October 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1191306] VUL-0: CVE-2021-32626: redis: Specially crafted Lua scripts may result with Heap buffer overflow
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191306 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191305] VUL-0: CVE-2021-32627,CVE-2021-32628: redis: Integer to heap buffer overflows
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191305 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191304] VUL-0: CVE-2021-32672: redis: Random heap reading issue with Lua Debugger
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191304 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191303] VUL-0: CVE-2021-32675: redis: Denial Of Service when processing RESP request payloads with a large number of elements on many connections
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191303 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191302] VUL-0: CVE-2021-32687: redis: Integer to heap buffer overflow with intsets, when set-max-intset-entries is manually configured to a non-default, very large value
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191302 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191300] VUL-0: CVE-2021-32762: redis: Integer to heap buffer overflow issue in redis-cli and redis-sentinel parsing large multi-bulk replies on some older and less common platforms
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191300 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191299] VUL-0: CVE-2021-41099: redis: Integer to heap buffer overflow handling certain string commands and network payloads, when proto-max-bulk-len is manually configured to a non-default, very large value
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191299 Maintenance Robot <maint-coord+maintenance_robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191246] Package "virt-install" seem to install a lot of GUI packages
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191246 https://bugzilla.suse.com/show_bug.cgi?id=1191246#c1 --- Comment #1 from Charles Arnold <carnold(a)suse.com> --- (In reply to Brian Molt from comment #0) > Running "zypper install --no-recommends virt-install" seem to include a lot > GUI related packages. > > On a rather clean console server 113 packages are installed at a total of > 115MB. > Not desirable if you wanna run a clean-as-possible server. > > I believe not so long ago this package only installed 16 packages at a total > of 5MB Are you running in a headless environment or minimal GUI setup? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191290] New: pipewire screencast broken since last week update
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1191290 Bug ID: 1191290 Summary: pipewire screencast broken since last week update Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: luizluca(a)tre-sc.jus.br QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Hello, Last week update broke screencasting with pipewire. I tested with google chrome, firefox and telegram. I'm using KDE with wayland. pipewire-0.3.37-1.1.x86_64 kwin5-5.22.5-1.2.x86_64 google-chrome-stable-94.0.4606.71-1.x86_64 openSUSE-release-20210929-1195.1.x86_64 I'm also using pipewire as "pulseaudio" for a couple of months. This is some journald logs from pipewire: systemd[1651]: Listening on PipeWire PulseAudio. systemd[1651]: Started PipeWire PulseAudio. pipewire-media-session[1660]: RTKit error: org.freedesktop.DBus.Error.AccessDenied pipewire-media-session[1660]: could not set nice-level to -11: Permiss�o negada pipewire[1659]: RTKit error: org.freedesktop.DBus.Error.AccessDenied pipewire[1659]: could not set nice-level to -11: Permiss�o negada pipewire-pulse[1661]: RTKit error: org.freedesktop.DBus.Error.AccessDenied pipewire-pulse[1661]: could not set nice-level to -11: Permiss�o negada pipewire-media-session[1660]: RTKit error: org.freedesktop.DBus.Error.AccessDenied pipewire-media-session[1660]: could not make thread realtime: Permiss�o negada pipewire-pulse[1661]: RTKit error: org.freedesktop.DBus.Error.AccessDenied pipewire-pulse[1661]: could not make thread realtime: Permiss�o negada pipewire[1659]: RTKit error: org.freedesktop.DBus.Error.AccessDenied pipewire[1659]: could not make thread realtime: Permiss�o negada "Permiss�o negada" means "Permission denied" I'm using sssd AD auth but I'm also a member of local groups 42(trusted),100(users),457(wireshark),464(pulse-access),479(video),486(dialout),488(audio),492(wheel) -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1191250] Gnome-subtitles v1.7 doesn't start on Tumbleweed 20210929
by bugzilla_noreply＠suse.com 04 Oct '21

04 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191250 https://bugzilla.suse.com/show_bug.cgi?id=1191250#c1 Michael Gorse <mgorse(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mgorse(a)suse.com --- Comment #1 from Michael Gorse <mgorse(a)suse.com> --- Mono is trying to open libdl.so, which we no longer have in the latest glibc package. If I manually create a symlink to libdl.so.2, then it will start. -- You are receiving this mail because: You are on the CC list for the bug.

1 0