January 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1180428] New: VUL-1: CVE-2020-35766: opendkim: symlink attack inside test suite in libopendkim
by bugzilla_noreply＠suse.com 03 Jan '21

03 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1180428 Bug ID: 1180428 Summary: VUL-1: CVE-2020-35766: opendkim: symlink attack inside test suite in libopendkim Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/274130/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem Assignee: rpm(a)fthiessen.de Reporter: abergmann(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2020-35766 The test suite in libopendkim in OpenDKIM through 2.10.3 allows local users to gain privileges via a symlink attack against the /tmp/testkeys file (related to t-testdata.h, t-setup.c, and t-cleanup.c). NOTE: this is applicable to persons who choose to engage in the "A number of self-test programs are included here for unit-testing the library" situation. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-35766 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35766 https://github.com/trusteddomainproject/OpenDKIM/issues/113 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1179284] Version 20201027 from UCODE-INTEL completely blocks booting
by bugzilla_noreply＠suse.com 03 Jan '21

03 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1179284 Hans-Peter Jansen <hpj(a)urpla.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hpj(a)urpla.net -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1155170] /boot and /boot/efi not mounted
by bugzilla_noreply＠suse.com 03 Jan '21

03 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1155170 https://bugzilla.suse.com/show_bug.cgi?id=1155170#c42 Philipp Reichmuth <philipp.reichmuth(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |philipp.reichmuth(a)gmail.com OS|openSUSE Factory |All --- Comment #42 from Philipp Reichmuth <philipp.reichmuth(a)gmail.com> --- For the record, since yesterday's update to TW 20210101, after running zypper dup and rebooting, upon reboot /opt is gone. I also saw a "failed unmounting /var" message upon bootup. After another reboot /opt is back. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1137373] Systemd mount and unmount partition during boot
by bugzilla_noreply＠suse.com 03 Jan '21

03 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1137373 http://bugzilla.opensuse.org/show_bug.cgi?id=1137373#c47 Philipp Reichmuth <philipp.reichmuth(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |philipp.reichmuth(a)gmail.com --- Comment #47 from Philipp Reichmuth <philipp.reichmuth(a)gmail.com> --- For the record, since the upgrade to TW 20210101 after doing a zypper dup before reboot, upon rebooting /opt is gone. It comes back when I reboot again. I've looked at bug 1155170, but it's marked as a duplicate of this bug. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180472] New: monero compiles with march=native
by bugzilla_noreply＠suse.com 02 Jan '21

02 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1180472 Bug ID: 1180472 Summary: monero compiles with march=native Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: nopeinomicon(a)posteo.net Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de CC: marec(a)detebe.org, mpluskal(a)suse.com Blocks: 1100677 Found By: Development Blocker: --- While working on reproducible builds for openSUSE, I found that monero binaries varied from build machine CPU-type. This can cause crashes on machines older than the random build machine and makes verification of binaries hard. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1174816] New: Blender SIGSEGV
by bugzilla_noreply＠suse.com 02 Jan '21

02 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1174816 Bug ID: 1174816 Summary: Blender SIGSEGV Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: f4tmike(a)web.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 840283 --> http://bugzilla.opensuse.org/attachment.cgi?id=840283&action=edit crash log txt Blender 2.8.2 only starts when I select "general" in the initial window. With all others (2D animation, sculpting, etc.) the program crashes: Read prefs: /home/mypc/.config/blender/2.82/config/userpref.blend Cannot connect to server socket err = No such file or directory Cannot connect to server request channel jack server is not running or cannot be started JackShmReadWritePtr::~JackShmReadWritePtr - Init not done for -1, skipping unlock JackShmReadWritePtr::~JackShmReadWritePtr - Init not done for -1, skipping unlock Warning: property 'release_confirm' not found in keymap item 'OperatorProperties' Writing: /tmp/blender.crash.txt fish: 'blender' terminated by signal SIGSEGV (address range error) Operating System: openSUSE Leap 15.2 KDE Plasma Version: 5.18.5 KDE Frameworks Version: 5.71.0 Qt Version: 5.12.7 Kernel Version: 5.3.18-lp152.33-default OS Type: 64-bit Processors: 8 × Intel® Xeon® CPU E3-1241 v3 @ 3.50GHz Memory: 15,5 GiB NVIDIA GM107GL [Qaudro K2200] running nvidia-g05 -- You are receiving this mail because: You are on the CC list for the bug.

1 12

[Bug 1180493] New: MultiOS Flatpak Installation
by bugzilla_noreply＠suse.com 02 Jan '21

02 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1180493 Bug ID: 1180493 Summary: MultiOS Flatpak Installation Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Enhancement Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: slawek(a)lach.art.pl QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- I described the idea here: https://forums.opensuse.org/showthread.php/548449-Idea-Flatpak-Current-comp… It makes sense to allow Yast to set multi-os partition to install flatpaks. Flatpak data/binaries and packages are frozen, so single installation of programs could be shared between many systems. You should also take focus to made another distribution allow to setting this options. Why? It saves time and disk space. I don't have to install single flatpak many times (for multiple systems). I don't have to reinstall each application after system reinstalation/change. Yast, during os install, should detect partition, which is flatpak-multios-application-storage and points user to set it for multi-os flatpak installation. If Yast didn't detect such partition, it should allow user to set one. Of course, each distribution should modify one's installers to do the same. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1179284] Version 20201027 from UCODE-INTEL completely blocks booting
by bugzilla_noreply＠suse.com 02 Jan '21

02 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1179284 Michael Gorse <mgorse(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mgorse(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1180352] Download manager KGet does not start
by bugzilla_noreply＠suse.com 02 Jan '21

02 Jan '21

https://bugzilla.suse.com/show_bug.cgi?id=1180352 https://bugzilla.suse.com/show_bug.cgi?id=1180352#c19 --- Comment #19 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1180352) was mentioned in https://build.opensuse.org/request/show/859843 15.2 / kget -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1169199] New: xreader: Segmentation fault when trying to open EPUB files
by bugzilla_noreply＠novell.com 02 Jan '21

02 Jan '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1169199 Bug ID: 1169199 Summary: xreader: Segmentation fault when trying to open EPUB files Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: i686 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Xfce Assignee: bnc-team-xfce(a)forge.provo.novell.com Reporter: suseino(a)riseup.net QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- On a 32-bit Tumbleweed system trying to open any EPUB file with xreader-2.2.2-3.3.i586 results in "Segmentation fault" and the file cannot be opened. The same files can be opened without problem on a Leap 15.1 system using xreader-1.6.2-lp151.2.3.x86_64. -- You are receiving this mail because: You are on the CC list for the bug.

2 10