December 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1193333] New: VUL-0: CVE-2021-4041: ansible-runner: Improper shell escaping
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1193333 Bug ID: 1193333 Summary: VUL-0: CVE-2021-4041: ansible-runner: Improper shell escaping Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other URL: https://smash.suse.de/issue/316168/ OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: thomasbechtold(a)jpberlin.de Reporter: carlos.lopez(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- rh#2028074 An improper escape on the line,could lead to unsuspecting developer execute code on the host machine rather than virtual one https://github.com/ansible/ansible-runner/blob/3d6886d1a26358ead139fef736d1… References: https://bugzilla.redhat.com/show_bug.cgi?id=2028074 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-4041 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1193327] Alt+1 in yast network -> Hostname/DNS to set Nameserver 1 does not work
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1193327 https://bugzilla.suse.com/show_bug.cgi?id=1193327#c4 --- Comment #4 from Stefan Hundhammer <shundhammer(a)suse.com> --- Oops, I was a bit confused with Alt-1 vs. Alt-F1, but it remains the same in principle: Some key combinations are consumed before we get a chance to use them, and in some terminal emulators you can reconfigure those that ther emulator itself uses. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193179] Installing python3.9 in SLE image pulls in Python3.6 packages
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1193179 http://bugzilla.opensuse.org/show_bug.cgi?id=1193179#c4 --- Comment #4 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1193179) was mentioned in https://build.opensuse.org/request/show/935211 Factory / python310 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190823] [Build 20210921] remmina seems to fail to start
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1190823 https://bugzilla.suse.com/show_bug.cgi?id=1190823#c10 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #10 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Fabian Vogt from comment #9) > Fixing this was actually as simple as removing the "return FALSE" which > triggered the error exit. > > I made a PR upstream: https://github.com/FreeRDP/FreeRDP/pull/7476 > > Submitted to the devel prj: https://build.opensuse.org/request/show/935215 ^ got accepted -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193330] Error booting a Lenovo Legion laptop with a Leap 15.3 KDE live USB stick
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1193330 https://bugzilla.suse.com/show_bug.cgi?id=1193330#c1 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ralf.habacker(a)freenet.de Flags| |needinfo?(ralf.habacker@fre | |enet.de) --- Comment #1 from Fabian Vogt <fvogt(a)suse.com> --- Hm, not even a dracut emergency shell. The iscsi error appears to be a red herring, I get that with successful boots as well. Can you try with "rd.debug rd.shell rd.break=pre-mount" added to the kernel cmdline and get the journal in the emergency shell? You should be able to write it to the USB drive, assuming that it got detected. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193327] Alt+1 in yast network -> Hostname/DNS to set Nameserver 1 does not work
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1193327 https://bugzilla.suse.com/show_bug.cgi?id=1193327#c3 --- Comment #3 from Stefan Hundhammer <shundhammer(a)suse.com> --- Confirmed: gnome-terminal behaves exactly the same. It also has a tab menu, but here it's at the right end of the tab bar. But in gnome-terminal, you can configure this: Menu "Edit" -> "Preferences" -> "Shortcuts" under "Global"; Then select each one of "Switch to Tab 1", "... Tab 2" etc. and doubleclick it to assign a new key combination, for example Shift-Alt-F1. Once you have done that, the normal Alt-F1 becomes available again, it is correctly sent to the application running in that terminal (or terminal tab), e.g. YaST in the NCurses version, and you can use Alt-F1 to jump to "Name Server 1". Is that easy and convenient? No, unfortunately not. But it's a constant battle between terminal emulators and NCurses applications which key combinations are used for the terminal emulator itself and which ones for applications running inside it. Of course since the developers of those terminal emulators receive the key combination first, they have the upper hand in deciding who gets it, leaving the NCurses applications (like YaST) with the leftovers. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193326] New: Inconsistent [No] button ID in popup
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1193326 Bug ID: 1193326 Summary: Inconsistent [No] button ID in popup Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: YaST2 Assignee: yast2-maintainers(a)suse.de Reporter: lslezak(a)suse.com QA Contact: jsrain(a)suse.com Found By: --- Blocker: --- The Popup.YesNo() use the :yes and :no_button internal button IDs. The new Yast2::Popup class use the :yes and :no IDs. That makes it difficult to share the popup handling code when using the libyui REST API in openQA as it depends which implementation is used. You cannot find out that from outside, you need to check the source code. Let's unify the IDs... -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1192579] Wayland session won't start
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1192579 https://bugzilla.suse.com/show_bug.cgi?id=1192579#c8 --- Comment #8 from Fabian Vogt <fvogt(a)suse.com> --- > //home/peter/.bashrc: Zeile 14: /opt/fish/bin/fish: Datei oder Verzeichnis nicht gefunden While it seems to continue past this, it looks highly suspicious. Are you using fish as login shell? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193327] Alt+1 in yast network -> Hostname/DNS to set Nameserver 1 does not work
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1193327 https://bugzilla.suse.com/show_bug.cgi?id=1193327#c2 --- Comment #2 from Stefan Hundhammer <shundhammer(a)suse.com> --- Created attachment 854254 --> https://bugzilla.suse.com/attachment.cgi?id=854254&action=edit Screenshot: xfce4-terminal with "Tabs" menu open Notice how each tab in this window gets one Alt-Fx key combination assigned. So far, I could not find a way to configure this. I assume gnome-terminal behaves the same way. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1192569] New: Regression: plugging in USB scanner breaks all USB functionality
by bugzilla_noreply＠suse.com 02 Dec '21

02 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1192569 Bug ID: 1192569 Summary: Regression: plugging in USB scanner breaks all USB functionality Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: rombert(a)apache.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 853679 --> http://bugzilla.opensuse.org/attachment.cgi?id=853679&action=edit journalctl output after plugging in USB scanner. When plugging in an USB scanner ( Brother DSMobile DS-740D ) I lose all USB devices. This used to work, but not 100% when as I don't use the scanner daily. For sure it was working ~4 weeks ago. I am Running 5.14.14-1-default, on a Lenovo Thinkpad P52. Only a reboot fixes the problem. I am connecting other USB devices ( Yubikey, USB hub with 4 other devices - Mouse, Keyboard, Mic, Android phone ) with no issues, only the scanner triggers the problem. The scanner is always plugged in directly to the laptop. I am not proactively gathering more information since I'm worried about potential hardware implications, but feel free to ask for anything that would be useful with debugging. -- You are receiving this mail because: You are on the CC list for the bug.

1 20