October 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1091603] New: iproute2: "ip route add default via <ipv6_address>" not parsed correctly
by bugzilla_noreply＠novell.com 01 Oct '21

01 Oct '21

http://bugzilla.suse.com/show_bug.cgi?id=1091603 Bug ID: 1091603 Summary: iproute2: "ip route add default via <ipv6_address>" not parsed correctly Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: mkubecek(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- With iproute2 4.16, command "ip route add default via ..." fails if an IPv6 address is supplied (unless "-6" is used): alaris:~ # ip route add default via 1::1 Error: inet address is expected rather than "1::1". This is a regression in version 4.16 fixed by commit d42c7891d26e utils: Do not reset family for default, any, all addresses -- You are receiving this mail because: You are on the CC list for the bug.

2 2

[Bug 1190269] VUL-0: MozillaFirefox: multiple vulnerabilities fixed in ESR 78.14, ESR 91.1, 92
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190269 https://bugzilla.suse.com/show_bug.cgi?id=1190269#c6 --- Comment #6 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2021:14821-1: An update that fixes 14 vulnerabilities is now available. Category: security (important) Bug References: 1188891,1189547,1190269,1190274 CVE References: CVE-2021-29980,CVE-2021-29981,CVE-2021-29982,CVE-2021-29983,CVE-2021-29984,CVE-2021-29985,CVE-2021-29986,CVE-2021-29987,CVE-2021-29988,CVE-2021-29989,CVE-2021-29990,CVE-2021-29991,CVE-2021-38492,CVE-2021-38495 JIRA References: Sources used: SUSE Linux Enterprise Server 11-SP4-LTSS (src): MozillaFirefox-78.14.0-78.140.4 SUSE Linux Enterprise Debuginfo 11-SP4 (src): MozillaFirefox-78.14.0-78.140.4 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191231] New: VUL-1: CVE-2021-39246: tor: allows a correlation attack excessive verbose logging
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191231 Bug ID: 1191231 Summary: VUL-1: CVE-2021-39246: tor: allows a correlation attack excessive verbose logging Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other URL: https://smash.suse.de/issue/310844/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: bwiedemann(a)suse.com Reporter: gabriele.sonnu(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack that can compromise the privacy of visits to v2 onion addresses. If --log or --verbose is used, exact timestamps of these onion-service visits are logged locally, and an attacker might be able to compare them to timestamp data collected by the destination server (or collected by a rogue site within the Tor network). References: https://sick.codes/sick-2021-111 https://www.privacyaffairs.com/cve-2021-39246-tor-vulnerability https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-111.… Upstream patch: https://gitlab.torproject.org/tpo/core/tor/-/merge_requests/434 https://gitlab.torproject.org/tpo/core/tor/-/commit/80c404c4b79f3bcba3fc458… References: https://bugzilla.redhat.com/show_bug.cgi?id=2008652 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-39246 https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-111.… http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-39246 https://gitlab.torproject.org/tpo/core/tor/-/merge_requests/434 https://sick.codes/sick-2021-111 https://gitlab.torproject.org/tpo/core/tor/-/commit/80c404c4b79f3bcba3fc458… https://www.privacyaffairs.com/cve-2021-39246-tor-vulnerability -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1190326] Update to kernel 5.14 makes disks disapear/system unbootable
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190326 https://bugzilla.suse.com/show_bug.cgi?id=1190326#c24 --- Comment #24 from Antonio Feijoo <antonio.feijoo(a)suse.com> --- AFAIK it would only affect Tumbleweed and SLE-15 SP4, both with kernel 5.14, so it should be enough to fix the dracut 055 branch. Anyway, if I'm wrong, Thomas will tell us which other versions are affected. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190326] Update to kernel 5.14 makes disks disapear/system unbootable
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190326 https://bugzilla.suse.com/show_bug.cgi?id=1190326#c23 --- Comment #23 from Olaf Hering <ohering(a)suse.com> --- I think this has to be backported wherever it is broken... -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191230] New: Tumbleweed installer has Leap 15.3 release notes
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1191230 Bug ID: 1191230 Summary: Tumbleweed installer has Leap 15.3 release notes Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Minor Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: mobile.harvey(a)gmail.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- When installing Tumbleweed from today's network installer download, clicking on the 'release notes' button in the bottom-left of the installer screen provides the Leap 15.3 release notes. Should this not in fact show Tumbleweed specific release notes? Reproducible every time. Thanks Nick -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191220] New Let's Encrypt certificate cannot be verify in Mono
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191220 Thorsten Kukuk <kukuk(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|kukuk(a)suse.com | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191228] New: [M17N] The libime currently fails to build
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1191228 Bug ID: 1191228 Summary: [M17N] The libime currently fails to build Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: moonsolo(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- see https://build.opensuse.org/package/live_build_log/M17N/libime/openSUSE_Tumb… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1189793] libzypp cache keeps /mnt/var mount busy
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1189793 https://bugzilla.suse.com/show_bug.cgi?id=1189793#c17 Ladislav Slez�k <lslezak(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #17 from Ladislav Slez�k <lslezak(a)suse.com> --- Fixed in yast2-installation-4.4.19 (https://github.com/yast/yast-installation/pull/981) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190326] Update to kernel 5.14 makes disks disapear/system unbootable
by bugzilla_noreply＠suse.com 01 Oct '21

01 Oct '21

https://bugzilla.suse.com/show_bug.cgi?id=1190326 https://bugzilla.suse.com/show_bug.cgi?id=1190326#c22 --- Comment #22 from Antonio Feijoo <antonio.feijoo(a)suse.com> --- Actually already exists an upstream fix: https://github.com/dracutdevs/dracut/commit/b292ce72 Backporting it to our 055 branch. -- You are receiving this mail because: You are on the CC list for the bug.

1 0