_some-string" Usecase: log into remote laptop via SSH and port-forwarding, start x11vnc on that remote machine, run vncviewer on local machine --> shared remote assistance for far-away relatives. This used to work as long as .Xauthority was around. Now that it is missing, x11vnc fails to start and it is very inconvenient to get access to it via "/run/...." (especially knowing the string before having logged in). I just use simple scripts! Unfortunately running "xauth extract - $DISPLAY" in an SSH session will not give me the correct cookie either. Current workaround: run a startup-script (KDE) that fetches the xauth data and stores it in $HOME/.Xauthority (xauth extract - $DISPLAY > ~/.Xauthority) It would be nice to have a working .Xauthority out of the box (again). -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1180458] New: VUL-0: CVE-2020-26215: jupyter, python-jupyter_notebook: open redirect vulnerability
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1180458 Bug ID: 1180458 Summary: VUL-0: CVE-2020-26215: jupyter, python-jupyter_notebook: open redirect vulnerability Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.1 Hardware: Other URL: https://smash.suse.de/issue/272017/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: wolfgang.frisch(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-26215 Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for known notebook server hosts. A link to your notebook server may appear safe, but ultimately redirect to a spoofed server on the public internet. The issue is patched in version 6.1.5. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-26215 https://github.com/jupyter/notebook/security/advisories/GHSA-c7vm-f5p4-8fqh http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26215 https://github.com/jupyter/notebook/commit/3cec4bbe21756de9f0c4bccf18cf61d8… https://lists.debian.org/debian-lts-announce/2020/12/msg00004.html -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1178489] Enchant 2 Voikko backend does not work in eg gspell
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1178489 https://bugzilla.suse.com/show_bug.cgi?id=1178489#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:0007-1: An update that has one recommended fix can now be installed. Category: recommended (moderate) Bug References: 1178489 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP2 (src): enchant-2.2.5-4.3.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1179537] earlyoom pulls in heavy dependencies
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1179537 https://bugzilla.suse.com/show_bug.cgi?id=1179537#c2 --- Comment #2 from Maximilian Trummer <opensuse(a)trummer.xyz> --- Thank you for fixing! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180084] systemd takes too long to load os
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180084 https://bugzilla.suse.com/show_bug.cgi?id=1180084#c4 Franck Bui <fbui(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fbui(a)suse.com --- Comment #4 from Franck Bui <fbui(a)suse.com> --- (In reply to John Shand from comment #0) > Created attachment 844505 [details] > systemd-analyze file > > using the systemd-analyze blame command I got this information. It seems that there's something going wrong with the init of your HW: 1min 6.604s systemd-udev-settle.service Can you please attach the output of "journalctl -b -o short-monotonic" ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1179607] xdm does not install
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1179607 https://bugzilla.suse.com/show_bug.cgi?id=1179607#c2 Stefan Dirsch <sndirsch(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED --- Comment #2 from Stefan Dirsch <sndirsch(a)suse.com> --- There is /bin/pidof -> /sbin/killall5 /sbin/pidof -> killall5 Both are part of sysvinit-tools package. But indeed /usr/bin/pidof is required. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173718] VUL-1: libmicrohttpd: buffer overflow issue in URL parser
by bugzilla_noreply＠suse.com 04 Jan '21

04 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1173718 https://bugzilla.suse.com/show_bug.cgi?id=1173718#c6 --- Comment #6 from Ladislav Slez�k <lslezak(a)suse.com> --- I'll take care of the libyui-rest-api issue, I'll adapt it to the new API. -- You are receiving this mail because: You are on the CC list for the bug.

1 0