October 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1191154] New: Cannot update 29.9.2021
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1191154 Bug ID: 1191154 Summary: Cannot update 29.9.2021 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: 64bit OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Maintenance Assignee: screening-team-bugs(a)suse.de Reporter: U.Koehler(a)gmx.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Cannot update due to the following error (29.9.2021): the installed perl-GD-2.73-2.6.x86_64 requires 'perl(:MODULE_COMPAT_5.32.1)', but this requirement cannot be provided the installed perl-5.32.1-1.13.x86_64 requires 'perl-base = 5.32.1', but this requirement cannot be provided -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1191311] VUL-0: CVE-2021-41867: python-onionshare: An information disclosure vulnerability allows remote unauthenticated attackers to retrieve the full list of participants of a non-public OnionShare node via the --chat feature
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191311 https://bugzilla.suse.com/show_bug.cgi?id=1191311#c10 --- Comment #10 from Axel Braun <axel.braun(a)gmx.de> --- (In reply to Marcus Meissner from comment #9) > I would however think with only 3 months left of lifetime we can perahps > ignore it The list is for Leap 15.3 - I agree re. your statement about 15.2 onionshare fails in testing with an 'internal error', see https://lists.opensuse.org/archives/list/python@lists.opensuse.org/thread/I… After some investigation I could reduce it to these packages: For building: python-pytest-xvfb 2.0.0 python-PyVirtualDisplay >= 0.3 (version 2.1 used, Py3 only) python-vncdotool >= 0.13.0 (version 1.0.0 used) to run it afterwards: python-python-socketio python-Flask-SocketIO python-setuptools (to build Flask-SocketIO) python-bidict python-engineio See: https://build.opensuse.org/project/show/home:DocB:python -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190919] latest freerdp-2.4.0-lp153.145.1 cannot connect to any Windows host
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190919 https://bugzilla.suse.com/show_bug.cgi?id=1190919#c4 Hans-Peter Jansen <hp.jansen(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|hp.jansen(a)suse.com | --- Comment #4 from Hans-Peter Jansen <hp.jansen(a)suse.com> --- Good news, I finally nailed it. CMAKE_INSTALL_LIBDIR is absolute on Leaps and relative on TW, but freerdp *requires* the relative variant. This fixes the final fallout for the BUILTIN_CHANNEL=OFF mode. I submitted the fix to the X11:RemoteDesktop, and will leave it to Johannes to commit it. Really sorry for the churn! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191085] New: ooRexx: finish UsrMerge, install to /usr
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191085 Bug ID: 1191085 Summary: ooRexx: finish UsrMerge, install to /usr Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: erico.mendonca(a)suse.com Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de CC: perry.werneck(a)gmail.com Blocks: 1191054 Found By: --- Blocker: --- Following up on the discussion on the Factory list https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message… All packages installing files into /bin, /sbin, /lib and /lib64 should change the location to the counterpart in /usr instead. Please consider doing that for ooRexx. If ooRexx still needs to build for released distros you may keep the legacy locations within a "%if %suse_version < 1550" block of course. If you do that, please do *NOT* install symlinks from/to /usr as it was done with some packages in the past. Move the files in question instead. -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1190673] New: fail2ban does not send mails since update to 0.11.2-bp153.2.3.1
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190673 Bug ID: 1190673 Summary: fail2ban does not send mails since update to 0.11.2-bp153.2.3.1 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: funedv(a)gmx.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- tested: mails because of starting, stopping, banning. With the update were 6 files in /etc/fail2ban/action.d changed (may be more, I just found these): complain.conf.org mail-buffered.conf.org mail-whois.conf.org dshield.conf.org mail-whois-lines.conf.org mail.conf.org The difference of the contents in comparison to the files of the former version are all the same. Please look at every mail command, here for example under actionstart in mail-buffered.conf: Old (and sending mails): Fail2Ban"|mail -s "[Fail2Ban] <name>: started on <fq-hostname>" <dest> New (I could it never get to send mails to the recipient): Fail2Ban"|mail -E 'set escape' -s "[Fail2Ban] <name>: started on <fq-hostname>" <dest> For testing that I copied these 6 older conf-Files into the running actual version, restart fail2ban, and mailing is fine again. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1191440] Repository certificate seems to have expired
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191440 https://bugzilla.suse.com/show_bug.cgi?id=1191440#c3 --- Comment #3 from Marcus Meissner <meissner(a)suse.com> --- did you install last weeks ca-certificates-mozilla update? its should fix the expired letsencrypt ca -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191299] VUL-0: CVE-2021-41099: redis: Integer to heap buffer overflow handling certain string commands and network payloads, when proto-max-bulk-len is manually configured to a non-default, very large value
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191299 https://bugzilla.suse.com/show_bug.cgi?id=1191299#c2 Danilo Spinella <danilo.spinella(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #2 from Danilo Spinella <danilo.spinella(a)suse.com> --- Fix for branch 6.0: https://github.com/redis/redis/commit/c6ad876774f3cc11e32681ea02a2eead00f2c… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191440] Repository certificate seems to have expired
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191440 https://bugzilla.suse.com/show_bug.cgi?id=1191440#c2 --- Comment #2 from Roger Green <rogvespa(a)outlook.com> --- Hi, I am using SLES 12 SP5 x86_64 I think the issue is with the following file: https://download.opensuse.org/repositories/devel:/languages:/perl/SLE_12_SP… Thanks, Roger -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1184924] [Build 134.3] openQA test fails in kdump_and_crash - forced crash didn't result into expected reboot
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1184924 https://bugzilla.suse.com/show_bug.cgi?id=1184924#c21 --- Comment #21 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Ivan Ivanov from comment #19) > For SLE15-SP3 CONFIG_RANDOM_TRUST_BOOTLOADER option is enabled > only for armv7h and arm64. > > For 'stable' same option is enabled for all other arches except Arm :-) > > If we do same tests for non-Arm arches and they are passing then > something in arch setup code is not Ok. If we don't do these tests > then CONFIG_RANDOM_TRUST_BOOTLOADER is broken since inception. The issue is basically that with CONFIG_RANDOM_TRUST_BOOTLOADER=y, the kernel crashes if both EFI and the device tree provide randomness. That means that only platforms which use a device tree and EFI can actually run into this issue. x86 and s390x don't use a DT, ppc doesn't use EFI and riscv isn't being tested by openQA so far. That leaves only ARM, but as you found out that doesn't have CONFIG_RANDOM_TRUST_BOOTLOADER=y in TW. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191441] in FIPS mode openssl is missing configuration
by bugzilla_noreply＠suse.com 07 Oct '21

07 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191441 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com, | |pmonrealgonzalez(a)suse.com Assignee|security-team(a)suse.de |jsikes(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0