December 2021 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1192533] Fingerprint reader not function on ThinkPad X1 Nano
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1192533 Frank Kr�ger <fkrueger(a)mailbox.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC|fkrueger(a)mailbox.org | -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190649] go1.17 release tracking
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1190649 https://bugzilla.suse.com/show_bug.cgi?id=1190649#c12 --- Comment #12 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2021:3833-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1190649,1192377,1192378 CVE References: CVE-2021-41771,CVE-2021-41772 JIRA References: Sources used: SUSE Linux Enterprise Module for Development Tools 15-SP3 (src): go1.17-1.17.3-1.9.1 SUSE Linux Enterprise Module for Development Tools 15-SP2 (src): go1.17-1.17.3-1.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190649] go1.17 release tracking
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1190649 https://bugzilla.suse.com/show_bug.cgi?id=1190649#c11 --- Comment #11 from Swamp Workflow Management <swamp(a)suse.de> --- openSUSE-SU-2021:3833-1: An update that solves two vulnerabilities and has one errata is now available. Category: security (moderate) Bug References: 1190649,1192377,1192378 CVE References: CVE-2021-41771,CVE-2021-41772 JIRA References: Sources used: openSUSE Leap 15.3 (src): go1.17-1.17.3-1.9.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1124150] VUL-1: CVE-2019-7310: poppler: A heap-based buffer over-read allows remote attackers to cause DOS via a special crafted PDF
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1124150 https://bugzilla.suse.com/show_bug.cgi?id=1124150#c4 --- Comment #4 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-SU-2021:3854-1: An update that fixes 21 vulnerabilities is now available. Category: security (important) Bug References: 1092945,1102531,1107597,1114966,1115185,1115186,1115187,1115626,1120495,1120496,1120939,1120956,1124150,1127329,1129202,1130229,1131696,1131722,1142465,1143950,1179163 CVE References: CVE-2017-18267,CVE-2018-13988,CVE-2018-16646,CVE-2018-18897,CVE-2018-19058,CVE-2018-19059,CVE-2018-19060,CVE-2018-19149,CVE-2018-20481,CVE-2018-20551,CVE-2018-20650,CVE-2018-20662,CVE-2019-10871,CVE-2019-10872,CVE-2019-14494,CVE-2019-7310,CVE-2019-9200,CVE-2019-9631,CVE-2019-9903,CVE-2019-9959,CVE-2020-27778 JIRA References: Sources used: SUSE Linux Enterprise Workstation Extension 15-SP2 (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server for SAP 15-SP1 (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server for SAP 15 (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server 15-SP1-LTSS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server 15-SP1-BCL (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise Server 15-LTSS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): poppler-0.62.0-4.6.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): poppler-0.62.0-4.6.1 SUSE Enterprise Storage 6 (src): poppler-0.62.0-4.6.1 SUSE CaaS Platform 4.0 (src): poppler-0.62.0-4.6.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1192970] Can't establish WIFI WPA3 connection with NetworkManager in KDE
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1192970 https://bugzilla.suse.com/show_bug.cgi?id=1192970#c14 --- Comment #14 from �� <s.pooheer(a)gmail.com> --- May be you want to compare logs of wpa_suplicant in both cases? Successful and not? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190244] New: VUL-0: CVE-2021-40529: Botan: ElGamal implementation allows plaintext recovery
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190244 Bug ID: 1190244 Summary: VUL-0: CVE-2021-40529: Botan: ElGamal implementation allows plaintext recovery Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.2 Hardware: Other URL: https://smash.suse.de/issue/309148/ OS: Other Status: NEW Severity: Minor Priority: P5 - None Component: Security Assignee: jsikes(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: security-team(a)suse.de Found By: Security Response Team Blocker: --- CVE-2021-40529 The ElGamal implementation in Botan through 2.18.1, as used in Thunderbird and other products, allows plaintext recovery because, during interaction between two cryptographic libraries, a certain dangerous combination of the prime defined by the receiver's public key, the generator defined by the receiver's public key, and the sender's ephemeral exponents can lead to a cross-configuration attack against OpenPGP. References: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-40529 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40529 https://github.com/randombit/botan/pull/2790 https://ibm.github.io/system-security-research-updates/2021/07/20/insecurit… https://ibm.github.io/system-security-research-updates/2021/09/06/insecurit… https://eprint.iacr.org/2021/923 -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1192414] devel:languages:php/php7: php7-fpm doesn't come with initial config
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1192414 https://bugzilla.suse.com/show_bug.cgi?id=1192414#c4 Arjen de Korte <suse+build(a)de-korte.org> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |pgajdos(a)suse.com Flags|needinfo? |needinfo?(pgajdos(a)suse.com) --- Comment #4 from Arjen de Korte <suse+build(a)de-korte.org> --- It probably doesn't make sense to package the php-fpm.conf.default and www.conf.default files. Stripping the .default from the names and packaging them as %config(noreplace) will provide working configuration files out of the box. https://build.opensuse.org/request/show/935055 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1190823] New: [Build 20210921] remmina seems to fail to start
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

http://bugzilla.opensuse.org/show_bug.cgi?id=1190823 Bug ID: 1190823 Summary: [Build 20210921] remmina seems to fail to start Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/1932868/modules/xrdp _client/steps/42 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: openQA Blocker: Yes ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-desktopapps-remote-desktop-xrdp-client1@64bit_virtio fails in [xrdp_client](https://openqa.opensuse.org/tests/1932868/modules/xrdp_client/… remmina is not showing up ## Test suite description The base test suite is used for job templates defined in YAML documents. It has no settings of its own. ## Reproducible Fails since (at least) Build [20210921](https://openqa.opensuse.org/tests/1931167) ## Expected result Last good: [20210920](https://openqa.opensuse.org/tests/1929774) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1192183] YaST2 internal error in forwardable.rb:227 'connected?' during "saving network configuration" step
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1192183 https://bugzilla.suse.com/show_bug.cgi?id=1192183#c16 --- Comment #16 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:3827-1: An update that has four recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1191968,1192183,1192270,1192560 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): yast2-network-4.3.81-3.23.1, yast2-schema-4.3.27-3.9.1 SUSE Linux Enterprise Installer 15-SP3 (src): yast2-network-4.3.81-3.23.1, yast2-schema-4.3.27-3.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1191968] AutoYast schema misses keep_unknown_lv parameter
by bugzilla_noreply＠suse.com 01 Dec '21

01 Dec '21

https://bugzilla.suse.com/show_bug.cgi?id=1191968 https://bugzilla.suse.com/show_bug.cgi?id=1191968#c23 --- Comment #23 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2021:3827-1: An update that has four recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1191968,1192183,1192270,1192560 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Module for Basesystem 15-SP3 (src): yast2-network-4.3.81-3.23.1, yast2-schema-4.3.27-3.9.1 SUSE Linux Enterprise Installer 15-SP3 (src): yast2-network-4.3.81-3.23.1, yast2-schema-4.3.27-3.9.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0